last executing test programs: 21m1.150026075s ago: executing program 2 (id=1449): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000680)=ANY=[], 0x0) 20m57.80770786s ago: executing program 2 (id=1457): kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131f", 0x38, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df", 0xc, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {&(0x7f00000004c0), 0x0, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20m56.367128995s ago: executing program 2 (id=1461): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200507"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000600)={0x40, 0xe, 0x1, "85"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 20m52.41062507s ago: executing program 2 (id=1469): r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x8882, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x7040, 0x0) write$P9_RCREATE(r0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x3, 0x9, 0x2, 0x8a56}) fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000040)='stat\x00') pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) 20m51.025140153s ago: executing program 2 (id=1471): syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x20, 0x2b, 0x1, @empty, @local, {[@hopopts={0x2b, 0x0, '\x00', [@generic={0x7}]}, @dstopts={0x5c, 0x0, '\x00', [@padn]}]}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, 0xffffffffffffffff, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000011c0)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0xfffffdea}, 0x1, 0x0, 0x0, 0x801}, 0x4) 20m49.5319173s ago: executing program 2 (id=1474): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4e3, &(0x7f0000001200)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x4000000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 20m48.923076669s ago: executing program 32 (id=1474): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4e3, &(0x7f0000001200)="$eJzs3EFsVEUYAOD/bbe0QJGKiFJRi2hsNLZQUDiYGIwmHjQx4kGPTVsIUqhpayKEwJIYPBoSr8Z49OrBqxovhpOJVzyaGBJiuACe1rzdt+12+3Yp7bYr7fcl2515O+/NzM6bt/NmuhvApjWY/kki+iLiRkTsjIhCY4LB6tPd2xfH792+OB6lcvnEP0m6W9xJ45kke96eRYYKEYUvkoUX6syev3BmbGpqciaLj8yd/XRk9vyFV06fHTs1eWry3OixY0cOHzr62uirD16pnPzSet0ZuDS9b+87H197b7xY296bPdfXo10GYzCvKBUvtDuzDttRF06KrVK+sfaFYdnS8z9tru5K/98ZXdGy8YANpFwul3uav1wqN7qyZAvw0Eqi0yUAOqP2QZ/e/9YeeQOBLWsz/Oi4W8erN0Bpve9mj4hnKxtr8yDdDfe37TQYxfio9O+36SONF9dgHgIAoN7Px2sjwYbxX3/Enrp0j2RrKP0R8WhE7IqIxyJid0Q8HtW0T0TEkw3H74qIcov8BxviS8efhZurq2Fr6fjv9Wxta2H8F/WrYP1dWWxHRG3APHkwe0+Gorvn5OmpyUMt8vjlrT++avZaWv/a+C99pPnXxoJZOW4WGyboJsbmxlZc4Qa3rkQMFBvrnxQjkvmVgCQi9kbEwK/fLPu4/XXh0y99v28+0r043f3rX1HOXUdrw1JF+buIF6vtX4pF7b+QY9J6fXKkN6YmD46kZ8HB3Dyu/371/bztyXLq/+Nfjbu9ffSnE1nPWr20/bfVnf9RW79dqH9/EpHMr9fONjnQ5eZ5XP3zy6b3NCs9/7ckH1bCtfvSz8fm5mYORWxJ3l26fXRh31o8fY5Stf5DB/L7/65sn/SdeCoi0pP46Yh4Jqp3iINRvrw/Ip6LiAPNqx+/vfn8Jyuv/9pK6z+Re/1b1P4L6/VpIN06s2jL2FRSqqZe2DIf6Dqz/8a9gfz8l9f+RyqhoWxL/vUvWXSJWFqK/MAq3z4AAAB4KBQioq9uLqkvCoXh4eoc0O7YVpianp17OZn+7NxE9TsC/XVpq/PB3Ult/rO/Lj7aED+czRt/3bW1Eh8en56a6FCdgartlT6fFIbnrwXV/p/6uz1TzMD/ma/8wOZ1v/6/59o6FQRYdz7/YbOauVQXKTVJVPKfMrAxLefz31wgbEx5/b/F/3O7YYANoqw7w6b2IP1/cdrrO9teGGBdFeOD+XChoyUB1pvxP2xKy/qS/IoD5Z78l3pjaeLobX3ArlhZMbbm5NWRQDqy6kjuW1eyV+3XFJqmicKDHbBnyU9GrKxNT67+bTm1p+0nfzlbH2t3C/6wLv00L9D6ujHat3bXJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHb6LwAA///zLttP") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x4000000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 19m52.822039861s ago: executing program 0 (id=1627): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setuid(0xee01) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x4c000, 0x8, 0x9, 0x3, 0x40, 0x40, 0x9, 0x0, 0x2e, 0xd}, {0x2000, 0x1, 0xf, 0xfd, 0x40, 0x4, 0x7d, 0x7, 0x58, 0x1, 0x3}, {0x50000, 0x200000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x26000, 0x3, 0x5d, 0x5, 0x42, 0x9, 0x2, 0x6, 0x7, 0xe}, {0xd000, 0x9000, 0xb, 0x3, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x86}, {0x1000, 0x1000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0x9f, 0x80, 0xf, 0x1, 0xfd}, {0x40000, 0x2, 0x4, 0x5, 0x7, 0x2, 0x5, 0x5, 0x1, 0x82, 0xff, 0x70}, {0xd000, 0xd000, 0x8, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x4}, {0xeeef0000, 0x30}, {0x7000, 0x86}, 0x80000031, 0x0, 0x8000000, 0x42004, 0xb, 0x0, 0x3000, [0x6840000000000001, 0xd, 0x5e, 0x100]}) 19m52.418270743s ago: executing program 0 (id=1628): unshare(0x20060400) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 19m49.98488252s ago: executing program 0 (id=1632): kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f69513", 0x37, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df", 0xc, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {&(0x7f00000004c0), 0x0, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9", 0x2e}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca", 0x67}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19m48.842271916s ago: executing program 0 (id=1638): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@resgid}, {@i_version}, {@grpquota}, {@nobarrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2859052, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) tkill(0x0, 0x3) 19m47.211179957s ago: executing program 0 (id=1640): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x103041, 0x0) finit_module(r0, 0x0, 0x2) 19m46.477235061s ago: executing program 0 (id=1642): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 19m45.826300301s ago: executing program 33 (id=1642): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 18m28.910575386s ago: executing program 4 (id=1781): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) 18m28.49137375s ago: executing program 4 (id=1783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet6(0xa, 0x2, 0x3a) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) syz_open_dev$hiddev(&(0x7f00000012c0), 0x3, 0x551440) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)='-1', 0x2}, {&(0x7f0000000100)="2df8", 0x2}], 0x2, 0x4, 0xa) 18m26.351010487s ago: executing program 4 (id=1788): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000580)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002380)={0x34, &(0x7f0000000240)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000013c0)={0x34, &(0x7f0000001240)={0x20, 0x9, 0x2, "bdc2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 18m23.175035606s ago: executing program 4 (id=1798): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x5042, 0x5d) mount(&(0x7f0000000ac0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000b00)='./file1\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r0, 0x10, 0x4000, 0x4000) 18m22.769106569s ago: executing program 4 (id=1799): kexec_load(0x3, 0x7, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b414330e5cff9", 0xed, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb77519", 0x40, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7caed488a35c2a00906fbd0e2fa", 0x3e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4", 0xd6, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18m21.905215866s ago: executing program 4 (id=1802): socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000003980)={r0, r2, 0x16, 0x0, @val=@tracing={0xffffffffffffffff, 0x7}}, 0x20) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, 0x0, 0x0) 18m21.355696663s ago: executing program 34 (id=1802): socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000003980)={r0, r2, 0x16, 0x0, @val=@tracing={0xffffffffffffffff, 0x7}}, 0x20) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, 0x0, 0x0) 15m13.374411407s ago: executing program 6 (id=2208): r0 = socket$inet(0x2, 0x802, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48}) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8014}}], 0x1, 0x2000c810) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, 0x0, 0x4008850) write(r0, &(0x7f0000000080)="08008edf", 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) 15m9.304570165s ago: executing program 6 (id=2213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='fd\x00') getdents64(r8, &(0x7f0000001f40)=""/4123, 0x101b) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xc9f4, 0xa}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040050}, 0x8000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x88}, 0x0) close(0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15m7.5717493s ago: executing program 6 (id=2214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$peek(0x1, 0x0, &(0x7f00000002c0)) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x4fe, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, 0xffffffffffffffff, &(0x7f0000000200)='8', 0x1, 0x80}]) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) openat$cgroup_subtree(r5, 0x0, 0x2, 0x0) write$UHID_INPUT(r5, &(0x7f0000002b40)={0xe, {"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", 0x1000}}, 0x1006) 15m4.175313256s ago: executing program 6 (id=2219): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008404, &(0x7f0000000180)=ANY=[], 0x85, 0x6b9, &(0x7f00000008c0)="$eJzs3c1vHGcZAPBn1uu1N5TESZM2QZViNRIgrCb+kAvm0oAQ8qFCVTlwthInsbJJg+0it0LEfBQuHHrIH1AOvnFASNwjyoUL3Hr1sRKCSy81p0Hzseu1vbte49TrTX+/aDzvzDvv+z7zzNeuN9YG8KW1OBXVp5HE4tSbG9ny9tZcY3tr7kGzHBFjEVGJqBazSD5P0/TjiJtRTHElW1l2l+zt/dG5ZunJysLbn3y2/WmxVC2nfPvKwXZd/P5xl4rNcorJiBgp58ewp79bh/U3flh3SWsPs4RdayYOBm00ItLcv58Ua3769xdaNW3qnVofeuYDQyApnpsHTEScKS/07HVA8VQsntlDbXPQAQAAAMAJOLcTO7ERZwcdBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyT8vv/k3KqNMuTkTS//79WrouyfLpcPdrmT7+oOAAAAAAAAADgBF3diZ3YiLPN5TTJP/N/NV+4mP/8Srwba7Ecq3E9NmIp1mM9VmMmIibaOqptLK2vr860Wjb/Z8DBlrMdW84eEuhYOa8/i70GAAAAAAAAgGHzeZqmPTf4VSzufv4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACnQZKm6eOIJIrpYjlPJqJSjYjxiKhl221G/LNZHlZXXot4OuggAAAA4BjSPrc7txM7sRFnW+2S/D3/S/n7/vF4Nx7GeqzEejRiOW7nvwso3vVXtrfmGttbcw+y6WC/3/vPkcLNe4yIkXyp08iX8y3qcSdW8jXX41a8E0lyOyp5y8zlLJbRKGI6GNcvs5iSNwqjfUZ2u5xne/5hOd+veqR97eqIv0yZyDMy2srIdBlblo3zzQx0zsQRj87+kWai0gr2YtsoWSL27cSenL/R53hnynm2P7/tkvPB2J+J2baz76XdTIx3vCq+8Zc//uRe4+H9e3fWpk7PLh202WHdSDkv7iv1MhOPdzMx15aJl3uffcOTib5M5+fEpdbyYvwwfhxTMRlvxWqsxM9iKdZjOSbjB3lpqTyfk7ZLvi1Tlbaub+4Z6K3DIqmVZ2hxsPbGFIfE9Gre9mysxI/inbgdy/F6/m82ZuLbMR/zsdB2hC/1PsL5VV/pctWnX+0Y/LVvloV6RPyunOfudrm/9nsLP7Ysr+fb8to665PiSJ7fcxfezdKFPrK0/974p96hVL9WFrIxfh17T5fBmtiXiZm2TLzYOxN/yG8ra42H91fvLT3qb7gLH5aF7Bh80Psp8Ywe0P3KzpcLrWH3nh1Z3YtFXf4apD1ftfITl6Jd5UDdpVZdcaVudr1Sa+VruIM9zeZ1L3esG8/XXG6r2/96q9F6PTTsH/4APLc+qEWc+daZWv1f9X/UP6r/pn6v/ub498e+M/ZKLUb/Nvrd6vTI1yuvJH+Oj+IXu+//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/9/ae+/fX2o0llf3FdI0fdylapgLza8zO8FBr7wQMahdrkXE6cj8f9M0LdckpyGe3oU0MxbpUZsnReGvEdFfq2pEdKq6Ovgk9Lhp+AIoeC7cWH/w6Mbae++/tvJg6e7y3eWHC/PzC9ML86/P3biz0lieLn4OOkrgi7D70B90JAAAAAAAAAAAAEC/TuLPCbqPPn6SuwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMqcWpqD6NJGamr09ny9tbc41sapZ3t6xGRCUikp9HJB9H3Ixiiom27pJu4zxZWXj7k8+2P93tq9rcvtKrXX82yykmI2KknD+r/m4du7+ktYdZwq41EweD9r8AAAD//0jrDBA=") syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xa2242, 0x4c) 15m3.384669851s ago: executing program 6 (id=2221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r3, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r6, r4, 0x15, 0x0, @val=@netkit={@void, @value, @void, @void, r5}}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) 14m59.344983628s ago: executing program 6 (id=2229): kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131f", 0x38, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df", 0xc, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {&(0x7f00000004c0), 0x0, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60", 0x17}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307", 0x89}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14m58.441132547s ago: executing program 35 (id=2229): kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131f", 0x38, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df", 0xc, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {&(0x7f00000004c0), 0x0, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60", 0x17}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307", 0x89}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m18.405277455s ago: executing program 7 (id=3583): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='fd\x00') getdents64(r5, &(0x7f0000001f40)=""/4123, 0x101b) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040050}, 0x8000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x88}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 4m16.742814538s ago: executing program 7 (id=3586): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0xd0ef}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000851}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m13.679721225s ago: executing program 7 (id=3598): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x13c16}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c001400004000ff1100000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 4m13.19542418s ago: executing program 7 (id=3601): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x20f, &(0x7f0000000840)="$eJzslU9rE0EYxn+zmWQbDVLw5tVge9E2KYhnL/auH8CQrrWY+Kcb0YSC0UsvCuKXKPglVBD07kFE8KIHBT1UPFVqZGbe2e4mwaZVc9rn8j7zzPtvZ3Zmrsa34hDY3d5oMouFosJ7pdDAnHLaTsnZ72IHgs/ajWuiPxX7SWzc7b156HjvWqPVitbj7p9JiIJ9fLJkVDr/7NHxyeOHyOsHWUUxSZTSh6n1d6RTcIs8OvU4o4TjfCSW4cy1iwdp44Vkmfq3G1Iead6THxVIK1/+YfWiWc0iY32UHJfDl1B+MSGZ+lkZ3aZh8u6JqzzWpyDhZbLLsi8xJ3e6ezqemLvIkuBA4TGyH/GF+wHfFBR5u73RNOpld4v9kouMFfBHwkaZwUu56Yx2QkMfVIGBTWryaPGdAxY67ZsLcbd3eq3dWI1Wo+v1+tLZxVdH5YgO7sFaK1pUtg0XHhiiSWDOaTk1b/60DzIfHSMDlWoN8117cpLSX87zJ1MuZQhSsakckuB5Uj8U7Xbc5hKnmAHu9M10XRaoismmuWI+bRlFQQY1nW6IHQJm7MSZ5o3WyiYK5cO20EmO2keKdrDrtyVAm0LR0rm+b3FTbFXsstitvXoW/u3yb5K2Gb7KaL4PJe42Op11+3g5ZrRSksFq9dmkciBV/Wvoi1VDJsSRSR1z5MiRI0eOHDn+E34HAAD//wFSRlk=") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x86022, 0x0) rename(0x0, 0x0) 4m11.272410661s ago: executing program 7 (id=3606): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0xd0ef}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000851}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m10.819122066s ago: executing program 7 (id=3607): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) 4m10.334900601s ago: executing program 36 (id=3607): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) 52.34853956s ago: executing program 5 (id=4155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x1, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, 0x0, 0x4041080) 51.926141553s ago: executing program 5 (id=4158): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="190000000400000004000000bc"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000340)=ANY=[], 0x0) 51.406360859s ago: executing program 5 (id=4162): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r0}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 51.210910156s ago: executing program 5 (id=4164): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0xfd, 0x571, &(0x7f0000000bc0)="$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") mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="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", 0x2000, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) 50.409881621s ago: executing program 5 (id=4170): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="190000000400000004000000bc"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000340)=ANY=[], 0x0) 49.80923553s ago: executing program 5 (id=4176): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) 49.340509005s ago: executing program 37 (id=4176): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) 20.813525589s ago: executing program 8 (id=4260): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0xd0ef}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000851}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.381323338s ago: executing program 1 (id=4267): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001500)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@iv={0x18}], 0x18, 0x20000000}], 0x1, 0x20000016) 16.011082202s ago: executing program 9 (id=4269): socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601"], 0x4) 15.103728621s ago: executing program 8 (id=4272): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0xa, 0x1, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040) sendto$packet(r4, &(0x7f0000000380)="fad33075218151db0031", 0xa, 0x6008092, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xda, 0x6, @remote}, 0x14) 12.624794929s ago: executing program 1 (id=4275): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000500)={0x0, 0x200, 0x0, 'queue0\x00', 0xf}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) 12.510562093s ago: executing program 8 (id=4276): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() request_key(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x841, 0x0) sendfile(r5, r4, 0x0, 0x2000000000051b7) 12.417095966s ago: executing program 1 (id=4277): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x2915048, 0x0, 0x0, 0x0, &(0x7f00000002c0)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 10.750793459s ago: executing program 8 (id=4278): r0 = socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r1 = syz_open_dev$video(0x0, 0x4ad, 0xc2ca62a1b4984f7c) r2 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x5, 0x0, &(0x7f0000000080)=0x272) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)={{}, {0x20}, [], {0x4, 0x7}}, 0x24, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) dup(r1) syz_usb_control_io(r3, 0x0, 0x0) mbind(&(0x7f0000111000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x2ec0, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r4, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005c3f6b200304a4bc23d7010203010902120001000000000904d4"], 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x18, &(0x7f0000000700)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r5, 0x90044802, &(0x7f0000000000)={0xffffffffffffffef, "a5cf27d047ccbb89c1f100c4290def60e820cd8c04b1c593b61e33d495b06be46cdcd2311370ed9c07275742032bb2e44288967c70cd701ce0c12a45842875e8227d6cb40397f2eb7d49b3088b3ebc835bcca76ff6619e90cb54f7c521c679b25bcebda5fc398b9c05767955246311071fedaa9a378cc709642ac04d40ff2c71fa910da868fb3aed27b688940dc6a0d9d97ee7e3f9ec75fcbd8ca675953c2bea817becdc9dc1762e758c334d3b156be6923e78bbf23132ce96574d33cebd32164717acd9ede1791b611c80a8a693ed966363ce6da2a145d3dbd0a1"}) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000280)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x3, 0x4, 0x5, 0x3, 0x9], 0x3, 0x0, 0x0, [{}, {}, {}]}, 0xa8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xc005}, 0x80c0) 9.584435096s ago: executing program 1 (id=4279): socket$netlink(0x10, 0x3, 0x9) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 9.4350946s ago: executing program 9 (id=4280): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000102f50000000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000030c"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x2c, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) 8.208850839s ago: executing program 9 (id=4283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000611850000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) 6.518397093s ago: executing program 9 (id=4284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0xa, 0x1, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040) sendto$packet(r4, &(0x7f0000000380)="fad33075218151db0031", 0xa, 0x6008092, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xda, 0x6, @remote}, 0x14) 6.045052028s ago: executing program 3 (id=4286): keyctl$dh_compute(0x10, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1200050, &(0x7f0000000b80), 0x1, 0x46f, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="a7", 0x1, 0x8295, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x40000, 0x40010121, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x1) socket$alg(0x26, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000011c0)={@local, @random="2bae53f9cd4f", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x2, 0x0, @rand_addr=0x64010102, @multicast1=0xe0000300}, @redirect={0x5, 0x0, 0x0, @loopback, {0x5, 0x4, 0x1, 0x0, 0x1, 0x66, 0x6, 0x3, 0x6c, 0x0, @broadcast, @local}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) 5.467700696s ago: executing program 1 (id=4287): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x2915048, 0x0, 0x0, 0x0, &(0x7f00000002c0)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 4.208583836s ago: executing program 1 (id=4288): socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x4) 4.056369001s ago: executing program 3 (id=4289): capset(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mknodat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x0, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0), 0x2000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 3.540371697s ago: executing program 3 (id=4290): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000d40)=ANY=[], 0x1, 0xc5a, &(0x7f0000001040)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) 3.081548212s ago: executing program 9 (id=4291): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x2) getdents(r1, 0x0, 0x54) unlink(&(0x7f0000000000)='./file1\x00') socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback, 0xa, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mount(0x0, 0x0, 0x0, 0x0, 0x0) 3.032696764s ago: executing program 3 (id=4292): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.547047219s ago: executing program 9 (id=4293): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b7", 0x7a}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed", 0xf3}], 0x4}], 0x1, 0x0) accept4$llc(r1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048045}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001f00)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000001d00)="a0a443ce3dd4", 0x6, 0x4000010, &(0x7f0000001dc0)={0x2, 0x4e20, @empty}, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) 2.346275785s ago: executing program 8 (id=4294): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000500)={0x0, 0x200, 0x0, 'queue0\x00', 0xf}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) 2.035245495s ago: executing program 8 (id=4295): socket$netlink(0x10, 0x3, 0x9) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 1.26178807s ago: executing program 3 (id=4296): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x2915048, 0x0, 0x0, 0x0, &(0x7f00000002c0)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 0s ago: executing program 3 (id=4297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000032c0)=[{&(0x7f0000000380)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f00000022c0)="7d58109dd8baaa3f61b6b780c28580d917844f2d8194ee88a6f0eca28a92b4008145c55afb0d4d05", 0x28}], 0x2) kernel console output (not intermixed with test programs): 202.408708][T16042] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2539'. [ 1203.793834][T16059] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2545'. [ 1203.823420][T16061] loop7: detected capacity change from 0 to 128 [ 1207.307018][T16099] loop3: detected capacity change from 0 to 128 [ 1207.377260][T16102] loop7: detected capacity change from 0 to 256 [ 1207.408029][T16102] exfat: Deprecated parameter 'utf8' [ 1207.446240][T16102] exfat: Deprecated parameter 'utf8' [ 1207.510703][T16102] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1208.960399][T16113] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2562'. [ 1210.821597][T15977] Bluetooth: hci4: command 0x0405 tx timeout [ 1211.123606][T16138] loop5: detected capacity change from 0 to 128 [ 1211.356967][T16141] loop3: detected capacity change from 0 to 256 [ 1211.393423][T16141] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 1211.402533][T16141] FAT-fs (loop3): Filesystem has been set read-only [ 1211.633240][T16141] xt_CONNSECMARK: invalid mode: 66 [ 1211.784301][T14868] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 1212.069186][T16151] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2572'. [ 1213.566344][T16162] netlink: 'syz.7.2576': attribute type 1 has an invalid length. [ 1213.707307][T16168] loop7: detected capacity change from 0 to 128 [ 1213.824315][T16170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2578'. [ 1213.875776][T16170] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1213.885386][T16170] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1213.894302][T16170] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1213.903266][T16170] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1213.928933][T16170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2578'. [ 1213.962755][T16172] loop7: detected capacity change from 0 to 256 [ 1213.994697][T16172] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 196) [ 1214.003107][T16172] FAT-fs (loop7): Filesystem has been set read-only [ 1214.234238][T16172] xt_CONNSECMARK: invalid mode: 66 [ 1214.351166][T14573] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 196) [ 1214.442761][ T5782] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1214.589239][T16180] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2581'. [ 1214.608175][T16180] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2581'. [ 1214.773268][T16180] dummy0: entered promiscuous mode [ 1214.805054][T16180] dummy0: left promiscuous mode [ 1215.821308][T16188] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2583'. [ 1216.087663][T16192] netlink: 'syz.3.2586': attribute type 1 has an invalid length. [ 1216.340514][T16194] loop3: detected capacity change from 0 to 128 [ 1219.270673][T16210] loop7: detected capacity change from 0 to 256 [ 1219.338915][T16210] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 196) [ 1219.348093][T16210] FAT-fs (loop7): Filesystem has been set read-only [ 1219.574667][T16210] xt_CONNSECMARK: invalid mode: 66 [ 1219.602175][T16216] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2594'. [ 1219.667883][T16216] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2594'. [ 1219.731341][T14573] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 196) [ 1219.757577][T16216] gretap0: entered promiscuous mode [ 1219.913858][T16216] gretap0: left promiscuous mode [ 1220.880611][T16230] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2599'. [ 1220.964177][T16234] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2600'. [ 1221.035755][T16234] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2600'. [ 1221.187034][T16234] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2600'. [ 1222.927370][T16252] loop5: detected capacity change from 0 to 256 [ 1222.992541][T16252] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1225.576241][T16267] netlink: 'syz.5.2608': attribute type 1 has an invalid length. [ 1225.780389][T16269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2609'. [ 1225.789516][T16269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2609'. [ 1225.856817][T16269] gretap0: entered promiscuous mode [ 1225.887865][T16269] gretap0: left promiscuous mode [ 1225.972091][T16274] syzkaller0: entered promiscuous mode [ 1225.977645][T16274] syzkaller0: entered allmulticast mode [ 1227.024739][T16293] netlink: 'syz.7.2618': attribute type 1 has an invalid length. [ 1227.057495][ C1] hrtimer: interrupt took 379180 ns [ 1229.411794][T16306] syzkaller1: entered promiscuous mode [ 1229.441077][T16306] syzkaller1: entered allmulticast mode [ 1229.685418][ T5814] IPVS: starting estimator thread 0... [ 1229.831536][T16311] IPVS: using max 19 ests per chain, 45600 per kthread [ 1229.835960][ T5782] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1236.520118][ T5782] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1238.016205][T16380] netlink: 'syz.1.2639': attribute type 1 has an invalid length. [ 1238.197711][T16380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1238.290754][T16382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.298630][T16382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.440817][T16382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.448244][T16382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.455949][T16382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.463252][T16382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1238.601990][T16382] bond1: (slave bridge0): Enslaving as a backup interface with an up link [ 1238.643133][ T59] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1238.691424][ T59] bond1: (slave bridge0): link status up again after 0 ms [ 1238.710590][ T59] bond1: (slave bridge0): failed to get link speed/duplex [ 1239.281682][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.288285][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.370813][ T990] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1239.409909][T16357] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1239.520593][ T990] bond1: (slave bridge0): failed to get link speed/duplex [ 1239.704551][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1239.868069][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1240.003716][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1240.131444][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1240.282445][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1240.443025][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1240.515163][ T5782] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1242.736580][T16392] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1243.152683][T16426] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1243.690637][T13485] net_ratelimit: 15 callbacks suppressed [ 1243.690658][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1245.911010][ T42] bond1: (slave bridge0): failed to get link speed/duplex [ 1246.962436][ T990] bond1: (slave bridge0): failed to get link speed/duplex [ 1247.145161][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1247.343282][ T990] bond1: (slave bridge0): failed to get link speed/duplex [ 1247.896060][ T59] bond1: (slave bridge0): failed to get link speed/duplex [ 1248.256021][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1248.579514][ T42] bond1: (slave bridge0): failed to get link speed/duplex [ 1248.961097][ T5782] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1249.013321][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1249.376944][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1249.870615][ T59] bond1: (slave bridge0): failed to get link speed/duplex [ 1250.454568][ T42] bond1: (slave bridge0): failed to get link speed/duplex [ 1250.629615][ T59] bond1: (slave bridge0): failed to get link speed/duplex [ 1250.834324][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1250.974764][ T5782] Bluetooth: hci0: link tx timeout [ 1250.980016][ T5782] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 1251.022287][ T59] bond1: (slave bridge0): failed to get link speed/duplex [ 1253.903694][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 1253.919366][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1254.663984][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1254.801195][ T59] bond1: (slave bridge0): failed to get link speed/duplex [ 1254.931102][ T59] bond1: (slave bridge0): failed to get link speed/duplex [ 1255.061783][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1255.172396][ T59] bond1: (slave bridge0): failed to get link speed/duplex [ 1255.335215][ T42] bond1: (slave bridge0): failed to get link speed/duplex [ 1256.694720][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1256.942181][ T59] bond1: (slave bridge0): failed to get link speed/duplex [ 1257.169912][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1257.423030][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1257.953320][T16480] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1259.829172][ T59] net_ratelimit: 10 callbacks suppressed [ 1259.829194][ T59] bond1: (slave bridge0): failed to get link speed/duplex [ 1260.283681][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1261.590978][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 1261.787685][T15977] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1261.862147][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1262.102004][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1262.213628][ T59] bond1: (slave bridge0): failed to get link speed/duplex [ 1262.341739][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1262.471687][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1262.602383][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1263.523926][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1263.724193][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1264.725788][T16561] netlink: 'syz.3.2682': attribute type 1 has an invalid length. [ 1268.173472][T15977] Bluetooth: hci0: command 0x0406 tx timeout [ 1268.258786][T16561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1268.546233][ T12] net_ratelimit: 6 callbacks suppressed [ 1268.546251][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1268.723572][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1268.831061][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1268.866606][T16580] netlink: 'syz.7.2685': attribute type 4 has an invalid length. [ 1268.997719][T16584] netlink: 'syz.7.2685': attribute type 4 has an invalid length. [ 1269.042219][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1269.102643][T16586] netlink: 'syz.1.2687': attribute type 1 has an invalid length. [ 1269.296624][T16586] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1269.464110][T16589] macvlan2: entered promiscuous mode [ 1269.470567][T16589] macvlan2: entered allmulticast mode [ 1271.351468][T16589] bond2: entered allmulticast mode [ 1271.356673][T16589] bond2: entered promiscuous mode [ 1271.420816][T16589] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1271.463620][T16589] team0: Port device macvlan2 added [ 1271.482101][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1271.568993][T16591] bond2: (slave ip6gretap1): making interface the new active one [ 1271.587940][T16591] ip6gretap1: entered promiscuous mode [ 1271.608612][T16591] ip6gretap1: entered allmulticast mode [ 1271.626078][T16591] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1271.699963][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1271.844708][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1271.946754][ T5782] Bluetooth: hci0: ACL packet for unknown connection handle 3584 [ 1271.992682][ T990] bond1: (slave bridge0): failed to get link speed/duplex [ 1272.132517][T16612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.141608][T16612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.201254][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1272.351371][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1273.741414][ T1004] net_ratelimit: 9 callbacks suppressed [ 1273.741435][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1274.008970][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1274.331451][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1274.486341][ T59] bond1: (slave bridge0): failed to get link speed/duplex [ 1274.632396][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1274.742243][T16602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1274.791450][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1274.965565][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1275.154050][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1277.152110][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1277.264540][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1277.312010][ T5782] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1278.519183][T16654] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2704'. [ 1279.046723][ T12] net_ratelimit: 11 callbacks suppressed [ 1279.046752][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1280.780921][T15977] Bluetooth: hci0: command 0x0406 tx timeout [ 1282.892344][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1283.067752][ T990] bond1: (slave bridge0): failed to get link speed/duplex [ 1283.434398][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1283.570973][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1283.708304][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1283.833205][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1284.006621][ T59] bond1: (slave bridge0): failed to get link speed/duplex [ 1284.227244][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1284.288999][T15977] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1284.461551][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1284.941033][ T990] bond1: (slave bridge0): failed to get link speed/duplex [ 1285.168084][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1285.311639][ T990] bond1: (slave bridge0): failed to get link speed/duplex [ 1285.481801][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1285.800666][ T990] bond1: (slave bridge0): failed to get link speed/duplex [ 1286.771044][ T59] bond1: (slave bridge0): failed to get link speed/duplex [ 1286.787275][T15977] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1286.887333][ T59] bond1: (slave bridge0): failed to get link speed/duplex [ 1287.026102][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1289.801143][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 1289.908559][T13484] net_ratelimit: 6 callbacks suppressed [ 1289.908618][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1289.966327][T16687] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1290.120972][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1290.232064][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1290.342379][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1290.392448][T16711] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2715'. [ 1290.402766][T16711] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2715'. [ 1290.456743][T16711] dummy0: entered promiscuous mode [ 1290.475358][T16711] dummy0: left promiscuous mode [ 1290.661945][ T990] bond1: (slave bridge0): failed to get link speed/duplex [ 1290.794826][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1290.965685][T15977] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1291.214307][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1291.352602][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1291.491077][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1291.655874][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1292.232699][T15977] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1293.613867][T16720] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1296.842177][T15977] Bluetooth: hci0: command 0x0406 tx timeout [ 1296.861824][T13485] net_ratelimit: 11 callbacks suppressed [ 1296.861844][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1297.231361][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1297.375476][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1297.537434][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1297.685602][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1297.831330][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1298.002262][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1298.147985][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1298.293378][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1298.432424][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1298.471382][ T786] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 1298.641369][ T786] usb 8-1: device descriptor read/64, error -71 [ 1298.758016][T15977] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1298.921184][ T786] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 1299.093566][ T786] usb 8-1: device descriptor read/64, error -71 [ 1299.232263][ T786] usb usb8-port1: attempt power cycle [ 1299.654005][ T786] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 1299.708482][ T786] usb 8-1: device descriptor read/8, error -71 [ 1299.962760][T15977] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1299.990933][ T786] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 1300.022332][ T786] usb 8-1: device descriptor read/8, error -71 [ 1300.142823][ T786] usb usb8-port1: unable to enumerate USB device [ 1300.317760][T16767] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1300.445908][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.452493][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.622111][T10015] net_ratelimit: 24 callbacks suppressed [ 1302.622465][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1303.501271][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 1305.653010][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1305.761072][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1305.970212][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1306.111033][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1306.224571][ T5782] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1306.251842][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1306.373751][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1306.394582][ T5782] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1306.488307][T16830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1306.531471][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1306.652137][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1306.763325][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1307.603713][T16848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2745'. [ 1307.648671][T16848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2745'. [ 1307.708308][T16848] team0: entered promiscuous mode [ 1307.714764][T16848] team_slave_0: entered promiscuous mode [ 1307.723083][T16848] team_slave_1: entered promiscuous mode [ 1307.735931][T16848] team0: left promiscuous mode [ 1307.751327][T16848] team_slave_0: left promiscuous mode [ 1307.770177][T16848] team_slave_1: left promiscuous mode [ 1307.833012][T10015] net_ratelimit: 7 callbacks suppressed [ 1307.833034][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1307.861466][T14241] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1307.971139][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1308.088955][T14241] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.107071][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1308.131784][T14241] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1308.168152][T14241] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1308.211013][T14241] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.225512][T14241] usb 6-1: config 0 descriptor?? [ 1308.256958][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1308.375349][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1308.511141][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1308.836314][T16844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.859000][T16844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.519584][T15977] Bluetooth: hci0: command 0x0406 tx timeout [ 1311.701286][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1311.806530][T15977] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1311.811814][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1311.840763][ T8] usb 6-1: USB disconnect, device number 32 [ 1311.980978][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1312.140502][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1312.329746][T15977] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1312.391416][T16876] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1312.576729][T16886] netlink: 'syz.7.2755': attribute type 1 has an invalid length. [ 1312.861601][ T1004] net_ratelimit: 5 callbacks suppressed [ 1312.861653][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1313.034124][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1313.174267][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1315.615495][ T5814] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 1315.623550][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 1318.132293][ T6366] bond1: (slave bridge0): failed to get link speed/duplex [ 1318.274947][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1318.298501][T15977] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1318.432152][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1318.573251][ T6366] bond1: (slave bridge0): failed to get link speed/duplex [ 1318.748125][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1318.884692][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1319.054676][ T990] bond1: (slave bridge0): failed to get link speed/duplex [ 1319.116021][T15977] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1319.191056][ T6366] bond1: (slave bridge0): failed to get link speed/duplex [ 1319.341026][ T990] bond1: (slave bridge0): failed to get link speed/duplex [ 1319.492166][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1319.650975][ T5814] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1319.867870][ T5814] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.867900][ T5814] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1319.867941][ T5814] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1319.867967][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.887307][ T5814] usb 2-1: config 0 descriptor?? [ 1320.455688][T16940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.489240][T16940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.947137][T16928] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1323.951519][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 1323.984114][ T6366] net_ratelimit: 14 callbacks suppressed [ 1323.984168][ T6366] bond1: (slave bridge0): failed to get link speed/duplex [ 1324.242063][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1324.377108][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1324.409637][ T5814] usb 2-1: USB disconnect, device number 89 [ 1324.516046][ T6366] bond1: (slave bridge0): failed to get link speed/duplex [ 1324.529798][ C0] vkms_vblank_simulate: vblank timer overrun [ 1324.665439][ T990] bond1: (slave bridge0): failed to get link speed/duplex [ 1324.742115][T13483] nci: nci_rx_work: unknown MT 0x4 [ 1324.802994][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1324.954279][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1325.066958][ T5782] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1325.091828][ T5782] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1325.111446][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1325.245796][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1325.395435][T16965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1325.404309][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1327.935172][T15977] Bluetooth: hci0: command 0x0406 tx timeout [ 1329.037792][ T6366] net_ratelimit: 3 callbacks suppressed [ 1329.037819][ T6366] bond1: (slave bridge0): failed to get link speed/duplex [ 1329.233004][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1329.351201][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1329.513033][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1329.623142][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1329.741157][ T7333] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 1329.884683][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1330.009336][ T7333] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.021943][ T990] bond1: (slave bridge0): failed to get link speed/duplex [ 1330.071720][ T7333] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1330.127438][ T7333] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1330.151360][ T990] bond1: (slave bridge0): failed to get link speed/duplex [ 1330.480684][ T7333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.505335][ T7333] usb 2-1: config 0 descriptor?? [ 1330.523878][T17012] loop3: detected capacity change from 0 to 256 [ 1330.552684][T17012] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1330.582209][ T7333] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1332.143837][ T6366] bond1: (slave bridge0): failed to get link speed/duplex [ 1332.281115][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1332.511167][T16996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.520051][T16996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.901195][T17028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1334.991307][T15977] Bluetooth: hci0: command 0x0406 tx timeout [ 1335.002227][T13483] net_ratelimit: 7 callbacks suppressed [ 1335.002280][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1335.245280][ T8] usb 2-1: USB disconnect, device number 90 [ 1335.253848][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1335.424647][ T990] bond1: (slave bridge0): failed to get link speed/duplex [ 1335.451122][ T1189] IPVS: starting estimator thread 0... [ 1335.551817][T17039] IPVS: using max 17 ests per chain, 40800 per kthread [ 1335.591753][ T6366] bond1: (slave bridge0): failed to get link speed/duplex [ 1335.687392][T17046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2796'. [ 1336.017050][T17046] bond2: entered promiscuous mode [ 1336.285017][T17046] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1336.307368][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1336.447668][T17051] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1337.964535][T17051] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 1338.204277][T17051] bond2: (slave sit1): Error -95 calling set_mac_address [ 1338.806895][T17063] xt_CONNSECMARK: invalid mode: 66 [ 1339.510980][ T6366] bond1: (slave bridge0): failed to get link speed/duplex [ 1339.629131][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1339.702413][ T5782] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1339.770946][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1339.882555][ T6366] bond1: (slave bridge0): failed to get link speed/duplex [ 1340.197055][ T6366] bond1: (slave bridge0): failed to get link speed/duplex [ 1341.945238][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 1344.038359][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1344.220992][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1344.382042][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1344.490976][ T8] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1344.512512][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1344.532961][ T786] IPVS: starting estimator thread 0... [ 1344.651213][T17088] IPVS: using max 19 ests per chain, 45600 per kthread [ 1344.653922][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1344.711221][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.749990][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1344.806321][ T8] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1344.836972][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.852861][ T8] usb 2-1: config 0 descriptor?? [ 1344.871783][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1344.886740][ T8] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1344.985837][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1345.105251][T17096] loop7: detected capacity change from 0 to 256 [ 1345.144998][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1345.167862][T17096] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 196) [ 1345.176437][T17096] FAT-fs (loop7): Filesystem has been set read-only [ 1345.332118][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1345.366219][ T8] usb 2-1: USB disconnect, device number 91 [ 1345.447914][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1345.601208][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1345.679329][T13483] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 1345.722184][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1345.870667][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1346.171093][T17105] xt_CONNSECMARK: invalid mode: 66 [ 1346.582847][T17098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1346.749677][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1346.779290][T14573] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 196) [ 1346.964312][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1346.990393][T17106] loop3: detected capacity change from 0 to 256 [ 1347.061822][T17106] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1347.149018][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1347.965323][T17116] syzkaller1: entered promiscuous mode [ 1347.991705][T17116] syzkaller1: entered allmulticast mode [ 1348.281264][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1349.941295][T15977] Bluetooth: hci0: command 0x0406 tx timeout [ 1351.369480][T17130] syzkaller0: entered promiscuous mode [ 1351.391187][T17130] syzkaller0: entered allmulticast mode [ 1352.373941][ T1189] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1352.586674][ T1189] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.598488][ T1189] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1352.614967][ T1189] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1352.626158][ T1189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.654441][ T1189] usb 6-1: config 0 descriptor?? [ 1352.694393][ T1189] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1353.302849][T17145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.347063][T17145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.918417][ T5814] usb 6-1: USB disconnect, device number 33 [ 1355.077248][T17149] loop5: detected capacity change from 0 to 256 [ 1355.123092][T17149] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196) [ 1355.131435][T17149] FAT-fs (loop5): Filesystem has been set read-only [ 1355.997966][T17151] xt_CONNSECMARK: invalid mode: 66 [ 1356.667340][T17136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2815'. [ 1356.682741][T17136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2815'. [ 1356.706138][T17136] team0: entered promiscuous mode [ 1356.714859][T17136] team_slave_0: entered promiscuous mode [ 1356.723566][T17136] team_slave_1: entered promiscuous mode [ 1356.736940][T11989] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196) [ 1356.811988][T17136] bridge0: entered promiscuous mode [ 1356.846970][T17136] bridge0: left promiscuous mode [ 1356.879057][T17136] team0: left promiscuous mode [ 1356.896601][T17136] team_slave_0: left promiscuous mode [ 1356.905060][T17136] team_slave_1: left promiscuous mode [ 1356.950514][T17141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2817'. [ 1356.995349][T17141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2817'. [ 1357.134634][T17141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2817'. [ 1357.150638][T17141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2817'. [ 1357.181319][T17157] batadv_slave_1: entered promiscuous mode [ 1357.660240][T17159] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.696997][T17167] loop5: detected capacity change from 0 to 256 [ 1357.812576][T17167] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1358.654636][T17159] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.705139][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1358.778955][T17156] batadv_slave_1: left promiscuous mode [ 1358.966114][ T5814] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1359.047088][T17159] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.127792][T17177] syzkaller1: entered promiscuous mode [ 1359.134092][T17177] syzkaller1: entered allmulticast mode [ 1359.216717][ T5814] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.253208][ T5814] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1359.319166][ T5814] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1359.357470][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.373632][T17159] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.401803][ T5814] usb 4-1: config 0 descriptor?? [ 1359.451901][ T5814] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1359.601035][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1359.831023][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1359.959984][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1359.997033][T17189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.020499][T17189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.161083][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1360.244981][T17159] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.381217][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1360.441973][T17159] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.650180][T17159] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.750560][T17159] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.868749][ T12] hsr_slave_0: left promiscuous mode [ 1360.892662][ T12] hsr_slave_1: left promiscuous mode [ 1360.929529][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1360.974393][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1361.156290][ T12] pimreg (unregistering): left allmulticast mode [ 1361.556725][ T1189] usb 4-1: USB disconnect, device number 57 [ 1361.878716][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.890912][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.273991][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1363.394484][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1363.497113][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1363.599388][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1364.288569][ T12] bond0 (unregistering): Released all slaves [ 1364.386360][T17196] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2831'. [ 1364.398791][T17196] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2831'. [ 1364.416344][T17196] team0: entered promiscuous mode [ 1364.421936][T17196] team_slave_0: entered promiscuous mode [ 1364.427918][T17196] team_slave_1: entered promiscuous mode [ 1364.441519][T17196] bridge0: entered promiscuous mode [ 1364.455842][T17196] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 1364.499413][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1364.651028][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1364.802688][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1364.911511][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1365.150603][T17222] syzkaller0: entered promiscuous mode [ 1365.174556][T17222] syzkaller0: entered allmulticast mode [ 1365.202107][ T6366] bond1: (slave bridge0): failed to get link speed/duplex [ 1365.351024][ T5814] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1365.549631][ T5814] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.574303][ T5814] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1365.589127][ T5814] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1365.608866][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.638803][ T5814] usb 6-1: config 0 descriptor?? [ 1365.686478][ T5814] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1366.269035][T17244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.299265][T17244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.289137][T17249] loop7: detected capacity change from 0 to 256 [ 1367.396163][T17249] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1368.024211][T14241] usb 6-1: USB disconnect, device number 34 [ 1371.767612][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1372.041353][ T6366] bond1: (slave bridge0): failed to get link speed/duplex [ 1372.160965][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1372.313375][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1372.454297][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1372.599681][ T6366] bond1: (slave bridge0): failed to get link speed/duplex [ 1372.734554][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1372.873571][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1372.952140][T15977] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1372.973891][T17295] netlink: 'syz.5.2857': attribute type 1 has an invalid length. [ 1373.213058][T17295] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1373.270981][ T7333] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 1373.295695][T17298] bond1: (slave ip6gretap1): making interface the new active one [ 1373.313394][T17298] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1373.345291][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1373.464505][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1373.496273][ T7333] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.549395][ T7333] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1373.593663][ T7333] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1373.682964][ T7333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.697020][ T7333] usb 4-1: config 0 descriptor?? [ 1373.730412][T17301] syzkaller0: entered promiscuous mode [ 1373.737241][ T7333] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1373.749375][T17301] syzkaller0: entered allmulticast mode [ 1374.282234][T17292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.312464][T17292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.822767][ T786] usb 4-1: USB disconnect, device number 58 [ 1377.933888][ T1143] net_ratelimit: 1 callbacks suppressed [ 1377.933945][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1378.087941][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1378.221320][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1378.337230][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1378.486005][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1378.596669][T17326] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2866'. [ 1378.611157][T17326] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2866'. [ 1378.663849][T17326] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.673897][T17326] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.683835][T17326] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.693071][T17326] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.723518][T17326] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2866'. [ 1378.741121][T15977] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1378.801240][T17326] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2866'. [ 1378.863271][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1378.993102][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1379.235386][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1379.371800][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1379.521081][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1379.991250][ T7333] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 1380.496346][ T7333] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1380.543644][ T7333] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1380.584043][ T7333] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.666058][ T7333] usb 8-1: config 0 descriptor?? [ 1380.719081][ T7333] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1381.199069][T17351] syzkaller0: entered promiscuous mode [ 1381.227509][T17351] syzkaller0: entered allmulticast mode [ 1381.281186][T17338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.305931][T17338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.817304][ T8] usb 8-1: USB disconnect, device number 16 [ 1386.589880][ T6366] net_ratelimit: 9 callbacks suppressed [ 1386.589937][ T6366] bond1: (slave bridge0): failed to get link speed/duplex [ 1386.752508][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1386.802251][T15977] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1386.892665][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1387.002131][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1387.132307][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1387.255342][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1387.391043][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1389.791065][ T6366] bond1: (slave bridge0): failed to get link speed/duplex [ 1389.903402][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1390.043581][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1390.469660][T17392] netlink: 'syz.1.2886': attribute type 1 has an invalid length. [ 1390.572192][T17392] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1390.632968][T17395] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 1391.483360][T17398] netlink: 165 bytes leftover after parsing attributes in process `syz.7.2887'. [ 1391.591903][T13483] net_ratelimit: 6 callbacks suppressed [ 1391.591921][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1391.847244][T17400] syzkaller0: entered promiscuous mode [ 1391.873448][T17400] syzkaller0: entered allmulticast mode [ 1391.905748][T17402] syzkaller1: entered promiscuous mode [ 1391.912892][T17402] syzkaller1: entered allmulticast mode [ 1395.511625][ T8] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1395.727630][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1395.747799][ T8] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1395.780361][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.814083][ T8] usb 6-1: config 0 descriptor?? [ 1395.838400][ T8] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1396.426384][T17424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.452067][T17424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.653366][T15977] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1398.140684][ T8] usb 6-1: USB disconnect, device number 35 [ 1402.294329][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1402.426045][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1403.235727][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1403.392039][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1403.424944][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2898'. [ 1403.479287][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2898'. [ 1403.522945][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2898'. [ 1403.551935][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2898'. [ 1403.592274][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1403.607623][T17454] syzkaller1: entered promiscuous mode [ 1403.634303][T17454] syzkaller1: entered allmulticast mode [ 1404.156893][ T5782] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1404.191512][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1404.313037][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1404.442786][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1404.575552][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1404.740920][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1404.750941][ T5814] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 1404.944602][ T5814] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1404.989712][ T5814] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1405.010903][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.038087][ T5814] usb 2-1: config 0 descriptor?? [ 1405.078521][ T5814] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1405.621261][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 1405.704816][T17477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.745876][T17477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.600901][ T1143] net_ratelimit: 11 callbacks suppressed [ 1409.600923][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1409.735294][ T7333] usb 2-1: USB disconnect, device number 92 [ 1409.783135][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1409.902109][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1411.992216][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1412.123169][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1412.232158][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1412.271512][T17495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2910'. [ 1412.280542][T17495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2910'. [ 1412.345700][T17495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2910'. [ 1412.381308][T17495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2910'. [ 1412.433653][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1412.612072][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1412.724361][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1413.006355][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1413.626553][ T5782] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1414.688229][T17524] syzkaller1: entered promiscuous mode [ 1414.725418][T17524] syzkaller1: entered allmulticast mode [ 1414.741088][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 1414.922182][ T12] net_ratelimit: 15 callbacks suppressed [ 1414.922203][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1415.606767][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1415.766209][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1415.935098][T17537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2920'. [ 1415.952890][T17537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2920'. [ 1415.964104][T17537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2920'. [ 1415.974791][T17537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2920'. [ 1415.991529][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1416.005600][ T5814] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 1416.122145][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1416.193029][ T5814] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1416.219795][ T5814] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1416.232701][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1416.254608][ T5814] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.282118][ T5814] usb 8-1: config 0 descriptor?? [ 1416.304878][ T5814] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1416.342389][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1416.472442][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1416.622261][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1416.742038][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1416.864162][T17530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.880000][T17530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.932751][ T5782] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1417.412455][T17560] syzkaller1: entered promiscuous mode [ 1417.418220][T17560] syzkaller1: entered allmulticast mode [ 1417.976500][T17566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2930'. [ 1417.989399][T17566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2930'. [ 1418.012452][T17566] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1418.021600][T17566] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1418.030393][T17566] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1418.040461][T17566] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1418.100129][T17566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2930'. [ 1418.127226][T17566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2930'. [ 1418.437080][ T5814] usb 8-1: USB disconnect, device number 17 [ 1421.300230][T17579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.309196][T17579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.742940][T15977] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1422.176250][T17579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1422.240409][T17579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1422.778035][T17581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1423.206969][T17579] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.221590][T17579] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.230669][T17579] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.241063][T17579] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.311534][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.317967][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.380993][T17598] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1423.419443][T17579] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.428572][T17579] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.437949][T17579] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.447218][T17579] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.497948][T17588] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2934'. [ 1423.520944][ T12] net_ratelimit: 20 callbacks suppressed [ 1423.520965][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1423.573586][T17598] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1423.598334][T17598] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1423.645281][T17598] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.665268][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1423.682950][T17598] usb 6-1: config 0 descriptor?? [ 1423.705951][T17598] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1423.816639][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1423.835763][T15977] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1423.961141][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1424.239133][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1424.418280][T17628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.634790][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1424.668552][T17628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.781737][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1424.901359][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1425.013523][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1425.267073][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1427.033218][ T7333] usb 6-1: USB disconnect, device number 36 [ 1427.060972][T15977] Bluetooth: hci0: command 0x0406 tx timeout [ 1427.394654][T17659] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1427.737680][ T5782] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1427.754275][T17672] syzkaller1: entered promiscuous mode [ 1427.780306][T17672] syzkaller1: entered allmulticast mode [ 1429.217201][ T1143] net_ratelimit: 10 callbacks suppressed [ 1429.217223][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1429.365882][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1429.494482][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1429.632347][T17598] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 1429.634650][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1429.811506][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1429.892268][T17598] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1429.909452][T17598] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1429.985858][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1430.002044][T17598] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.105984][T17598] usb 8-1: config 0 descriptor?? [ 1430.150299][T17650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1430.151366][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1430.180947][T15977] Bluetooth: hci0: command 0x0406 tx timeout [ 1430.251628][T17598] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1430.462698][T15977] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1430.475795][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1430.610477][T17711] syzkaller1: entered promiscuous mode [ 1430.616386][T17711] syzkaller1: entered allmulticast mode [ 1430.858607][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1431.313888][T17687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.349673][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1431.731634][T17687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.628037][ T5782] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1433.658075][ T7333] usb 8-1: USB disconnect, device number 18 [ 1434.290893][T15977] Bluetooth: hci0: command 0x0406 tx timeout [ 1434.337873][T10016] net_ratelimit: 18 callbacks suppressed [ 1434.337978][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1434.591278][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1434.903652][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1435.031115][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1435.141270][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1435.204659][T15977] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1435.261028][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1435.382061][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1435.666694][T17741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1435.668859][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1435.799370][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1435.919264][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1436.221121][ T1189] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1436.563970][ T1189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1436.576566][ T1189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1436.587385][ T1189] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1436.599653][ T1189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.822717][ T1189] usb 6-1: config 0 descriptor?? [ 1437.461387][T15977] Bluetooth: hci0: command 0x0406 tx timeout [ 1437.593574][ T1189] elan 0003:04F3:0755.0038: unknown main item tag 0x0 [ 1437.802620][ T1189] elan 0003:04F3:0755.0038: unknown main item tag 0x0 [ 1437.859402][ T1189] elan 0003:04F3:0755.0038: unknown main item tag 0x0 [ 1437.899292][ T1189] elan 0003:04F3:0755.0038: unknown main item tag 0x0 [ 1437.914236][T15977] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1437.953420][ T1189] elan 0003:04F3:0755.0038: unknown main item tag 0x0 [ 1437.971802][ T1189] elan 0003:04F3:0755.0038: failed to start in urb: -90 [ 1437.989005][T17813] netlink: 'syz.7.2994': attribute type 4 has an invalid length. [ 1437.998100][ T1189] elan 0003:04F3:0755.0038: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1438.031090][ T1189] usb 6-1: USB disconnect, device number 37 [ 1438.154075][T17814] fido_id[17814]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1439.433544][ T1143] net_ratelimit: 20 callbacks suppressed [ 1439.433564][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1439.591858][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1439.659959][ T5782] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1439.711016][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1439.752252][ T5782] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1439.831126][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1439.941161][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1439.963682][ T5782] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1440.052553][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1440.181670][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1440.291237][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1440.412514][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1440.531823][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1440.590852][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 1441.051003][T11013] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 1441.241316][T17820] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1441.273790][T11013] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1441.435922][T11013] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1441.688677][T11013] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1441.775910][T11013] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.845258][T11013] usb 4-1: config 0 descriptor?? [ 1442.270566][T11013] elan 0003:04F3:0755.0039: unknown main item tag 0x0 [ 1442.279622][T11013] elan 0003:04F3:0755.0039: unknown main item tag 0x0 [ 1442.287172][T11013] elan 0003:04F3:0755.0039: unknown main item tag 0x0 [ 1442.294677][T11013] elan 0003:04F3:0755.0039: unknown main item tag 0x0 [ 1442.302251][T11013] elan 0003:04F3:0755.0039: unknown main item tag 0x0 [ 1442.311318][T11013] elan 0003:04F3:0755.0039: failed to start in urb: -90 [ 1442.323948][T11013] elan 0003:04F3:0755.0039: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1442.358197][ T5782] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1442.502896][T11013] usb 4-1: USB disconnect, device number 59 [ 1443.578013][T17901] syzkaller1: entered promiscuous mode [ 1443.583798][T17901] syzkaller1: entered allmulticast mode [ 1444.021223][T15977] Bluetooth: hci0: command 0x0406 tx timeout [ 1444.451152][ T1143] net_ratelimit: 33 callbacks suppressed [ 1444.451173][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1444.573793][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1444.691077][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1444.802529][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1444.911539][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1444.960926][ T1189] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 1445.025423][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1445.152547][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1445.252841][ T1189] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1445.264033][ T1189] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1445.274134][ T1189] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1445.283444][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1445.392241][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1445.531111][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1446.039535][ T1189] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.059709][ T1189] usb 8-1: config 0 descriptor?? [ 1446.112139][T17943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3030'. [ 1446.122135][T17943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3030'. [ 1446.137781][T17943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3030'. [ 1446.181299][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 1446.299922][ T5782] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1446.480460][ T1189] elan 0003:04F3:0755.003A: unknown main item tag 0x0 [ 1446.488009][ T1189] elan 0003:04F3:0755.003A: unknown main item tag 0x0 [ 1446.495504][ T1189] elan 0003:04F3:0755.003A: unknown main item tag 0x0 [ 1446.503070][ T1189] elan 0003:04F3:0755.003A: unknown main item tag 0x0 [ 1446.511253][ T1189] elan 0003:04F3:0755.003A: unknown main item tag 0x0 [ 1446.519082][ T1189] elan 0003:04F3:0755.003A: failed to start in urb: -90 [ 1446.538310][ T1189] elan 0003:04F3:0755.003A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0 [ 1446.622764][T17903] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1446.753796][ T1189] usb 8-1: USB disconnect, device number 19 [ 1446.889685][T17950] syzkaller1: entered promiscuous mode [ 1446.903323][T17950] syzkaller1: entered allmulticast mode [ 1448.575329][T17991] syzkaller1: entered promiscuous mode [ 1448.588708][T17991] syzkaller1: entered allmulticast mode [ 1448.703562][ T5782] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1448.814331][T18003] netlink: 'syz.7.3048': attribute type 4 has an invalid length. [ 1448.941586][T14245] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 1449.299326][T14245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1449.312192][T14245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1449.336752][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 1449.880954][T13484] net_ratelimit: 31 callbacks suppressed [ 1449.881005][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1449.941830][T14245] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1450.061087][T14245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.096564][T14245] usb 4-1: config 0 descriptor?? [ 1450.179772][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1450.333574][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1450.471423][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1450.527402][T17998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.682000][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1450.727247][T17998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.853679][T14245] elan 0003:04F3:0755.003B: unknown main item tag 0x0 [ 1450.913533][T14245] elan 0003:04F3:0755.003B: unknown main item tag 0x0 [ 1450.931953][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1450.954612][T14245] elan 0003:04F3:0755.003B: unknown main item tag 0x0 [ 1450.992002][T14245] elan 0003:04F3:0755.003B: unknown main item tag 0x0 [ 1451.025297][T14245] elan 0003:04F3:0755.003B: unknown main item tag 0x0 [ 1451.052930][T14245] elan 0003:04F3:0755.003B: failed to start in urb: -90 [ 1451.095745][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1451.132993][T14245] elan 0003:04F3:0755.003B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1451.195815][T14245] usb 4-1: USB disconnect, device number 60 [ 1451.221073][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1451.339048][T18026] fido_id[18026]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1451.353832][ T1004] bond1: (slave bridge0): failed to get link speed/duplex [ 1451.382414][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 1451.410350][T18031] syzkaller1: entered promiscuous mode [ 1451.434979][T18031] syzkaller1: entered allmulticast mode [ 1451.468585][ T5782] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1451.511331][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1452.984171][ T5782] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1453.781280][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 1454.010348][T18071] syzkaller1: entered promiscuous mode [ 1454.031373][T18071] syzkaller1: entered allmulticast mode [ 1454.442904][T11013] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 1454.643178][T11013] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1454.655520][T11013] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1454.666277][T11013] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1454.866054][T11013] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.570479][T11013] usb 4-1: config 0 descriptor?? [ 1456.595156][T13483] net_ratelimit: 23 callbacks suppressed [ 1456.595172][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1456.672663][T15977] Bluetooth: hci0: command 0x0406 tx timeout [ 1456.755040][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1456.897193][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1457.007676][T18073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1457.026767][T18073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1457.066053][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1457.097830][T11013] elan 0003:04F3:0755.003C: unknown main item tag 0x0 [ 1457.121699][T11013] elan 0003:04F3:0755.003C: unknown main item tag 0x0 [ 1457.128593][T11013] elan 0003:04F3:0755.003C: unknown main item tag 0x0 [ 1457.168212][T11013] elan 0003:04F3:0755.003C: unknown main item tag 0x0 [ 1457.181254][T11013] elan 0003:04F3:0755.003C: unknown main item tag 0x0 [ 1457.201333][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1457.205431][T11013] elan 0003:04F3:0755.003C: failed to start in urb: -90 [ 1457.241294][T11013] elan 0003:04F3:0755.003C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1457.322303][T14245] usb 4-1: USB disconnect, device number 61 [ 1457.337678][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1457.483553][T10016] bond1: (slave bridge0): failed to get link speed/duplex [ 1457.548015][T18103] fido_id[18103]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1457.647058][T18113] syzkaller0: entered promiscuous mode [ 1457.652803][T18113] syzkaller0: entered allmulticast mode [ 1457.661961][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1457.808156][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1457.921939][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1458.432874][T15977] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1460.386109][T18104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1462.661083][T14241] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 1462.671894][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 1463.053003][T14241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1463.070874][T14241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1463.086696][T14241] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1463.771035][T14241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.791675][T14241] usb 4-1: config 0 descriptor?? [ 1464.232243][T18157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.248284][T18157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.274607][T14241] elan 0003:04F3:0755.003D: unknown main item tag 0x0 [ 1464.282121][T14241] elan 0003:04F3:0755.003D: unknown main item tag 0x0 [ 1464.289179][T14241] elan 0003:04F3:0755.003D: unknown main item tag 0x0 [ 1464.302418][T14241] elan 0003:04F3:0755.003D: unknown main item tag 0x0 [ 1464.309379][T14241] elan 0003:04F3:0755.003D: unknown main item tag 0x0 [ 1464.318148][T14241] elan 0003:04F3:0755.003D: failed to start in urb: -90 [ 1464.337357][T14241] elan 0003:04F3:0755.003D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1464.494134][T17597] usb 4-1: USB disconnect, device number 62 [ 1464.624294][ T1143] net_ratelimit: 3 callbacks suppressed [ 1464.624313][ T1143] bond1: (slave bridge0): failed to get link speed/duplex [ 1464.742925][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1464.851137][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1464.973152][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1466.114764][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1466.262126][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1466.382173][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1466.552145][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1466.615202][T18195] syzkaller1: entered promiscuous mode [ 1466.631008][T18195] syzkaller1: entered allmulticast mode [ 1467.302225][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1467.432270][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1467.755254][T18201] syzkaller0: entered promiscuous mode [ 1467.760909][T18201] syzkaller0: entered allmulticast mode [ 1467.972865][T18213] digital: digital_start_poll: Unknown protocol [ 1469.487622][ T1189] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 1469.711093][ T1189] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1469.731737][ T1189] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1469.758390][ T1189] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1469.775912][ T1189] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.800204][ T1189] usb 8-1: config 0 descriptor?? [ 1470.307185][T18215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.349226][T18215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.965105][ T1189] elan 0003:04F3:0755.003E: unknown main item tag 0x0 [ 1470.972224][ T1189] elan 0003:04F3:0755.003E: unknown main item tag 0x0 [ 1470.979077][ T1189] elan 0003:04F3:0755.003E: unknown main item tag 0x0 [ 1470.986678][ T1189] elan 0003:04F3:0755.003E: unknown main item tag 0x0 [ 1470.993588][ T1189] elan 0003:04F3:0755.003E: unknown main item tag 0x0 [ 1471.004164][ T1189] elan 0003:04F3:0755.003E: failed to start in urb: -90 [ 1471.012922][ T1189] elan 0003:04F3:0755.003E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0 [ 1471.027815][ T1189] usb 8-1: USB disconnect, device number 20 [ 1471.186743][T18235] fido_id[18235]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1474.012961][T18240] syzkaller1: entered promiscuous mode [ 1474.018509][T18240] syzkaller1: entered allmulticast mode [ 1474.106950][T18251] syzkaller0: entered promiscuous mode [ 1474.118185][T18251] syzkaller0: entered allmulticast mode [ 1479.431120][T17596] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 1479.663463][T17596] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1479.674594][T17596] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1479.685882][T17596] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1479.709948][T17596] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.735448][T17596] usb 6-1: config 0 descriptor?? [ 1480.162285][T10015] net_ratelimit: 6 callbacks suppressed [ 1480.162306][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1480.188320][T18291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1480.198488][T18291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1480.218334][T17596] elan 0003:04F3:0755.003F: unknown main item tag 0x0 [ 1480.250883][T17596] elan 0003:04F3:0755.003F: unknown main item tag 0x0 [ 1480.257774][T17596] elan 0003:04F3:0755.003F: unknown main item tag 0x0 [ 1480.291606][T17596] elan 0003:04F3:0755.003F: unknown main item tag 0x0 [ 1480.299421][T17596] elan 0003:04F3:0755.003F: unknown main item tag 0x0 [ 1480.315717][T17596] elan 0003:04F3:0755.003F: failed to start in urb: -90 [ 1480.327530][T13483] bond1: (slave bridge0): failed to get link speed/duplex [ 1480.338701][T17596] elan 0003:04F3:0755.003F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1480.456719][ T7333] usb 6-1: USB disconnect, device number 38 [ 1480.507368][T18295] fido_id[18295]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1480.612974][T18297] syzkaller0: entered promiscuous mode [ 1480.618544][T18297] syzkaller0: entered allmulticast mode [ 1480.641447][T10015] bond1: (slave bridge0): failed to get link speed/duplex [ 1484.757269][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.764063][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.783173][T13485] bond1: (slave bridge0): failed to get link speed/duplex [ 1486.912127][T13484] bond1: (slave bridge0): failed to get link speed/duplex [ 1487.001774][T18344] netlink: 'syz.1.3129': attribute type 1 has an invalid length. [ 1488.634281][T18344] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1488.643353][ T12] bond1: (slave bridge0): failed to get link speed/duplex [ 1488.751122][T18344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.758462][T18344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.816607][T18344] bond1: (slave bridge0): Removing an active aggregator [ 1488.861729][T18344] bond1: (slave bridge0): Releasing backup interface [ 1488.884756][T18344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.892085][T18344] bridge0: port 2(bridge_slave_1) entered listening state [ 1488.899553][T18344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.906825][T18344] bridge0: port 1(bridge_slave_0) entered listening state [ 1488.947261][ T5782] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1488.947842][T18344] bond4: (slave bridge0): Enslaving as a backup interface with a down link [ 1490.210130][T18372] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3139'. [ 1492.217124][T18378] syzkaller0: entered promiscuous mode [ 1492.235642][T18378] syzkaller0: entered allmulticast mode [ 1492.262837][T17596] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 1492.494481][T17596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1492.505924][T17596] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1492.521036][T17596] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1492.545874][T17596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.591632][T17596] usb 4-1: config 0 descriptor?? [ 1493.013116][T18377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.041436][T18377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.076717][T17596] elan 0003:04F3:0755.0040: unknown main item tag 0x0 [ 1493.086014][T17596] elan 0003:04F3:0755.0040: unknown main item tag 0x0 [ 1493.110239][T17596] elan 0003:04F3:0755.0040: unknown main item tag 0x0 [ 1493.117937][T17596] elan 0003:04F3:0755.0040: unknown main item tag 0x0 [ 1493.146106][T17596] elan 0003:04F3:0755.0040: unknown main item tag 0x0 [ 1493.154114][T17596] elan 0003:04F3:0755.0040: failed to start in urb: -90 [ 1493.192170][T17596] elan 0003:04F3:0755.0040: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1493.343725][T14241] usb 4-1: USB disconnect, device number 63 [ 1493.374369][T18396] fido_id[18396]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1496.585127][ T5782] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1498.591915][T18442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3151'. [ 1498.891643][ T5782] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1498.989720][T18451] syzkaller0: entered promiscuous mode [ 1499.012072][T18451] syzkaller0: entered allmulticast mode [ 1501.418720][ T5782] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1508.126923][T18508] tipc: Started in network mode [ 1508.132548][ T5782] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1508.141077][T18508] tipc: Node identity 926d9f4b30f1, cluster identity 4711 [ 1508.148606][T18508] tipc: Enabled bearer , priority 0 [ 1508.308981][T18508] syzkaller0: entered promiscuous mode [ 1508.321411][T18508] syzkaller0: entered allmulticast mode [ 1508.328116][T18508] tipc: Resetting bearer [ 1508.412222][T18507] tipc: Resetting bearer [ 1508.687881][ T5782] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1514.039848][T18507] tipc: Disabling bearer [ 1514.059053][T17598] tipc: Node number set to 2728173387 [ 1517.842771][ T5782] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1518.465212][T18576] syzkaller0: entered promiscuous mode [ 1518.491028][T18576] syzkaller0: entered allmulticast mode [ 1518.730356][ T5782] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1519.303771][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1519.312934][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1523.267256][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 1524.234843][T18618] digital: digital_start_poll: Unknown protocol [ 1524.443126][ T5782] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1524.516679][T18629] netlink: 'syz.7.3202': attribute type 4 has an invalid length. [ 1524.742114][ T5782] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1527.403254][T18647] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3208'. [ 1527.940193][T18655] syzkaller0: entered promiscuous mode [ 1527.958296][T18655] syzkaller0: entered allmulticast mode [ 1530.475326][T18649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1532.481993][T18660] syzkaller0: entered promiscuous mode [ 1532.487564][T18660] syzkaller0: entered allmulticast mode [ 1535.672500][T18672] netlink: 'syz.1.3212': attribute type 1 has an invalid length. [ 1535.680704][T18672] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1535.697044][T18673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.713011][T18673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.741210][T18673] bond4: (slave bridge0): Releasing backup interface [ 1537.597624][ T5782] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1537.620458][ T5782] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1538.072699][T18708] syzkaller0: entered promiscuous mode [ 1538.090907][T18708] syzkaller0: entered allmulticast mode [ 1541.466856][T18711] netlink: 'syz.5.3223': attribute type 1 has an invalid length. [ 1541.497154][T18711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1541.507342][T18712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.514821][T18712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.783797][T18733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3227'. [ 1542.032985][ T5782] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1542.221837][T18752] netlink: 'syz.5.3236': attribute type 1 has an invalid length. [ 1542.889587][T18752] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1543.164653][T18759] syzkaller0: entered promiscuous mode [ 1543.170310][T18759] syzkaller0: entered allmulticast mode [ 1546.196468][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.207581][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.396955][T18774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3244'. [ 1546.776392][T18798] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3246'. [ 1546.821492][ T5782] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1547.516154][T18806] syzkaller0: entered promiscuous mode [ 1547.539323][T18806] syzkaller0: entered allmulticast mode [ 1547.741233][ T5782] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1547.824681][T18809] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3250'. [ 1547.954423][T18819] syzkaller0: entered promiscuous mode [ 1547.960071][T18819] syzkaller0: entered allmulticast mode [ 1547.967915][T18821] syzkaller0: entered promiscuous mode [ 1547.984580][T18821] syzkaller0: entered allmulticast mode [ 1551.246642][T18833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3257'. [ 1551.415729][T18838] pim6reg: entered allmulticast mode [ 1551.539974][ T5782] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1551.694969][T18848] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3262'. [ 1551.722188][T18848] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3262'. [ 1551.780990][T18852] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1552.519162][ T5782] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1552.776876][T18871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3267'. [ 1552.888787][T18870] syzkaller0: entered promiscuous mode [ 1552.901021][T18870] syzkaller0: entered allmulticast mode [ 1553.245555][ T5782] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1553.744761][ T5782] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1554.901233][T17597] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1555.157710][T17597] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1555.184529][T17597] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1555.194469][T17597] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1555.203764][T17597] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.239704][T17597] usb 6-1: config 0 descriptor?? [ 1555.677374][T18902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1555.688760][T18902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1555.707045][T17597] elan 0003:04F3:0755.0041: unknown main item tag 0x0 [ 1555.716485][T17597] elan 0003:04F3:0755.0041: unknown main item tag 0x0 [ 1555.723760][T17597] elan 0003:04F3:0755.0041: unknown main item tag 0x0 [ 1555.745659][T17597] elan 0003:04F3:0755.0041: unknown main item tag 0x0 [ 1555.752623][T17597] elan 0003:04F3:0755.0041: unknown main item tag 0x0 [ 1555.760376][T17597] elan 0003:04F3:0755.0041: failed to start in urb: -90 [ 1555.795584][T17597] elan 0003:04F3:0755.0041: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1555.926696][T17597] usb 6-1: USB disconnect, device number 39 [ 1557.988581][T18906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3275'. [ 1558.001992][T18906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3275'. [ 1558.018581][T18906] team0: entered promiscuous mode [ 1558.024844][T18906] team_slave_0: entered promiscuous mode [ 1558.032151][T18906] team_slave_1: entered promiscuous mode [ 1558.041494][T18906] bridge0: entered promiscuous mode [ 1558.054643][T18906] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1558.070861][T18906] Cannot create hsr debugfs directory [ 1558.081356][T18906] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 1558.279137][T18927] netlink: 'syz.5.3279': attribute type 13 has an invalid length. [ 1558.328213][ T5782] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1558.384788][ T5782] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1559.449689][ T5782] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1559.605218][T18927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1559.729309][T18927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1560.497567][T18927] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.507901][T18927] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.517521][T18927] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.526897][T18927] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.708208][T18935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3278'. [ 1560.810935][T14241] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 1560.961687][ T5782] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1561.005686][T18963] syzkaller0: entered promiscuous mode [ 1561.012263][T18963] syzkaller0: entered allmulticast mode [ 1561.019679][T14241] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1561.033892][T14241] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1561.069634][T14241] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1561.088898][T14241] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.114113][T14241] usb 8-1: config 0 descriptor?? [ 1561.597310][T18954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1561.610974][T18954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1561.626876][T14241] elan 0003:04F3:0755.0042: unknown main item tag 0x0 [ 1561.635348][T14241] elan 0003:04F3:0755.0042: unknown main item tag 0x0 [ 1561.647850][T14241] elan 0003:04F3:0755.0042: unknown main item tag 0x0 [ 1561.660060][T14241] elan 0003:04F3:0755.0042: unknown main item tag 0x0 [ 1561.667621][T14241] elan 0003:04F3:0755.0042: unknown main item tag 0x0 [ 1561.676016][T14241] elan 0003:04F3:0755.0042: failed to start in urb: -90 [ 1561.689745][T14241] elan 0003:04F3:0755.0042: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0 [ 1561.888030][T14245] usb 8-1: USB disconnect, device number 21 [ 1562.643193][ T5782] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1564.848100][T18979] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3289'. [ 1564.857416][T18979] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3289'. [ 1564.872151][T18979] team0: entered promiscuous mode [ 1564.877325][T18979] team_slave_0: entered promiscuous mode [ 1564.892431][T18979] team_slave_1: entered promiscuous mode [ 1564.900401][T18979] bridge0: entered promiscuous mode [ 1564.914456][T18979] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1564.925024][T18979] Cannot create hsr debugfs directory [ 1564.930586][T18979] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 1564.943322][T18979] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 1565.099973][T19001] netlink: 'syz.5.3296': attribute type 10 has an invalid length. [ 1565.136117][T19001] dummy0: entered promiscuous mode [ 1565.146790][T19001] team0: Port device dummy0 added [ 1565.167554][T19008] netlink: 'syz.5.3296': attribute type 10 has an invalid length. [ 1565.177060][T19008] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1565.196798][T19008] dummy0: left promiscuous mode [ 1565.222810][T19008] team0: Failed to send options change via netlink (err -105) [ 1565.241170][T19008] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1565.255040][T19008] team0: Port device dummy0 removed [ 1565.267648][T19008] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1565.279026][T19009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3294'. [ 1565.511672][ T5782] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1565.770996][T17597] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1565.965892][T17597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1565.977821][T17597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1565.990779][T17597] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1565.999854][T17597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.021642][T17597] usb 4-1: config 0 descriptor?? [ 1566.432306][T19014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1566.445538][T19014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.458539][T17597] elan 0003:04F3:0755.0043: unknown main item tag 0x0 [ 1566.471029][T17597] elan 0003:04F3:0755.0043: unknown main item tag 0x0 [ 1566.477894][T17597] elan 0003:04F3:0755.0043: unknown main item tag 0x0 [ 1566.484942][T17597] elan 0003:04F3:0755.0043: unknown main item tag 0x0 [ 1566.492930][T17597] elan 0003:04F3:0755.0043: unknown main item tag 0x0 [ 1566.501020][T17597] elan 0003:04F3:0755.0043: failed to start in urb: -90 [ 1566.509688][T17597] elan 0003:04F3:0755.0043: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1566.663774][T17597] usb 4-1: USB disconnect, device number 64 [ 1566.711184][T18992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1567.228148][T19043] syzkaller0: entered promiscuous mode [ 1567.253458][T19043] syzkaller0: entered allmulticast mode [ 1569.805438][T19036] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1570.447220][T19050] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3304'. [ 1570.456378][T19050] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3304'. [ 1570.664434][T19071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3306'. [ 1570.774809][ T5782] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1571.260866][ T1189] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 1571.456485][ T1189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1571.467668][ T1189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1571.481116][ T1189] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1571.490203][ T1189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.511587][ T1189] usb 4-1: config 0 descriptor?? [ 1571.825705][T19099] syzkaller0: entered promiscuous mode [ 1571.831378][T19099] syzkaller0: entered allmulticast mode [ 1571.941662][T19084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1571.991056][T19084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1572.011745][ T1189] usbhid 4-1:0.0: can't add hid device: -71 [ 1572.032788][ T1189] usbhid: probe of 4-1:0.0 failed with error -71 [ 1572.063059][ T1189] usb 4-1: USB disconnect, device number 65 [ 1574.654334][T19100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1575.345927][T19107] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3316'. [ 1575.355279][T19107] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3316'. [ 1575.708300][T19135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3322'. [ 1575.722689][T19135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3322'. [ 1575.756628][ T5782] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1575.893141][T19142] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3323'. [ 1576.262526][ T1189] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 1576.462794][ T1189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1576.480818][ T1189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1576.510794][ T1189] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1576.520015][ T1189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.538458][T19158] syzkaller0: entered promiscuous mode [ 1576.544773][T19158] syzkaller0: entered allmulticast mode [ 1576.555743][ T1189] usb 2-1: config 0 descriptor?? [ 1576.601326][T19161] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3329'. [ 1576.610522][T19161] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3329'. [ 1576.626877][T19161] bond0: entered promiscuous mode [ 1576.632263][T19161] bond_slave_0: entered promiscuous mode [ 1576.638166][T19161] bond_slave_1: entered promiscuous mode [ 1576.644626][T19161] dummy0: entered promiscuous mode [ 1576.652128][T19161] ip6gretap0: entered promiscuous mode [ 1576.662099][T19161] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1576.673424][T19161] hsr2: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 1576.985119][T19145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1577.013960][T19145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1577.078276][ T1189] usbhid 2-1:0.0: can't add hid device: -71 [ 1577.097361][ T1189] usbhid: probe of 2-1:0.0 failed with error -71 [ 1577.128034][ T1189] usb 2-1: USB disconnect, device number 93 [ 1580.347917][T19183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3332'. [ 1580.361992][T19183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3332'. [ 1580.372254][T19183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3332'. [ 1580.400810][T19183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3332'. [ 1582.641153][T14248] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1582.868038][T14248] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1582.910875][T14248] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1582.941015][T14248] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1582.972911][T19215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3341'. [ 1582.982177][T14248] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.007339][T14248] usb 6-1: config 0 descriptor?? [ 1583.445209][T19230] syzkaller0: entered promiscuous mode [ 1583.454642][T19230] syzkaller0: entered allmulticast mode [ 1583.465058][T19207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1583.484731][ T5782] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1583.511793][T19207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1583.554153][T14248] usbhid 6-1:0.0: can't add hid device: -71 [ 1583.561533][T14248] usbhid: probe of 6-1:0.0 failed with error -71 [ 1583.577220][T14248] usb 6-1: USB disconnect, device number 40 [ 1586.575028][T19222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1592.444410][ T5782] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1592.501862][T19236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3344'. [ 1592.512484][T19236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3344'. [ 1592.538809][T19236] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1592.547739][T19236] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1592.556881][T19236] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1592.565872][T19236] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1592.615715][T19236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3344'. [ 1592.638245][T19236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3344'. [ 1595.065966][T19291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3356'. [ 1595.471902][T19300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3359'. [ 1595.572374][T19300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3359'. [ 1595.653382][T19300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3359'. [ 1595.692836][T19300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3359'. [ 1595.759294][T19300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3359'. [ 1597.038008][T19315] syzkaller0: entered promiscuous mode [ 1597.051806][T19315] syzkaller0: entered allmulticast mode [ 1601.061221][ T5782] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1602.788418][ C0] vkms_vblank_simulate: vblank timer overrun [ 1602.822812][ C0] vkms_vblank_simulate: vblank timer overrun [ 1602.922420][ C0] vkms_vblank_simulate: vblank timer overrun [ 1602.954566][ C0] vkms_vblank_simulate: vblank timer overrun [ 1602.987417][ C0] vkms_vblank_simulate: vblank timer overrun [ 1603.027670][ C0] vkms_vblank_simulate: vblank timer overrun [ 1603.687615][ C0] vkms_vblank_simulate: vblank timer overrun [ 1605.565048][T19323] netlink: 'syz.1.3357': attribute type 10 has an invalid length. [ 1605.653261][T19323] dummy0: entered promiscuous mode [ 1605.687351][T19323] team0: Port device dummy0 added [ 1605.711923][T19324] netlink: 'syz.1.3357': attribute type 10 has an invalid length. [ 1605.817175][T19324] dummy0: left promiscuous mode [ 1605.853089][T19324] team0: Port device dummy0 removed [ 1605.937865][T19324] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1605.975259][T19344] __nla_validate_parse: 4 callbacks suppressed [ 1605.975318][T19344] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3368'. [ 1606.432713][T19367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3372'. [ 1606.447110][T19367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3372'. [ 1606.468825][T19367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3372'. [ 1606.505453][T19367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3372'. [ 1607.644203][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.650950][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.951226][T19386] syzkaller0: entered promiscuous mode [ 1607.976815][T19386] syzkaller0: entered allmulticast mode [ 1610.128881][T19378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1613.889529][T19401] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3381'. [ 1613.901306][T19412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3383'. [ 1613.910257][T19412] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3383'. [ 1613.955872][T19412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3383'. [ 1613.987164][T19412] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3383'. [ 1614.214593][T19426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3386'. [ 1614.227627][T19426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3386'. [ 1614.240027][T19426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3386'. [ 1614.251998][T19426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3386'. [ 1614.263013][T19426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3386'. [ 1614.314312][ T5782] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1615.315455][T19459] syzkaller0: entered promiscuous mode [ 1615.325558][T19459] syzkaller0: entered allmulticast mode [ 1615.391341][ T1189] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1615.592948][ T1189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1615.608921][ T1189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1615.619940][ T1189] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1615.630167][ T1189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.643972][ T1189] usb 6-1: config 0 descriptor?? [ 1616.062616][T19450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1616.079576][T19450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1616.096261][ C0] vkms_vblank_simulate: vblank timer overrun [ 1616.128370][ T1189] elan 0003:04F3:0755.0044: unknown main item tag 0x0 [ 1616.138139][ T1189] elan 0003:04F3:0755.0044: unknown main item tag 0x0 [ 1616.145243][ T1189] elan 0003:04F3:0755.0044: unknown main item tag 0x0 [ 1616.152582][ T1189] elan 0003:04F3:0755.0044: unknown main item tag 0x0 [ 1616.160017][ T1189] elan 0003:04F3:0755.0044: unknown main item tag 0x0 [ 1616.161909][ C0] vkms_vblank_simulate: vblank timer overrun [ 1616.171941][ T1189] elan 0003:04F3:0755.0044: failed to start in urb: -90 [ 1616.188491][ T1189] elan 0003:04F3:0755.0044: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1616.361182][ T1189] usb 6-1: USB disconnect, device number 41 [ 1616.378719][ C0] vkms_vblank_simulate: vblank timer overrun [ 1619.005484][T19469] __nla_validate_parse: 4 callbacks suppressed [ 1619.005501][T19469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3394'. [ 1619.329138][T19486] syzkaller0: entered promiscuous mode [ 1619.352617][T19486] syzkaller0: entered allmulticast mode [ 1619.536826][ T5782] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1622.347363][T19500] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1622.365589][ C1] vkms_vblank_simulate: vblank timer overrun [ 1623.099683][T19508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3404'. [ 1623.114400][T19508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3404'. [ 1623.125593][T19508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3404'. [ 1623.135039][T19508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3404'. [ 1623.237641][T19526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3406'. [ 1623.455326][T19533] syzkaller0: entered promiscuous mode [ 1623.463919][T19533] syzkaller0: entered allmulticast mode [ 1627.654040][T19565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1628.154588][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3416'. [ 1628.170910][T19572] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3416'. [ 1628.199104][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3416'. [ 1628.220969][T19572] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3416'. [ 1628.442164][T19574] netlink: 'syz.3.3417': attribute type 10 has an invalid length. [ 1628.511136][T19574] team0: Port device dummy0 added [ 1628.533145][T19576] netlink: 'syz.3.3417': attribute type 10 has an invalid length. [ 1628.592542][T19576] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1628.679881][T19576] team0: Failed to send options change via netlink (err -105) [ 1628.698492][T19576] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1628.718613][T19576] team0: Port device dummy0 removed [ 1628.750210][T19576] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1628.846341][T19586] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3419'. [ 1629.580784][T19602] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3427'. [ 1629.591878][T19602] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3427'. [ 1629.638689][T19602] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3427'. [ 1629.649424][T19602] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3427'. [ 1629.922189][T19605] syzkaller0: entered promiscuous mode [ 1629.954444][T19605] syzkaller0: entered allmulticast mode [ 1635.121594][T19630] netlink: 13 bytes leftover after parsing attributes in process `syz.7.3434'. [ 1635.197655][T19641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3435'. [ 1635.723797][T19653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3437'. [ 1635.771288][T19653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3437'. [ 1636.372292][T19670] syzkaller0: entered promiscuous mode [ 1636.379868][T19670] syzkaller0: entered allmulticast mode [ 1637.228072][T19675] syzkaller0: entered promiscuous mode [ 1637.253609][T19675] syzkaller0: entered allmulticast mode [ 1642.319821][T19694] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3451'. [ 1642.331195][T19694] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3451'. [ 1643.173391][T19732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3460'. [ 1643.184899][T19732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3460'. [ 1643.431638][T19733] syzkaller0: entered promiscuous mode [ 1643.448503][T19733] syzkaller0: entered allmulticast mode [ 1648.181501][T19753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3467'. [ 1648.191036][T19760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3470'. [ 1648.203930][T19760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3470'. [ 1648.456545][T19780] bridge0: entered allmulticast mode [ 1648.477052][T19780] bridge_slave_1: left allmulticast mode [ 1648.496831][T19780] bridge_slave_1: left promiscuous mode [ 1648.510897][T19780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.570900][T19780] bridge_slave_0: left allmulticast mode [ 1648.590890][T19780] bridge_slave_0: left promiscuous mode [ 1648.601800][T19780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.905266][T19794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3481'. [ 1648.936759][T19794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3481'. [ 1649.095947][T19791] syzkaller0: entered promiscuous mode [ 1649.119006][T19791] syzkaller0: entered allmulticast mode [ 1654.496951][T19803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3484'. [ 1654.534526][T19804] syzkaller0: entered promiscuous mode [ 1654.540045][T19804] syzkaller0: entered allmulticast mode [ 1658.038941][T19827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3491'. [ 1658.050082][T19827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3491'. [ 1659.838017][ T5782] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1659.904198][ T5782] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1660.035013][T19856] loop7: detected capacity change from 0 to 1024 [ 1661.726681][T19878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3503'. [ 1661.764639][T19878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3503'. [ 1661.827388][T19878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3503'. [ 1661.858164][T19878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3503'. [ 1663.470927][T15977] Bluetooth: hci0: command 0x0406 tx timeout [ 1664.081649][T15977] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1664.411107][T19889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1668.482773][T19932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3516'. [ 1668.504893][T19932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3516'. [ 1668.531448][T19932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3516'. [ 1668.540470][T19932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3516'. [ 1669.067110][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.078810][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.984682][T19955] loop5: detected capacity change from 0 to 256 [ 1670.031068][T19955] FAT-fs (loop5): bogus logical sector size 128 [ 1670.037509][T19955] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1671.126264][T15977] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1671.426064][T19970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3528'. [ 1671.486308][T19970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3528'. [ 1671.521555][T19970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3528'. [ 1671.559771][T19970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3528'. [ 1671.596869][T19973] Bluetooth: MGMT ver 1.22 [ 1673.726045][T19976] veth0_to_team: entered promiscuous mode [ 1675.407237][T20009] syzkaller0: entered promiscuous mode [ 1675.432207][T20009] syzkaller0: entered allmulticast mode [ 1676.086848][T20014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3538'. [ 1676.123588][T20014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3538'. [ 1677.740941][T15977] Bluetooth: hci0: command 0x0406 tx timeout [ 1677.762239][T20014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3538'. [ 1677.800126][T20014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3538'. [ 1677.897792][T20021] loop5: detected capacity change from 0 to 128 [ 1678.190541][T15977] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1680.845348][T20059] loop5: detected capacity change from 0 to 256 [ 1680.866826][T20051] syzkaller0: entered promiscuous mode [ 1680.880144][T20059] FAT-fs (loop5): bogus logical sector size 128 [ 1680.890822][T20051] syzkaller0: entered allmulticast mode [ 1680.901163][T20059] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1686.479193][T20076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3552'. [ 1686.490844][T20084] netlink: 'syz.1.3554': attribute type 10 has an invalid length. [ 1686.521815][T20084] bond0: (slave dummy0): Releasing backup interface [ 1686.546301][T20084] dummy0: entered promiscuous mode [ 1686.582638][T20084] team0: Port device dummy0 added [ 1686.607250][T20086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3548'. [ 1686.616702][T20086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3548'. [ 1686.634718][T20087] netlink: 'syz.1.3554': attribute type 10 has an invalid length. [ 1688.309602][T20087] dummy0: left promiscuous mode [ 1688.323056][T20087] team0: Port device dummy0 removed [ 1688.343033][T20087] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1688.362923][T20086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3548'. [ 1688.376923][T20086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3548'. [ 1688.941259][T20124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3563'. [ 1689.067612][T20128] syzkaller0: entered promiscuous mode [ 1689.076822][T20128] syzkaller0: entered allmulticast mode [ 1690.993265][T20135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3567'. [ 1691.008088][T20135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3567'. [ 1691.018607][T20135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3567'. [ 1691.040150][T20135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3567'. [ 1691.652729][T20147] loop7: detected capacity change from 0 to 8 [ 1693.851983][T20165] netlink: 'syz.5.3566': attribute type 10 has an invalid length. [ 1693.899385][T20165] bond0: (slave dummy0): Releasing backup interface [ 1693.914209][T20165] dummy0: left promiscuous mode [ 1693.933992][T20165] dummy0: entered promiscuous mode [ 1693.960077][T20165] team0: Port device dummy0 added [ 1693.971323][T20168] netlink: 'syz.5.3566': attribute type 10 has an invalid length. [ 1694.023113][T20168] dummy0: left promiscuous mode [ 1694.058581][T20168] team0: Port device dummy0 removed [ 1694.088481][T20168] dummy0: entered promiscuous mode [ 1694.107018][T20168] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1696.352217][T20193] syzkaller0: entered promiscuous mode [ 1696.358245][T20193] syzkaller0: entered allmulticast mode [ 1696.694021][T20203] loop5: detected capacity change from 0 to 256 [ 1696.761876][T20203] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1696.806292][T20203] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1696.829799][T20203] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1696.881021][T20203] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1696.912095][T20203] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1696.928007][T20203] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1696.940199][T20203] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1696.954809][T20203] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1696.964525][T20203] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1696.983220][T20203] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1696.998828][ T27] audit: type=1800 audit(1779532325.896:83): pid=20203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3588" name="file1" dev="loop5" ino=1048747 res=0 errno=0 [ 1699.012470][T15977] Bluetooth: hci0: command 0x0406 tx timeout [ 1699.345473][T20232] syzkaller0: entered promiscuous mode [ 1699.380834][T20232] syzkaller0: entered allmulticast mode [ 1699.824210][T20249] tipc: Enabling of bearer rejected, failed to enable media [ 1699.852533][T20250] loop7: detected capacity change from 0 to 8 [ 1701.594665][T14573] SQUASHFS error: Unable to read directory block [631:72] [ 1701.647746][T14573] SQUASHFS error: Unable to read inode 0x0 [ 1701.682200][T14573] SQUASHFS error: Unable to read inode 0x0 [ 1702.156409][T10015] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1702.191126][T10015] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.375208][T10015] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1702.403070][T10015] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.493695][T10015] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1702.528104][T10015] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.706274][T10015] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1702.719183][T20271] loop3: detected capacity change from 0 to 512 [ 1702.735869][T20271] EXT4-fs: Ignoring removed mblk_io_submit option [ 1702.746485][T10015] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.778693][T20271] EXT4-fs (loop3): Unsupported encryption level 1 [ 1702.793344][T20275] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3610'. [ 1702.841163][T20276] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3609'. [ 1702.926876][T20271] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1703.070147][T20278] loop3: detected capacity change from 0 to 256 [ 1703.204564][T20278] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 1703.887717][T19874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1703.901809][T19874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1703.921873][T19874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1703.936014][T19874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1703.963898][T19874] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1703.976718][T19874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1705.988162][T20300] tipc: Enabled bearer , priority 0 [ 1706.041592][T20299] tipc: Disabling bearer [ 1706.117881][T15977] Bluetooth: hci2: command tx timeout [ 1706.525911][T20316] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1708.181166][T15977] Bluetooth: hci2: command tx timeout [ 1709.746601][T20294] chnl_net:caif_netlink_parms(): no params data found [ 1709.814819][T20361] tipc: Enabled bearer , priority 0 [ 1709.909971][T20360] tipc: Disabling bearer [ 1709.949824][T10015] team0: left promiscuous mode [ 1709.957037][T10015] team_slave_0: left promiscuous mode [ 1709.971167][T10015] team_slave_1: left promiscuous mode [ 1710.010900][T10015] bridge0: left promiscuous mode [ 1710.032370][T10015] hsr_slave_0: left promiscuous mode [ 1710.078546][T10015] hsr_slave_1: left promiscuous mode [ 1710.094097][T10015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1710.110838][T10015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1710.130024][T10015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1710.148794][T10015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1710.174577][T10015] bridge_slave_1: left allmulticast mode [ 1710.184901][T10015] bridge_slave_1: left promiscuous mode [ 1710.204414][T10015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1710.223720][T10015] bridge_slave_0: left allmulticast mode [ 1710.236698][T10015] bridge_slave_0: left promiscuous mode [ 1710.243391][T10015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1710.260965][T15977] Bluetooth: hci2: command tx timeout [ 1710.419965][T10015] veth1_macvtap: left promiscuous mode [ 1710.429545][T10015] veth0_macvtap: left promiscuous mode [ 1710.441886][T10015] veth1_vlan: left promiscuous mode [ 1710.460913][T10015] veth0_vlan: left promiscuous mode [ 1710.547190][ T1143] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 1711.213458][T20376] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1711.499551][T20393] loop5: detected capacity change from 0 to 512 [ 1711.577197][T20393] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3630: invalid indirect mapped block 10 (level 1) [ 1711.659145][T20393] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3630: invalid indirect mapped block 8 (level 1) [ 1711.696975][T20393] EXT4-fs (loop5): 1 truncate cleaned up [ 1711.710389][T20393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1711.824765][T11989] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1713.521476][T15977] Bluetooth: hci2: command tx timeout [ 1713.561048][T10015] team0 (unregistering): Port device team_slave_1 removed [ 1713.655551][T10015] team0 (unregistering): Port device team_slave_0 removed [ 1713.747663][T10015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1713.849991][T10015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1714.569794][T10015] bond0 (unregistering): Released all slaves [ 1715.026912][T20407] syzkaller0: entered promiscuous mode [ 1715.033056][T20407] syzkaller0: entered allmulticast mode [ 1715.100176][T20294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.127216][T20294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.146613][T20294] bridge_slave_0: entered allmulticast mode [ 1715.158275][T20294] bridge_slave_0: entered promiscuous mode [ 1715.179518][T20425] tipc: Started in network mode [ 1715.190831][T20425] tipc: Node identity 96d4ddde9fa9, cluster identity 4711 [ 1715.198635][T20425] tipc: Enabled bearer , priority 0 [ 1715.398133][T15977] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1719.686582][T20294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.693873][T20294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.703933][T20294] bridge_slave_1: entered allmulticast mode [ 1719.712298][T20294] bridge_slave_1: entered promiscuous mode [ 1719.741349][T20420] tipc: Disabling bearer [ 1719.780915][T14248] tipc: Node number set to 159243742 [ 1719.973076][T20294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1720.014483][T20294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1720.189945][T20294] team0: Port device team_slave_0 added [ 1720.245930][T20294] team0: Port device team_slave_1 added [ 1720.264938][T10015] IPVS: stop unused estimator thread 0... [ 1720.362915][T20294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1720.369996][T20294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1720.490715][T20294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1720.534953][T20294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1720.571465][T20294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1720.664811][T20294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1720.766638][T20486] syzkaller0: entered promiscuous mode [ 1720.785577][T20486] syzkaller0: entered allmulticast mode [ 1720.899555][T20294] hsr_slave_0: entered promiscuous mode [ 1720.963305][T20294] hsr_slave_1: entered promiscuous mode [ 1720.990158][T20294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1721.016676][T20294] Cannot create hsr debugfs directory [ 1721.497944][T20507] syzkaller0: entered promiscuous mode [ 1721.503688][T20507] syzkaller0: entered allmulticast mode [ 1724.290257][T20509] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1725.375760][T20535] loop5: detected capacity change from 0 to 164 [ 1725.627794][T20294] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1726.009343][T20294] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1726.309759][T20294] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1726.397455][T20294] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1726.727656][T20294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1726.774258][T20294] 8021q: adding VLAN 0 to HW filter on device team0 [ 1726.822716][T10016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1726.830217][T10016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1726.871660][T10016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.879014][T10016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1727.443910][T20294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1727.873647][T20592] loop3: detected capacity change from 0 to 164 [ 1727.895396][T20294] veth0_vlan: entered promiscuous mode [ 1728.100136][T20294] veth1_vlan: entered promiscuous mode [ 1728.323260][T20294] veth0_macvtap: entered promiscuous mode [ 1728.346811][T20294] veth1_macvtap: entered promiscuous mode [ 1728.763920][T20294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1728.782452][T20294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.797177][T20294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1728.826638][T20294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1728.839773][T20294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.864653][T20294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1728.888661][T20294] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.908112][T20294] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.920090][T20294] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.935271][T20294] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.721622][T20557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1730.356837][T10016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1730.410861][T10016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1730.462301][T13483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1730.470307][T13483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1730.518129][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.524742][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.672840][T20611] syzkaller0: entered promiscuous mode [ 1730.678663][T20611] syzkaller0: entered allmulticast mode [ 1731.165292][T20631] loop8: detected capacity change from 0 to 164 [ 1732.039628][T20637] loop3: detected capacity change from 0 to 128 [ 1732.092994][T20637] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1735.466334][T20641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1735.871963][T20656] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3678'. [ 1735.921012][T20656] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3678'. [ 1736.337220][T20672] loop3: detected capacity change from 0 to 164 [ 1737.800392][T20692] syzkaller0: entered promiscuous mode [ 1737.809931][T20692] syzkaller0: entered allmulticast mode [ 1740.625182][T20698] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1741.762849][T20731] loop5: detected capacity change from 0 to 128 [ 1743.798193][T15977] Bluetooth: hci4: ACL packet for unknown connection handle 3584 [ 1743.936879][T20759] syzkaller0: entered promiscuous mode [ 1743.947057][T20759] syzkaller0: entered allmulticast mode [ 1748.268865][T20795] Bluetooth: hci0: unsupported parameter 31231 [ 1748.298044][T20795] Bluetooth: hci0: invalid len left 3, exp >= 120 [ 1749.151779][T19874] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1749.826002][T20818] syzkaller0: entered promiscuous mode [ 1749.831913][T20818] syzkaller0: entered allmulticast mode [ 1750.346608][T15977] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1750.352151][T19874] Bluetooth: hci0: command 0x0406 tx timeout [ 1753.924160][T20851] loop5: detected capacity change from 0 to 164 [ 1753.957064][T20850] loop3: detected capacity change from 0 to 2048 [ 1754.186681][T20850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1754.297794][T20850] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1755.340306][T20877] loop5: detected capacity change from 0 to 1024 [ 1755.358777][T20877] EXT4-fs: quotafile must be on filesystem root [ 1755.527405][T20876] syzkaller0: entered promiscuous mode [ 1755.544689][T20876] syzkaller0: entered allmulticast mode [ 1755.701159][T18958] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1755.896647][T18958] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1755.910311][T18958] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1755.925951][T18958] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1755.939600][T18958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1755.949184][T18958] usb 6-1: SerialNumber: syz [ 1756.194307][T18958] usb 6-1: 0:2 : does not exist [ 1756.227677][T18958] usb 6-1: USB disconnect, device number 42 [ 1756.305420][T20834] udevd[20834]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1756.901167][T20891] loop5: detected capacity change from 0 to 128 [ 1756.958258][T20891] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1756.976716][T20891] ext4 filesystem being mounted at /520/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1757.009223][ C1] vkms_vblank_simulate: vblank timer overrun [ 1757.087330][T11989] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1757.367842][T20897] loop5: detected capacity change from 0 to 512 [ 1757.414083][T20897] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3731: invalid indirect mapped block 10 (level 1) [ 1757.449710][T20897] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3731: invalid indirect mapped block 8 (level 1) [ 1757.467919][T20897] EXT4-fs (loop5): 1 truncate cleaned up [ 1757.476062][T20897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1757.671182][T20899] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.3731: Unrecognised inode hash code 4 [ 1757.699095][T20899] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.3731: Corrupt directory, running e2fsck is recommended [ 1759.914353][T20909] loop3: detected capacity change from 0 to 164 [ 1760.944045][T11989] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1761.396576][T20937] futex_wake_op: syz.5.3737 tries to shift op by 144; fix this program [ 1762.600085][T20950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3743'. [ 1762.740432][T20944] syzkaller0: entered promiscuous mode [ 1762.749602][T20944] syzkaller0: entered allmulticast mode [ 1762.760330][T20950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3743'. [ 1762.790870][T20954] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3744'. [ 1762.828664][T20955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1762.836382][T20955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1763.830401][T20963] loop3: detected capacity change from 0 to 512 [ 1763.979496][T20963] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix. [ 1764.013271][T20963] EXT4-fs (loop3): mount failed [ 1764.115203][T19874] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1764.442438][T20983] loop3: detected capacity change from 0 to 4096 [ 1764.484416][T20983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1764.895396][T14868] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1766.087736][T19874] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1766.319951][ C1] vkms_vblank_simulate: vblank timer overrun [ 1766.553142][ C1] vkms_vblank_simulate: vblank timer overrun [ 1769.392687][T21004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3754'. [ 1769.440464][T21004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3754'. [ 1770.517965][T19874] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1770.687088][T21022] loop8: detected capacity change from 0 to 2048 [ 1770.771849][T21022] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1773.028100][T21046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3766'. [ 1773.037635][T21046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3766'. [ 1773.309788][T21056] loop3: detected capacity change from 0 to 2048 [ 1773.322332][T21044] syzkaller0: entered promiscuous mode [ 1773.335896][T21044] syzkaller0: entered allmulticast mode [ 1773.382128][T21056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1773.818200][T14868] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1773.835693][ C0] vkms_vblank_simulate: vblank timer overrun [ 1774.899857][T21098] loop3: detected capacity change from 0 to 256 [ 1774.924080][T21098] FAT-fs (loop3): bogus logical sector size 128 [ 1774.938739][T21098] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1779.217699][T21105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3775'. [ 1779.231696][T21105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3775'. [ 1779.526901][T19874] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1779.908010][T21125] loop5: detected capacity change from 0 to 128 [ 1780.777634][T21167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3786'. [ 1780.850168][T21167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3786'. [ 1780.890784][ T1189] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1781.048658][T21170] syzkaller0: entered promiscuous mode [ 1781.062687][T21170] syzkaller0: entered allmulticast mode [ 1781.070838][ T1189] usb 6-1: Using ep0 maxpacket: 8 [ 1781.078264][ T1189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1781.103719][ T1189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1781.121125][ T1189] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1781.141266][ T1189] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1781.163104][ T1189] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1781.191144][ T1189] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1781.200281][ T1189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.234516][ T1189] usb 6-1: config 0 descriptor?? [ 1781.261849][T21163] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1781.572819][T19874] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 1781.583748][ T1189] usb 6-1: USB disconnect, device number 43 [ 1782.271024][T19874] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1783.380525][T17597] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1783.601129][T17597] usb 6-1: Using ep0 maxpacket: 32 [ 1783.640554][T17597] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1783.660590][T17597] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1783.678766][T17597] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1783.688540][T17597] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.721523][T17597] usb 6-1: config 0 descriptor?? [ 1783.735662][T17597] hub 6-1:0.0: USB hub found [ 1783.940963][T17597] hub 6-1:0.0: 1 port detected [ 1784.400749][T17597] usb 6-1: USB disconnect, device number 44 [ 1786.349685][T21219] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3796'. [ 1786.362264][T21219] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3796'. [ 1786.464714][T21223] Invalid ELF header len 59 [ 1786.522164][T19874] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1786.687569][T19874] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1788.424064][T21257] syzkaller0: entered promiscuous mode [ 1788.429687][T21257] syzkaller0: entered allmulticast mode [ 1788.529659][T21269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3807'. [ 1791.957868][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.968369][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.117616][T21269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3807'. [ 1793.643976][T19874] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1793.879890][T19874] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1794.245822][T21333] loop3: detected capacity change from 0 to 256 [ 1794.253099][T21332] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3817'. [ 1794.298882][T21333] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 1794.479063][T21332] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1794.488467][T21332] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1794.497298][T21332] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1794.506394][T21332] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1794.983657][T21332] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3817'. [ 1795.235021][T21339] syzkaller0: entered promiscuous mode [ 1795.283417][T21339] syzkaller0: entered allmulticast mode [ 1797.970879][ T5813] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1798.176616][ T5813] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1798.204880][ T5813] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1798.219764][ T5813] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1798.229495][ T5813] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.263294][ T5813] usb 9-1: config 0 descriptor?? [ 1798.273267][ T5813] hub 9-1:0.0: USB hub found [ 1798.488856][ T5813] hub 9-1:0.0: 1 port detected [ 1798.698799][ T5813] hub 9-1:0.0: hub_hub_status failed (err = -71) [ 1798.736062][ T5813] hub 9-1:0.0: config failed, can't get hub status (err -71) [ 1798.748886][ T5813] usbhid 9-1:0.0: can't add hid device: -71 [ 1798.764588][ T5813] usbhid: probe of 9-1:0.0 failed with error -71 [ 1798.810356][ T5813] usb 9-1: USB disconnect, device number 2 [ 1799.692021][ T786] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1799.958177][ T786] usb 9-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 1799.967418][ T786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.975563][ T786] usb 9-1: Product: syz [ 1799.979769][ T786] usb 9-1: Manufacturer: syz [ 1799.985010][ T786] usb 9-1: SerialNumber: syz [ 1800.178263][T21361] netlink: 'syz.5.3825': attribute type 10 has an invalid length. [ 1800.210834][ T786] snd-usb-audio: probe of 9-1:1.0 failed with error -71 [ 1800.241548][ T786] snd-usb-audio: probe of 9-1:1.1 failed with error -71 [ 1800.271072][ T786] snd-usb-audio: probe of 9-1:1.2 failed with error -71 [ 1800.292870][ T786] usb 9-1: USB disconnect, device number 3 [ 1803.401650][T21407] netlink: 'syz.1.3837': attribute type 10 has an invalid length. [ 1803.709239][T21415] loop8: detected capacity change from 0 to 1024 [ 1803.727161][T21415] EXT4-fs: Ignoring removed orlov option [ 1803.738337][T21413] syzkaller0: entered promiscuous mode [ 1803.750790][T14245] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 1803.780121][T21415] EXT4-fs (loop8): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1803.782297][T21413] syzkaller0: entered allmulticast mode [ 1803.843740][T21415] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1803.987339][ T27] audit: type=1800 audit(1779532432.876:84): pid=21415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3839" name="cgroup" dev="loop8" ino=18 res=0 errno=0 [ 1804.053189][T14245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1804.084937][T14245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1804.121284][ T27] audit: type=1800 audit(1779532433.026:85): pid=21415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3839" name="bus" dev="loop8" ino=19 res=0 errno=0 [ 1804.130949][T14245] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1804.221919][T14245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.262066][T14245] usb 4-1: config 0 descriptor?? [ 1804.602810][T20294] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1804.680375][T21404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1804.692616][T21404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1804.770359][T14245] elan 0003:04F3:0755.0045: unknown main item tag 0x0 [ 1804.777508][T14245] elan 0003:04F3:0755.0045: unknown main item tag 0x0 [ 1804.784545][T14245] elan 0003:04F3:0755.0045: unknown main item tag 0x0 [ 1804.808522][T14245] elan 0003:04F3:0755.0045: unknown main item tag 0x0 [ 1804.815996][T14245] elan 0003:04F3:0755.0045: unknown main item tag 0x0 [ 1804.824360][T14245] elan 0003:04F3:0755.0045: failed to start in urb: -90 [ 1804.853378][T14245] elan 0003:04F3:0755.0045: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1804.977643][T14245] usb 4-1: USB disconnect, device number 66 [ 1804.990525][T21436] fido_id[21436]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1810.998800][T21482] netlink: 'syz.8.3846': attribute type 10 has an invalid length. [ 1811.032965][T19874] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1811.083185][T21482] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1811.584060][T17597] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1811.792968][T17597] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1811.810531][T17597] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1811.821216][T17597] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1811.830581][T17597] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.852270][T17597] usb 6-1: config 0 descriptor?? [ 1812.248555][T21512] syzkaller0: entered promiscuous mode [ 1812.255593][T21512] syzkaller0: entered allmulticast mode [ 1812.264154][T21519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3856'. [ 1812.283355][T21490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1812.309210][T21490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1812.354092][T17597] elan 0003:04F3:0755.0046: unknown main item tag 0x0 [ 1812.372856][T17597] elan 0003:04F3:0755.0046: unknown main item tag 0x0 [ 1812.379996][T17597] elan 0003:04F3:0755.0046: unknown main item tag 0x0 [ 1812.392744][T17597] elan 0003:04F3:0755.0046: unknown main item tag 0x0 [ 1812.399614][T17597] elan 0003:04F3:0755.0046: unknown main item tag 0x0 [ 1812.447958][T17597] elan 0003:04F3:0755.0046: failed to start in urb: -90 [ 1812.463461][T17597] elan 0003:04F3:0755.0046: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1812.645847][T18956] usb 6-1: USB disconnect, device number 45 [ 1812.786781][T21525] fido_id[21525]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1818.857301][T21571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3867'. [ 1818.871111][T21569] input: syz1 as /devices/virtual/input/input21 [ 1819.630039][T21593] loop3: detected capacity change from 0 to 512 [ 1819.699886][T21593] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1819.731713][T19874] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1819.741310][T17598] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 1819.749164][T21593] EXT4-fs: Ignoring removed i_version option [ 1819.834700][T21593] EXT4-fs (loop3): 1 orphan inode deleted [ 1819.844570][T21593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1819.965442][T17598] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1820.004224][T17598] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1820.052944][T17598] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1820.088333][T17598] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.138513][T17598] usb 6-1: config 0 descriptor?? [ 1820.589767][T21582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1820.641163][T21582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.290330][T17598] elan 0003:04F3:0755.0047: unknown main item tag 0x0 [ 1821.297805][T17598] elan 0003:04F3:0755.0047: unknown main item tag 0x0 [ 1821.332314][T17598] elan 0003:04F3:0755.0047: unknown main item tag 0x0 [ 1821.361585][T17598] elan 0003:04F3:0755.0047: unknown main item tag 0x0 [ 1821.396267][T17598] elan 0003:04F3:0755.0047: unknown main item tag 0x0 [ 1821.443945][T17598] elan 0003:04F3:0755.0047: failed to start in urb: -90 [ 1821.461591][T17598] elan 0003:04F3:0755.0047: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1821.522635][T17598] usb 6-1: USB disconnect, device number 46 [ 1821.636991][T19874] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1821.693108][T21605] fido_id[21605]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1821.806534][T14868] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1822.489303][T21622] syzkaller0: entered promiscuous mode [ 1822.495796][T21622] syzkaller0: entered allmulticast mode [ 1822.817887][T19874] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1822.837136][T19874] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1823.150763][T14241] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 1823.344783][T14241] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1823.373080][T14241] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1823.395454][T14241] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1823.425253][T14241] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.439259][T14241] usb 6-1: config 0 descriptor?? [ 1823.860485][T21634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1823.888152][T21634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1823.906102][T19874] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1823.928132][T14241] elan 0003:04F3:0755.0048: unknown main item tag 0x0 [ 1823.945761][T14241] elan 0003:04F3:0755.0048: unknown main item tag 0x0 [ 1823.957528][T14241] elan 0003:04F3:0755.0048: unknown main item tag 0x0 [ 1823.964741][T14241] elan 0003:04F3:0755.0048: unknown main item tag 0x0 [ 1823.972391][T14241] elan 0003:04F3:0755.0048: unknown main item tag 0x0 [ 1823.988250][T14241] elan 0003:04F3:0755.0048: failed to start in urb: -90 [ 1823.997211][T14241] elan 0003:04F3:0755.0048: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1824.153049][ T786] usb 6-1: USB disconnect, device number 47 [ 1824.359211][T21668] syzkaller0: entered promiscuous mode [ 1824.366391][T21668] syzkaller0: entered allmulticast mode [ 1824.850103][T19874] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1824.932308][T19874] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1825.521494][T21689] syzkaller0: entered promiscuous mode [ 1825.533857][T21689] syzkaller0: entered allmulticast mode [ 1826.175480][ T5813] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1826.266720][T21648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1826.393404][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1826.420767][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1826.432415][ T5813] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1826.446653][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.478716][ T5813] usb 6-1: config 0 descriptor?? [ 1826.939899][T21693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.958497][T21693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.998703][ T5813] elan 0003:04F3:0755.0049: unknown main item tag 0x0 [ 1827.014076][ T5813] elan 0003:04F3:0755.0049: unknown main item tag 0x0 [ 1827.021927][ T5813] elan 0003:04F3:0755.0049: unknown main item tag 0x0 [ 1827.029893][ T5813] elan 0003:04F3:0755.0049: unknown main item tag 0x0 [ 1827.037325][ T5813] elan 0003:04F3:0755.0049: unknown main item tag 0x0 [ 1827.045636][ T5813] elan 0003:04F3:0755.0049: failed to start in urb: -90 [ 1827.071625][ T5813] elan 0003:04F3:0755.0049: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1827.249829][ T5813] usb 6-1: USB disconnect, device number 48 [ 1827.266688][ C0] vkms_vblank_simulate: vblank timer overrun [ 1829.860775][T15977] Bluetooth: hci2: command 0x0406 tx timeout [ 1830.074600][T19874] Bluetooth: hci2: unexpected event for opcode 0x007f [ 1830.212443][T19874] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1830.780810][ T5813] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 1831.009999][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1831.025788][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1831.040464][ T5813] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1831.066884][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.087924][ T5813] usb 4-1: config 0 descriptor?? [ 1831.220017][T21755] binder: 21754:21755 ioctl 541b 0 returned -22 [ 1831.453084][T21762] syzkaller0: entered promiscuous mode [ 1831.458697][T21762] syzkaller0: entered allmulticast mode [ 1831.522615][T21749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1831.561182][T21749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1831.588298][ T5813] elan 0003:04F3:0755.004A: unknown main item tag 0x0 [ 1831.623035][ T5813] elan 0003:04F3:0755.004A: unknown main item tag 0x0 [ 1831.629935][ T5813] elan 0003:04F3:0755.004A: unknown main item tag 0x0 [ 1831.646208][ T5813] elan 0003:04F3:0755.004A: unknown main item tag 0x0 [ 1831.653722][ T5813] elan 0003:04F3:0755.004A: unknown main item tag 0x0 [ 1831.661515][ T5813] elan 0003:04F3:0755.004A: failed to start in urb: -90 [ 1831.681320][ T5813] elan 0003:04F3:0755.004A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1831.701741][T19874] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1831.836534][T21774] loop8: detected capacity change from 0 to 128 [ 1831.860769][T17597] usb 4-1: USB disconnect, device number 67 [ 1831.884663][T21774] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1831.929707][T21771] fido_id[21771]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1832.010460][T21774] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1832.095317][T21774] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1832.139704][T21774] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1833.578703][T19874] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1833.682095][T21793] loop5: detected capacity change from 0 to 2048 [ 1833.723653][T21793] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1833.836329][T21793] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 1833.975007][T21782] fscrypt (loop8): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 1834.191870][T20294] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1834.591018][T17598] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1836.321105][T21824] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 1836.365181][T17598] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1836.372273][T14241] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 1836.389407][T21824] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 1836.403429][T17598] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 1836.423716][T21793] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 1836.437446][T17598] usb 4-1: string descriptor 0 read error: -22 [ 1836.446313][T17598] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 1836.471104][T17598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.603695][T14241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1836.623321][T14241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1836.653265][T14241] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1836.693499][T14241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.741788][T14241] usb 2-1: config 0 descriptor?? [ 1836.921288][T17598] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 1836.929940][T17598] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1837.167607][T21814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1837.192014][T21814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1837.219920][T17598] usb 4-1: USB disconnect, device number 68 [ 1837.258200][T14241] elan 0003:04F3:0755.004B: unknown main item tag 0x0 [ 1837.268276][T21577] udevd[21577]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such device [ 1837.309906][T14241] elan 0003:04F3:0755.004B: unknown main item tag 0x0 [ 1837.320831][T14241] elan 0003:04F3:0755.004B: unknown main item tag 0x0 [ 1837.340761][T14241] elan 0003:04F3:0755.004B: unknown main item tag 0x0 [ 1837.347637][T14241] elan 0003:04F3:0755.004B: unknown main item tag 0x0 [ 1837.391942][T14241] elan 0003:04F3:0755.004B: failed to start in urb: -90 [ 1837.413449][T14241] elan 0003:04F3:0755.004B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 1837.472832][ T786] usb 2-1: USB disconnect, device number 94 [ 1837.510401][T21829] loop5: detected capacity change from 0 to 164 [ 1837.803565][T21828] fido_id[21828]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1838.056260][T21837] input: syz1 as /devices/virtual/input/input22 [ 1838.270795][T19874] Bluetooth: hci2: command 0x0406 tx timeout [ 1839.820486][T21871] loop8: detected capacity change from 0 to 16 [ 1839.838436][T21871] erofs: (device loop8): mounted with root inode @ nid 36. [ 1839.864230][T21871] erofs: (device loop8): erofs_map_blocks_flatmode: internal error @ nid: 36 (size 18446462598732841076), m_la 0x100000000 [ 1839.950324][T21872] loop5: detected capacity change from 0 to 4096 [ 1839.968251][T21872] EXT4-fs: Ignoring removed nobh option [ 1839.993142][T21872] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1840.015980][T21872] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1840.025200][T21872] System zones: 0-5 [ 1840.037669][T21872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1840.050494][T17598] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 1840.236748][T21872] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1840.252950][T17598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1840.275044][T17598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1840.298090][T17598] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1840.312441][T17598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.332308][T17598] usb 2-1: config 0 descriptor?? [ 1840.396528][T11989] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1840.478017][T21890] loop3: detected capacity change from 0 to 164 [ 1840.748234][T21864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.778325][T21864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.890395][T17598] elan 0003:04F3:0755.004C: unknown main item tag 0x0 [ 1840.928320][T17598] elan 0003:04F3:0755.004C: unknown main item tag 0x0 [ 1840.990457][T17598] elan 0003:04F3:0755.004C: unknown main item tag 0x0 [ 1841.030763][T17598] elan 0003:04F3:0755.004C: unknown main item tag 0x0 [ 1841.084093][T17598] elan 0003:04F3:0755.004C: unknown main item tag 0x0 [ 1841.118784][T17598] elan 0003:04F3:0755.004C: failed to start in urb: -90 [ 1841.169523][T17598] elan 0003:04F3:0755.004C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 1841.228620][T17598] usb 2-1: USB disconnect, device number 95 [ 1841.353895][T21899] fido_id[21899]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1841.670828][T18958] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1841.862473][T18958] usb 4-1: not running at top speed; connect to a high speed hub [ 1841.929165][T18958] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 1841.976541][T18958] usb 4-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 1842.000014][T18958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.008924][T18958] usb 4-1: Product: syz [ 1842.013644][T18958] usb 4-1: Manufacturer: syz [ 1842.018649][T18958] usb 4-1: SerialNumber: syz [ 1842.302206][T18958] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1842.321296][T18958] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1842.399649][T21924] loop5: detected capacity change from 0 to 164 [ 1842.452595][T18958] usb 4-1: USB disconnect, device number 69 [ 1842.551854][T21586] udevd[21586]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1844.483657][T17597] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1844.723263][T17597] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1844.762399][T17597] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1844.782424][T19874] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1844.810774][T17597] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1844.867057][T17597] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.918681][T17597] usb 9-1: config 0 descriptor?? [ 1845.575656][T21939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1845.632744][T21939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1845.693848][T17597] elan 0003:04F3:0755.004D: unknown main item tag 0x0 [ 1845.725663][T17597] elan 0003:04F3:0755.004D: unknown main item tag 0x0 [ 1845.736554][T17597] elan 0003:04F3:0755.004D: unknown main item tag 0x0 [ 1845.746622][T17597] elan 0003:04F3:0755.004D: unknown main item tag 0x0 [ 1845.765226][T17597] elan 0003:04F3:0755.004D: unknown main item tag 0x0 [ 1845.780928][T17597] elan 0003:04F3:0755.004D: failed to start in urb: -90 [ 1845.800037][T17597] elan 0003:04F3:0755.004D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 1847.726331][ T5813] usb 9-1: USB disconnect, device number 4 [ 1849.587475][T21971] fido_id[21971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1851.275208][T22009] loop3: detected capacity change from 0 to 164 [ 1851.292302][T19874] Bluetooth: hci2: unexpected event for opcode 0x007f [ 1852.122588][ T5813] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 1852.210139][T22028] syz_tun: entered allmulticast mode [ 1852.218212][T22027] syz_tun: left allmulticast mode [ 1852.406282][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1852.423251][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1852.442439][ T5813] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1852.452099][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.463319][ T5813] usb 6-1: config 0 descriptor?? [ 1852.670728][ T786] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1852.692514][T18958] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1852.850727][ T786] usb 2-1: Using ep0 maxpacket: 8 [ 1852.863031][ T786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1852.873517][ T786] usb 2-1: config 0 has no interfaces? [ 1852.879126][ T786] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1852.890783][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.904046][T18958] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1852.912542][T22021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1852.921379][ T786] usb 2-1: config 0 descriptor?? [ 1852.928479][T18958] usb 4-1: not running at top speed; connect to a high speed hub [ 1852.938333][T22021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1852.963521][T18958] usb 4-1: config 202 has an invalid interface number: 121 but max is 0 [ 1852.977150][ T5813] elan 0003:04F3:0755.004E: unknown main item tag 0x0 [ 1852.985724][T18958] usb 4-1: config 202 has no interface number 0 [ 1852.993102][T18958] usb 4-1: config 202 interface 121 altsetting 4 has an invalid endpoint with address 0x9E, skipping [ 1853.004654][ T5813] elan 0003:04F3:0755.004E: unknown main item tag 0x0 [ 1853.013023][ T5813] elan 0003:04F3:0755.004E: unknown main item tag 0x0 [ 1853.020459][T18958] usb 4-1: config 202 interface 121 has no altsetting 0 [ 1853.027688][ T5813] elan 0003:04F3:0755.004E: unknown main item tag 0x0 [ 1853.039501][ T5813] elan 0003:04F3:0755.004E: unknown main item tag 0x0 [ 1853.048882][T18958] usb 4-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.05 [ 1853.059072][ T5813] elan 0003:04F3:0755.004E: failed to start in urb: -90 [ 1853.067221][T18958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.077245][T18958] usb 4-1: Product: syz [ 1853.083583][ T5813] elan 0003:04F3:0755.004E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1853.094945][T18958] usb 4-1: Manufacturer: syz [ 1853.099602][T18958] usb 4-1: SerialNumber: syz [ 1853.191300][ T786] usb 2-1: USB disconnect, device number 96 [ 1853.205966][ T5813] usb 6-1: USB disconnect, device number 49 [ 1853.339903][T18958] usb-storage 4-1:202.121: USB Mass Storage device detected [ 1853.373307][T18958] usb-storage 4-1:202.121: Quirks match for vid 05ab pid 0060: 2 [ 1853.389009][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.395800][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.450833][T18958] usb 4-1: USB disconnect, device number 70 [ 1855.097294][T22072] binder_alloc: 22071: binder_alloc_buf, no vma [ 1855.178999][T19874] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1856.031333][T18958] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 1856.369307][T18958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1856.668311][T18958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1856.679794][T18958] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1856.689288][T18958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.714906][T18958] usb 6-1: config 0 descriptor?? [ 1856.747157][T22096] loop8: detected capacity change from 0 to 1764 [ 1856.946507][T22098] netlink: 'syz.1.4028': attribute type 3 has an invalid length. [ 1857.004165][T22101] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1857.014074][T22098] netlink: 'syz.1.4028': attribute type 3 has an invalid length. [ 1857.287451][T22086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1857.409121][T22086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1857.546079][T18958] elan 0003:04F3:0755.004F: unknown main item tag 0x0 [ 1857.554377][T18958] elan 0003:04F3:0755.004F: unknown main item tag 0x0 [ 1857.571926][T18958] elan 0003:04F3:0755.004F: unknown main item tag 0x0 [ 1857.578891][T18958] elan 0003:04F3:0755.004F: unknown main item tag 0x0 [ 1857.586363][T18958] elan 0003:04F3:0755.004F: unknown main item tag 0x0 [ 1857.607046][T18958] elan 0003:04F3:0755.004F: failed to start in urb: -90 [ 1857.631300][T18958] elan 0003:04F3:0755.004F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1857.769507][T17597] usb 6-1: USB disconnect, device number 50 [ 1858.443406][T22130] loop5: detected capacity change from 0 to 164 [ 1859.398963][T19874] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1859.884038][T22104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1860.681595][T17598] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1860.908462][T17598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1861.019721][T17598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1861.135405][T17598] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1861.235343][T17598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.272782][T17598] usb 4-1: config 0 descriptor?? [ 1861.741672][T22154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1861.763922][T22154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1861.822321][T17598] elan 0003:04F3:0755.0050: unknown main item tag 0x0 [ 1861.829218][T17598] elan 0003:04F3:0755.0050: unknown main item tag 0x0 [ 1861.850770][T17598] elan 0003:04F3:0755.0050: unknown main item tag 0x0 [ 1861.857642][T17598] elan 0003:04F3:0755.0050: unknown main item tag 0x0 [ 1861.880903][T17598] elan 0003:04F3:0755.0050: unknown main item tag 0x0 [ 1861.901055][T17598] elan 0003:04F3:0755.0050: failed to start in urb: -90 [ 1861.931661][T17598] elan 0003:04F3:0755.0050: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1862.032773][ T5813] usb 4-1: USB disconnect, device number 71 [ 1862.105051][T22194] fido_id[22194]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1862.217141][T19874] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1862.949442][T22207] loop8: detected capacity change from 0 to 256 [ 1862.985637][T22207] FAT-fs (loop8): bogus logical sector size 128 [ 1863.012994][T22207] FAT-fs (loop8): Can't find a valid FAT filesystem [ 1864.322308][T22182] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1864.868617][T22236] loop5: detected capacity change from 0 to 2048 [ 1864.964491][T22236] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1865.011460][T17598] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1865.065447][T22236] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 1865.243262][T17598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1865.283997][T17598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1865.313521][T17598] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1865.333532][T17598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1865.361307][T19874] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1865.372181][T17598] usb 4-1: config 0 descriptor?? [ 1865.578328][T22238] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4066'. [ 1865.698118][T22238] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4066'. [ 1865.790074][T22231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1865.801186][T22231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1865.814251][T22238] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4066'. [ 1865.825490][T17598] elan 0003:04F3:0755.0051: unknown main item tag 0x0 [ 1865.860430][T17598] elan 0003:04F3:0755.0051: unknown main item tag 0x0 [ 1865.880748][T17598] elan 0003:04F3:0755.0051: unknown main item tag 0x0 [ 1865.887622][T17598] elan 0003:04F3:0755.0051: unknown main item tag 0x0 [ 1865.910866][T17598] elan 0003:04F3:0755.0051: unknown main item tag 0x0 [ 1865.918639][T17598] elan 0003:04F3:0755.0051: failed to start in urb: -90 [ 1865.961395][T17598] elan 0003:04F3:0755.0051: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1866.103027][ T5813] usb 4-1: USB disconnect, device number 72 [ 1867.052007][T22262] syzkaller0: entered promiscuous mode [ 1867.057581][T22262] syzkaller0: entered allmulticast mode [ 1867.453314][T22275] loop8: detected capacity change from 0 to 256 [ 1867.462711][T15977] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1867.484113][T15977] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1867.493899][T15977] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1867.503051][T15977] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1867.524862][T15977] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1867.532801][T15977] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1867.570661][T22275] FAT-fs (loop8): bogus logical sector size 128 [ 1867.577462][T22275] FAT-fs (loop8): Can't find a valid FAT filesystem [ 1867.886556][ T1004] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1867.980836][T19874] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1868.093462][ T1004] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1868.238386][ T1004] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1868.338285][ T1004] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1868.827819][T22277] chnl_net:caif_netlink_parms(): no params data found [ 1868.853599][ T1004] tipc: Left network mode [ 1869.314533][ T1004] ip6gretap0 (unregistering): left promiscuous mode [ 1869.433257][ T1004] bond1: (slave ip6gretap1): Releasing active interface [ 1869.486100][T22277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1869.516429][T22277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1869.536712][T22277] bridge_slave_0: entered allmulticast mode [ 1869.556105][T22277] bridge_slave_0: entered promiscuous mode [ 1869.572888][T22277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1869.590328][T22277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1869.610813][T18958] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1869.620305][T22277] bridge_slave_1: entered allmulticast mode [ 1869.621113][T19874] Bluetooth: hci1: command tx timeout [ 1869.678342][T22277] bridge_slave_1: entered promiscuous mode [ 1869.859805][T19874] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1869.920216][T22277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1869.942244][T18958] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1869.976709][T18958] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1869.992455][T22277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1870.032568][T18958] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1870.059223][T18958] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1870.096444][T18958] usb 9-1: config 0 descriptor?? [ 1870.121644][T22268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1870.434376][T22277] team0: Port device team_slave_0 added [ 1870.482282][T22277] team0: Port device team_slave_1 added [ 1870.608435][T22305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1870.617452][T22323] syzkaller0: entered promiscuous mode [ 1870.638935][T22323] syzkaller0: entered allmulticast mode [ 1870.659978][T22305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1870.702283][T18958] elan 0003:04F3:0755.0052: unknown main item tag 0x0 [ 1870.709155][T18958] elan 0003:04F3:0755.0052: unknown main item tag 0x0 [ 1870.740734][T18958] elan 0003:04F3:0755.0052: unknown main item tag 0x0 [ 1870.747614][T18958] elan 0003:04F3:0755.0052: unknown main item tag 0x0 [ 1870.755166][T18958] elan 0003:04F3:0755.0052: unknown main item tag 0x0 [ 1870.763299][T18958] elan 0003:04F3:0755.0052: failed to start in urb: -90 [ 1870.794902][T18958] elan 0003:04F3:0755.0052: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 1870.879360][T22277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1870.914258][T22277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1870.970957][T22277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1871.014431][T18958] usb 9-1: USB disconnect, device number 5 [ 1871.089514][T17598] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0 [ 1871.191634][T17598] hid-generic 0000:0000:0000.0053: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1871.319021][T22277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1871.351150][T22277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1871.396711][T22277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1872.403582][T22342] binder: BINDER_SET_CONTEXT_MGR already set [ 1872.409792][T22342] binder: 22340:22342 ioctl 4018620d 200000000040 returned -16 [ 1873.149691][T19874] Bluetooth: hci1: command tx timeout [ 1873.426692][T22277] hsr_slave_0: entered promiscuous mode [ 1873.517808][T22277] hsr_slave_1: entered promiscuous mode [ 1873.556149][T22277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1873.570683][T22277] Cannot create hsr debugfs directory [ 1874.664510][ T1004] bond0: left promiscuous mode [ 1874.669377][ T1004] bond_slave_0: left promiscuous mode [ 1874.675810][ T1004] bond_slave_1: left promiscuous mode [ 1874.681621][ T1004] dummy0: left promiscuous mode [ 1874.736356][ T1004] team0: left promiscuous mode [ 1874.745220][ T1004] team_slave_0: left promiscuous mode [ 1874.770331][ T1004] team_slave_1: left promiscuous mode [ 1874.849596][ T1004] bridge0: left promiscuous mode [ 1874.976007][ T1004] hsr_slave_0: left promiscuous mode [ 1875.058921][ T1004] hsr_slave_1: left promiscuous mode [ 1875.088802][T19874] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1875.101009][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1875.126814][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1875.181628][ T1004] bridge_slave_1: left allmulticast mode [ 1875.220720][T19874] Bluetooth: hci1: command tx timeout [ 1875.226345][ T1004] bridge_slave_1: left promiscuous mode [ 1875.233041][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1875.259258][ T1004] bridge_slave_0: left allmulticast mode [ 1875.265092][ T1004] bridge_slave_0: left promiscuous mode [ 1875.280885][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1875.374594][T22386] loop8: detected capacity change from 0 to 512 [ 1875.431787][T22386] EXT4-fs: Ignoring removed i_version option [ 1875.688887][T22386] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1875.767607][T22386] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1876.803209][ T1004] bond4 (unregistering): Released all slaves [ 1877.237122][T20294] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1877.311600][ C1] vkms_vblank_simulate: vblank timer overrun [ 1877.334121][T19874] Bluetooth: hci1: command tx timeout [ 1877.343721][ T1004] bond3 (unregistering): Released all slaves [ 1877.540686][T22370] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1879.582421][ T1004] bond2 (unregistering): Released all slaves [ 1879.631045][T14241] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1879.858650][T14241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1879.906079][T14241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1879.928571][T14241] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1879.958132][T14241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.969868][T14241] usb 4-1: config 0 descriptor?? [ 1880.238463][ C1] vkms_vblank_simulate: vblank timer overrun [ 1880.285018][T22417] loop8: detected capacity change from 0 to 1024 [ 1880.299912][T22417] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1880.350787][T22417] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1880.380649][T22417] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1880.392990][T22417] EXT4-fs error (device loop8): ext4_ext_check_inode:530: inode #3: comm syz.8.4098: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1880.407309][ C1] vkms_vblank_simulate: vblank timer overrun [ 1880.422748][T22417] EXT4-fs (loop8): no journal found [ 1880.428040][T22417] EXT4-fs (loop8): can't get journal size [ 1880.443140][ T1004] bond1 (unregistering): Released all slaves [ 1880.449373][T22404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1880.460103][T22417] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1880.472655][T22404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1880.486041][T14241] elan 0003:04F3:0755.0054: unknown main item tag 0x0 [ 1880.498409][T14241] elan 0003:04F3:0755.0054: unknown main item tag 0x0 [ 1880.505419][T14241] elan 0003:04F3:0755.0054: unknown main item tag 0x0 [ 1880.512741][T14241] elan 0003:04F3:0755.0054: unknown main item tag 0x0 [ 1880.519627][T14241] elan 0003:04F3:0755.0054: unknown main item tag 0x0 [ 1880.527593][T14241] elan 0003:04F3:0755.0054: failed to start in urb: -90 [ 1880.551927][T14241] elan 0003:04F3:0755.0054: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1880.621170][ C1] vkms_vblank_simulate: vblank timer overrun [ 1880.719800][T17598] usb 4-1: USB disconnect, device number 73 [ 1880.873092][T22419] fido_id[22419]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1881.392267][T17598] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1881.591879][T17598] usb 2-1: device descriptor read/64, error -71 [ 1881.806997][T20294] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1881.887972][T17598] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1882.071015][T17598] usb 2-1: device descriptor read/64, error -71 [ 1882.193982][T17598] usb usb2-port1: attempt power cycle [ 1882.309963][ T1004] team0 (unregistering): Port device team_slave_1 removed [ 1882.401728][ T1004] team0 (unregistering): Port device team_slave_0 removed [ 1882.485240][ T1004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1882.564481][ T1004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1882.640558][T17598] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1882.684773][T17598] usb 2-1: device descriptor read/8, error -71 [ 1882.991776][T17598] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1883.057096][T17598] usb 2-1: device descriptor read/8, error -71 [ 1883.140942][ T1004] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1883.187904][T17598] usb usb2-port1: unable to enumerate USB device [ 1883.249903][ T1004] bond0 (unregistering): Released all slaves [ 1885.361178][T22436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1886.110681][T17598] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1886.323444][T17598] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1886.338028][T17598] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1886.374165][T17598] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1886.398416][T17598] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1886.424904][T17598] usb 9-1: config 0 descriptor?? [ 1886.507848][ T1004] IPVS: stop unused estimator thread 0... [ 1886.846660][T22460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1886.855703][T22277] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1886.882285][T22460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1886.905580][T17598] elan 0003:04F3:0755.0055: unknown main item tag 0x0 [ 1886.927662][T22277] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1886.948059][T17598] elan 0003:04F3:0755.0055: unknown main item tag 0x0 [ 1886.966454][T17598] elan 0003:04F3:0755.0055: unknown main item tag 0x0 [ 1886.980010][T22277] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1886.990483][T17598] elan 0003:04F3:0755.0055: unknown main item tag 0x0 [ 1887.004427][T17598] elan 0003:04F3:0755.0055: unknown main item tag 0x0 [ 1887.016588][T22277] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1887.032171][T17598] elan 0003:04F3:0755.0055: failed to start in urb: -90 [ 1887.059357][T17598] elan 0003:04F3:0755.0055: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 1887.154386][T17598] usb 9-1: USB disconnect, device number 6 [ 1887.290079][T22487] fido_id[22487]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1887.379174][T22277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1887.490509][T22277] 8021q: adding VLAN 0 to HW filter on device team0 [ 1887.527645][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1887.535454][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1887.596047][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1887.603318][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1890.157538][T22526] loop8: detected capacity change from 0 to 1024 [ 1890.169817][T22277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1890.235418][T22526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1890.336049][ T27] audit: type=1800 audit(1779532519.236:86): pid=22526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4120" name="file1" dev="loop8" ino=839 res=0 errno=0 [ 1892.915118][T22277] veth0_vlan: entered promiscuous mode [ 1892.974147][T22277] veth1_vlan: entered promiscuous mode [ 1893.025293][T22277] veth0_macvtap: entered promiscuous mode [ 1893.052850][T22277] veth1_macvtap: entered promiscuous mode [ 1893.083331][T22277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1893.098385][T22277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.116176][T22277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1893.129600][T22277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.167365][T22277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1893.191825][T19874] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1893.200486][T22277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1893.246094][T22277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.289672][T22277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1893.305136][T22277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.327158][T22277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1893.375046][T22277] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1893.401570][T22277] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1893.420778][T22277] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1893.429556][T22277] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1893.694634][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1893.726407][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1893.795293][T10015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1893.815973][T10015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1894.135943][T22582] loop3: detected capacity change from 0 to 512 [ 1894.176799][T22582] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1894.247145][T22582] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.4127: corrupted in-inode xattr: e_value out of bounds [ 1894.303670][T22582] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.4127: couldn't read orphan inode 15 (err -117) [ 1894.379882][T22582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1895.163911][T17598] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1895.325842][T22592] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1895.400514][T22604] syz_tun: entered allmulticast mode [ 1895.512355][T22580] syz_tun: left allmulticast mode [ 1895.582095][T17598] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1895.606106][T14868] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1895.621196][T17598] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1895.632728][T17598] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1895.643124][T17598] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.659659][ C1] vkms_vblank_simulate: vblank timer overrun [ 1895.685600][T17598] usb 9-1: config 0 descriptor?? [ 1895.766544][ T27] audit: type=1326 audit(1779532524.666:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22614 comm="syz.1.4132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727df9ce59 code=0x7ffc0000 [ 1895.860994][ T27] audit: type=1326 audit(1779532524.666:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22614 comm="syz.1.4132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727df9ce59 code=0x7ffc0000 [ 1895.956019][ T27] audit: type=1326 audit(1779532524.666:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22614 comm="syz.1.4132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727df9ce59 code=0x7ffc0000 [ 1895.980120][ C1] vkms_vblank_simulate: vblank timer overrun [ 1896.056522][ T27] audit: type=1326 audit(1779532524.666:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22614 comm="syz.1.4132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727df9ce59 code=0x7ffc0000 [ 1896.133153][T22587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1896.199963][ T27] audit: type=1326 audit(1779532524.666:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22614 comm="syz.1.4132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727df9ce59 code=0x7ffc0000 [ 1896.202628][T22587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1896.308914][ T27] audit: type=1326 audit(1779532524.696:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22614 comm="syz.1.4132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f727df9ce59 code=0x7ffc0000 [ 1896.368048][T22633] loop5: detected capacity change from 0 to 2048 [ 1896.375466][ T27] audit: type=1326 audit(1779532524.696:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22614 comm="syz.1.4132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727df9ce59 code=0x7ffc0000 [ 1896.422961][T17598] elan 0003:04F3:0755.0056: unknown main item tag 0x0 [ 1896.429843][T17598] elan 0003:04F3:0755.0056: unknown main item tag 0x0 [ 1896.445715][T22633] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1896.480773][ T27] audit: type=1326 audit(1779532524.696:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22614 comm="syz.1.4132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727df9ce59 code=0x7ffc0000 [ 1896.500985][T17598] elan 0003:04F3:0755.0056: unknown main item tag 0x0 [ 1896.541384][T17598] elan 0003:04F3:0755.0056: unknown main item tag 0x0 [ 1898.143275][T17598] elan 0003:04F3:0755.0056: unknown main item tag 0x0 [ 1898.151431][T17598] elan 0003:04F3:0755.0056: failed to start in urb: -90 [ 1898.183152][T17598] elan 0003:04F3:0755.0056: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 1898.253289][ T27] audit: type=1326 audit(1779532524.696:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22614 comm="syz.1.4132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727df9ce59 code=0x7ffc0000 [ 1898.277331][ C1] vkms_vblank_simulate: vblank timer overrun [ 1898.366508][ T27] audit: type=1326 audit(1779532524.696:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22614 comm="syz.1.4132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f727df9ce59 code=0x7ffc0000 [ 1898.421432][T18956] usb 9-1: USB disconnect, device number 7 [ 1898.610274][T22644] fido_id[22644]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1898.681135][T22649] loop8: detected capacity change from 0 to 512 [ 1898.750734][T22649] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1898.876214][T22649] EXT4-fs error (device loop8): ext4_iget_extra_inode:4739: inode #15: comm syz.8.4141: corrupted in-inode xattr: e_value out of bounds [ 1898.968099][T22649] EXT4-fs error (device loop8): ext4_orphan_get:1409: comm syz.8.4141: couldn't read orphan inode 15 (err -117) [ 1899.042263][T22649] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1899.186354][T22649] syz_tun: entered allmulticast mode [ 1899.229224][T22648] syz_tun: left allmulticast mode [ 1899.333851][T20294] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1899.350157][T22672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4147'. [ 1899.585705][T22672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4147'. [ 1900.128570][T17598] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 1900.337607][T22705] loop8: detected capacity change from 0 to 256 [ 1900.366693][T17598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1900.381768][T22705] exfat: Deprecated parameter 'utf8' [ 1900.418615][T17598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1900.430941][T22705] exfat: Deprecated parameter 'namecase' [ 1900.451131][T17598] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1900.476054][T17598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.513613][T17598] usb 2-1: config 0 descriptor?? [ 1900.519086][T22705] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1900.945051][T22686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1900.993633][T22686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1901.024811][T17598] elan 0003:04F3:0755.0057: unknown main item tag 0x0 [ 1901.041694][T17598] elan 0003:04F3:0755.0057: unknown main item tag 0x0 [ 1901.054943][T17598] elan 0003:04F3:0755.0057: unknown main item tag 0x0 [ 1901.063390][T17598] elan 0003:04F3:0755.0057: unknown main item tag 0x0 [ 1901.070258][T17598] elan 0003:04F3:0755.0057: unknown main item tag 0x0 [ 1901.078581][T17598] elan 0003:04F3:0755.0057: failed to start in urb: -90 [ 1901.089466][T17598] elan 0003:04F3:0755.0057: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 1901.110031][T22727] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4159'. [ 1901.145539][T22727] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4159'. [ 1901.261322][T17598] usb 2-1: USB disconnect, device number 101 [ 1901.358247][T22730] fido_id[22730]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1901.635813][T22745] loop3: detected capacity change from 0 to 8 [ 1901.670276][T22745] SQUASHFS error: Failed to read block 0xffffff: -5 [ 1901.716674][T22745] unable to read xattr id index table [ 1901.796474][T22749] loop5: detected capacity change from 0 to 512 [ 1901.854252][T22745] loop3: detected capacity change from 0 to 256 [ 1901.881530][T22745] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1901.903307][T22749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1901.921420][T22749] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1901.961937][T22745] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1901.990720][T22745] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1902.008448][T22745] UDF-fs: Scanning with blocksize 512 failed [ 1902.052668][T22745] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1902.123845][T22745] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1902.442365][T22277] EXT4-fs error (device loop5): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 1902.476810][T22766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4169'. [ 1902.505497][T22277] EXT4-fs error (device loop5): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 1902.584211][T22766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4169'. [ 1902.921977][T22277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1903.194646][T20003] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.258487][T22788] kvm: user requested TSC rate below hardware speed [ 1903.396315][T20003] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.460810][ T5813] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1903.499182][T20003] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.644265][T20003] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.662848][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1903.683198][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1903.701382][ T5813] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1903.711086][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.723992][ T5813] usb 4-1: config 0 descriptor?? [ 1904.168882][T22782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1904.194988][T22782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1904.326041][ T5813] elan 0003:04F3:0755.0058: unknown main item tag 0x0 [ 1904.335711][ T5813] elan 0003:04F3:0755.0058: unknown main item tag 0x0 [ 1904.348074][ T5813] elan 0003:04F3:0755.0058: unknown main item tag 0x0 [ 1904.356049][ T5813] elan 0003:04F3:0755.0058: unknown main item tag 0x0 [ 1904.363820][ T5813] elan 0003:04F3:0755.0058: unknown main item tag 0x0 [ 1904.371944][ T5813] elan 0003:04F3:0755.0058: failed to start in urb: -90 [ 1904.388785][ T5813] elan 0003:04F3:0755.0058: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1904.957935][T15977] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1904.969635][T15977] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1904.978215][T15977] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1904.990533][T15977] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1905.008896][T15977] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1905.016717][T15977] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1905.121983][ T5813] usb 4-1: USB disconnect, device number 74 [ 1905.267785][T22811] fido_id[22811]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1905.313204][T22810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4184'. [ 1905.341004][T22810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4184'. [ 1907.244989][T19874] Bluetooth: hci1: command tx timeout [ 1908.201037][T22859] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4194'. [ 1908.329413][T22859] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4194'. [ 1908.936414][T22807] chnl_net:caif_netlink_parms(): no params data found [ 1909.119002][T22890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4202'. [ 1909.147039][T22890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4202'. [ 1909.157397][ T5813] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 1909.301146][T19874] Bluetooth: hci1: command tx timeout [ 1909.354527][ T5813] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1909.392877][ T5813] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1909.418736][ T5813] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1909.428466][ T5813] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.492899][ T5813] usb 9-1: config 0 descriptor?? [ 1909.514279][T22807] bridge0: port 1(bridge_slave_0) entered blocking state [ 1909.539510][T22807] bridge0: port 1(bridge_slave_0) entered disabled state [ 1909.556273][T22807] bridge_slave_0: entered allmulticast mode [ 1909.592686][T22807] bridge_slave_0: entered promiscuous mode [ 1909.642930][T20003] hsr_slave_0: left promiscuous mode [ 1909.649434][T20003] hsr_slave_1: left promiscuous mode [ 1909.662751][T20003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1909.678437][T20003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1909.687111][T20003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1909.701168][T20003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1909.718842][T20003] bridge_slave_1: left allmulticast mode [ 1909.727182][T20003] bridge_slave_1: left promiscuous mode [ 1909.736795][T20003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1909.756938][T20003] bridge_slave_0: left allmulticast mode [ 1909.767853][T20003] bridge_slave_0: left promiscuous mode [ 1909.777330][T20003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1909.878215][T20003] veth1_macvtap: left promiscuous mode [ 1909.897867][T20003] veth0_macvtap: left promiscuous mode [ 1909.914986][T22873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1909.915275][T20003] veth1_vlan: left promiscuous mode [ 1909.935761][T22873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1909.949743][ T5813] elan 0003:04F3:0755.0059: unknown main item tag 0x0 [ 1909.957014][ T5813] elan 0003:04F3:0755.0059: unknown main item tag 0x0 [ 1909.971514][T20003] veth0_vlan: left promiscuous mode [ 1909.973262][ T5813] elan 0003:04F3:0755.0059: unknown main item tag 0x0 [ 1910.006786][ T5813] elan 0003:04F3:0755.0059: unknown main item tag 0x0 [ 1910.021507][ T5813] elan 0003:04F3:0755.0059: unknown main item tag 0x0 [ 1910.047101][ T5813] elan 0003:04F3:0755.0059: failed to start in urb: -90 [ 1910.072521][ T5813] elan 0003:04F3:0755.0059: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 1910.170082][ T5813] usb 9-1: USB disconnect, device number 8 [ 1910.274819][T22921] fido_id[22921]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1911.244918][T20003] team0 (unregistering): Port device team_slave_1 removed [ 1911.328637][T20003] team0 (unregistering): Port device team_slave_0 removed [ 1911.380886][T19874] Bluetooth: hci1: command tx timeout [ 1911.405337][T20003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1911.478283][T20003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1911.951144][T22884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1912.146386][T20003] bond0 (unregistering): Released all slaves [ 1912.324480][T22807] bridge0: port 2(bridge_slave_1) entered blocking state [ 1912.332052][T22807] bridge0: port 2(bridge_slave_1) entered disabled state [ 1912.339260][T22807] bridge_slave_1: entered allmulticast mode [ 1912.348536][T22807] bridge_slave_1: entered promiscuous mode [ 1912.447234][T22915] syzkaller0: entered promiscuous mode [ 1912.453052][T22915] syzkaller0: entered allmulticast mode [ 1913.410874][T18956] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1913.464102][T19874] Bluetooth: hci1: command tx timeout [ 1913.613830][T18956] usb 9-1: Using ep0 maxpacket: 32 [ 1913.633549][T18956] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1913.648313][T18956] usb 9-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1913.658771][T18956] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.675652][T18956] usb 9-1: Product: syz [ 1913.679891][T18956] usb 9-1: Manufacturer: syz [ 1913.685058][T18956] usb 9-1: SerialNumber: syz [ 1913.713722][T18956] usb 9-1: config 0 descriptor?? [ 1913.732980][T18956] usb 9-1: Quirk or no altest; falling back to MIDI 1.0 [ 1913.767672][T18956] snd-usb-audio: probe of 9-1:0.0 failed with error -2 [ 1913.799438][T21577] udevd[21577]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1914.851298][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.889494][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.255150][T18956] usb 9-1: USB disconnect, device number 9 [ 1916.803042][T18956] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 1917.031584][T18956] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1917.047391][T18956] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1917.057472][T18956] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1917.066805][T18956] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.094405][T18956] usb 9-1: config 0 descriptor?? [ 1917.126047][T22807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1917.158639][T22933] syzkaller0: entered promiscuous mode [ 1917.170765][T22933] syzkaller0: entered allmulticast mode [ 1917.196851][T22807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1917.390882][T22807] team0: Port device team_slave_0 added [ 1917.414034][T22807] team0: Port device team_slave_1 added [ 1917.498919][T22807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1917.507114][T22955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1917.519128][T22807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1917.537057][T22955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1917.557985][T22807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1917.592830][T22807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1917.599938][T22807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1917.609639][T18956] elan 0003:04F3:0755.005A: unknown main item tag 0x0 [ 1917.633157][T22807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1917.656386][T18956] elan 0003:04F3:0755.005A: unknown main item tag 0x0 [ 1917.666595][T18956] elan 0003:04F3:0755.005A: unknown main item tag 0x0 [ 1917.679082][T18956] elan 0003:04F3:0755.005A: unknown main item tag 0x0 [ 1917.688826][T18956] elan 0003:04F3:0755.005A: unknown main item tag 0x0 [ 1917.706778][T18956] elan 0003:04F3:0755.005A: failed to start in urb: -90 [ 1917.730295][T18956] elan 0003:04F3:0755.005A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 1917.767525][T22807] hsr_slave_0: entered promiscuous mode [ 1917.781186][T22807] hsr_slave_1: entered promiscuous mode [ 1917.798405][ T786] usb 9-1: USB disconnect, device number 10 [ 1919.980335][T22985] syzkaller0: entered promiscuous mode [ 1919.986225][T22985] syzkaller0: entered allmulticast mode [ 1920.257185][T22958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1920.286744][T22807] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1920.346632][T22807] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1920.434123][T22807] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1920.450414][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1920.450430][ T27] audit: type=1326 audit(1779532549.346:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22989 comm="syz.8.4225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442399ce59 code=0x7ffc0000 [ 1920.529337][T22807] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1920.560753][ T27] audit: type=1326 audit(1779532549.386:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22989 comm="syz.8.4225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442399ce59 code=0x7ffc0000 [ 1920.641182][ T27] audit: type=1326 audit(1779532549.406:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22989 comm="syz.8.4225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f442399ce59 code=0x7ffc0000 [ 1920.728554][ T27] audit: type=1326 audit(1779532549.406:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22989 comm="syz.8.4225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442399ce59 code=0x7ffc0000 [ 1920.825649][ T27] audit: type=1326 audit(1779532549.406:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22989 comm="syz.8.4225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442399ce59 code=0x7ffc0000 [ 1920.863535][T22807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1920.905508][ T27] audit: type=1326 audit(1779532549.406:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22989 comm="syz.8.4225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f442399ce59 code=0x7ffc0000 [ 1920.912211][T23004] netlink: 'syz.1.4228': attribute type 1 has an invalid length. [ 1920.953398][T14241] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1921.000375][ T27] audit: type=1326 audit(1779532549.406:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22989 comm="syz.8.4225" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442399ce59 code=0x7ffc0000 [ 1921.054146][T23004] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1921.099175][T23007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4228'. [ 1921.162136][T14241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1921.181401][T14241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1921.192161][T22807] 8021q: adding VLAN 0 to HW filter on device team0 [ 1921.198915][T14241] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1921.208916][T14241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1921.228355][T14241] usb 4-1: config 0 descriptor?? [ 1921.251211][T10015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1921.258456][T10015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1921.343739][T10015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1921.350995][T10015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1921.504057][T23017] syzkaller0: entered promiscuous mode [ 1921.509647][T23017] syzkaller0: entered allmulticast mode [ 1921.693033][T22992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1921.735496][T22992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1921.768332][T14241] elan 0003:04F3:0755.005B: unknown main item tag 0x0 [ 1921.795196][T14241] elan 0003:04F3:0755.005B: unknown main item tag 0x0 [ 1921.820948][T14241] elan 0003:04F3:0755.005B: unknown main item tag 0x0 [ 1921.828281][T14241] elan 0003:04F3:0755.005B: unknown main item tag 0x0 [ 1921.845364][T14241] elan 0003:04F3:0755.005B: unknown main item tag 0x0 [ 1921.858354][T14241] elan 0003:04F3:0755.005B: failed to start in urb: -90 [ 1921.894482][T14241] elan 0003:04F3:0755.005B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1922.043544][T14241] usb 4-1: USB disconnect, device number 75 [ 1922.129251][T23028] fido_id[23028]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1922.183376][T22807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1922.487535][T23052] netlink: 'syz.1.4237': attribute type 1 has an invalid length. [ 1922.542435][T23052] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1922.552357][T23054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4237'. [ 1922.577335][T23054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1922.584699][T23054] bridge0: port 2(bridge_slave_1) entered listening state [ 1922.592232][T23054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1922.599445][T23054] bridge0: port 1(bridge_slave_0) entered listening state [ 1922.789920][T23059] loop3: detected capacity change from 0 to 2048 [ 1922.820116][T22807] veth0_vlan: entered promiscuous mode [ 1922.829670][T23059] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1922.873963][T23059] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 1922.878847][T22807] veth1_vlan: entered promiscuous mode [ 1923.002578][T22807] veth0_macvtap: entered promiscuous mode [ 1923.030243][T22807] veth1_macvtap: entered promiscuous mode [ 1923.117469][T22807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1923.129344][T22807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1923.144142][T22807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1923.154806][T22807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1923.166936][T22807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1923.185350][T23069] syzkaller0: entered promiscuous mode [ 1923.192772][T23069] syzkaller0: entered allmulticast mode [ 1923.202648][T22807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1923.218126][T22807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1923.229003][T22807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1923.239930][T22807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1923.254334][T22807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1923.286931][T22807] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.297350][T22807] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.317025][T22807] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.327009][T22807] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.085303][T23030] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1925.331341][T10016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1925.339257][T10016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1925.436436][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1925.471231][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1925.920958][T22820] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 1926.084117][T23099] loop9: detected capacity change from 0 to 512 [ 1926.107964][T23097] loop3: detected capacity change from 0 to 2048 [ 1926.134828][T23099] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1926.162014][T22820] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1926.248100][T23097] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1926.264547][T22820] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1926.302847][T23099] EXT4-fs (loop9): 1 truncate cleaned up [ 1926.309974][T23099] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1926.331494][T22820] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1926.359540][T23097] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 1926.376766][T22820] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.443002][T22820] usb 9-1: config 0 descriptor?? [ 1926.749310][T22807] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1926.764713][T23108] syzkaller0: entered promiscuous mode [ 1926.773887][T23108] syzkaller0: entered allmulticast mode [ 1926.872510][T23078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1926.897561][T23078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1928.027293][T22820] elan 0003:04F3:0755.005C: unknown main item tag 0x0 [ 1928.034223][T22820] elan 0003:04F3:0755.005C: unknown main item tag 0x0 [ 1928.041662][T22820] elan 0003:04F3:0755.005C: unknown main item tag 0x0 [ 1928.048533][T22820] elan 0003:04F3:0755.005C: unknown main item tag 0x0 [ 1928.056213][T22820] elan 0003:04F3:0755.005C: unknown main item tag 0x0 [ 1928.072063][T22820] elan 0003:04F3:0755.005C: failed to start in urb: -90 [ 1928.101634][T22820] elan 0003:04F3:0755.005C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 1928.238926][T22820] usb 9-1: USB disconnect, device number 11 [ 1928.336967][T23116] fido_id[23116]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1930.534776][T23136] loop8: detected capacity change from 0 to 2048 [ 1930.559453][T23136] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1932.010195][T23119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1932.456095][T23157] syzkaller0: entered promiscuous mode [ 1932.470604][T23157] syzkaller0: entered allmulticast mode [ 1932.838372][T23166] loop9: detected capacity change from 0 to 16 [ 1932.909557][T23166] erofs: (device loop9): mounted with root inode @ nid 36. [ 1936.980845][T22820] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1937.588721][T23202] loop3: detected capacity change from 0 to 2048 [ 1937.669492][T23202] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1937.948997][T23207] syzkaller0: entered promiscuous mode [ 1937.980689][T23207] syzkaller0: entered allmulticast mode [ 1943.280757][T23221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1944.364158][T23250] loop3: detected capacity change from 0 to 2048 [ 1944.424574][T23250] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1946.963754][T23269] loop3: detected capacity change from 0 to 512 [ 1947.006202][T23269] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1947.072763][T23269] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.4286: corrupted in-inode xattr: e_value out of bounds [ 1947.155343][T23269] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.4286: couldn't read orphan inode 15 (err -117) [ 1947.315047][T23269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1947.524774][T23289] syz_tun: entered allmulticast mode [ 1948.654101][T23268] syz_tun: left allmulticast mode [ 1948.782770][ T786] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 1948.827432][T14868] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1949.027563][ T786] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1949.049301][ T786] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1949.069987][ T786] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1949.104126][ T786] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.127770][ T786] usb 9-1: config 0 descriptor?? [ 1949.367752][T23306] syzkaller0: entered promiscuous mode [ 1949.390957][T23306] syzkaller0: entered allmulticast mode [ 1949.517453][T23310] loop3: detected capacity change from 0 to 2048 [ 1949.549516][T23284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1949.584523][T23310] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1949.601133][T23284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1949.638819][ T786] elan 0003:04F3:0755.005D: unknown main item tag 0x0 [ 1949.666432][ T786] elan 0003:04F3:0755.005D: unknown main item tag 0x0 [ 1949.693923][ T786] elan 0003:04F3:0755.005D: unknown main item tag 0x0 [ 1949.723554][ T786] elan 0003:04F3:0755.005D: unknown main item tag 0x0 [ 1949.745759][ T786] elan 0003:04F3:0755.005D: unknown main item tag 0x0 [ 1949.771499][ T786] elan 0003:04F3:0755.005D: failed to start in urb: -90 [ 1949.824630][ T786] elan 0003:04F3:0755.005D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 1949.905521][ T786] usb 9-1: USB disconnect, device number 12 [ 1949.958768][T23315] loop9: detected capacity change from 0 to 1024 [ 1950.067113][T23315] hfsplus: invalid extended attribute record [ 1950.216157][T23314] fido_id[23314]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1950.336742][T13484] hfsplus: b-tree write err: -5, ino 25 [ 1950.381587][T13484] hfsplus: b-tree write err: -5, ino 4 [ 1950.404196][T13484] hfsplus: b-tree write err: -5, ino 2 [ 1950.440473][T13484] hfsplus: b-tree write err: -5, ino 26 [ 1953.221287][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1953.228688][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1953.597230][T23330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1953.866505][T23365] loop8: detected capacity change from 0 to 256 [ 1954.276818][T23374] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1955.248717][T23391] tipc: Enabling of bearer rejected, failed to enable media [ 1956.913807][ T786] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1957.113043][ T786] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1957.128864][ T786] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1957.166892][T23391] syzkaller0: entered promiscuous mode [ 1957.181148][ T786] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1957.200760][ T786] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.227101][ T786] usb 9-1: config 0 descriptor?? [ 1957.232310][T23391] syzkaller0: entered allmulticast mode [ 1957.656762][T23387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1957.684440][T23387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1957.729770][ T786] elan 0003:04F3:0755.005E: unknown main item tag 0x0 [ 1957.743481][ T786] elan 0003:04F3:0755.005E: unknown main item tag 0x0 [ 1957.770739][ T786] elan 0003:04F3:0755.005E: unknown main item tag 0x0 [ 1957.787933][ T786] elan 0003:04F3:0755.005E: unknown main item tag 0x0 [ 1957.809927][ T786] elan 0003:04F3:0755.005E: unknown main item tag 0x0 [ 1957.828033][ T786] elan 0003:04F3:0755.005E: failed to start in urb: -90 [ 1957.867000][ T786] elan 0003:04F3:0755.005E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 1957.962734][ T7333] usb 9-1: USB disconnect, device number 13 [ 1958.085532][T23407] fido_id[23407]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1958.095877][ C1] vkms_vblank_simulate: vblank timer overrun [ 1976.281058][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.287474][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1983.300720][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1983.308035][ C1] bridge0: topology change detected, propagating [ 1983.314936][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1983.322259][ C1] bridge0: topology change detected, propagating [ 2029.540778][T15977] Bluetooth: hci1: command 0x0406 tx timeout [ 2037.718693][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.726218][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.146737][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.153241][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.587467][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.594049][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.028410][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.034977][ T1282] ieee802154 phy1 wpan1: encryption failed: -22