last executing test programs: 15m41.36255559s ago: executing program 0 (id=325): syz_mount_image$fuse(0x0, &(0x7f0000001a40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffffb0802dee, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f0000000100)=""/134, 0x86) 15m40.532781818s ago: executing program 0 (id=326): socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000015c0)='illinois', 0x8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x42, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES8=r8], 0x7) 15m40.488972439s ago: executing program 0 (id=327): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2ced, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x70, 0x6, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0xff, 0xa, 0x1, {0x22, 0xd24}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x8, 0x62}}}}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x2c3, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x2a, 0xb7, 0xfb, 0x40, 0x413c, 0x81a9, 0xeb17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b1, 0x2, 0x0, 0xa6, 0x50, 0x1}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0ec4720000000000010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000"], 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e61b3a40fd080200"], 0x0) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x541b, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) 15m38.618652572s ago: executing program 0 (id=344): socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000015c0)='illinois', 0x8) socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES8=r8], 0x7) 15m38.431032326s ago: executing program 0 (id=346): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24", 0x37}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)='1', 0x1}], 0x1}}], 0x2, 0x4) sendmmsg$inet_sctp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000540)="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", 0x222}], 0x1, 0x0, 0x0, 0x44010}], 0x1, 0x10) 15m38.26509274s ago: executing program 0 (id=348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x42) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000f00fdc6c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000003000000", 0xfdd0}], 0x1}, 0x4005) 15m23.038120217s ago: executing program 32 (id=348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x42) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000f00fdc6c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000003000000", 0xfdd0}], 0x1}, 0x4005) 14m20.406849777s ago: executing program 3 (id=648): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f00000006c0)=0x1, 0xcb) shutdown(r0, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(rfc4309(ccm_base(xchacha20-simd,blake2s-256-arm)),digest_n'}, 0x58) r2 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0x0, 0x5, 0x5}}, 0x50) write$char_usb(r4, &(0x7f0000001540)="e40cebec8690", 0x6) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000180)={{0x1000, 0x3ff}, {0x400, 0x5}, 0x17be, 0x1}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) 14m18.826472542s ago: executing program 1 (id=656): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 14m18.825291953s ago: executing program 2 (id=657): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x0, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0x9, 0x3, 0x0, 0x7], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x2, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0xffff2000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x0, 0xf401, 0x3000, [0x9, 0x100000000000204, 0x5b, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14m18.416589452s ago: executing program 2 (id=658): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) socket(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="40100d"], 0x0, 0x0, 0x0}, 0x0) 14m17.796562896s ago: executing program 2 (id=659): socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_emit_vhci(0x0, 0x7) 14m17.748699907s ago: executing program 2 (id=660): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000b950020000b801000400b9a6080000b80000010026b864faeabb8989c900c9c9000f302f300fc79dbf0000c4b9e16dc30101220f01c3", 0x62}], 0x1, 0x14, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x94, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902820003010000000904000000010100000a24010000000201020c24020000000000000000000904010000010200000904010101010200000724010000000009050109000000000007250101000000090402000001020000090402010101ff0f000924"], 0x0) 14m17.238975999s ago: executing program 3 (id=662): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r1}, 0x38) 14m17.058596403s ago: executing program 3 (id=663): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000044402, 0x0) r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0xfffffffffffffffe, 0x8, 0x8, 0xfffffffffffffffa, 0x1}, 0x0, &(0x7f0000000140)={0xe72, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x1136f85d, 0x3, 0x2}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14m16.897381647s ago: executing program 1 (id=665): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) inotify_init() r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x4b8200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x8000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x20004, r1, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x1, 0x0, 0xfc, 0x8000, 0xa, 0x1ff, 0xff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000006000000080000000500000040000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, 0x0, 0x5, 0x3, 0xe, 0x3, 0xeada}) r5 = openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r5, 0xc01864c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01864c1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) 14m16.698616181s ago: executing program 3 (id=666): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x0, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0x9, 0x3, 0x0, 0x7], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x2, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0xffff2000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x0, 0xf401, 0x3000, [0x9, 0x100000000000204, 0x5b, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14m16.569341934s ago: executing program 1 (id=667): socket$pppoe(0x18, 0x1, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x3}) unshare(0x20000400) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socket$unix(0x1, 0x5, 0x0) r2 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f000006f000/0x4000)=nil, 0x4000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, 0x0, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x80000003) r5 = dup2(r3, r3) read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020) 14m16.188018763s ago: executing program 3 (id=668): socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_emit_vhci(0x0, 0x7) 14m16.069484585s ago: executing program 2 (id=670): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f00000006c0)=0x1, 0xcb) shutdown(r0, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(rfc4309(ccm_base(xchacha20-simd,blake2s-256-arm)),digest_n'}, 0x58) r2 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0x0, 0x5, 0x5}}, 0x50) write$char_usb(r4, &(0x7f0000001540)="e40cebec8690", 0x6) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000180)={{0x1000, 0x3ff}, {0x400, 0x5}, 0x17be, 0x1}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) 14m15.90209835s ago: executing program 3 (id=671): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) r1 = epoll_create(0x4) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x80000000}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(r0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000780)={0x1, 0x0, 0x2, 0x15, 0xaa, &(0x7f0000000380)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000040)={r9, r7, r8}) r10 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fsmount(r10, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f0000000100)={0x2, r7, 0x10000, 0x7ff, 0x101, 0x2, 0x7, 0x1, 0x401}) close(0x3) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 14m15.522847808s ago: executing program 1 (id=672): syz_mount_image$fuse(0x0, &(0x7f0000001a40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffffb0802dee, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7001000000000000f9ffffffffffffff0300000000000000030000000000000004000000000000000b00000000000000000040000a00000003000000000000000300000000000000cf13000000000000fc190000000000000b00000000000000010000000000008001000000ff", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="020000000000ad12eea600000000000000000000060000000000000002"], 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) 14m15.306461963s ago: executing program 1 (id=673): socket$inet6(0xa, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0xffff7ff3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x5368, &(0x7f0000000100)={0x0, 0x2503, 0x2, 0x2, 0x31a}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101080) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000001880)={{}, "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"}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000844) sendfile(r4, r5, 0x0, 0x20000023896) 14m14.313930405s ago: executing program 1 (id=674): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000044402, 0x0) r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r4, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0xfffffffffffffffe, 0x8, 0x8, 0xfffffffffffffffa, 0x1}, 0x0, &(0x7f0000000140)={0xe72, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x1136f85d, 0x3, 0x2}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14m12.921406057s ago: executing program 2 (id=676): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x0, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0x9, 0x3, 0x0, 0x7], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x2, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0xffff2000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x0, 0xf401, 0x3000, [0x9, 0x100000000000204, 0x5b, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14m0.170391219s ago: executing program 33 (id=671): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) r1 = epoll_create(0x4) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x80000000}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(r0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000780)={0x1, 0x0, 0x2, 0x15, 0xaa, &(0x7f0000000380)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000040)={r9, r7, r8}) r10 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fsmount(r10, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f0000000100)={0x2, r7, 0x10000, 0x7ff, 0x101, 0x2, 0x7, 0x1, 0x401}) close(0x3) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 13m51.356485339s ago: executing program 34 (id=674): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000044402, 0x0) r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r4, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0xfffffffffffffffe, 0x8, 0x8, 0xfffffffffffffffa, 0x1}, 0x0, &(0x7f0000000140)={0xe72, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x1136f85d, 0x3, 0x2}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13m51.237422142s ago: executing program 35 (id=676): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x0, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0x9, 0x3, 0x0, 0x7], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x2, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0xffff2000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x0, 0xf401, 0x3000, [0x9, 0x100000000000204, 0x5b, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13.402404147s ago: executing program 6 (id=3121): open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x60}}, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r6, r5, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 11.202545087s ago: executing program 6 (id=3125): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@newsa={0x198, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@private=0xa0100fe, 0x0, 0xecdf, 0x0, 0x0, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x1000000, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0x1, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x9}, {0x1, 0x80000000, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x60, 0x2, {{'cbc(camellia)\x00'}, 0xc0, "6e000b000000002000000000190000000000feffff7f0000"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x198}}, 0x44050) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r5 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x11c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x20, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x8, 0xc3}}}}}]}}]}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = eventfd2(0xe5c, 0x80000) r10 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000240)={r9, 0x7, 0x2, r10}) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r12 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={r12, 0x7, 0x2, r9}) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0x1, 0x9, 0x1, 0x41, 0x3, 0x58, 0x7, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000002c0)={[0xcb, 0xd, 0x2000000000004, 0x6d, 0x2, 0x4000000001002, 0x80000ef, 0x7f, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffe, 0x5, 0x7, 0xbdf], 0x200000, 0x67a64fa265da9e51}) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x3d1, {0x9, 0x21, 0xfffe}}}, &(0x7f0000000040)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.177167972s ago: executing program 7 (id=3129): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 8.947823918s ago: executing program 4 (id=3130): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) 8.319891562s ago: executing program 7 (id=3131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = creat(&(0x7f0000000000)='./file3\x00', 0x0) rename(0x0, &(0x7f0000000340)='./file3\x00') sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) symlink(0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file4\x00', 0xc7800, &(0x7f0000000000)=ANY=[], 0x1, 0x150e, &(0x7f0000002d40)="$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") 8.319046212s ago: executing program 5 (id=3132): socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x40440, 0x0) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x4000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x3, 0xffffffff}}], 0x1, 0x0, 0x0) 7.792258034s ago: executing program 5 (id=3133): socket$inet(0x2, 0x1, 0xfffffff6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) 7.010543661s ago: executing program 7 (id=3134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy(0x1, 0x0, 0x3) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x80045430, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x0, 0x1}}, 0x20) 6.883169024s ago: executing program 6 (id=3135): setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getitimer(0x0, &(0x7f0000000080)) 4.928805709s ago: executing program 7 (id=3136): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_io_uring_setup(0x3bd4, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000000)) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_enter(r2, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffff2}}, './file0\x00'}) 4.922414579s ago: executing program 6 (id=3137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 4.826906371s ago: executing program 5 (id=3138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206197bafa7283da60565717c311fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c0a4c8303a0f7fbda34fb8825f80200e3c0abd8"], 0xdd12}], 0x1}, 0x40) 4.665121035s ago: executing program 4 (id=3139): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x20, r2, 0x1, 0xfffffffc, 0xffffffff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x4}]}, 0x20}}, 0x0) 3.253106196s ago: executing program 6 (id=3140): socket$rds(0x15, 0x5, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x257, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3.173809209s ago: executing program 5 (id=3141): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)={{0x1, 0xee00, 0xffffffffffffffff, 0x0, 0x0, 0x22, 0x3}, 0x84a, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}) syz_open_dev$tty1(0xc, 0x4, 0x1) 3.173071838s ago: executing program 7 (id=3142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) 3.022637581s ago: executing program 4 (id=3143): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.932547334s ago: executing program 7 (id=3144): ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000080)={0x0, 0x6, 0x1002, 0x1}) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e"], 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000180)="08f7", 0x0, 0x6}, 0x50) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000b40)=0xe4) sendmsg$nl_xfrm(r1, &(0x7f0000001340)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001300)={&(0x7f0000000fc0)=@getsa={0x304, 0x12, 0x504, 0x70bd28, 0x25dfdbff, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0xa, 0x6c}, [@extra_flags={0x8, 0x18, 0x2}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e20, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}}, @policy={0xa8, 0x7, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x1ff, 0x4e21, 0x7ff, 0x2, 0x0, 0x100, 0x2f, 0x0, r2}, {0x1, 0xfffffffffffffff7, 0x100000001, 0xd, 0x5, 0x4}, {0x200, 0x5, 0x4, 0xfff}, 0x6, 0x6e6bbd, 0x2, 0x0, 0x1}}, @mark={0xc, 0x15, {0x35075b, 0xe8}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @sec_ctx={0xb3, 0x8, {0xaf, 0x8, 0x1, 0x6, 0xa7, "79fba2a896f138075ff379b11640c7eb87d4c0a9f9e829407e90ea77227838b18b939179ee12b164a2ddf6a2922479e09a710376a0ab666fede0f2f8edd254e956ec9e87c09f36f83e45e39825196b30d605d626a2811fc6461d8edbdc1e6c9bf2a100f97cf01a6fc4914237c3a0a5e67c178ea545bdd76b9da8428bf4c4e50adee11d7dad3deb004c85ac87ac05c3c6e3004175401f045f96971ef3226e6cf7911fb490c083b6"}}, @algo_auth_trunc={0xfd, 0x14, {{'crc32\x00'}, 0x588, 0x100, "79c11750935166240564e37fc0f62c433aa62edb1a5c2ff1a5265dbd98266bd2edd52c2924b23b312a797d9c1d06b2c71f68a75ab1d036afe729d4105934628add2a06a8aff2d5c3dcc7ed3edaf3d5cf5971453b0268196751b9b7dbb2c1324af3995c5ad6e9026821bc051f49466613635ead2f2f459547085b29c86827b2b724f8e8995fcc7b8000f3df0bdd3af6bd4f56c66cdbe9813f71d08ddd8567e84728e5f7fbd311e1838c6c134bbb2ee5cf49"}}, @coaddr={0x14, 0xe, @in=@multicast1}, @lifetime_val={0x24, 0x9, {0x5, 0x9, 0x5, 0x9}}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd25, 0x3}}]}, 0x304}}, 0x800) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r3, 0x18000000000002a0, 0x3a, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901010803", 0x0, 0x100, 0x60000000, 0x0, 0x91, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x4c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000e00)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000d00)}, 0x64) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c8, &(0x7f0000000380)={[{0xbc, 0x4e00, "4f5bc044deb7902fd6a2892d0b8c1c2c02f5b78a97ce0322fca6ca2af532040de0851464b6ddfc919ee58c9e5fcd6aa7334512d148acddc4a4af9a61a38d8fabe19c6f8146c96e3451ef18c2890d3b1313b7d9a8e3c7bf5508a77865d26d91254b60aaafa7c59533992e20c0d1eae9c48e4fd92c33cd8f1d79f34e2bc610f3f692e283252b4dd8bf2ef32f8146d43bf53f965f51ae24c8023200e3c2ce75cb6fa3b5ac2646c2edfba843fa55698e7503901cee968a0751d2ae69abfa"}, {0x60, 0x4e00, "7709b8d606b48aa54b0e53970a11b596a49d19f2a4672bbf117097a69bf47f85d7bb5be607d429262b2e411a590dff253717ee76367e26d2be0e3a68b48dc5820bf5f6213bd44ff31fb7fd629f16b7de3bc77e33efc7116064a9277816d8b6c9"}, {0xfb, 0x4e00, "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"}, {0xb3, 0x4e00, "da642a816f9a1fcc569a6534f1231fd73a1cd4675f7e9934753c19acf0bf9bf42c774196082b05dc7f739765838a421f4dcd12b2922b104c3c9233b19b26c9e44060ba7ec2c73e006d4aa29a9de874cdb43a860e8772a106db817e94f4b65bc13f1c891a0f88390d7016721831b4fc37b90a1f976a2a410197c68c2febaab3a8a539e02def9399b680483c2403239f4c152847529923a61856697e7af227305cee3c234b725d25fbc9ab7cb82b7e353a221c37"}, {0x1, 0x4e00, 'H'}, {0xf0, 0x4e00, "d1e1a1ab94550acb478a39e1b61164a59cc1220216ec7759cc6c528f2bdc18dbd8ee7bae34b48cf8deccfe9d8ae5d4d59af68800a9f6bc7c9d770af6dd04146dde357c98f272814b3b0372669bbcdf0f3b6ad90a8758fd0757777e1c25d6c5deddc6320ccfe6a2a4aef678ba6e33a8bf60a37d3405febfc02c4466b7cc8752d79a8eae001a1150c52b43c334ed667b046bf4909551b1dda71f08dfed6e8ad99f6517721bb1759e3dc9afa73fad908c3db276b6c8b144be0ddb7cb1ed5ab392ef3ca5d72c361027336512c48218550ff14fcb12eb65f1135612c83b638d3971b582785cf88d44bbaed02ef82f5dd1fb05"}, {0x44, 0x4e00, "930ae081633f04833747cea2d1aacffc50925595ce982673739068560248d75132e9bbb06a99cbd90a4b34a2237890d1ac841855c68c8d672ccd527c732c52ab683e0c23"}, {0xa4, 0x4e00, "d0c994ac1bc0184cb824014763f92e1425bd9f26090046d895967ba6dcadc615f23a365e9ff380e1034952443b0be9741a50420987dde6b2278c1723ca51f9ffff96d4364881e0a4a01c531e87f326333a0633d4413214b4a5c9d526e805d4497fbbd7cb895856d78ade71d6ddc264b80b49894e888d562f39ca4b633ed04cd85a9e1606bd46c40279cc23a6884d39ea851c12b9195f8f1163d40b5ab67930740177c456"}]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000f80), 0xffffffffffffffff) syz_usb_control_io$lan78xx(r0, &(0x7f0000000ac0)={0xc, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x412}}}, &(0x7f0000000cc0)={0x1c, &(0x7f0000000b00)={0x40, 0x30}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x3}, 0x0, &(0x7f0000000c00)={0xc0, 0xa1, 0x4, 0x6c3}, &(0x7f0000000c40)={0x40, 0xa0, 0x4, 0x9}, &(0x7f0000000c80)={0xc0, 0xa2, 0x2f, "91c4a7e13ee5e54243df34a56a41d57f94bb58997a3597532fd430b65871e369d70569ce3932c8945789735cbff3f3"}}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) 2.875521755s ago: executing program 4 (id=3145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy(0x1, 0x0, 0x3) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x80045430, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x0, 0x1}}, 0x20) 1.816875529s ago: executing program 4 (id=3146): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)={0x29, 0x4, 0x4, 0x0, 0x0, [@empty, @mcast1]}, 0x28) 1.77605364s ago: executing program 5 (id=3147): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x6, 0x9, 0xfb, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.682532432s ago: executing program 4 (id=3148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xfffe82) sendfile(r0, r1, 0x0, 0xfffe82) 1.658820343s ago: executing program 5 (id=3149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 0s ago: executing program 6 (id=3150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206197bafa7283da60565717c311fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c0a4c8303a0f7fbda34fb8825f80200e3c0abd8"], 0xdd12}], 0x1}, 0x40) kernel console output (not intermixed with test programs): 5 length: 249 > 3 [ 918.578867][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 918.583187][ T8208] syz_tun (unregistering): left allmulticast mode [ 918.604723][ T968] usb 6-1: USB disconnect, device number 86 [ 918.754127][T14735] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.836138][T14735] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.923448][T14735] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.988822][T16320] chnl_net:caif_netlink_parms(): no params data found [ 919.027700][T14735] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.122936][T16320] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.131394][T16320] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.149864][T16320] bridge_slave_0: entered allmulticast mode [ 919.179710][T16320] bridge_slave_0: entered promiscuous mode [ 919.208908][T16320] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.237338][T16320] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.277676][T16320] bridge_slave_1: entered allmulticast mode [ 919.284494][ T5769] Bluetooth: hci2: Malformed LE Event: 0x0b [ 919.312586][ C0] usblp0: nonzero write bulk status received: -71 [ 919.312923][ T968] usb 5-1: USB disconnect, device number 93 [ 919.334569][T16320] bridge_slave_1: entered promiscuous mode [ 919.382515][ T968] usblp0: removed [ 919.424458][T16320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.480332][T16336] netlink: 'syz.5.2774': attribute type 1 has an invalid length. [ 919.517299][T16336] 8021q: adding VLAN 0 to HW filter on device bond13 [ 919.527742][T16320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.561256][T16337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2774'. [ 919.587303][T16337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2774'. [ 919.638904][T16340] siw: device registration error -23 [ 919.671456][T16320] team0: Port device team_slave_0 added [ 919.785529][T16320] team0: Port device team_slave_1 added [ 919.812911][T16345] fuse: Unknown parameter '00000000000000000000003' [ 920.214872][T16320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.229795][T16320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.261172][T16320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.286189][T16320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.293877][ T5810] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 920.310082][T16320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.345106][T16320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.532390][ T5810] usb 6-1: Using ep0 maxpacket: 8 [ 920.540250][ T5810] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 920.586844][ T5810] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 920.592070][T11440] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 920.624999][T16320] hsr_slave_0: entered promiscuous mode [ 920.639204][ T5810] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 920.650396][T16320] hsr_slave_1: entered promiscuous mode [ 920.656371][ T5769] Bluetooth: hci0: command tx timeout [ 920.673599][ T5810] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 920.694017][ T5810] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 920.704757][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.792693][T11440] usb 5-1: Using ep0 maxpacket: 32 [ 920.803693][T11440] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 920.846455][T11440] usb 5-1: config 0 has no interface number 0 [ 920.858729][T11440] usb 5-1: config 0 interface 12 has no altsetting 0 [ 920.875097][T11440] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 920.884845][T11440] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.893550][T11440] usb 5-1: Product: syz [ 920.899152][T11440] usb 5-1: Manufacturer: syz [ 920.911841][T11440] usb 5-1: SerialNumber: syz [ 920.923142][T11440] usb 5-1: config 0 descriptor?? [ 920.932707][T16348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.959826][T16348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.013062][ T5810] usb 6-1: GET_CAPABILITIES returned 0 [ 921.025439][ T5810] usbtmc 6-1:16.0: can't read capabilities [ 921.231153][ T5810] usb 6-1: USB disconnect, device number 87 [ 921.515213][T14735] dvmrp8 (unregistering): left allmulticast mode [ 921.923690][T16379] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20004 [ 922.073632][T14735] hsr_slave_0: left promiscuous mode [ 922.088033][T14735] hsr_slave_1: left promiscuous mode [ 922.100665][T14735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 922.132925][T14735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.149259][T14735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 922.173849][T14735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.193722][T14735] bridge_slave_1: left allmulticast mode [ 922.199471][T14735] bridge_slave_1: left promiscuous mode [ 922.207583][T14735] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.217562][T14735] bridge_slave_0: left allmulticast mode [ 922.228557][T14735] bridge_slave_0: left promiscuous mode [ 922.242049][T14735] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.295849][T16386] siw: device registration error -23 [ 922.379997][T14735] veth1_macvtap: left promiscuous mode [ 922.390554][T14735] veth0_macvtap: left promiscuous mode [ 922.398869][T16388] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2784'. [ 922.408987][T14735] veth1_vlan: left promiscuous mode [ 922.431238][T14735] veth0_vlan: left promiscuous mode [ 922.544418][T16391] fuse: Unknown parameter '00000000000000000000003' [ 922.742148][ T5769] Bluetooth: hci0: command tx timeout [ 922.806364][T11440] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 922.822510][T11440] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 922.829856][T11440] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 922.839608][T11440] f81534: probe of 5-1:0.12 failed with error -71 [ 922.895166][T11440] usb 5-1: USB disconnect, device number 94 [ 923.137378][T14735] bond9 (unregistering): Released all slaves [ 923.239774][ T5769] Bluetooth: hci1: Malformed LE Event: 0x0b [ 923.464456][T14735] bond8 (unregistering): Released all slaves [ 923.652767][T14735] bond7 (unregistering): (slave veth9): Releasing active interface [ 923.661163][T14735] bond7 (unregistering): (slave veth9): the permanent HWaddr of slave - f6:dc:33:64:b1:17 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 923.681302][T14735] dummy0 (unregistering): entered promiscuous mode [ 923.972396][T10914] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 924.107627][T16408] siw: device registration error -23 [ 924.120158][T14735] bond7 (unregistering): (slave dummy0): Releasing active interface [ 924.136367][T14735] dummy0 (unregistering): left promiscuous mode [ 924.155795][T14735] bond7 (unregistering): Released all slaves [ 924.234752][T10914] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 924.250733][T10914] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 924.260559][T10914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.269296][T14735] bond6 (unregistering): (slave veth7): Releasing active interface [ 924.284286][T10914] usb 5-1: config 0 descriptor?? [ 924.295987][T16410] fuse: Unknown parameter '00000000000000000000003' [ 924.504830][T16412] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20004 [ 924.658853][T16402] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 924.708660][T14735] bond6 (unregistering): Released all slaves [ 924.764149][T14735] bond5 (unregistering): (slave veth5): Releasing active interface [ 924.824650][ T5769] Bluetooth: hci0: command tx timeout [ 924.925030][T10914] elecom 0003:056E:011C.003A: item fetching failed at offset 2/40 [ 924.940358][T10914] elecom: probe of 0003:056E:011C.003A failed with error -22 [ 925.071935][T14735] bond5 (unregistering): Released all slaves [ 925.127199][T14735] bond4 (unregistering): (slave veth3): Releasing active interface [ 925.381114][T10914] usb 5-1: USB disconnect, device number 95 [ 925.517279][T14735] bond4 (unregistering): Released all slaves [ 925.804301][T14735] bond3 (unregistering): Released all slaves [ 926.072127][T16418] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2796'. [ 926.280255][T14735] bond2 (unregistering): Released all slaves [ 926.301610][ T5769] Bluetooth: hci1: Malformed LE Event: 0x0b [ 926.308657][T16422] fuse: Unknown parameter '0x0000000000000003' [ 926.396760][T14735] bond1 (unregistering): (slave geneve3): Releasing active interface [ 926.646634][T16430] fuse: Unknown parameter '00000000000000000000003' [ 926.751308][ T5810] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 926.894652][T14735] bond1 (unregistering): Released all slaves [ 926.902057][ T5769] Bluetooth: hci0: command tx timeout [ 926.942803][ T5810] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 926.965773][ T5810] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 926.992031][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 927.010525][ T5810] usb 5-1: Product: syz [ 927.015807][ T5810] usb 5-1: Manufacturer: syz [ 927.020486][ T5810] usb 5-1: SerialNumber: syz [ 927.037886][ T5810] usb 5-1: config 0 descriptor?? [ 927.062039][ T5810] ims_pcu 5-1:0.0: Zero length descriptor [ 927.078136][ T5810] ims_pcu: probe of 5-1:0.0 failed with error -22 [ 927.319473][T16438] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2804'. [ 927.675778][ T968] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 927.899752][ T968] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 927.937661][ T968] usb 6-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 927.947114][ T968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.986208][ T968] usb 6-1: config 0 descriptor?? [ 928.241070][T16446] fuse: Unknown parameter '0x0000000000000003' [ 928.309624][T16436] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 928.340181][T16448] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2807'. [ 928.598225][ T968] elecom 0003:056E:011C.003B: item fetching failed at offset 2/40 [ 928.621249][ T968] elecom: probe of 0003:056E:011C.003B failed with error -22 [ 928.753314][T16454] fuse: Unknown parameter 'fd00000000000000000000003' [ 928.763453][T14735] team0 (unregistering): Port device team_slave_1 removed [ 928.864515][T14735] team0 (unregistering): Port device team_slave_0 removed [ 928.990503][T14735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 929.015551][ T5810] usb 6-1: USB disconnect, device number 88 [ 929.143050][T14735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 929.685417][T16456] ceph: No mds server is up or the cluster is laggy [ 929.898780][T14735] bond0 (unregistering): Released all slaves [ 930.092155][T16461] netlink: 'syz.5.2812': attribute type 1 has an invalid length. [ 930.167568][T16461] 8021q: adding VLAN 0 to HW filter on device bond14 [ 930.179116][T16464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2812'. [ 930.272316][T16320] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 930.294505][T16320] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 930.310647][T16467] fuse: Unknown parameter '0x0000000000000003' [ 930.335885][T16320] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 930.340168][ T5810] usb 5-1: USB disconnect, device number 96 [ 930.369680][T16320] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 930.592731][ T5769] Bluetooth: hci4: Malformed LE Event: 0x0b [ 930.673605][T16475] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2816'. [ 931.128750][T16475] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2816'. [ 931.351819][T16480] fuse: Unknown parameter 'fd00000000000000000000003' [ 931.832829][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.839622][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.086187][T16320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 932.229187][T16488] netlink: 'syz.6.2821': attribute type 1 has an invalid length. [ 932.355377][T16488] 8021q: adding VLAN 0 to HW filter on device bond10 [ 932.382129][T16320] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.396676][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2821'. [ 932.452939][T14735] IPVS: stop unused estimator thread 0... [ 932.475431][ T4218] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.482661][ T4218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.508464][ T4218] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.515710][ T4218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.601390][T10914] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 932.629110][T16501] fuse: Unknown parameter 'fd0x0000000000000003' [ 932.800774][T10914] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 932.841708][T10914] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 932.862337][T10914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 932.883869][T10914] usb 5-1: Product: syz [ 932.888099][T10914] usb 5-1: Manufacturer: syz [ 932.906125][T10914] usb 5-1: SerialNumber: syz [ 932.923333][T10914] usb 5-1: config 0 descriptor?? [ 932.937499][T10914] ims_pcu 5-1:0.0: Zero length descriptor [ 932.961337][T10914] ims_pcu: probe of 5-1:0.0 failed with error -22 [ 932.999448][ T5769] Bluetooth: hci1: Malformed LE Event: 0x0b [ 933.124170][T16320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.157607][T16517] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2827'. [ 933.380083][T16522] siw: device registration error -23 [ 933.556102][T16527] fuse: Unknown parameter 'fd00000000000000000000003' [ 933.946856][T16538] netlink: 'syz.6.2831': attribute type 1 has an invalid length. [ 933.990739][T16538] 8021q: adding VLAN 0 to HW filter on device bond11 [ 934.020342][T16541] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2831'. [ 934.064668][T14692] usb 5-1: USB disconnect, device number 97 [ 934.182786][T16320] veth0_vlan: entered promiscuous mode [ 934.228389][T16320] veth1_vlan: entered promiscuous mode [ 934.283856][T16546] fuse: Unknown parameter 'fd0x0000000000000003' [ 934.322685][T16320] veth0_macvtap: entered promiscuous mode [ 934.365940][T16320] veth1_macvtap: entered promiscuous mode [ 934.598647][T16320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 934.749362][T16320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.911363][T16320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.072069][T16320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.221872][T16320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.310162][T16320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.353660][T16320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 935.431440][T16320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.445891][T16559] siw: device registration error -23 [ 935.484528][T16320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.522675][T16320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.533819][T16320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.546529][T16320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.557515][T16320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.509024][T16320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.731577][T16320] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.970754][T16320] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.997736][T16320] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.016980][T16320] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.048148][T16576] netlink: 'syz.4.2839': attribute type 1 has an invalid length. [ 937.102718][T16576] 8021q: adding VLAN 0 to HW filter on device bond9 [ 937.324388][T16586] fuse: Unknown parameter 'fd0x0000000000000003' [ 937.382435][ T2944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.467228][ T2944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.508746][T16592] loop4: detected capacity change from 0 to 1024 [ 938.983823][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.137889][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.639655][ T5810] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 939.670848][T11440] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 939.916734][ T5810] usb 6-1: too many configurations: 151, using maximum allowed: 8 [ 940.388687][ T5810] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 940.404031][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 940.440609][ T5810] usb 6-1: Product: syz [ 940.458667][ T5810] usb 6-1: Manufacturer: syz [ 940.477548][ T5810] usb 6-1: SerialNumber: syz [ 940.495390][ T5810] usb 6-1: config 0 descriptor?? [ 940.522203][ T5810] ims_pcu 6-1:0.0: Zero length descriptor [ 940.522253][T11440] usb 5-1: Using ep0 maxpacket: 8 [ 940.543354][T11440] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 940.551184][ T5810] ims_pcu: probe of 6-1:0.0 failed with error -22 [ 940.562275][T11440] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 940.603744][T11440] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 940.631516][T11440] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 940.660141][T11440] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 940.675533][T11440] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.902438][T16604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.925399][T16604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.952465][T11440] usb 5-1: GET_CAPABILITIES returned 0 [ 940.968279][T11440] usbtmc 5-1:16.0: can't read capabilities [ 941.166281][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 941.194396][ T5810] usb 5-1: USB disconnect, device number 98 [ 941.338161][T16636] overlayfs: failed to clone upperpath [ 941.353357][T10914] usb 6-1: USB disconnect, device number 89 [ 941.638742][T16638] netlink: 'syz.7.2849': attribute type 1 has an invalid length. [ 941.894879][T16642] loop4: detected capacity change from 0 to 1024 [ 944.970754][ T5810] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 945.173315][ T5810] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 945.200575][ T5810] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 945.210391][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.227488][ T5810] usb 5-1: config 0 descriptor?? [ 945.470600][T16656] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 945.570693][ T968] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 945.711167][ T5810] elecom 0003:056E:011C.003C: item fetching failed at offset 2/40 [ 945.735277][ T5810] elecom: probe of 0003:056E:011C.003C failed with error -22 [ 945.770553][ T968] usb 6-1: Using ep0 maxpacket: 32 [ 945.783574][ T968] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 945.806847][ T968] usb 6-1: config 0 has no interface number 0 [ 945.826541][ T968] usb 6-1: config 0 interface 12 has no altsetting 0 [ 945.857684][ T968] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 945.870632][ T968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.879300][ T968] usb 6-1: Product: syz [ 945.883914][ T968] usb 6-1: Manufacturer: syz [ 945.888582][ T968] usb 6-1: SerialNumber: syz [ 945.897399][ T968] usb 6-1: config 0 descriptor?? [ 946.027007][T14692] usb 5-1: USB disconnect, device number 99 [ 946.084292][ T5810] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 946.113494][T16676] ceph: No mds server is up or the cluster is laggy [ 946.301226][ T5810] usb 8-1: Using ep0 maxpacket: 32 [ 946.308785][ T5810] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.319174][ T5810] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 946.328378][ T5810] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 946.337527][ T5810] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.360100][ T5810] usb 8-1: config 0 descriptor?? [ 946.572009][ T5810] usb 8-1: USB disconnect, device number 8 [ 947.938554][T16699] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2871'. [ 948.290426][T14692] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 948.320953][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 948.377361][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 948.424126][ T968] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 948.434785][ T968] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 948.442983][ T968] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 948.450837][ T968] f81534: probe of 6-1:0.12 failed with error -71 [ 948.466141][ T968] usb 6-1: USB disconnect, device number 90 [ 948.550655][T14692] usb 5-1: Using ep0 maxpacket: 16 [ 948.559230][T14692] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 948.591024][T14692] usb 5-1: config 0 interface 0 has no altsetting 0 [ 948.618083][T14692] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 948.627297][T14692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.635710][T14692] usb 5-1: Product: syz [ 948.639924][T14692] usb 5-1: Manufacturer: syz [ 948.649323][T14692] usb 5-1: SerialNumber: syz [ 948.658442][T14692] usb 5-1: config 0 descriptor?? [ 948.667496][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 948.678107][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 948.909191][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 948.919357][T16708] ceph: No mds server is up or the cluster is laggy [ 948.940690][T14692] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input151 [ 948.983240][T14692] imon:send_packet: packet tx failed (-71) [ 949.020512][T14692] imon 5-1:0.0: panel buttons/knobs setup failed [ 949.150458][T14692] rc_core: IR keymap rc-imon-pad not found [ 949.161274][T14692] Registered IR keymap rc-empty [ 949.166269][T14692] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 949.200251][T14692] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 949.220096][T14692] imon:send_packet: packet tx failed (-71) [ 949.240385][T14692] imon 5-1:0.0: remote input dev register failed [ 949.247205][T14692] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 949.276262][T14692] imon 5-1:0.0: unable to initialize intf0, err 0 [ 949.293505][T14692] imon:imon_probe: failed to initialize context! [ 949.311937][T14692] imon 5-1:0.0: unable to register, err -19 [ 949.351083][T14692] usb 5-1: USB disconnect, device number 100 [ 949.740446][T14692] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 949.900337][ T968] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 949.932891][T14692] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 949.949394][T14692] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 949.966451][T14692] usb 5-1: config 0 interface 0 has no altsetting 0 [ 949.986872][T14692] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 950.112690][ T968] usb 8-1: Using ep0 maxpacket: 32 [ 950.213096][ T968] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 950.223256][ T968] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 950.232557][ T968] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.257807][T14692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.288337][ T968] usb 8-1: config 0 descriptor?? [ 950.479981][T14692] usb 5-1: Product: syz [ 950.531606][T14692] usb 5-1: Manufacturer: syz [ 950.536641][T14692] usb 5-1: SerialNumber: syz [ 950.545323][ T5810] usb 8-1: USB disconnect, device number 9 [ 950.592884][T14692] usb 5-1: config 0 descriptor?? [ 950.645471][T16702] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 950.763095][T16733] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2881'. [ 951.064959][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 951.679126][T14692] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input153 [ 951.845418][T14692] rc_core: IR keymap rc-imon-pad not found [ 951.855340][T14692] Registered IR keymap rc-empty [ 951.861003][T14692] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 951.872267][T14692] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 951.904101][T14692] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 954.304483][T16745] sched: RT throttling activated [ 954.317784][T14692] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input154 [ 955.286526][T14692] imon 5-1:0.0: iMON device (15c2:0045, intf0) on usb<5:101> initialized [ 955.490006][ T968] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 956.130889][T16766] loop4: detected capacity change from 0 to 32768 [ 956.246716][T16768] netlink: 'syz.7.2889': attribute type 1 has an invalid length. [ 956.255262][T16766] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 956.266571][T16766] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 956.275471][T16766] BTRFS info (device loop4): use zlib compression, level 3 [ 956.283700][T16766] BTRFS info (device loop4): turning on sync discard [ 956.290527][T16766] BTRFS info (device loop4): using free space tree [ 956.292225][T14692] usb 5-1: USB disconnect, device number 101 [ 956.486629][T16766] BTRFS info (device loop4): enabling ssd optimizations [ 957.054691][ T28] audit: type=1800 audit(2000000077.224:1645): pid=16766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2888" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 959.169433][ T6885] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 959.741782][T14692] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 959.986977][T14692] usb 8-1: Using ep0 maxpacket: 32 [ 959.994450][T14692] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 960.015248][ T8186] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (8186) [ 960.028499][T14692] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 960.048860][T14692] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.073778][T14692] usb 8-1: config 0 descriptor?? [ 960.250488][T11440] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 960.520206][T11440] usb 6-1: Using ep0 maxpacket: 16 [ 960.957411][T11440] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 961.086222][T11440] usb 6-1: config 0 interface 0 has no altsetting 0 [ 961.090127][ T5810] usb 8-1: USB disconnect, device number 11 [ 961.102638][T11440] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 961.145565][T11440] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.178285][T11440] usb 6-1: Product: syz [ 961.218730][T11440] usb 6-1: Manufacturer: syz [ 961.233761][T11440] usb 6-1: SerialNumber: syz [ 961.235408][T16819] netlink: 'syz.4.2899': attribute type 1 has an invalid length. [ 961.271625][T16817] siw: device registration error -23 [ 961.310671][T11440] usb 6-1: config 0 descriptor?? [ 961.336391][T16819] 8021q: adding VLAN 0 to HW filter on device bond10 [ 961.413044][T16824] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20004 [ 961.527117][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 961.536508][T11440] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input155 [ 961.580310][T11440] imon:send_packet: packet tx failed (-71) [ 961.610773][T11440] imon 6-1:0.0: panel buttons/knobs setup failed [ 961.769851][T11440] rc_core: IR keymap rc-imon-pad not found [ 961.775793][T11440] Registered IR keymap rc-empty [ 961.783021][T11440] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 961.794009][T11440] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 961.794687][T11440] imon:send_packet: packet tx failed (-71) [ 961.829706][T11440] imon 6-1:0.0: remote input dev register failed [ 961.837440][T11440] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 961.900642][T11440] imon 6-1:0.0: unable to initialize intf0, err 0 [ 961.921683][T11440] imon:imon_probe: failed to initialize context! [ 961.945282][T11440] imon 6-1:0.0: unable to register, err -19 [ 961.986862][T11440] usb 6-1: USB disconnect, device number 91 [ 962.431006][T11440] usb 6-1: new full-speed USB device number 92 using dummy_hcd [ 962.636054][T11440] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 962.647479][T11440] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 962.668585][T11440] usb 6-1: config 0 interface 0 has no altsetting 0 [ 962.693367][T11440] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 962.706796][T11440] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.716462][T11440] usb 6-1: Product: syz [ 962.725491][T11440] usb 6-1: Manufacturer: syz [ 962.733255][T11440] usb 6-1: SerialNumber: syz [ 962.760346][T11440] usb 6-1: config 0 descriptor?? [ 962.767755][T16807] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 962.988942][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 963.021256][T11440] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input157 [ 963.090769][T11440] imon:send_packet: packet tx failed (-71) [ 963.109962][T11440] imon 6-1:0.0: panel buttons/knobs setup failed [ 963.215759][T11440] rc_core: IR keymap rc-imon-pad not found [ 963.223892][T11440] Registered IR keymap rc-empty [ 963.231997][T11440] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 963.247989][T11440] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 963.301187][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 963.320722][T16850] siw: device registration error -23 [ 963.331779][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 963.352200][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 963.379380][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 963.419226][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 963.431996][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 963.576577][T11440] imon:send_packet: packet tx failed (-71) [ 963.675683][T16845] netlink: 'syz.5.2909': attribute type 1 has an invalid length. [ 963.710508][T11440] imon 6-1:0.0: remote input dev register failed [ 963.758843][T11440] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 964.001233][T11440] imon 6-1:0.0: unable to initialize intf0, err 0 [ 964.021825][T16845] 8021q: adding VLAN 0 to HW filter on device bond15 [ 964.049524][T11440] imon:imon_probe: failed to initialize context! [ 964.099540][T11440] imon 6-1:0.0: unable to register, err -19 [ 964.146456][T11440] usb 6-1: USB disconnect, device number 92 [ 964.333060][T16694] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.365132][T16694] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 511 - 0 [ 964.396320][T16694] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 964.556857][T16694] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.577595][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 964.595129][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 964.650611][T14692] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 964.670818][T16694] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 511 - 0 [ 964.698999][T16860] ceph: No mds server is up or the cluster is laggy [ 964.715133][T16694] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 964.907898][T14692] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 964.947923][T16694] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.958404][T14692] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 964.958848][T16694] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 511 - 0 [ 964.979571][T16694] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 964.984220][T14692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.043825][T14692] usb 5-1: config 0 descriptor?? [ 965.105850][T16694] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.113979][T11440] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 965.132526][T16694] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 511 - 0 [ 965.146234][T16694] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 965.287930][T16848] chnl_net:caif_netlink_parms(): no params data found [ 965.413313][T16869] loop7: detected capacity change from 0 to 32768 [ 965.422698][T16869] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 965.468405][T16854] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 965.531088][ T5783] Bluetooth: hci1: command tx timeout [ 965.549735][T11440] usb 6-1: Using ep0 maxpacket: 32 [ 965.885518][T14692] elecom 0003:056E:011C.003D: item fetching failed at offset 2/40 [ 966.045490][T11440] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 966.048988][T14692] elecom: probe of 0003:056E:011C.003D failed with error -22 [ 966.100743][T11440] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 966.109974][T11440] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.135932][T11440] usb 6-1: config 0 descriptor?? [ 966.182932][T14692] usb 5-1: USB disconnect, device number 102 [ 966.232785][ T8186] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 966.286567][T16848] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.302499][T16848] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.314953][T16848] bridge_slave_0: entered allmulticast mode [ 966.325816][T16848] bridge_slave_0: entered promiscuous mode [ 966.361618][T16848] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.368842][T16848] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.378024][T16848] bridge_slave_1: entered allmulticast mode [ 966.385557][T16848] bridge_slave_1: entered promiscuous mode [ 966.386449][ T5772] usb 6-1: USB disconnect, device number 93 [ 966.475159][T16848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 966.489805][T11440] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 966.501743][T16848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 966.553239][T16694] tipc: Left network mode [ 966.555413][T16848] team0: Port device team_slave_0 added [ 966.595745][T16848] team0: Port device team_slave_1 added [ 966.717130][T11440] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 966.753815][T11440] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 966.766151][T11440] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 966.783304][T16848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.792594][T11440] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.805847][T16848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 966.844472][T11440] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.858906][T16848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.871797][T11440] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 966.881139][T11440] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 966.889343][T11440] usb 8-1: Product: syz [ 966.893543][T11440] usb 8-1: Manufacturer: syz [ 966.934677][T16848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.961724][T11440] cdc_wdm 8-1:1.0: skipping garbage [ 966.967007][T11440] cdc_wdm 8-1:1.0: skipping garbage [ 966.993836][T16848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.049172][T16848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.049877][T11440] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 967.070586][T11440] cdc_wdm 8-1:1.0: Unknown control protocol [ 967.317355][T11440] usb 8-1: USB disconnect, device number 12 [ 967.339354][ T5813] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 967.609289][ T5783] Bluetooth: hci1: command tx timeout [ 968.079525][T11440] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 968.164886][T16848] hsr_slave_0: entered promiscuous mode [ 968.171227][ T5813] usb 5-1: Using ep0 maxpacket: 16 [ 968.176980][T16848] hsr_slave_1: entered promiscuous mode [ 968.189612][ T5813] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 968.201892][T16848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 968.219330][ T5813] usb 5-1: config 0 interface 0 has no altsetting 0 [ 968.220528][T16848] Cannot create hsr debugfs directory [ 968.231855][ T5813] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 968.241643][T16899] netlink: 'syz.5.2918': attribute type 1 has an invalid length. [ 968.249662][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.268244][ T5813] usb 5-1: Product: syz [ 968.273068][ T5813] usb 5-1: Manufacturer: syz [ 968.288374][ T5813] usb 5-1: SerialNumber: syz [ 968.301577][ T5813] usb 5-1: config 0 descriptor?? [ 968.314118][T16899] 8021q: adding VLAN 0 to HW filter on device bond16 [ 968.315208][T11440] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 968.333147][T11440] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 968.344337][T11440] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 968.369236][T11440] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.385282][T11440] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.411419][T11440] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 968.454214][T11440] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 968.467748][T11440] usb 8-1: Product: syz [ 968.477723][T11440] usb 8-1: Manufacturer: syz [ 968.497911][T11440] cdc_wdm 8-1:1.0: skipping garbage [ 968.523087][T11440] cdc_wdm 8-1:1.0: skipping garbage [ 968.526239][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 968.537088][T11440] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 968.541828][ T5813] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input159 [ 968.563625][T11440] cdc_wdm 8-1:1.0: Unknown control protocol [ 968.570609][ T5813] imon:send_packet: packet tx failed (-71) [ 968.634187][ T5813] imon 5-1:0.0: panel buttons/knobs setup failed [ 968.790450][ T5813] rc_core: IR keymap rc-imon-pad not found [ 968.796500][ T5813] Registered IR keymap rc-empty [ 968.813189][T16694] dvmrp8 (unregistering): left allmulticast mode [ 968.824194][ T5813] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 968.838547][ T5813] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 968.858832][ T5813] imon:send_packet: packet tx failed (-71) [ 968.879574][ T5813] imon 5-1:0.0: remote input dev register failed [ 968.889837][ T5813] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 968.942797][ T5813] imon 5-1:0.0: unable to initialize intf0, err 0 [ 968.966550][ T5813] imon:imon_probe: failed to initialize context! [ 968.973207][ T5813] imon 5-1:0.0: unable to register, err -19 [ 968.997049][ T5813] usb 5-1: USB disconnect, device number 103 [ 969.125594][T16904] loop5: detected capacity change from 0 to 32768 [ 969.183775][T16904] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 969.302546][T16904] XFS (loop5): Ending clean mount [ 969.369233][ T5813] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 969.495686][ T8183] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 969.505691][T16694] hsr_slave_0: left promiscuous mode [ 969.536759][T16694] hsr_slave_1: left promiscuous mode [ 969.562191][T16694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 969.580771][T16694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 969.588933][ T5813] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 969.604330][ T5813] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 969.615457][ T5813] usb 5-1: config 0 interface 0 has no altsetting 0 [ 969.626285][ T5813] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 969.650846][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.658913][ T5813] usb 5-1: Product: syz [ 969.663321][ T5813] usb 5-1: Manufacturer: syz [ 969.664006][T16694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 969.667931][ T5813] usb 5-1: SerialNumber: syz [ 969.674103][ T5813] usb 5-1: config 0 descriptor?? [ 969.688004][T16888] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 969.711788][ T5783] Bluetooth: hci1: command tx timeout [ 969.730404][T16694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.856740][T16694] bridge_slave_1: left allmulticast mode [ 969.864818][T16930] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2920'. [ 969.877010][T16930] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2920'. [ 969.894839][T16694] bridge_slave_1: left promiscuous mode [ 969.932160][T16694] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.955824][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 969.964706][ T5813] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input161 [ 969.986777][T16694] bridge_slave_0: left allmulticast mode [ 969.993461][T16694] bridge_slave_0: left promiscuous mode [ 970.001208][T16694] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.113526][T16694] veth1_macvtap: left promiscuous mode [ 970.120720][T16694] veth0_macvtap: left promiscuous mode [ 970.132193][T16694] veth1_vlan: left promiscuous mode [ 970.141100][T16694] veth0_vlan: left promiscuous mode [ 970.296564][ T174] usb 8-1: USB disconnect, device number 13 [ 970.340487][T16933] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2921'. [ 970.549101][ T5813] rc_core: IR keymap rc-imon-pad not found [ 970.560259][ T5813] Registered IR keymap rc-empty [ 970.565230][ T5813] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 970.581418][ T5813] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 970.610936][ T5813] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 970.625639][ T5813] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input162 [ 970.689266][ T5813] imon 5-1:0.0: iMON device (15c2:0045, intf0) on usb<5:104> initialized [ 970.769096][T16941] imon:lcd_write: invalid payload size: 0 (expected 8) [ 970.804469][T16888] imon:lcd_write: invalid payload size: 0 (expected 8) [ 970.838342][ T5813] usb 5-1: USB disconnect, device number 104 [ 971.009214][ T174] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 971.087445][T16694] bond11 (unregistering): Released all slaves [ 971.169376][ T174] usb 8-1: device descriptor read/64, error -71 [ 971.278852][ T8] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 971.333608][T16694] bond10 (unregistering): Released all slaves [ 971.449081][ T174] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 971.468260][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 971.482421][ T8] usb 6-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 971.491686][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.520886][ T8] usb 6-1: config 0 descriptor?? [ 971.629417][ T174] usb 8-1: device descriptor read/64, error -71 [ 971.637648][T16694] bond9 (unregistering): Released all slaves [ 971.750298][ T174] usb usb8-port1: attempt power cycle [ 971.770576][ T5783] Bluetooth: hci1: command tx timeout [ 971.852111][T16940] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 971.929525][T16694] bond8 (unregistering): Released all slaves [ 972.094693][ T8] elecom 0003:056E:011C.003E: item fetching failed at offset 2/40 [ 972.106404][ T8] elecom: probe of 0003:056E:011C.003E failed with error -22 [ 972.189132][ T174] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 972.198743][T16694] bond7 (unregistering): Released all slaves [ 972.220777][ T174] usb 8-1: device descriptor read/8, error -71 [ 972.279199][T16694] bond6 (unregistering): (slave veth9): Releasing active interface [ 972.287538][T16694] bond6 (unregistering): (slave veth9): the permanent HWaddr of slave - 5a:50:03:83:f2:fd - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 972.317125][T16694] dummy0 (unregistering): entered promiscuous mode [ 972.440127][ T8] usb 6-1: USB disconnect, device number 94 [ 972.490042][ T174] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 972.531802][ T174] usb 8-1: device descriptor read/8, error -71 [ 972.619750][T16694] bond6 (unregistering): (slave dummy0): Releasing active interface [ 972.627899][T16694] dummy0 (unregistering): left promiscuous mode [ 972.635334][T16694] bond6 (unregistering): Released all slaves [ 972.649350][ T174] usb usb8-port1: unable to enumerate USB device [ 972.847847][T16694] bond5 (unregistering): Released all slaves [ 972.885910][T16694] bond4 (unregistering): (slave veth7): Releasing active interface [ 973.146140][T16694] bond4 (unregistering): Released all slaves [ 973.280318][T16694] bond3 (unregistering): (slave veth5): Releasing active interface [ 974.239597][T16694] bond3 (unregistering): Released all slaves [ 974.286579][T16694] bond2 (unregistering): (slave veth3): Releasing active interface [ 974.308371][T16958] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2928'. [ 974.630926][T16694] bond2 (unregistering): Released all slaves [ 974.673631][T16694] bond1 (unregistering): (slave geneve5): Releasing active interface [ 974.686207][T16963] block device autoloading is deprecated and will be removed. [ 974.710400][T11440] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 974.912381][T11440] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 974.926307][T11440] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 974.938453][T11440] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 974.948432][T11440] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.968282][T11440] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.997019][T11440] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 975.027209][T11440] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 975.042732][T11440] usb 5-1: Product: syz [ 975.049688][T11440] usb 5-1: Manufacturer: syz [ 975.085066][T11440] cdc_wdm 5-1:1.0: skipping garbage [ 975.103087][T11440] cdc_wdm 5-1:1.0: skipping garbage [ 975.110563][T16694] bond1 (unregistering): Released all slaves [ 975.121783][T11440] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 975.148189][T11440] cdc_wdm 5-1:1.0: Unknown control protocol [ 975.284034][T11440] usb 5-1: USB disconnect, device number 105 [ 975.869222][T11440] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 976.118151][T11440] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 976.130871][T11440] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.148020][T11440] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 976.157639][T11440] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.175877][T11440] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.197926][T11440] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 976.207667][T11440] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 976.220879][T11440] usb 5-1: Product: syz [ 976.225107][T11440] usb 5-1: Manufacturer: syz [ 976.246801][T11440] cdc_wdm 5-1:1.0: skipping garbage [ 976.253433][T11440] cdc_wdm 5-1:1.0: skipping garbage [ 976.260377][T11440] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 976.266835][T11440] cdc_wdm 5-1:1.0: Unknown control protocol [ 976.378158][T16694] team0 (unregistering): Port device team_slave_1 removed [ 976.452188][T16694] team0 (unregistering): Port device team_slave_0 removed [ 976.459277][ T174] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 976.526044][T16694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 976.598578][T16694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 976.657696][ T174] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 976.684626][ T174] usb 8-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 976.694349][ T174] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.733052][ T174] usb 8-1: config 0 descriptor?? [ 977.092320][T16971] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 977.261904][T16694] bond0 (unregistering): Released all slaves [ 977.343010][ T174] elecom 0003:056E:011C.003F: item fetching failed at offset 2/40 [ 977.352511][ T174] elecom: probe of 0003:056E:011C.003F failed with error -22 [ 977.418888][T16952] netlink: 'syz.5.2926': attribute type 1 has an invalid length. [ 977.446380][T16952] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 977.674177][T14692] usb 8-1: USB disconnect, device number 18 [ 978.048513][T14692] usb 5-1: USB disconnect, device number 106 [ 978.460751][T16694] IPVS: stop unused estimator thread 0... [ 978.503819][T16988] loop4: detected capacity change from 0 to 32768 [ 978.549037][T16988] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 978.559438][T16988] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 978.568117][T16988] BTRFS info (device loop4): use zlib compression, level 3 [ 978.575535][T16988] BTRFS info (device loop4): turning on sync discard [ 978.582324][T16988] BTRFS info (device loop4): using free space tree [ 978.628903][T16848] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 978.663927][T16848] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 978.696506][T16848] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 978.767440][T16988] BTRFS info (device loop4): enabling ssd optimizations [ 978.780194][T17009] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2937'. [ 978.792588][T17009] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2937'. [ 978.831031][T16848] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 978.893536][ T28] audit: type=1800 audit(2000000099.025:1646): pid=16988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2935" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 979.324847][ T6885] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 979.478796][ T5844] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 979.480723][T16848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.545173][T16848] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.569058][T11440] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 979.626528][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.633752][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.642159][ T5844] usb 6-1: device descriptor read/64, error -71 [ 979.645873][ T8186] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (8186) [ 979.701770][ T4218] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.709091][ T4218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.771527][T11440] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.805441][T11440] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 979.826487][T16848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 979.841527][T11440] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 979.856673][T16848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 979.878840][T11440] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.897190][T11440] usb 8-1: Product: syz [ 979.907315][T11440] usb 8-1: Manufacturer: syz [ 979.939314][ T5844] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 979.947532][T11440] usb 8-1: SerialNumber: syz [ 979.963925][T11440] usb 8-1: config 0 descriptor?? [ 980.108709][ T5844] usb 6-1: device descriptor read/64, error -71 [ 980.239204][ T5844] usb usb6-port1: attempt power cycle [ 980.275157][T16848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 980.648015][T17058] netlink: 'syz.4.2941': attribute type 1 has an invalid length. [ 980.668818][ T5844] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 980.719153][ T5844] usb 6-1: device descriptor read/8, error -71 [ 980.721323][T17058] 8021q: adding VLAN 0 to HW filter on device bond11 [ 980.875138][T16848] veth0_vlan: entered promiscuous mode [ 980.919079][T16848] veth1_vlan: entered promiscuous mode [ 980.982114][T16848] veth0_macvtap: entered promiscuous mode [ 980.995680][T16848] veth1_macvtap: entered promiscuous mode [ 981.002191][ T5844] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 981.044484][T16848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.056373][T16848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.060241][ T5844] usb 6-1: device descriptor read/8, error -71 [ 981.072255][T16848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.087079][T16848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.097535][T16848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.110977][T16848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.124375][T16848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.142216][T16848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.152871][T16848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.163415][T16848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.174343][T16848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.184929][T16848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.198468][T16848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.209439][ T5844] usb usb6-port1: unable to enumerate USB device [ 981.231574][T16848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.249964][T16848] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.263201][T16848] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.275460][T16848] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.295585][T16848] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.414924][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.442323][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.481854][T16694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.496231][T16694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.615194][ T5813] usb 8-1: USB disconnect, device number 19 [ 983.264257][T17097] loop7: detected capacity change from 0 to 32768 [ 983.316357][T17097] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 984.341776][ C0] vkms_vblank_simulate: vblank timer overrun [ 984.360814][T17107] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2950'. [ 984.431039][ T5783] Bluetooth: hci2: Malformed LE Event: 0x0b [ 984.461213][ T8186] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 984.485952][T17110] netlink: 'syz.6.2949': attribute type 1 has an invalid length. [ 984.501744][T17110] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2949'. [ 984.822441][ T5813] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 984.852875][ T5769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 984.865950][T10625] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.881381][ T5769] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 984.895660][ T5769] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 984.904305][T10625] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 41566 - 0 [ 984.917498][ T5769] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 984.931843][ T5769] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 984.940986][ T5769] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 984.989066][ T23] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 985.008668][ T5813] usb 8-1: Using ep0 maxpacket: 8 [ 985.024813][ T5813] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.043451][ T5813] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.054718][ T5813] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 985.068396][ T5813] usb 8-1: config 0 interface 0 has no altsetting 0 [ 985.075119][ T5813] usb 8-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 985.080070][T10625] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.090632][ T5813] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.095493][T10625] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 41566 - 0 [ 985.119777][ T5813] usb 8-1: config 0 descriptor?? [ 985.188375][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 985.196012][ T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 985.219877][T10625] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.222195][ T23] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 985.230964][T10625] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 41566 - 0 [ 985.246651][ T23] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 985.267641][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.276729][ T23] usb 6-1: Product: syz [ 985.285366][ T23] usb 6-1: Manufacturer: syz [ 985.292093][ T23] usb 6-1: SerialNumber: syz [ 985.346658][T10625] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.357163][T10625] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 41566 - 0 [ 985.381675][T17120] chnl_net:caif_netlink_parms(): no params data found [ 985.527450][T17120] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.560378][ T23] usb 6-1: 0:2 : does not exist [ 985.579250][T17120] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.586641][T17120] bridge_slave_0: entered allmulticast mode [ 985.630639][T17120] bridge_slave_0: entered promiscuous mode [ 985.683014][T17120] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.698080][T17120] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.707845][T17120] bridge_slave_1: entered allmulticast mode [ 985.731815][T17120] bridge_slave_1: entered promiscuous mode [ 985.782612][ T23] usb 6-1: USB disconnect, device number 99 [ 986.470458][T17120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 986.489701][ T8186] udevd[8186]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 986.551566][T17120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 986.728680][ T5813] usbhid 8-1:0.0: can't add hid device: -71 [ 986.742001][ T5813] usbhid: probe of 8-1:0.0 failed with error -71 [ 986.770383][ T5813] usb 8-1: USB disconnect, device number 20 [ 986.984614][T17120] team0: Port device team_slave_0 added [ 987.001176][T17120] team0: Port device team_slave_1 added [ 987.062093][ T5783] Bluetooth: hci3: command tx timeout [ 987.144106][T17120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.161800][T17120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.218176][ T174] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 987.251011][T17120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.418443][ T174] usb 6-1: Using ep0 maxpacket: 32 [ 987.437845][ T174] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 987.449228][T17143] loop7: detected capacity change from 0 to 32768 [ 987.453527][T17120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.465066][T17143] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 987.485824][T17120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.513923][ T174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.518634][T17120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.546401][ T174] usb 6-1: config 0 descriptor?? [ 987.577079][ T174] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 987.724787][ T8186] I/O error, dev loop7, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 988.669924][ T174] gspca_vc032x: reg_w err -71 [ 988.674780][ T174] gspca_vc032x: I2c Bus Busy Wait 00 [ 989.116237][ T174] gspca_vc032x: I2c Bus Busy Wait 00 [ 989.128102][ T5783] Bluetooth: hci3: command tx timeout [ 989.138635][ T174] gspca_vc032x: I2c Bus Busy Wait 00 [ 989.150680][ T174] gspca_vc032x: I2c Bus Busy Wait 00 [ 989.158166][ T174] gspca_vc032x: I2c Bus Busy Wait 00 [ 989.163539][ T174] gspca_vc032x: I2c Bus Busy Wait 00 [ 989.170457][ T174] gspca_vc032x: I2c Bus Busy Wait 00 [ 989.175827][ T174] gspca_vc032x: I2c Bus Busy Wait 00 [ 989.183161][ T174] gspca_vc032x: I2c Bus Busy Wait 00 [ 989.188601][ T174] gspca_vc032x: I2c Bus Busy Wait 00 [ 989.194486][ T174] gspca_vc032x: I2c Bus Busy Wait 00 [ 989.199914][ T174] gspca_vc032x: I2c Bus Busy Wait 00 [ 989.205345][ T174] gspca_vc032x: I2c Bus Busy Wait 00 [ 989.211132][ T174] gspca_vc032x: I2c Bus Busy Wait 00 [ 989.216529][ T174] gspca_vc032x: I2c Bus Busy Wait 00 [ 989.222424][ T174] gspca_vc032x: I2c Bus Busy Wait 00 [ 989.228371][ T174] gspca_vc032x: I2c Bus Busy Wait 00 [ 989.233682][ T174] gspca_vc032x: I2c Bus Busy Wait 00 [ 989.365949][ T174] gspca_vc032x: Unknown sensor... [ 989.396826][ T174] vc032x: probe of 6-1:0.0 failed with error -22 [ 989.446040][ T174] usb 6-1: USB disconnect, device number 100 [ 990.148380][T17160] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20004 [ 990.322482][T17165] netlink: 'syz.7.2960': attribute type 1 has an invalid length. [ 990.355489][T17165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 990.370938][T17120] hsr_slave_0: entered promiscuous mode [ 990.377805][T17120] hsr_slave_1: entered promiscuous mode [ 990.386342][T17120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 990.395149][T17120] Cannot create hsr debugfs directory [ 990.467512][T17168] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2960'. [ 991.208178][ T5783] Bluetooth: hci3: command tx timeout [ 991.241991][T10625] dvmrp8 (unregistering): left allmulticast mode [ 993.270483][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.342352][ T5783] Bluetooth: hci3: command tx timeout [ 993.366967][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.551868][T10625] hsr_slave_0: left promiscuous mode [ 994.044765][T17210] siw: device registration error -23 [ 994.403015][T10625] hsr_slave_1: left promiscuous mode [ 994.476830][T10625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 994.505524][T10625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.524154][T10625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 994.536644][T10625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.545958][T10625] bridge_slave_1: left allmulticast mode [ 994.552139][T10625] bridge_slave_1: left promiscuous mode [ 994.558564][T10625] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.569008][T10625] bridge_slave_0: left allmulticast mode [ 994.574682][T10625] bridge_slave_0: left promiscuous mode [ 994.581472][T10625] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.646730][T10625] veth1_macvtap: left promiscuous mode [ 994.653089][T10625] veth0_macvtap: left promiscuous mode [ 994.658979][T10625] veth1_vlan: left promiscuous mode [ 994.664276][T10625] veth0_vlan: left promiscuous mode [ 994.901319][ T5813] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 994.981852][T10625] bond11 (unregistering): Released all slaves [ 995.061898][ T5813] usb 6-1: device descriptor read/64, error -71 [ 995.171353][T10625] bond10 (unregistering): Released all slaves [ 995.337761][ T5813] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 995.361112][T10625] bond9 (unregistering): Released all slaves [ 995.419841][T10625] bond8 (unregistering): (slave veth13): Releasing active interface [ 995.435095][T10625] bond8 (unregistering): (slave veth13): the permanent HWaddr of slave - b2:38:24:9a:66:f3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 995.465511][T10625] dummy0 (unregistering): entered promiscuous mode [ 995.505070][ T5813] usb 6-1: device descriptor read/64, error -71 [ 995.627957][ T5813] usb usb6-port1: attempt power cycle [ 995.672843][T10625] bond8 (unregistering): (slave dummy0): Releasing active interface [ 995.682050][T10625] dummy0 (unregistering): left promiscuous mode [ 995.689775][T10625] bond8 (unregistering): Released all slaves [ 995.729728][T10625] bond7 (unregistering): (slave veth11): Releasing active interface [ 995.768065][ T5772] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 995.922825][T10625] bond7 (unregistering): Released all slaves [ 995.957180][T10625] bond6 (unregistering): (slave veth9): Releasing active interface [ 995.973194][ T5772] usb 8-1: Using ep0 maxpacket: 16 [ 996.011576][ T5772] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 996.022038][ T5772] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 996.053384][ T5772] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 996.057753][ T5813] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 996.062866][ T5772] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.084173][ T5772] usb 8-1: Product: syz [ 996.088672][ T5772] usb 8-1: Manufacturer: syz [ 996.093447][ T5772] usb 8-1: SerialNumber: syz [ 996.140079][ T5813] usb 6-1: device descriptor read/8, error -71 [ 996.234299][T10625] bond6 (unregistering): Released all slaves [ 996.320174][ T5772] usb 8-1: 0:2 : does not exist [ 996.379184][ T5772] usb 8-1: USB disconnect, device number 21 [ 996.416250][ T8186] udevd[8186]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 996.418564][ T5813] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 996.504626][ T5813] usb 6-1: device descriptor read/8, error -71 [ 996.512343][T10625] bond5 (unregistering): Released all slaves [ 996.547942][T10625] bond4 (unregistering): (slave veth7): Releasing active interface [ 996.643459][ T5813] usb usb6-port1: unable to enumerate USB device [ 996.759957][T10625] bond4 (unregistering): Released all slaves [ 996.796215][T10625] bond3 (unregistering): (slave veth5): Releasing active interface [ 996.995735][T10625] bond3 (unregistering): Released all slaves [ 997.665317][T10625] bond2 (unregistering): Released all slaves [ 997.738536][T10625] bond1 (unregistering): (slave geneve3): Releasing active interface [ 997.938664][T10625] bond1 (unregistering): Released all slaves [ 998.896886][T10625] team0 (unregistering): Port device team_slave_1 removed [ 999.018035][T10625] team0 (unregistering): Port device team_slave_0 removed [ 999.116565][T10625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.178918][T10625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 999.387716][ T5813] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 999.577506][ T5813] usb 8-1: Using ep0 maxpacket: 8 [ 999.592403][ T5813] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 999.604628][ T5813] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 999.621414][ T5813] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.646810][T10625] bond0 (unregistering): Released all slaves [ 999.755036][T17212] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2971'. [ 999.766078][T17216] netlink: 'syz.6.2969': attribute type 1 has an invalid length. [ 999.780840][T17218] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2969'. [ 999.869220][T17234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.889880][T17120] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 999.912327][T17234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.956703][T17120] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1000.013853][T17120] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1000.105643][T17120] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1000.166821][T17239] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2977'. [ 1000.758035][ T5813] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1001.054672][T17120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1001.104402][ T5813] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1001.147462][ T5813] usb 6-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1001.169148][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.184135][T17120] 8021q: adding VLAN 0 to HW filter on device team0 [ 1001.216034][ T5813] usb 6-1: config 0 descriptor?? [ 1001.226802][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.234031][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1001.305297][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.312549][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1001.369057][T10914] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1001.419571][T10625] IPVS: stop unused estimator thread 0... [ 1001.528182][T10914] usb 7-1: device descriptor read/64, error -71 [ 1001.599455][T17239] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1001.797459][T10914] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1001.830375][T17120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.843681][ T5813] elecom 0003:056E:011C.0040: item fetching failed at offset 2/40 [ 1001.865021][ T5813] elecom: probe of 0003:056E:011C.0040 failed with error -22 [ 1001.967467][T10914] usb 7-1: device descriptor read/64, error -71 [ 1002.091649][T10914] usb usb7-port1: attempt power cycle [ 1002.131567][ T968] usb 8-1: USB disconnect, device number 22 [ 1002.173231][ T5772] usb 6-1: USB disconnect, device number 105 [ 1002.336550][T17120] veth0_vlan: entered promiscuous mode [ 1002.356307][T17120] veth1_vlan: entered promiscuous mode [ 1002.419709][T17120] veth0_macvtap: entered promiscuous mode [ 1002.440175][T17120] veth1_macvtap: entered promiscuous mode [ 1002.465723][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.482564][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.494021][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.513193][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.523768][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.534455][T10914] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1002.534663][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.554904][T17120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.574862][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.585680][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.588590][T10914] usb 7-1: device descriptor read/8, error -71 [ 1002.599975][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.622207][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.634527][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.652584][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.663985][ T968] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1002.686196][T17120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.717868][T17120] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.726800][T17120] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.742183][T17120] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.751239][T17120] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.888104][T10914] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1002.890027][ T968] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1002.938936][ T968] usb 8-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.963515][T12619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.977946][ T968] usb 8-1: config 66 has 0 interfaces, different from the descriptor's value: 2 [ 1002.987633][T10914] usb 7-1: device descriptor read/8, error -71 [ 1003.005757][T12619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.009882][ T968] usb 8-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1003.034917][ T968] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.053293][ T968] usb 8-1: Product: syz [ 1003.061594][ T968] usb 8-1: Manufacturer: syz [ 1003.066378][ T968] usb 8-1: SerialNumber: syz [ 1003.072394][T17294] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20004 [ 1003.093925][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.112048][T10914] usb usb7-port1: unable to enumerate USB device [ 1003.122857][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.251811][T17301] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2945'. [ 1003.261470][T17301] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2945'. [ 1003.493056][ T28] audit: type=1326 audit(2000000123.666:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.7.2979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2310f9de59 code=0x7ffc0000 [ 1003.537438][ T28] audit: type=1326 audit(2000000123.666:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.7.2979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2310f9de59 code=0x7ffc0000 [ 1003.563296][ T28] audit: type=1326 audit(2000000123.696:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.7.2979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2310f9de59 code=0x7ffc0000 [ 1003.597374][ T28] audit: type=1326 audit(2000000123.696:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.7.2979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2310f9de59 code=0x7ffc0000 [ 1003.638335][ T28] audit: type=1326 audit(2000000123.696:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.7.2979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2310f9de59 code=0x7ffc0000 [ 1003.692878][ T28] audit: type=1326 audit(2000000123.746:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.7.2979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2310f9de59 code=0x7ffc0000 [ 1003.730849][ T28] audit: type=1326 audit(2000000123.746:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.7.2979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2310f9de59 code=0x7ffc0000 [ 1003.765653][ T28] audit: type=1326 audit(2000000123.746:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.7.2979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2310f9de59 code=0x7ffc0000 [ 1003.767786][ T23] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1003.794265][ T28] audit: type=1326 audit(2000000123.746:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.7.2979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2310f9de59 code=0x7ffc0000 [ 1003.830519][ T28] audit: type=1326 audit(2000000123.746:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.7.2979" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2310f9de59 code=0x7ffc0000 [ 1004.028603][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 1004.052775][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.063968][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1004.089427][ T23] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1004.103991][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.132486][ T23] usb 5-1: Product: syz [ 1004.136877][ T23] usb 5-1: Manufacturer: syz [ 1004.146119][ T23] usb 5-1: SerialNumber: syz [ 1004.408500][ T23] usb 5-1: 0:2 : does not exist [ 1004.484587][ T23] usb 5-1: USB disconnect, device number 107 [ 1004.582701][ T8199] udevd[8199]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1004.602283][T17311] netlink: 'syz.5.2983': attribute type 1 has an invalid length. [ 1005.030681][ T968] usb 8-1: USB disconnect, device number 23 [ 1005.202892][T17311] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1005.275817][T17315] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2983'. [ 1005.297022][T17318] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2984'. [ 1005.608085][ T968] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1006.417127][ T968] usb 7-1: device descriptor read/64, error -71 [ 1006.677214][T14692] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1006.787143][ T968] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1006.887101][T14692] usb 5-1: Using ep0 maxpacket: 8 [ 1006.955301][T14692] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.985459][T14692] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1007.041555][T14692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.493078][T17328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.533068][T17328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.587234][ T968] usb 7-1: device descriptor read/64, error -71 [ 1007.617777][T17340] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2991'. [ 1007.628095][T17340] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2991'. [ 1007.707244][ T968] usb usb7-port1: attempt power cycle [ 1007.827338][ T23] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1007.937096][ T5772] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1007.977158][ T23] usb 8-1: device descriptor read/64, error -71 [ 1008.117064][ T5772] usb 6-1: Using ep0 maxpacket: 32 [ 1008.123802][ T968] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1008.135514][ T5772] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1008.143822][ T5772] usb 6-1: config 0 has no interface number 0 [ 1008.152347][ T5772] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1008.161943][ T5772] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.170177][ T968] usb 7-1: device descriptor read/8, error -71 [ 1008.176683][ T5772] usb 6-1: Product: syz [ 1008.180940][ T5772] usb 6-1: Manufacturer: syz [ 1008.185558][ T5772] usb 6-1: SerialNumber: syz [ 1008.192576][ T5772] usb 6-1: config 0 descriptor?? [ 1008.200516][ T5772] smsc95xx v2.0.0 [ 1008.257060][ T23] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1008.417021][ T23] usb 8-1: device descriptor read/64, error -71 [ 1008.537134][ T23] usb usb8-port1: attempt power cycle [ 1008.604410][ T5772] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1008.615613][ T5772] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1008.956998][ T23] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1008.987559][ T23] usb 8-1: device descriptor read/8, error -71 [ 1009.286993][ T23] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1009.317841][ T23] usb 8-1: device descriptor read/8, error -71 [ 1009.400321][ T968] usb 5-1: USB disconnect, device number 108 [ 1009.448097][ T23] usb usb8-port1: unable to enumerate USB device [ 1009.912695][ T5772] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1010.035123][ T5772] smsc95xx: probe of 6-1:0.67 failed with error -61 [ 1010.514799][T17347] loop6: detected capacity change from 0 to 32768 [ 1010.533197][T17347] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1010.641489][T17347] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1010.671778][T17347] XFS (loop6): Starting recovery (logdev: internal) [ 1010.695379][T17347] XFS (loop6): Ending recovery (logdev: internal) [ 1010.744475][T16848] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1010.747082][ T5813] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1010.956812][ T5813] usb 5-1: Using ep0 maxpacket: 16 [ 1010.972932][ T5813] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.984272][ T5813] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1011.002164][ T5813] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1011.011830][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.024511][ T5813] usb 5-1: Product: syz [ 1011.029081][ T5813] usb 5-1: Manufacturer: syz [ 1011.033734][ T5813] usb 5-1: SerialNumber: syz [ 1011.153428][ T5812] usb 6-1: USB disconnect, device number 106 [ 1011.263033][ T5813] usb 5-1: 0:2 : does not exist [ 1011.296210][ T5813] usb 5-1: USB disconnect, device number 109 [ 1011.335912][ T8186] udevd[8186]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1012.226757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1012.853269][ T968] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1013.060926][ T968] usb 7-1: Using ep0 maxpacket: 32 [ 1013.068666][ T968] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1013.077002][ T968] usb 7-1: config 0 has no interface number 0 [ 1013.090532][ T968] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1013.101959][ T968] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.112071][ T968] usb 7-1: Product: syz [ 1013.116284][ T968] usb 7-1: Manufacturer: syz [ 1013.133835][ T968] usb 7-1: SerialNumber: syz [ 1013.143244][ T968] usb 7-1: config 0 descriptor?? [ 1013.154367][ T968] smsc95xx v2.0.0 [ 1013.731937][ T968] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1013.854248][ T968] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1014.166924][ T5813] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1014.350204][T17387] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3003'. [ 1014.360184][T17387] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3003'. [ 1014.416772][ T5813] usb 8-1: Using ep0 maxpacket: 8 [ 1014.432686][ T5813] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.474580][ T5813] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1014.495444][ T5813] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.606363][T17383] loop5: detected capacity change from 0 to 32768 [ 1014.614710][T17383] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 1014.800002][ T5812] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1014.899643][T17376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.987189][T17376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.051186][ T8199] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 1015.136322][ T968] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1015.157446][ T968] smsc95xx: probe of 7-1:0.67 failed with error -61 [ 1015.166845][ T5812] usb 5-1: device descriptor read/64, error -71 [ 1015.446697][ T5812] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1015.597148][ T5812] usb 5-1: device descriptor read/64, error -71 [ 1015.716678][ T5812] usb usb5-port1: attempt power cycle [ 1017.497105][ T5812] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1017.499296][ T174] usb 8-1: USB disconnect, device number 28 [ 1017.541429][T10914] usb 7-1: USB disconnect, device number 61 [ 1017.603023][ T5812] usb 5-1: device descriptor read/8, error -71 [ 1018.146431][T10914] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1018.416933][T10914] usb 7-1: Using ep0 maxpacket: 16 [ 1018.450870][T10914] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.494323][T10914] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1018.518958][T10914] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1018.528539][T10914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.536963][T10914] usb 7-1: Product: syz [ 1018.541163][T10914] usb 7-1: Manufacturer: syz [ 1018.545781][T10914] usb 7-1: SerialNumber: syz [ 1018.762821][T10914] usb 7-1: 0:2 : does not exist [ 1018.788797][T10914] usb 7-1: USB disconnect, device number 62 [ 1018.881742][ T8186] udevd[8186]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1019.927954][T17444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3017'. [ 1019.944547][T17444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3017'. [ 1019.955045][T17444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3017'. [ 1019.966411][T17444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3017'. [ 1020.831429][ T5812] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1020.916619][T10914] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1021.056959][ T5812] usb 8-1: Using ep0 maxpacket: 32 [ 1021.067402][ T5812] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1021.075570][ T5812] usb 8-1: config 0 has no interface number 0 [ 1021.085144][ T5812] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1021.086275][T10914] usb 6-1: device descriptor read/64, error -71 [ 1021.094834][ T5812] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.108806][ T5812] usb 8-1: Product: syz [ 1021.113001][ T5812] usb 8-1: Manufacturer: syz [ 1021.117658][ T5812] usb 8-1: SerialNumber: syz [ 1021.128953][ T5812] usb 8-1: config 0 descriptor?? [ 1021.141127][ T5812] smsc95xx v2.0.0 [ 1021.416661][T10914] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1021.754936][ T5812] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1021.767743][ T5812] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1021.767846][T10914] usb 6-1: device descriptor read/64, error -71 [ 1023.298494][T10914] usb usb6-port1: attempt power cycle [ 1023.693031][ T5812] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1023.735187][ T5812] smsc95xx: probe of 8-1:0.67 failed with error -71 [ 1023.772986][ T5812] usb 8-1: USB disconnect, device number 29 [ 1023.883696][T17466] loop4: detected capacity change from 0 to 1024 [ 1025.146143][T10914] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1025.406378][T10914] usb 6-1: Using ep0 maxpacket: 16 [ 1025.417050][T10914] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.429932][T10914] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1025.734168][T17462] loop6: detected capacity change from 0 to 32768 [ 1025.849780][T17462] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 1026.386867][T10914] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1026.525827][T10914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.621337][T10914] usb 6-1: Product: syz [ 1026.657992][T10914] usb 6-1: Manufacturer: syz [ 1026.662654][T10914] usb 6-1: SerialNumber: syz [ 1026.755885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1026.805877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1028.172318][ T8186] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 1028.293654][T10914] usb 6-1: 0:2 : does not exist [ 1028.340715][T10914] usb 6-1: USB disconnect, device number 110 [ 1028.511962][T17496] overlayfs: failed to resolve './file0': -2 [ 1030.016358][ T5812] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1030.205897][ T5812] usb 8-1: device descriptor read/64, error -71 [ 1030.505814][ T5812] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1031.313255][T14692] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1031.415753][ T5812] usb 8-1: device descriptor read/64, error -71 [ 1031.545931][ T5812] usb usb8-port1: attempt power cycle [ 1031.545934][T14692] usb 7-1: Using ep0 maxpacket: 32 [ 1031.619427][T14692] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1031.679924][T14692] usb 7-1: config 0 has no interface number 0 [ 1031.797645][T14692] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1031.863184][T14692] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.944058][T14692] usb 7-1: Product: syz [ 1031.979071][T14692] usb 7-1: Manufacturer: syz [ 1032.020283][T14692] usb 7-1: SerialNumber: syz [ 1032.129928][T14692] usb 7-1: config 0 descriptor?? [ 1032.244749][T14692] smsc95xx v2.0.0 [ 1032.395678][ T5812] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1032.440377][ T5812] usb 8-1: device descriptor read/8, error -71 [ 1032.456857][T17516] loop4: detected capacity change from 0 to 32768 [ 1032.493793][T17516] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1032.507478][T17516] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1032.516955][T17516] BTRFS info (device loop4): use zlib compression, level 3 [ 1032.524268][T17516] BTRFS info (device loop4): turning on sync discard [ 1032.532122][T17516] BTRFS info (device loop4): using free space tree [ 1032.577461][T17516] BTRFS info (device loop4): enabling ssd optimizations [ 1032.604154][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 1032.604172][ T28] audit: type=1800 audit(2000000152.778:1766): pid=17516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3038" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 1032.642876][T14692] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1032.654389][T14692] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1032.745674][ T5812] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1033.048680][ T5812] usb 8-1: device descriptor read/8, error -71 [ 1033.155317][T17120] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1033.177124][ T5812] usb usb8-port1: unable to enumerate USB device [ 1033.751627][T17546] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20004 [ 1034.023920][T14692] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1034.047772][T14692] smsc95xx: probe of 7-1:0.67 failed with error -61 [ 1034.275613][ T174] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1034.455659][ T174] usb 8-1: Using ep0 maxpacket: 16 [ 1034.464850][ T174] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.478948][ T174] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1034.490015][ T174] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1034.499363][ T174] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.507572][ T174] usb 8-1: Product: syz [ 1034.511772][ T174] usb 8-1: Manufacturer: syz [ 1034.516630][ T174] usb 8-1: SerialNumber: syz [ 1034.811427][ T174] usb 8-1: 0:2 : does not exist [ 1035.179372][ T174] usb 8-1: USB disconnect, device number 34 [ 1035.291718][ T968] usb 7-1: USB disconnect, device number 63 [ 1035.325258][ T8186] udevd[8186]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1036.225454][T17570] ceph: No mds server is up or the cluster is laggy [ 1036.513260][T17578] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3049'. [ 1036.650686][T17567] loop6: detected capacity change from 0 to 40427 [ 1036.665997][T17567] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 1036.678748][T17567] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1036.687210][T17567] F2FS-fs (loop6): Image doesn't support compression [ 1036.694806][T17567] F2FS-fs (loop6): Image doesn't support compression [ 1036.708942][T17567] F2FS-fs (loop6): invalid crc value [ 1036.755433][ T5812] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1036.815486][T10914] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1036.844446][T17567] F2FS-fs (loop6): Start checkpoint disabled! [ 1036.900362][T17567] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1036.907760][T17567] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1036.935408][ T5812] usb 6-1: device descriptor read/64, error -71 [ 1037.014816][ T49] kworker/u4:3: attempt to access beyond end of device [ 1037.014816][ T49] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1037.031078][T10914] usb 8-1: Using ep0 maxpacket: 16 [ 1037.039705][ T49] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1037.055230][T10914] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.069264][T10914] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1037.082334][T10914] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1037.091759][T10914] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 1037.102029][T10914] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.110263][T10914] usb 8-1: Product: syz [ 1037.114816][T10914] usb 8-1: Manufacturer: syz [ 1037.119601][T10914] usb 8-1: SerialNumber: syz [ 1037.128959][T10914] usb 8-1: config 0 descriptor?? [ 1037.216607][ T5812] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1037.353278][T10914] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1037.369110][T17584] loop4: detected capacity change from 0 to 64 [ 1037.395498][ T5812] usb 6-1: device descriptor read/64, error -71 [ 1037.414262][T10914] imon 8-1:0.0: unable to initialize intf0, err -19 [ 1037.435382][T10914] imon:imon_probe: failed to initialize context! [ 1037.441780][T10914] imon 8-1:0.0: unable to register, err -19 [ 1037.458830][T10914] usb 8-1: USB disconnect, device number 35 [ 1037.517186][ T5812] usb usb6-port1: attempt power cycle [ 1037.955526][ T5812] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1037.999017][ T5812] usb 6-1: device descriptor read/8, error -71 [ 1038.055876][T10914] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 1038.257685][T10914] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.268044][T10914] usb 8-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1038.281440][T10914] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1038.287359][ T5812] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1038.291314][T10914] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 1038.305040][T10914] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.313140][T10914] usb 8-1: Product: syz [ 1038.317401][T10914] usb 8-1: Manufacturer: syz [ 1038.322017][T10914] usb 8-1: SerialNumber: syz [ 1038.329989][T10914] usb 8-1: config 0 descriptor?? [ 1038.341821][ T5812] usb 6-1: device descriptor read/8, error -71 [ 1038.405705][ T5810] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1038.470441][ T5812] usb usb6-port1: unable to enumerate USB device [ 1038.543386][T10914] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1038.552723][T10914] imon 8-1:0.0: unable to initialize intf0, err -19 [ 1038.559598][T10914] imon:imon_probe: failed to initialize context! [ 1038.567168][T10914] imon 8-1:0.0: unable to register, err -19 [ 1038.595396][ T5810] usb 7-1: Using ep0 maxpacket: 32 [ 1038.607485][ T5810] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1038.617659][ T5810] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1038.633246][ T5810] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1038.670527][ T5810] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1038.683137][ T5810] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1038.731720][ T5810] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1038.848911][ T5810] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1038.920288][ T5810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.020735][ T5810] usb 7-1: config 0 descriptor?? [ 1039.409365][ T5810] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1039.644764][ T23] usb 7-1: USB disconnect, device number 64 [ 1039.661833][ T23] usblp0: removed [ 1039.793063][T17602] loop5: detected capacity change from 0 to 32768 [ 1039.808836][T17602] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.3059 (17602) [ 1039.829607][T17602] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1039.840098][T17602] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1039.848955][T17602] BTRFS info (device loop5): metadata ratio 0 [ 1039.855075][T17602] BTRFS info (device loop5): turning on sync discard [ 1039.861939][T17602] BTRFS info (device loop5): using free space tree [ 1039.909826][T17602] BTRFS info (device loop5): enabling ssd optimizations [ 1039.939226][ T28] audit: type=1800 audit(2000000160.118:1767): pid=17602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3059" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 1039.959926][ C0] vkms_vblank_simulate: vblank timer overrun [ 1040.005695][ T5812] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1040.030468][ T8183] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1040.205451][ T5812] usb 5-1: Using ep0 maxpacket: 16 [ 1040.236416][ T5812] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.254666][ T5812] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1040.282823][ T5812] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1040.309143][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.336766][ T5812] usb 5-1: Product: syz [ 1040.341021][ T5812] usb 5-1: Manufacturer: syz [ 1040.347273][ T5812] usb 5-1: SerialNumber: syz [ 1040.592669][ T5812] usb 5-1: 0:2 : does not exist [ 1040.600516][ T5812] usb 5-1: unit 17 not found! [ 1040.662704][ T5812] usb 5-1: USB disconnect, device number 114 [ 1040.704693][ T8186] udevd[8186]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1040.726697][ T5810] usb 8-1: USB disconnect, device number 36 [ 1041.365639][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 1043.715435][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 1043.754124][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 1043.797609][T17648] ceph: No mds server is up or the cluster is laggy [ 1044.058053][T17657] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3068'. [ 1044.223164][T17655] loop4: detected capacity change from 0 to 4096 [ 1045.019915][T17655] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1045.208234][T17671] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3070'. [ 1045.802783][T17674] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input163 [ 1046.843560][T17687] loop6: detected capacity change from 0 to 64 [ 1046.875569][ T968] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1047.014801][ T23] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1047.088368][ T968] usb 6-1: Using ep0 maxpacket: 16 [ 1047.109171][ T968] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.138523][ T968] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1047.170411][ T968] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1047.200015][ T968] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 1047.216913][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 1047.232487][ T968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.265333][ T968] usb 6-1: Product: syz [ 1047.269976][ T968] usb 6-1: Manufacturer: syz [ 1047.278894][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.290956][ T968] usb 6-1: SerialNumber: syz [ 1047.459511][T10914] libceph: connect (1)[c::]:6789 error -101 [ 1047.478291][T10914] libceph: mon0 (1)[c::]:6789 connect error [ 1047.793167][ T174] libceph: connect (1)[c::]:6789 error -101 [ 1047.870735][ T174] libceph: mon0 (1)[c::]:6789 connect error [ 1047.931413][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1047.941578][T17691] ceph: No mds server is up or the cluster is laggy [ 1047.944076][ T968] usb 6-1: config 0 descriptor?? [ 1047.956219][ T23] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1047.965539][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.974263][ T23] usb 5-1: Product: syz [ 1047.979117][ T23] usb 5-1: Manufacturer: syz [ 1047.983793][ T23] usb 5-1: SerialNumber: syz [ 1048.187545][ T968] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1048.206447][ T968] imon 6-1:0.0: unable to initialize intf0, err -19 [ 1048.213166][ T968] imon:imon_probe: failed to initialize context! [ 1048.220662][ T968] imon 6-1:0.0: unable to register, err -19 [ 1048.228711][ T23] usb 5-1: 0:2 : does not exist [ 1048.236663][ T23] usb 5-1: unit 255 not found! [ 1048.241891][ T968] usb 6-1: USB disconnect, device number 115 [ 1048.298857][ T23] usb 5-1: USB disconnect, device number 115 [ 1048.327373][T17697] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3075'. [ 1048.380018][ T8186] udevd[8186]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1049.335653][T17697] syz.7.3075 (17697) used greatest stack depth: 17720 bytes left [ 1049.379159][ T968] usb 6-1: new full-speed USB device number 116 using dummy_hcd [ 1049.521629][T17709] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3082'. [ 1050.843283][T11440] libceph: connect (1)[c::]:6789 error -101 [ 1050.932889][T11440] libceph: mon0 (1)[c::]:6789 connect error [ 1051.238658][T17732] ceph: No mds server is up or the cluster is laggy [ 1051.424664][ T5810] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1051.432375][T10914] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1051.639923][T10914] usb 8-1: Using ep0 maxpacket: 16 [ 1051.647684][ T5810] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1052.439677][T10914] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.454509][ T5810] usb 7-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1052.466290][T10914] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1052.475658][ T5810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.512474][ T5810] usb 7-1: config 0 descriptor?? [ 1052.520695][T10914] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1052.551720][T10914] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.582587][T10914] usb 8-1: Product: syz [ 1052.597196][T10914] usb 8-1: Manufacturer: syz [ 1052.614728][ T5810] usb 7-1: can't set config #0, error -71 [ 1052.623724][T10914] usb 8-1: SerialNumber: syz [ 1052.629008][T17743] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3092'. [ 1052.642160][ T5810] usb 7-1: USB disconnect, device number 65 [ 1052.875331][T10914] usb 8-1: 0:2 : does not exist [ 1052.889525][T10914] usb 8-1: unit 17 not found! [ 1052.967067][T14692] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1052.990030][T17748] loop6: detected capacity change from 0 to 1024 [ 1053.319220][T14692] usb 5-1: Using ep0 maxpacket: 16 [ 1053.363656][T10914] usb 8-1: USB disconnect, device number 37 [ 1053.481975][T14692] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.711004][T14692] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1053.800999][T14692] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1053.847104][ T8199] udevd[8199]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1053.898796][T14692] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 1053.913549][T14692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.922541][T14692] usb 5-1: Product: syz [ 1053.932614][T14692] usb 5-1: Manufacturer: syz [ 1053.937589][T14692] usb 5-1: SerialNumber: syz [ 1053.980091][T17750] loop6: detected capacity change from 0 to 1024 [ 1053.985552][T14692] usb 5-1: config 0 descriptor?? [ 1054.198803][T14692] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1054.219823][T14692] imon 5-1:0.0: unable to initialize intf0, err -19 [ 1054.230633][T14692] imon:imon_probe: failed to initialize context! [ 1054.239496][T14692] imon 5-1:0.0: unable to register, err -19 [ 1054.252060][T14692] usb 5-1: USB disconnect, device number 116 [ 1054.344413][T10914] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1054.544400][T10914] usb 6-1: Using ep0 maxpacket: 32 [ 1054.561571][T10914] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 1054.572549][T10914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1054.586529][T10914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1054.599553][T10914] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1054.608884][T10914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.688741][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.702639][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.252699][T10914] usb 6-1: Product: syz [ 1055.256990][T10914] usb 6-1: Manufacturer: syz [ 1055.356997][T10914] usb 6-1: SerialNumber: syz [ 1055.365940][T10914] usb 6-1: config 0 descriptor?? [ 1055.390552][T17769] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3101'. [ 1055.427998][T14692] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 1055.625998][T14692] usb 5-1: device descriptor read/all, error -71 [ 1056.432632][T17776] loop7: detected capacity change from 0 to 64 [ 1056.809193][T17782] loop4: detected capacity change from 0 to 32768 [ 1056.823568][T17782] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3106 (17782) [ 1056.840304][T17782] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1056.851004][T17782] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1056.859766][T17782] BTRFS info (device loop4): use zlib compression, level 3 [ 1056.867824][T17782] BTRFS info (device loop4): turning on sync discard [ 1056.874875][T17782] BTRFS info (device loop4): using free space tree [ 1056.908107][T17782] BTRFS info (device loop4): enabling ssd optimizations [ 1056.938785][ T28] audit: type=1800 audit(2000000177.119:1768): pid=17782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3106" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 1056.976930][T11440] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1056.994531][T10914] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1057.204754][T11440] usb 8-1: Using ep0 maxpacket: 16 [ 1057.290352][T11440] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.418641][T11440] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1057.557775][T11440] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1057.572636][ T968] usb 6-1: USB disconnect, device number 117 [ 1057.612139][T11440] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.657750][T17120] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1057.672762][T11440] usb 8-1: Product: syz [ 1057.677452][T11440] usb 8-1: Manufacturer: syz [ 1057.694263][T11440] usb 8-1: SerialNumber: syz [ 1057.718103][T10914] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1057.739683][T10914] usb 7-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1057.750228][T10914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.781222][T10914] usb 7-1: config 0 descriptor?? [ 1057.930652][T11440] usb 8-1: 0:2 : does not exist [ 1057.941741][T11440] usb 8-1: unit 6 not found! [ 1057.948174][T17806] binder: BINDER_SET_CONTEXT_MGR already set [ 1057.966679][T17806] binder: 17805:17806 ioctl 4018620d 200000000040 returned -16 [ 1057.988293][T11440] usb 8-1: USB disconnect, device number 38 [ 1058.171728][ T8199] udevd[8199]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1058.373719][T10914] elecom 0003:056E:011C.0041: item fetching failed at offset 2/40 [ 1058.403283][T10914] elecom: probe of 0003:056E:011C.0041 failed with error -22 [ 1059.268461][T14692] usb 7-1: USB disconnect, device number 66 [ 1059.401565][T17823] loop7: detected capacity change from 0 to 256 [ 1059.411086][T17823] exfat: Deprecated parameter 'utf8' [ 1059.416724][T17823] exfat: Deprecated parameter 'utf8' [ 1059.422825][T17823] exfat: Deprecated parameter 'namecase' [ 1059.584275][T17813] IPVS: Scheduler module ip_vs_ not found [ 1059.617580][T10914] Process accounting resumed [ 1059.788036][T17823] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1060.637154][T17828] input: syz0 as /devices/virtual/input/input164 [ 1061.099828][T17833] loop5: detected capacity change from 0 to 512 [ 1061.157481][T17833] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1061.841623][T17838] loop6: detected capacity change from 0 to 32768 [ 1061.872812][T17838] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.3117 (17838) [ 1061.963489][T17838] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1061.973753][T17838] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 1061.983689][T17838] BTRFS info (device loop6): use zlib compression, level 3 [ 1061.991042][T17838] BTRFS info (device loop6): turning on sync discard [ 1061.997842][T17838] BTRFS info (device loop6): using free space tree [ 1062.018712][T17833] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1062.074198][T17833] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1062.169926][T17838] BTRFS info (device loop6): enabling ssd optimizations [ 1062.191414][T17833] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3116: corrupted xattr block 33: invalid header [ 1062.222577][T17833] fscrypt (loop5, inode 15): Error -117 getting encryption context [ 1062.254633][ T28] audit: type=1800 audit(2000000182.430:1769): pid=17838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3117" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 1064.522250][ T8183] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.818600][T16848] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1065.723299][T14692] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1065.983958][T14692] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1066.029910][T14692] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.054676][T14692] usb 6-1: Product: syz [ 1066.290898][T17835] libceph: connect (1)[c::]:6789 error -101 [ 1066.382283][T17835] libceph: mon0 (1)[c::]:6789 connect error [ 1066.671682][T17881] ceph: No mds server is up or the cluster is laggy [ 1066.688630][T14692] usb 6-1: Manufacturer: syz [ 1066.693278][T14692] usb 6-1: SerialNumber: syz [ 1066.734847][T14692] usb 6-1: config 0 descriptor?? [ 1066.960112][T17885] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3125'. [ 1067.127325][T17877] loop7: detected capacity change from 0 to 32768 [ 1067.152233][T14692] usb 6-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1067.173922][T14692] usb 6-1: Firmware version (0.0) predates our first public release. [ 1067.200217][T17877] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1067.209403][T14692] usb 6-1: Please update to version 0.2 or newer [ 1067.299674][T17877] XFS (loop7): Ending clean mount [ 1067.430552][T14692] usb 6-1: USB disconnect, device number 118 [ 1067.539743][T17880] loop4: detected capacity change from 0 to 32768 [ 1067.550349][T16320] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1067.712605][T17880] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 1067.807126][T17880] JBD2: Ignoring recovery information on journal [ 1067.823979][ T5812] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1067.968454][T17880] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1068.201092][ T5812] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1068.786559][ T5812] usb 7-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1068.846553][ T5812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.863660][ T5812] usb 7-1: config 0 descriptor?? [ 1069.451609][ T5812] elecom 0003:056E:011C.0042: item fetching failed at offset 2/40 [ 1069.469438][ T5812] elecom: probe of 0003:056E:011C.0042 failed with error -22 [ 1070.013363][T17120] ocfs2: Unmounting device (7,4) on (node local) [ 1070.121231][T17919] loop7: detected capacity change from 0 to 256 [ 1070.737317][ T5810] usb 7-1: USB disconnect, device number 67 [ 1076.003164][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 1076.183755][ T5812] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1076.403150][ T5812] usb 8-1: Using ep0 maxpacket: 8 [ 1076.414352][ T5812] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1076.438465][ T5812] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1076.449231][ T5812] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1076.469699][ T5812] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1076.503188][ T5812] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1076.539229][ T5812] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1076.563479][ T5812] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.614245][ T5812] usbtmc: probe of 8-1:16.0 failed with error -22 [ 1076.641176][T17967] loop4: detected capacity change from 0 to 32768 [ 1076.661901][T17967] (syz.4.3148,17967,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1076.682109][T17967] (syz.4.3148,17967,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1076.782554][T17967] JBD2: Ignoring recovery information on journal [ 1076.815182][T17967] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1076.865087][T17956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.905715][T17956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.036524][ T28] audit: type=1800 audit(2000000197.221:1770): pid=17967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3148" name="file1" dev="loop4" ino=16978 res=0 errno=0 [ 1077.220102][ T28] audit: type=1800 audit(2000000197.401:1771): pid=17967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3148" name="file1" dev="loop4" ino=16978 res=0 errno=0 [ 1078.063771][T17967] [ 1078.066159][T17967] ====================================================== [ 1078.073195][T17967] WARNING: possible circular locking dependency detected [ 1078.080236][T17967] syzkaller #0 Not tainted [ 1078.084645][T17967] ------------------------------------------------------ [ 1078.091655][T17967] syz.4.3148/17967 is trying to acquire lock: [ 1078.097731][T17967] ffff888078b0df58 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_del_inode_from_orphan+0x12f/0x7b0 [ 1078.110753][T17967] [ 1078.110753][T17967] but task is already holding lock: [ 1078.118108][T17967] ffff888078b0ed98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1078.131328][T17967] [ 1078.131328][T17967] which lock already depends on the new lock. [ 1078.131328][T17967] [ 1078.141763][T17967] [ 1078.141763][T17967] the existing dependency chain (in reverse order) is: [ 1078.150771][T17967] [ 1078.150771][T17967] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 1078.161283][T17967] down_write+0x97/0x200 [ 1078.166149][T17967] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1078.172595][T17967] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 1078.179471][T17967] ocfs2_mknod+0xea5/0x2310 [ 1078.184513][T17967] ocfs2_create+0x196/0x430 [ 1078.189536][T17967] path_openat+0x1705/0x3270 [ 1078.194769][T17967] do_filp_open+0x1f2/0x430 [ 1078.199815][T17967] do_sys_openat2+0x134/0x1d0 [ 1078.205037][T17967] __x64_sys_creat+0x90/0xb0 [ 1078.210140][T17967] do_syscall_64+0x55/0xb0 [ 1078.215158][T17967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1078.221666][T17967] [ 1078.221666][T17967] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 1078.232169][T17967] down_write+0x97/0x200 [ 1078.236925][T17967] ocfs2_evict_inode+0x1daa/0x41a0 [ 1078.242547][T17967] evict+0x4b7/0x8a0 [ 1078.246997][T17967] ocfs2_dentry_iput+0x24e/0x390 [ 1078.252450][T17967] __dentry_kill+0x412/0x630 [ 1078.257551][T17967] dentry_kill+0xb8/0x290 [ 1078.262399][T17967] dput+0xfe/0x1e0 [ 1078.266641][T17967] do_renameat2+0x8c0/0xc80 [ 1078.271656][T17967] __x64_sys_rename+0x86/0x90 [ 1078.276848][T17967] do_syscall_64+0x55/0xb0 [ 1078.281798][T17967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1078.288207][T17967] [ 1078.288207][T17967] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}: [ 1078.298530][T17967] __lock_acquire+0x37ef/0x7d80 [ 1078.303965][T17967] lock_acquire+0x19e/0x420 [ 1078.308981][T17967] down_write+0x97/0x200 [ 1078.313844][T17967] ocfs2_del_inode_from_orphan+0x12f/0x7b0 [ 1078.320221][T17967] ocfs2_dio_end_io+0x107a/0x13f0 [ 1078.325766][T17967] dio_complete+0x24c/0x710 [ 1078.330778][T17967] __blockdev_direct_IO+0x2c42/0x32e0 [ 1078.336661][T17967] ocfs2_direct_IO+0x235/0x2a0 [ 1078.341935][T17967] generic_file_direct_write+0x1c9/0x3e0 [ 1078.348107][T17967] __generic_file_write_iter+0x11b/0x230 [ 1078.354281][T17967] ocfs2_file_write_iter+0x1724/0x1ef0 [ 1078.360256][T17967] do_iter_write+0x747/0xc50 [ 1078.365365][T17967] iter_file_splice_write+0x6b6/0xcf0 [ 1078.371254][T17967] direct_splice_actor+0xe8/0x130 [ 1078.376815][T17967] splice_direct_to_actor+0x30b/0x8e0 [ 1078.382717][T17967] do_splice_direct+0x1d5/0x2f0 [ 1078.388094][T17967] do_sendfile+0x52b/0xe80 [ 1078.393057][T17967] __se_sys_sendfile64+0x145/0x1a0 [ 1078.398698][T17967] do_syscall_64+0x55/0xb0 [ 1078.403734][T17967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1078.410161][T17967] [ 1078.410161][T17967] other info that might help us debug this: [ 1078.410161][T17967] [ 1078.420465][T17967] Chain exists of: [ 1078.420465][T17967] &ocfs2_sysfile_lock_key[args->fi_sysfile_type] --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 [ 1078.420465][T17967] [ 1078.441919][T17967] Possible unsafe locking scenario: [ 1078.441919][T17967] [ 1078.449366][T17967] CPU0 CPU1 [ 1078.454715][T17967] ---- ---- [ 1078.460060][T17967] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 1078.467338][T17967] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 1078.477227][T17967] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 1078.487349][T17967] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]); [ 1078.494486][T17967] [ 1078.494486][T17967] *** DEADLOCK *** [ 1078.494486][T17967] [ 1078.502623][T17967] 3 locks held by syz.4.3148/17967: [ 1078.507840][T17967] #0: ffff88807d9ec418 (sb_writers#29){.+.+}-{0:0}, at: do_sendfile+0x506/0xe80 [ 1078.516992][T17967] #1: ffff88805d0fdf58 (&sb->s_type->i_mutex_key#33){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x441/0x1ef0 [ 1078.528313][T17967] #2: ffff888078b0ed98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1078.541961][T17967] [ 1078.541961][T17967] stack backtrace: [ 1078.547844][T17967] CPU: 0 PID: 17967 Comm: syz.4.3148 Not tainted syzkaller #0 [ 1078.555300][T17967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1078.565385][T17967] Call Trace: [ 1078.568725][T17967] [ 1078.571723][T17967] dump_stack_lvl+0x18c/0x250 [ 1078.576480][T17967] ? load_image+0x420/0x420 [ 1078.581159][T17967] ? show_regs_print_info+0x20/0x20 [ 1078.586361][T17967] ? print_circular_bug+0x12b/0x1a0 [ 1078.591651][T17967] check_noncircular+0x2fc/0x400 [ 1078.596583][T17967] ? print_deadlock_bug+0x5d0/0x5d0 [ 1078.601858][T17967] ? lockdep_lock+0xf5/0x230 [ 1078.606464][T17967] ? _find_first_zero_bit+0xd6/0x100 [ 1078.611806][T17967] __lock_acquire+0x37ef/0x7d80 [ 1078.616661][T17967] ? verify_lock_unused+0x140/0x140 [ 1078.621866][T17967] ? __lock_acquire+0x7d80/0x7d80 [ 1078.626906][T17967] ? verify_lock_unused+0x140/0x140 [ 1078.632100][T17967] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1078.637730][T17967] ? do_raw_spin_lock+0x11f/0x2b0 [ 1078.642847][T17967] ? mutex_unlock+0x10/0x10 [ 1078.647346][T17967] lock_acquire+0x19e/0x420 [ 1078.651837][T17967] ? ocfs2_del_inode_from_orphan+0x12f/0x7b0 [ 1078.657807][T17967] ? ocfs2_get_system_file_inode+0x1f1/0x820 [ 1078.663784][T17967] ? __might_sleep+0xe0/0xe0 [ 1078.668402][T17967] ? read_lock_is_recursive+0x20/0x20 [ 1078.673765][T17967] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 1078.680099][T17967] ? reacquire_held_locks+0x31f/0x5c0 [ 1078.685475][T17967] down_write+0x97/0x200 [ 1078.689753][T17967] ? ocfs2_del_inode_from_orphan+0x12f/0x7b0 [ 1078.695733][T17967] ? down_read_killable+0x340/0x340 [ 1078.700945][T17967] ? print_unlock_imbalance_bug+0x160/0x160 [ 1078.706856][T17967] ocfs2_del_inode_from_orphan+0x12f/0x7b0 [ 1078.712674][T17967] ? ocfs2_add_inode_to_orphan+0x7b0/0x7b0 [ 1078.718480][T17967] ? ocfs2_dio_end_io+0xf9b/0x13f0 [ 1078.723591][T17967] ? __lock_acquire+0x7d80/0x7d80 [ 1078.728614][T17967] ? sb_end_intwrite+0xe9/0x1c0 [ 1078.733462][T17967] ? ocfs2_commit_trans+0x134/0x250 [ 1078.738742][T17967] ? sb_end_intwrite+0x1c0/0x1c0 [ 1078.743706][T17967] ? up_write+0x1be/0x410 [ 1078.748044][T17967] ocfs2_dio_end_io+0x107a/0x13f0 [ 1078.753063][T17967] ? ocfs2_dio_wr_get_block+0x1820/0x1820 [ 1078.758777][T17967] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1078.764754][T17967] ? ocfs2_initialize_journal_triggers+0x540/0x540 [ 1078.771341][T17967] ? debug_check_no_obj_freed+0x47b/0x520 [ 1078.777053][T17967] ? mark_lock+0x94/0x320 [ 1078.781377][T17967] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1078.787348][T17967] ? __lock_acquire+0x7d80/0x7d80 [ 1078.792359][T17967] ? lock_chain_count+0x20/0x20 [ 1078.797193][T17967] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1078.803078][T17967] ? lockdep_hardirqs_on+0x98/0x150 [ 1078.808261][T17967] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1078.814142][T17967] ? ocfs2_dio_wr_get_block+0x1820/0x1820 [ 1078.819850][T17967] dio_complete+0x24c/0x710 [ 1078.824370][T17967] __blockdev_direct_IO+0x2c42/0x32e0 [ 1078.829755][T17967] ? show_vfsstat+0x3c0/0x3c0 [ 1078.834429][T17967] ? ocfs2_lock_get_block+0x60/0x60 [ 1078.839625][T17967] ? filemap_write_and_wait_range+0x1a5/0x230 [ 1078.845692][T17967] ? lock_chain_count+0x20/0x20 [ 1078.850529][T17967] ? __rwlock_init+0x150/0x150 [ 1078.855291][T17967] ? ocfs2_lock_get_block+0x60/0x60 [ 1078.860476][T17967] ocfs2_direct_IO+0x235/0x2a0 [ 1078.865233][T17967] generic_file_direct_write+0x1c9/0x3e0 [ 1078.870854][T17967] __generic_file_write_iter+0x11b/0x230 [ 1078.876472][T17967] ? ocfs2_file_write_iter+0x16fe/0x1ef0 [ 1078.882092][T17967] ocfs2_file_write_iter+0x1724/0x1ef0 [ 1078.887542][T17967] ? __lock_acquire+0x7d80/0x7d80 [ 1078.892553][T17967] ? stack_trace_save+0x100/0x100 [ 1078.897567][T17967] ? ocfs2_file_read_iter+0xa90/0xa90 [ 1078.902938][T17967] ? kasan_set_track+0x5f/0x70 [ 1078.907698][T17967] ? aa_path_link+0xf80/0xf80 [ 1078.912395][T17967] ? iter_file_splice_write+0x1a4/0xcf0 [ 1078.917954][T17967] ? direct_splice_actor+0xe8/0x130 [ 1078.923235][T17967] ? splice_direct_to_actor+0x30b/0x8e0 [ 1078.928770][T17967] ? do_splice_direct+0x1d5/0x2f0 [ 1078.933792][T17967] ? do_sendfile+0x52b/0xe80 [ 1078.938381][T17967] ? __se_sys_sendfile64+0x145/0x1a0 [ 1078.943711][T17967] ? do_syscall_64+0x55/0xb0 [ 1078.948293][T17967] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1078.954351][T17967] ? end_current_label_crit_section+0x149/0x170 [ 1078.960576][T17967] ? common_file_perm+0x198/0x1f0 [ 1078.965597][T17967] do_iter_write+0x747/0xc50 [ 1078.970180][T17967] ? vfs_iter_write+0xa0/0xa0 [ 1078.974864][T17967] ? __asan_memset+0x22/0x40 [ 1078.979440][T17967] ? iov_iter_bvec+0xd4/0x1b0 [ 1078.984102][T17967] ? vfs_iter_write+0x6e/0xa0 [ 1078.988786][T17967] iter_file_splice_write+0x6b6/0xcf0 [ 1078.994161][T17967] ? splice_from_pipe+0x180/0x180 [ 1078.999193][T17967] ? splice_folio_into_pipe+0xb40/0xb40 [ 1079.004906][T17967] ? splice_from_pipe+0x180/0x180 [ 1079.009957][T17967] direct_splice_actor+0xe8/0x130 [ 1079.014980][T17967] splice_direct_to_actor+0x30b/0x8e0 [ 1079.020351][T17967] ? direct_file_splice_eof+0xb0/0xb0 [ 1079.025720][T17967] ? warn_unsupported+0xc0/0xc0 [ 1079.030573][T17967] ? fsnotify_perm+0x5d/0x5e0 [ 1079.035297][T17967] ? security_file_permission+0x79/0xa0 [ 1079.040942][T17967] do_splice_direct+0x1d5/0x2f0 [ 1079.045789][T17967] ? splice_direct_to_actor+0x8e0/0x8e0 [ 1079.051339][T17967] ? rcu_read_lock_any_held+0xb4/0x140 [ 1079.056792][T17967] ? do_splice_direct+0x2f0/0x2f0 [ 1079.061823][T17967] do_sendfile+0x52b/0xe80 [ 1079.066243][T17967] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1079.072153][T17967] ? do_pwritev+0x3a0/0x3a0 [ 1079.076661][T17967] __se_sys_sendfile64+0x145/0x1a0 [ 1079.081859][T17967] ? lock_chain_count+0x20/0x20 [ 1079.086699][T17967] ? __x64_sys_sendfile64+0xb0/0xb0 [ 1079.091899][T17967] ? lockdep_hardirqs_on+0x98/0x150 [ 1079.097111][T17967] do_syscall_64+0x55/0xb0 [ 1079.101559][T17967] ? clear_bhb_loop+0x40/0x90 [ 1079.106226][T17967] ? clear_bhb_loop+0x40/0x90 [ 1079.110909][T17967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1079.116826][T17967] RIP: 0033:0x7efe4559de59 [ 1079.121313][T17967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.141050][T17967] RSP: 002b:00007efe437f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1079.149462][T17967] RAX: ffffffffffffffda RBX: 00007efe45825fa0 RCX: 00007efe4559de59 [ 1079.157432][T17967] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1079.165398][T17967] RBP: 00007efe45633e6f R08: 0000000000000000 R09: 0000000000000000 [ 1079.173388][T17967] R10: 0000000000fffe82 R11: 0000000000000246 R12: 0000000000000000 [ 1079.181440][T17967] R13: 00007efe45826038 R14: 00007efe45825fa0 R15: 00007ffffc23b568 [ 1079.189412][T17967] [ 1079.256514][T17835] usb 8-1: USB disconnect, device number 39 [ 1079.704357][T17120] ocfs2: Unmounting device (7,4) on (node local) [ 1081.372952][ T5783] Bluetooth: hci2: command 0x0406 tx timeout