last executing test programs: 30m28.351022106s ago: executing program 32 (id=1872): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vud', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') 29m42.595023769s ago: executing program 33 (id=1931): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000004000)=""/4099, 0x1003) 26m23.407474127s ago: executing program 4 (id=2258): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000900)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000c00)='tcp\x00', 0x3) r6 = openat(r4, 0x0, 0x18b040, 0x48) write(r6, &(0x7f0000000e00), 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r7, &(0x7f0000001200)='4420\x00', 0x4) symlinkat(&(0x7f0000001300)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/nvmet/ports/1/subsystems/testnqn\x00') socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 26m21.346944297s ago: executing program 4 (id=2261): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b000100000001090401"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) 26m16.74768518s ago: executing program 4 (id=2266): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000580)=ANY=[@ANYBLOB="61756469742c67e1506910fc83995f747970653d696d9e2343237846886d617369672c736d61636b667368"]) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mount(0x0, 0x0, 0x0, 0x44021, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) openat$null(0xffffff9c, 0x0, 0x101201, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x5, 0x5}, &(0x7f00000000c0)=0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) 26m14.814259388s ago: executing program 4 (id=2268): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000900)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000c00)='tcp\x00', 0x3) r6 = openat(r4, 0x0, 0x18b040, 0x48) write(r6, &(0x7f0000000e00), 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r7, &(0x7f0000001200)='4420\x00', 0x4) symlinkat(&(0x7f0000001300)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/nvmet/ports/1/subsystems/testnqn\x00') socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 26m14.262549561s ago: executing program 4 (id=2272): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000000640)={0x8, {"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", 0x1000}}, 0x1006) r1 = openat(r0, &(0x7f0000000400)='test\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000500)='A', 0x1000) 26m13.926690169s ago: executing program 4 (id=2275): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400", @ANYRESOCT], 0x0, 0x52, 0x0, 0x0, 0x0, 0xa8df18d3c16445e8}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001380)=@generic={&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x14) socket(0x400000000010, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8004, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c00, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) mount(0x0, 0x0, &(0x7f00000000c0)='ufs\x00', 0x81, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x48000, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000080)={0x6}) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000", @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf2570000000"], 0x14}, 0x1, 0x0, 0x0, 0x44100}, 0x4000000) r3 = accept4(r0, 0x0, 0x0, 0x80000) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x0, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0x7fff]}}) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x7fffffffffffffff) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x2, 0x2, 0x2, 0xfffffffa, 0x5, 0xc72}) mq_open(&(0x7f0000000000)='::%\x00', 0x40, 0x80, &(0x7f00000000c0)={0x1, 0x4c, 0x76}) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x100010, 0xffffffffffffffff, 0x0) r6 = openat$btrfs_control(0xffffff9c, &(0x7f0000000080), 0x640040, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000702, r7, &(0x7f0000000480)) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@local, @in=@loopback}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in=@dev}}, &(0x7f0000000580)=0xe4) geteuid() 25m58.175070786s ago: executing program 34 (id=2275): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400", @ANYRESOCT], 0x0, 0x52, 0x0, 0x0, 0x0, 0xa8df18d3c16445e8}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001380)=@generic={&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x14) socket(0x400000000010, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8004, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c00, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) mount(0x0, 0x0, &(0x7f00000000c0)='ufs\x00', 0x81, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x48000, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000080)={0x6}) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000", @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf2570000000"], 0x14}, 0x1, 0x0, 0x0, 0x44100}, 0x4000000) r3 = accept4(r0, 0x0, 0x0, 0x80000) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x0, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0x7fff]}}) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x7fffffffffffffff) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x2, 0x2, 0x2, 0xfffffffa, 0x5, 0xc72}) mq_open(&(0x7f0000000000)='::%\x00', 0x40, 0x80, &(0x7f00000000c0)={0x1, 0x4c, 0x76}) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x100010, 0xffffffffffffffff, 0x0) r6 = openat$btrfs_control(0xffffff9c, &(0x7f0000000080), 0x640040, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000702, r7, &(0x7f0000000480)) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@local, @in=@loopback}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in=@dev}}, &(0x7f0000000580)=0xe4) geteuid() 25m33.94848287s ago: executing program 5 (id=2317): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r3, &(0x7f0000000700)='\x00'/32, 0x20) 25m32.228286652s ago: executing program 5 (id=2319): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="00000000090219000101e380320904000001ff0000000705810240be8bdede397d0010ee011900010100803209040000", 0x30) 25m32.004051728s ago: executing program 5 (id=2320): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x21, @loopback, 0x4e20, 0x2, 'wrr\x00', 0x2, 0xd213, 0x3e}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x18, 0x1, 0x1, [r2, r2]}}], 0x18}, 0x0) recvmmsg$unix(r2, &(0x7f0000006f00)=[{{&(0x7f00000071c0)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000200)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000d0000000180100002001752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x40044160, 0x3) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES8=r4, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x20004850) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r10 = syz_open_dev$vim2m(&(0x7f0000000240), 0xfffffff0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000040)={0xf0f023}) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000300)={0x2, @sliced={0x3a, [0x4, 0xd, 0xb82e, 0x9, 0x8, 0x5, 0x7, 0x8, 0x7fff, 0x3, 0x3, 0x40, 0x8, 0x6, 0x4, 0x6, 0x3, 0xfffc, 0xffff, 0x60, 0x1, 0x3, 0x7fff, 0xa, 0x43, 0x6, 0x0, 0x4, 0x9, 0x7, 0x3, 0x4, 0x6, 0xc, 0x7, 0x3, 0x1, 0x1, 0x4, 0x8, 0x4, 0x2, 0x8000, 0x8, 0x800, 0x1, 0x0, 0x81], 0x7fb}}) r11 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) write$binfmt_misc(r11, &(0x7f0000000700)="88fec60819982bfc40abf8b6955c6d7846a51ab0b7eeb258c2e97e29eb168300106b327c29837004fc62420cba9a67d858ba410e565d083a8b899220763871de17259f546a84f78d5f786d3d183aedcb2b8a06ccd6f861cdd21c10ad32db9b13ac552caa1a174ef91c3bb445f2d55ba967b2e5399aa36d2c4190175e8c8a23626649f1ad537bce8d76981629f824ae9f9696f186576cf2e38fbea50a326c1274c247c9a400c3d3", 0xa7) r12 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r13 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r13, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r12, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) 25m31.790274253s ago: executing program 5 (id=2321): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x161800) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fsopen(&(0x7f0000000180)='hfsplus\x00', 0x1) r4 = syz_open_dev$media(&(0x7f00000006c0), 0xb893, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x7c80, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000001c0)='hash:net,net\x00', 0x0, r0) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003180)=@any_dev={0x1, 0x881, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x14}}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xc8) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)) r7 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x4c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) close(r6) 25m31.51532163s ago: executing program 5 (id=2322): syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003b2000/0x4000)=nil) socket(0x40000000015, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) lseek(r1, 0x800, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000001c0)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(0x3) 25m29.06092186s ago: executing program 5 (id=2325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc094}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r3, @ANYBLOB="94e40700100c000064001280110001006272696467655f736c617665000000004c0005800800030001000000050021000000000005001b00"], 0x84}}, 0x200088c2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f5101007f51010049f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x6, 0x4, 0x3, 0x25, 0x7, 0x67, 0xfffd, 0x3, 0x2, 0x0, @local, @private=0xa010101, {[@timestamp={0x44, 0x4, 0x16, 0x0, 0x6}]}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)={0x28, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r8, 0x0, 0x0}, 0x10) 25m13.103813662s ago: executing program 35 (id=2325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc094}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r3, @ANYBLOB="94e40700100c000064001280110001006272696467655f736c617665000000004c0005800800030001000000050021000000000005001b00"], 0x84}}, 0x200088c2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f5101007f51010049f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x6, 0x4, 0x3, 0x25, 0x7, 0x67, 0xfffd, 0x3, 0x2, 0x0, @local, @private=0xa010101, {[@timestamp={0x44, 0x4, 0x16, 0x0, 0x6}]}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)={0x28, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r8, 0x0, 0x0}, 0x10) 19m45.340403495s ago: executing program 2 (id=2696): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x80) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 19m45.338836035s ago: executing program 2 (id=2700): syz_emit_ethernet(0x27, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000700)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x20000005, 0x1}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002e40)={0x1c, 0x11, &(0x7f0000001500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x7}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f00000015c0)='GPL\x00', 0xfe50, 0x1000, &(0x7f0000001600)=""/4096, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000002700)={0x20000004, 0x5}, 0x8, 0x10, &(0x7f0000002740)={0x5, 0x10, 0x80000001, 0x400}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1], &(0x7f0000002e00), 0x10, 0x6}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x185}}, 0x20) write$P9_RLERRORu(r2, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x96) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$apparmor_exec(r5, &(0x7f00000002c0)={'exec ', ':\x00\b\xc4\x99\x10\tI\xc22b\xe8\r\xfa\xc1\xd6[Wk\x8c\xe9\x1e\xf3\xf8-\b\xd4-\xce\xeapE\xb53&\v\xa0\xd3\v#E\xc4I\x97\xfd\x10\xd5m\x0e,B{<\xa7:\xc2\njN\f\xf5}\xdes\xab\xc9\xd5\x9b\x80I\x83\x8b\x1c\x00\x9ci\x9a\x03\xdd\xd6t\xe5we\n\xb0(L\x95\xf7P\x1f\x95\x06\x01\xb8\xa3\"\xc7M\x9e\xdfk\xc0j\xea\x1f\xf1\xa4&\x95)\xff\xa5\xe9\b\x80\xf10t\xc5B\xe5an\xb8+;\x86\v_\x18tX\xe5\f\xef\x0fO\x10Y!\a\xad\xe7\x94\x96gPs\'Y!7\xc2\v^wt\xe5\x1a\xdc`\xeeQo\xd2|<\xd9\x84\v\x1c%V8\"\x14\xea(tm\xf6\xa5\xd6\xd7\xd5\xec\x9b\x12\xa6\xd5\x1c\x19\x99\xe7\xa0\t\x1b\xfd\nZ%\xfeC\x06^\'^K\x8c\x95\x13\x9e\x8a\f+\x83c\xc0\xfd}'}, 0xe3) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read(r7, &(0x7f0000000500)=""/4096, 0x1000) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00i', 0xc) r8 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$inet6(r8, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)}], 0x1}, 0xff03}], 0x2, 0x8000) 19m45.319176156s ago: executing program 2 (id=2705): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) shutdown(r0, 0x0) 19m45.14411489s ago: executing program 2 (id=2707): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000500)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x10, @local}, {0xa, 0x0, 0x7ffffffe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa8a9}, r1, 0x2}}, 0x48) 19m45.030020563s ago: executing program 2 (id=2709): syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000001c0)={0x1, [0x1]}, 0x6) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x404, 0x200, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={0x0, 0x80, 0x30}, &(0x7f0000000380)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000003c0)={r2, 0x1ff}, 0x8) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040080) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x5080, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1a) syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x6082, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x4000000) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000940)={0x0, 'team_slave_0\x00', {0x2}, 0x8}) 19m44.800011178s ago: executing program 2 (id=2711): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0xe61c1323c3c20c32) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000b1d000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close_range(r4, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0x0, 0x346f, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) 19m29.471262684s ago: executing program 36 (id=2711): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0xe61c1323c3c20c32) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000b1d000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close_range(r4, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0x0, 0x346f, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) 4m49.384475803s ago: executing program 7 (id=5487): prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") symlink(&(0x7f0000000580)='.\x02\x00', &(0x7f00000002c0)='.\x02\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 4m43.984218395s ago: executing program 7 (id=5501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f0000000380)="c8", 0x1}], 0x1, 0x31, 0x4, 0x0) 4m42.736113476s ago: executing program 7 (id=5505): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f00000014c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000740)={0x10, &(0x7f0000000200)={0x0, 0xf}, 0x0, 0x0}) 4m36.126541327s ago: executing program 7 (id=5512): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000380)=[@register_looper], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x20, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m35.029165434s ago: executing program 7 (id=5516): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7fc}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x4d, 0x82, 0xfa, 0x0, 0x77, 0x9, 0x8, 0x58, 0x0, 0x17, 0x9}, 0xe) recvmmsg(r0, &(0x7f0000005380)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000022, 0x0) 4m33.14498142s ago: executing program 7 (id=5521): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x20008050) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4080) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000002c0), 0x4) 4m17.846040973s ago: executing program 37 (id=5521): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x20008050) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4080) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000002c0), 0x4) 3m34.237770308s ago: executing program 6 (id=5590): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_RT_PRIORITY={0x31, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) 3m33.494345317s ago: executing program 6 (id=5591): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 3m32.295162175s ago: executing program 6 (id=5594): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed", 0x12}, {&(0x7f0000000040)="35ba85253b191d4d85f7618803e93304e734d7f43fe630fe755e96ea50bfe0339d671f11cb790fd3e1", 0x29}, {&(0x7f0000000100)="127d589163267e4b0eda2e", 0xb}], 0x3}}], 0x1, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 3m30.232491206s ago: executing program 6 (id=5603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x8, 0xc}}, './file0\x00'}) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x89f6, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x2, 0x20000, 0x2b152, 0x1, 0x1fc, 0x3, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000280)={0xffffe8d3, 0x1, 0x83, "ac9b94aaad0b79ae3a00000000000000dcfa577900", 0x31324d59}) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, 0x0, 0x0) 3m28.759488762s ago: executing program 6 (id=5607): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m23.437490952s ago: executing program 6 (id=5611): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed", 0x12}, {&(0x7f0000000040)="35ba85253b191d4d85f7618803e93304e734d7f43fe630fe755e96ea50bfe0339d671f11cb790fd3e1", 0x29}, {&(0x7f0000000100)="127d589163267e4b0eda2e", 0xb}], 0x3}}], 0x1, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 3m7.835533273s ago: executing program 38 (id=5611): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed", 0x12}, {&(0x7f0000000040)="35ba85253b191d4d85f7618803e93304e734d7f43fe630fe755e96ea50bfe0339d671f11cb790fd3e1", 0x29}, {&(0x7f0000000100)="127d589163267e4b0eda2e", 0xb}], 0x3}}], 0x1, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 2m30.138879744s ago: executing program 1 (id=5693): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xb5001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000050042000100000008000100010000000900020073797a30000000000900020073797a3000000000080001"], 0x68}}, 0x0) 2m25.968798266s ago: executing program 1 (id=5697): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 2m25.802198979s ago: executing program 1 (id=5698): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0]) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a198", 0x3e, 0x5, 0xffffffff}], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d98", 0xd9}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad", 0x8f}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473e", 0xdc}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={r3, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x5d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4041) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m24.284148227s ago: executing program 1 (id=5704): syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) 2m21.458363566s ago: executing program 1 (id=5715): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2m20.448743622s ago: executing program 1 (id=5723): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0xf}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) socket(0x1d, 0x2, 0x6) socket(0x1d, 0x2, 0x6) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x4004050) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a00)=ANY=[], 0x180}}, 0x4810) 2m4.227077844s ago: executing program 39 (id=5723): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0xf}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) socket(0x1d, 0x2, 0x6) socket(0x1d, 0x2, 0x6) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x4004050) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a00)=ANY=[], 0x180}}, 0x4810) 17.632132254s ago: executing program 0 (id=5963): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, &(0x7f00000000c0)=',\xb3(,{\\)\x00') bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r3, r3, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) openat(0xffffffffffffffff, 0x0, 0x4001, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x8e) openat(r4, 0x0, 0x40, 0x10) 16.58068095s ago: executing program 0 (id=5966): landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c", 0x1c}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d3", 0x26}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.429313897s ago: executing program 0 (id=5985): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, &(0x7f00000000c0)=',\xb3(,{\\)\x00') bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r3, r3, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) openat(0xffffffffffffffff, 0x0, 0x4001, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x8e) openat(r4, 0x0, 0x40, 0x10) 6.312906974s ago: executing program 0 (id=5986): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 5.919607473s ago: executing program 3 (id=5989): socket$kcm(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socket$kcm(0x1e, 0x4, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 5.561915432s ago: executing program 3 (id=5990): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="3c002380050011000100000005001d000100000005001f0001000000080014"], 0x58}, 0x1, 0x0, 0x0, 0x8851}, 0x4800) 5.059494215s ago: executing program 3 (id=5992): add_key$user(0x0, &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r0 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x25, &(0x7f00000000c0)={0x0, 0x219a, 0x80, 0x8001, 0x143}, 0x0, 0x0, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsmount(r0, 0x0, 0x9) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) getdents64(r5, &(0x7f0000000280)=""/189, 0xbd) 4.911939278s ago: executing program 9 (id=5993): landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c", 0x1c}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d3", 0x26}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.05428558s ago: executing program 3 (id=5994): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, &(0x7f00000000c0)=',\xb3(,{\\)\x00') bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r3, r3, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) openat(0xffffffffffffffff, 0x0, 0x4001, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x8e) openat(r4, 0x0, 0x40, 0x10) 3.63583143s ago: executing program 9 (id=5995): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.62240044s ago: executing program 8 (id=5996): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)}], 0x1) read(r0, 0x0, 0x70) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000002c0)) 3.561801912s ago: executing program 8 (id=5997): syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) setns(0xc9, 0x0) socket(0x8, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) 2.504047138s ago: executing program 3 (id=5998): socket$kcm(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socket$kcm(0x1e, 0x4, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 2.464988569s ago: executing program 8 (id=5999): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xc000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.347765812s ago: executing program 9 (id=6000): socket$nl_route(0x10, 0x3, 0x0) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x804) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./cgroup\x00', 0x2000800, &(0x7f0000000240)={[{@commit={'commit', 0x3d, 0x5}}, {@dax_always}, {@i_version}]}, 0x1, 0x524, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, &(0x7f0000000080)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4001c00) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 2.167802837s ago: executing program 8 (id=6001): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0]) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d2", 0xa3}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473e", 0xdc}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x5d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4041) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.866974214s ago: executing program 9 (id=6002): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x10, 0x2, {0x2, 0x24}}, 0x0}, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x40, 0x9, 0x8, "2fb5703fc0de19a6"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000200)={0x20, 0x81, 0x3, "105386"}, &(0x7f0000000240)={0x20, 0x82, 0x2, 'aT'}, &(0x7f0000000280)={0x20, 0x83, 0x1, "da"}, &(0x7f00000002c0)={0x20, 0x84, 0x1, '='}, &(0x7f0000000300)={0x20, 0x85, 0x3, "af8820"}}) 1.578264601s ago: executing program 0 (id=6003): landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c", 0x1c}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d3", 0x26}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.22431034s ago: executing program 8 (id=6004): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xb5001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000050042000100000008000100010000000900020073797a30000000000900020073797a3000000000080001"], 0x68}}, 0x0) 1.084085083s ago: executing program 9 (id=6005): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee", 0x15}], 0x1) read(r0, 0x0, 0x70) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000002c0)) 140.449677ms ago: executing program 9 (id=6006): landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfd", 0x37}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c5", 0x67}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 139.851386ms ago: executing program 0 (id=6007): syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) setns(0xc9, 0x0) socket(0x8, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) 82.381178ms ago: executing program 3 (id=6008): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/sem\x00', 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r3, &(0x7f0000000040)=ANY=[], 0xb2) 0s ago: executing program 8 (id=6009): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sync() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x8044) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): r returned -16 [ 2187.295421][T24676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2187.343018][T24676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2187.372735][T22741] usb 9-1: Using ep0 maxpacket: 32 [ 2187.385533][T22741] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2187.398110][T22741] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2187.412038][T22741] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2187.427803][T22741] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2187.440155][T22741] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.456488][T24676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2187.459534][T22741] usb 9-1: config 0 descriptor?? [ 2187.524098][T24676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2187.679018][T24676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2187.766061][T24676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2187.934484][T22741] usbhid 9-1:0.0: can't add hid device: -71 [ 2187.960654][T22741] usbhid: probe of 9-1:0.0 failed with error -71 [ 2187.979121][T22741] usb 9-1: USB disconnect, device number 35 [ 2188.147290][T16585] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input21 [ 2188.263714][ T5126] bcm5974 7-1:1.0: could not read from device [ 2188.287017][T16585] usb 7-1: USB disconnect, device number 27 [ 2188.369065][ T5126] bcm5974 7-1:1.0: could not read from device [ 2188.507353][T24700] jffs2: notice: (24700) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 2188.929418][T22158] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 2191.461303][T24724] loop6: detected capacity change from 0 to 40427 [ 2191.474483][T24724] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 2191.483999][T24724] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 2191.495450][T24724] F2FS-fs (loop6): invalid crc value [ 2191.581376][T24724] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2192.240188][T24724] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 2192.248248][T24724] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 2195.799171][T24745] loop7: detected capacity change from 0 to 512 [ 2195.851634][T24745] EXT4-fs: Ignoring removed i_version option [ 2195.944930][T24745] EXT4-fs (loop7): can't mount with both data=journal and dax [ 2196.690569][T22741] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 2196.880562][T22741] usb 9-1: Using ep0 maxpacket: 32 [ 2196.892380][T22741] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2196.918534][T22741] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2196.929505][T22741] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2196.955158][T22741] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2196.968516][T22741] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2196.984868][T22741] usb 9-1: config 0 descriptor?? [ 2197.070771][T11451] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 2197.278664][T11451] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2197.307664][T11451] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2197.337574][T11451] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2197.392179][T11451] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2197.417399][T11451] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2197.426823][T22741] usbhid 9-1:0.0: can't add hid device: -71 [ 2197.426940][T22741] usbhid: probe of 9-1:0.0 failed with error -71 [ 2197.431415][T22741] usb 9-1: USB disconnect, device number 36 [ 2197.470652][T11451] usb 7-1: Product: syz [ 2197.486156][T11451] usb 7-1: Manufacturer: syz [ 2197.497674][T11451] usb 7-1: SerialNumber: syz [ 2197.530169][T11451] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 2197.548072][T11451] cdc_ncm 7-1:1.0: bind() failure [ 2199.026951][T22158] Bluetooth: hci1: command 0x0406 tx timeout [ 2200.115014][T16585] usb 7-1: USB disconnect, device number 28 [ 2200.973031][T11451] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2201.180659][T11451] usb 4-1: Using ep0 maxpacket: 32 [ 2201.203594][T11451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2201.274121][T11451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2201.327363][T11451] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2201.416235][T11451] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2201.466435][T11451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2201.579525][T11451] usb 4-1: config 0 descriptor?? [ 2202.147149][T11451] usbhid 4-1:0.0: can't add hid device: -71 [ 2202.180996][T11451] usbhid: probe of 4-1:0.0 failed with error -71 [ 2202.261508][T11451] usb 4-1: USB disconnect, device number 72 [ 2203.062411][T24795] loop6: detected capacity change from 0 to 32768 [ 2203.118053][T24795] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2203.181504][T11451] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2203.396729][T11451] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2203.440208][T11451] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2203.454992][T11451] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2203.486872][T11451] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2203.507645][T24795] XFS (loop6): Ending clean mount [ 2203.518988][T11451] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2203.549692][T11451] usb 4-1: Product: syz [ 2203.565551][T11451] usb 4-1: Manufacturer: syz [ 2203.579284][T11451] usb 4-1: SerialNumber: syz [ 2203.609037][T11451] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 2203.638333][T11451] cdc_ncm 4-1:1.0: bind() failure [ 2203.753798][T22741] XFS (loop6): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 [ 2203.774259][T22741] XFS (loop6): Unmount and run xfs_repair [ 2203.780156][T22741] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 2203.798353][T22741] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 2203.819348][T22741] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 2203.849983][T22741] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 2203.868647][T22741] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 2203.890571][T22741] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 2203.902141][T22741] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 2203.922187][T22741] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 2203.945471][T22741] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 2203.968974][T24795] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x14 len 4 error 74 [ 2203.983556][T24795] XFS (loop6): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0xc7d/0x1230 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 2204.002897][T24795] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 2204.063641][T23042] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2205.861116][T11451] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 2205.945530][T16585] usb 4-1: USB disconnect, device number 73 [ 2206.050878][T11451] usb 9-1: Using ep0 maxpacket: 32 [ 2206.085551][T11451] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2206.139186][T11451] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2206.189231][T11451] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2206.204106][T24839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5315'. [ 2206.247994][T11451] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2206.298973][T11451] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2206.376080][T11451] usb 9-1: config 0 descriptor?? [ 2206.832687][T11451] usbhid 9-1:0.0: can't add hid device: -71 [ 2206.839985][T11451] usbhid: probe of 9-1:0.0 failed with error -71 [ 2206.915660][T11451] usb 9-1: USB disconnect, device number 37 [ 2208.660925][T16982] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 2208.865869][T16982] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2208.877637][T16982] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2208.890115][T16982] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2208.907846][T16982] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2208.929632][T16982] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 2208.947520][T16982] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2210.750252][T24859] binder: 24858:24859 ioctl c0306201 0 returned -14 [ 2211.112974][T24864] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5325'. [ 2211.428599][T16982] usb 9-1: USB disconnect, device number 38 [ 2212.625062][T10452] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 2212.811179][T10452] usb 9-1: Using ep0 maxpacket: 32 [ 2212.818900][T10452] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2212.840837][T10452] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2212.857021][T10452] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2212.870542][T10452] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2212.880161][T10452] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2212.898389][T10452] usb 9-1: config 0 descriptor?? [ 2213.354551][T10452] usbhid 9-1:0.0: can't add hid device: -71 [ 2213.368345][T10452] usbhid: probe of 9-1:0.0 failed with error -71 [ 2213.388333][T10452] usb 9-1: USB disconnect, device number 39 [ 2214.225856][T24885] loop3: detected capacity change from 0 to 40427 [ 2214.242344][T24885] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 2214.251997][T24885] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2214.273177][T24885] F2FS-fs (loop3): invalid crc value [ 2214.307359][T24885] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2214.340666][T22158] Bluetooth: hci3: command 0x0405 tx timeout [ 2214.360477][T16982] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 2214.484439][T24885] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 2214.493234][T24885] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2214.580549][T16982] usb 9-1: Using ep0 maxpacket: 16 [ 2214.588556][T16982] usb 9-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 2214.604928][T16982] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2214.619011][T16982] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2214.638817][T16982] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2214.649057][T16982] usb 9-1: Product: syz [ 2214.656907][T16982] usb 9-1: Manufacturer: syz [ 2214.664790][T16982] usb 9-1: SerialNumber: syz [ 2215.044759][T16982] usb 9-1: 0:2 : does not exist [ 2215.073820][T24885] syz.3.5332: attempt to access beyond end of device [ 2215.073820][T24885] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 2215.104206][T16982] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 2215.182047][T16982] usb 9-1: USB disconnect, device number 40 [ 2215.309466][T24336] udevd[24336]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2215.770717][T22572] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 2216.040315][T22572] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2216.061389][T10452] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 2216.074820][T22572] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2216.120628][T22572] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 2216.181022][T22572] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2216.237058][T22572] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 2216.242258][T10452] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2216.267129][T10452] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2216.269072][T22572] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2216.280063][T10452] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2216.315897][T10452] usb 9-1: config 0 descriptor?? [ 2216.336593][T10452] pwc: Askey VC010 type 2 USB webcam detected. [ 2216.349813][T22572] usb 7-1: Product: syz [ 2216.370063][T22572] usb 7-1: Manufacturer: syz [ 2216.401458][T22572] usb 7-1: SerialNumber: syz [ 2216.537928][T10452] pwc: send_video_command error -71 [ 2216.555873][T10452] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2216.564119][T10452] Philips webcam: probe of 9-1:0.0 failed with error -71 [ 2216.586638][T10452] usb 9-1: USB disconnect, device number 41 [ 2216.658010][T22572] usb 7-1: Not enough endpoints found in device, aborting! [ 2216.892621][T22572] usb 7-1: USB disconnect, device number 29 [ 2217.090034][T24895] loop7: detected capacity change from 0 to 32768 [ 2217.110594][T10452] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 2217.188902][T24895] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2217.312705][T10452] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2217.346896][T10452] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2217.374617][T10452] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2217.416867][T10452] usb 9-1: config 0 descriptor?? [ 2217.451734][T10452] pwc: Askey VC010 type 2 USB webcam detected. [ 2217.514658][T24895] XFS (loop7): Ending clean mount [ 2217.861868][T10452] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2217.890627][T10452] pwc: recv_control_msg error -32 req 02 val 2700 [ 2217.908320][T10452] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2217.929632][T10452] pwc: recv_control_msg error -32 req 04 val 1000 [ 2217.962974][T10452] pwc: recv_control_msg error -32 req 04 val 1300 [ 2217.972854][T10452] pwc: recv_control_msg error -32 req 04 val 1400 [ 2218.052468][T15127] XFS (loop7): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 [ 2218.104730][T15127] XFS (loop7): Unmount and run xfs_repair [ 2218.134831][T15127] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 2218.156939][T15127] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 2218.186051][T10452] pwc: recv_control_msg error -71 req 02 val 2100 [ 2218.205050][T15127] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 2218.220920][T10452] pwc: recv_control_msg error -71 req 04 val 1500 [ 2218.237708][T10452] pwc: recv_control_msg error -71 req 02 val 2500 [ 2218.244816][T15127] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 2218.260755][T10452] pwc: recv_control_msg error -71 req 02 val 2400 [ 2218.269082][T15127] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 2218.291571][T10452] pwc: recv_control_msg error -71 req 02 val 2600 [ 2218.309379][T15127] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 2218.315624][ T5818] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 2218.321555][T10452] pwc: recv_control_msg error -71 req 02 val 2900 [ 2218.349153][T15127] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 2218.370570][T10452] pwc: recv_control_msg error -71 req 02 val 2800 [ 2218.381604][T15127] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 2218.399638][T10452] pwc: recv_control_msg error -71 req 04 val 1100 [ 2218.407736][T15127] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 2218.424210][T10452] pwc: recv_control_msg error -71 req 04 val 1200 [ 2218.434025][T24895] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x14 len 4 error 74 [ 2218.472468][T24895] XFS (loop7): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0xc7d/0x1230 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 2218.479637][T10452] pwc: Registered as video103. [ 2218.523881][T10452] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input22 [ 2218.550879][ T5818] usb 7-1: Using ep0 maxpacket: 32 [ 2218.585450][ T5818] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2218.601663][T24895] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 2218.627112][T10452] usb 9-1: USB disconnect, device number 42 [ 2218.642726][ T5818] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2218.715610][ T5818] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2218.770951][ T5818] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2218.798546][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2218.809037][T23336] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2218.829245][ T5818] usb 7-1: config 0 descriptor?? [ 2218.996797][T22572] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2219.081866][T24922] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2219.115941][T24922] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2219.209117][T24922] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2219.220183][T24922] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2219.230935][T22572] usb 4-1: Using ep0 maxpacket: 32 [ 2219.240020][T24922] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2219.247501][T24922] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2219.248719][T22572] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2219.269915][T24922] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2219.282365][T24922] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2219.297061][ T5818] usbhid 7-1:0.0: can't add hid device: -71 [ 2219.331212][T22572] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2219.343518][ T5818] usbhid: probe of 7-1:0.0 failed with error -71 [ 2219.389798][ T5818] usb 7-1: USB disconnect, device number 30 [ 2219.410993][T22572] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2219.486696][T22572] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2219.521327][T22572] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2219.583559][T22572] usb 4-1: config 0 descriptor?? [ 2220.080961][T22572] usbhid 4-1:0.0: can't add hid device: -71 [ 2220.087872][T22572] usbhid: probe of 4-1:0.0 failed with error -71 [ 2220.191945][T22572] usb 4-1: USB disconnect, device number 74 [ 2220.866177][T24940] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5348'. [ 2220.886235][T24940] netlink: 'syz.8.5348': attribute type 9 has an invalid length. [ 2220.894366][T24940] netlink: 7 bytes leftover after parsing attributes in process `syz.8.5348'. [ 2221.061228][T22158] Bluetooth: hci0: command 0x0406 tx timeout [ 2221.230584][T22158] Bluetooth: hci2: command 0x0406 tx timeout [ 2221.663592][T24947] loop8: detected capacity change from 0 to 40427 [ 2221.684531][T22158] Bluetooth: hci3: command 0x0405 tx timeout [ 2221.690713][T21513] Bluetooth: hci1: command 0x0406 tx timeout [ 2221.698859][T21513] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 2221.721997][T24947] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 2221.729801][T24947] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 2221.742831][T24947] F2FS-fs (loop8): invalid crc value [ 2221.776326][T24947] F2FS-fs (loop8): Found nat_bits in checkpoint [ 2221.849382][T24947] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 2221.856614][T24947] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 2222.108239][T24954] syz.8.5351: attempt to access beyond end of device [ 2222.108239][T24954] loop8: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 2222.565457][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.572182][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.140525][T21513] Bluetooth: hci0: command 0x0406 tx timeout [ 2223.300498][T21513] Bluetooth: hci2: command 0x0406 tx timeout [ 2223.780727][T22158] Bluetooth: hci3: command 0x0405 tx timeout [ 2223.786862][T21513] Bluetooth: hci1: command 0x0406 tx timeout [ 2225.156445][ T5818] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2225.406267][ T5818] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2225.446289][ T5818] usb 4-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 2225.462506][T24967] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 2225.490552][ T6276] IPVS: starting estimator thread 0... [ 2225.523199][ T5818] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 2225.545607][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2225.570689][ T5818] usb 4-1: Product: syz [ 2225.582114][T24968] IPVS: using max 18 ests per chain, 43200 per kthread [ 2225.585883][ T5818] usb 4-1: Manufacturer: syz [ 2225.631242][ T5818] usb 4-1: SerialNumber: syz [ 2225.683669][ T5818] usb-storage 4-1:1.0: USB Mass Storage device detected [ 2225.755792][ T5818] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 2225.822017][ T5818] scsi host1: usb-storage 4-1:1.0 [ 2225.915743][ T5818] usb 4-1: USB disconnect, device number 75 [ 2226.271093][T22572] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 2226.524453][T22572] usb 7-1: Using ep0 maxpacket: 16 [ 2226.578480][T22572] usb 7-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 2226.714405][T21513] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 2227.847404][T22572] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2227.923595][T22572] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2227.957764][T22572] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2228.003411][T22572] usb 7-1: Product: syz [ 2228.031042][T22572] usb 7-1: Manufacturer: syz [ 2228.050233][T22572] usb 7-1: SerialNumber: syz [ 2228.332125][T22572] usb 7-1: 0:2 : does not exist [ 2228.343778][ T6276] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2228.379665][T22572] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 2229.089648][T22572] usb 7-1: USB disconnect, device number 31 [ 2229.913184][ T6276] usb 4-1: Using ep0 maxpacket: 32 [ 2229.938816][ T6276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2229.958217][ T6276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2229.996503][ T6276] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2230.013061][ T6276] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2230.330214][ T6276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2230.366914][ T6276] usb 4-1: config 0 descriptor?? [ 2230.430705][T10452] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 2230.624272][T10452] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2230.639525][T10452] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2230.649255][T10452] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2230.672026][T10452] usb 9-1: config 0 descriptor?? [ 2230.683146][T10452] pwc: Askey VC010 type 2 USB webcam detected. [ 2230.907045][T10452] pwc: send_video_command error -71 [ 2230.918220][T10452] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2230.927415][T10452] Philips webcam: probe of 9-1:0.0 failed with error -71 [ 2230.945432][T10452] usb 9-1: USB disconnect, device number 43 [ 2231.470638][T10452] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 2231.507861][ T6276] usbhid 4-1:0.0: can't add hid device: -71 [ 2231.555546][ T6276] usbhid: probe of 4-1:0.0 failed with error -71 [ 2231.616654][ T6276] usb 4-1: USB disconnect, device number 76 [ 2231.666432][T10452] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2231.684699][T10452] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2231.696035][T10452] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2231.716072][T10452] usb 9-1: config 0 descriptor?? [ 2231.737045][T10452] pwc: Askey VC010 type 2 USB webcam detected. [ 2232.138449][T10452] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2232.152304][T10452] pwc: recv_control_msg error -32 req 02 val 2700 [ 2232.164857][T10452] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2232.174982][T10452] pwc: recv_control_msg error -32 req 04 val 1000 [ 2232.191711][T10452] pwc: recv_control_msg error -32 req 04 val 1300 [ 2232.207694][T10452] pwc: recv_control_msg error -32 req 04 val 1400 [ 2232.418600][T10452] pwc: recv_control_msg error -71 req 02 val 2100 [ 2232.442620][T10452] pwc: recv_control_msg error -71 req 04 val 1500 [ 2232.449735][T10452] pwc: recv_control_msg error -71 req 02 val 2500 [ 2232.460434][T10452] pwc: recv_control_msg error -71 req 02 val 2400 [ 2232.469976][T10452] pwc: recv_control_msg error -71 req 02 val 2600 [ 2232.485684][T10452] pwc: recv_control_msg error -71 req 02 val 2900 [ 2232.495439][T10452] pwc: recv_control_msg error -71 req 02 val 2800 [ 2232.508662][T10452] pwc: recv_control_msg error -71 req 04 val 1100 [ 2232.517143][T10452] pwc: recv_control_msg error -71 req 04 val 1200 [ 2232.530708][T10452] pwc: Registered as video103. [ 2232.556182][T10452] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input23 [ 2232.621264][T10452] usb 9-1: USB disconnect, device number 44 [ 2232.681764][T21513] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 2234.948924][T25025] loop3: detected capacity change from 0 to 512 [ 2235.023128][T25025] EXT4-fs: Ignoring removed i_version option [ 2235.107017][T25025] EXT4-fs (loop3): can't mount with both data=journal and dax [ 2235.144991][T25028] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5377'. [ 2235.760603][T15127] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 2235.960635][T15127] usb 9-1: Using ep0 maxpacket: 32 [ 2235.977091][T15127] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2235.995844][T15127] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2236.006339][T15127] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2236.027857][T15127] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2236.039337][T15127] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2236.063644][T15127] usb 9-1: config 0 descriptor?? [ 2236.488058][T15127] usbhid 9-1:0.0: can't add hid device: -71 [ 2236.508637][T15127] usbhid: probe of 9-1:0.0 failed with error -71 [ 2236.532303][T15127] usb 9-1: USB disconnect, device number 45 [ 2237.495159][T25048] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5385'. [ 2237.508266][T25048] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5385'. [ 2237.537129][T25048] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2237.546330][T25048] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2237.555266][T25048] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2237.564163][T25048] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2237.585339][T25048] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5385'. [ 2237.596998][T25048] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5385'. [ 2239.818014][T25061] 9pnet_fd: Insufficient options for proto=fd [ 2240.770813][T21513] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 2243.055852][T25076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5393'. [ 2243.177883][T25076] bond0: entered promiscuous mode [ 2243.184903][T25076] bond_slave_0: entered promiscuous mode [ 2243.236048][T25076] bond0: left promiscuous mode [ 2243.241997][T25076] bond_slave_0: left promiscuous mode [ 2246.431093][ T6276] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 2246.590708][T11451] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2246.640677][ T6276] usb 7-1: Using ep0 maxpacket: 32 [ 2246.881826][T11451] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2246.961685][T11451] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2247.001789][ T6276] usb 7-1: device descriptor read/all, error -71 [ 2247.040722][T11451] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2247.110655][T11451] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2247.130613][T16982] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 2247.207505][T11451] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 2247.260764][T11451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2247.337468][T16982] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2247.361114][T16982] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 2247.375601][T16982] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2247.384133][T16982] usb 9-1: Product: syz [ 2247.395114][T16982] usb 9-1: Manufacturer: syz [ 2247.399847][T16982] usb 9-1: SerialNumber: syz [ 2247.550969][ T6276] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 2247.643564][T16982] usb 9-1: Unknown endpoint type found, address 0x03 [ 2247.653981][T16982] usb 9-1: Not enough endpoints found in device, aborting! [ 2247.800608][ T6276] usb 7-1: Using ep0 maxpacket: 16 [ 2247.808886][ T6276] usb 7-1: config index 0 descriptor too short (expected 51443, got 18) [ 2247.823599][ T6276] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2247.834984][ T6276] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2247.844883][ T6276] usb 7-1: Product: syz [ 2247.849917][ T6276] usb 7-1: Manufacturer: syz [ 2247.855786][ T6276] usb 7-1: SerialNumber: syz [ 2247.865458][ T6276] r8152-cfgselector 7-1: config 0 descriptor?? [ 2248.057798][T22572] usb 9-1: USB disconnect, device number 46 [ 2248.205160][ T6276] r8152-cfgselector 7-1: Unknown version 0x0000 [ 2248.220765][ T6276] r8152-cfgselector 7-1: bad CDC descriptors [ 2248.236429][ T6276] r8152-cfgselector 7-1: Unknown version 0x0000 [ 2248.252454][ T6276] r8152-cfgselector 7-1: USB disconnect, device number 33 [ 2249.017711][T25103] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5405'. [ 2249.041897][T25103] netlink: 'syz.6.5405': attribute type 9 has an invalid length. [ 2249.051793][T25103] netlink: 7 bytes leftover after parsing attributes in process `syz.6.5405'. [ 2249.360738][T22572] usb 4-1: USB disconnect, device number 77 [ 2249.540840][T16982] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 2249.631013][ T6276] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 2249.751647][T16982] usb 9-1: Using ep0 maxpacket: 8 [ 2249.759970][T16982] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 2249.776107][T16982] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2249.785586][T16982] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2249.793917][T16982] usb 9-1: Product: syz [ 2249.798242][T16982] usb 9-1: Manufacturer: syz [ 2249.807497][T16982] usb 9-1: SerialNumber: syz [ 2249.819732][T16982] usb 9-1: config 0 descriptor?? [ 2249.829863][T16982] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2249.838401][T16982] usb 9-1: setting power ON [ 2249.843329][T16982] dvb-usb: bulk message failed: -22 (2/0) [ 2249.854312][T16982] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2249.858266][ T6276] usb 7-1: config 1 has an invalid interface number: 144 but max is 1 [ 2249.874267][T16982] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2249.874358][T16982] usb 9-1: media controller created [ 2249.891734][ T6276] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2249.897203][T16982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2249.903870][ T6276] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 2249.925014][ T6276] usb 7-1: config 1 has no interface number 2 [ 2249.933434][ T6276] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2249.942530][T16982] usb 9-1: selecting invalid altsetting 6 [ 2249.947199][ T6276] usb 7-1: config 1 interface 144 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2249.954856][T16982] usb 9-1: digital interface selection failed (-22) [ 2249.967463][ T6276] usb 7-1: config 1 interface 144 has no altsetting 0 [ 2249.979285][T16982] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2249.980070][T16982] usb 9-1: setting power OFF [ 2249.998269][T16982] dvb-usb: bulk message failed: -22 (2/0) [ 2250.002183][ T6276] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2250.004175][T16982] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2250.004194][T16982] (NULL device *): no alternate interface [ 2250.027487][T22572] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2250.056193][ T6276] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2250.066196][ T6276] usb 7-1: Product: syz [ 2250.067877][T16982] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2250.071465][ T6276] usb 7-1: Manufacturer: syz [ 2250.088329][ T6276] usb 7-1: SerialNumber: syz [ 2250.095377][T16982] usb 9-1: USB disconnect, device number 47 [ 2250.149650][ T6276] usb 7-1: selecting invalid altsetting 1 [ 2250.257055][T22572] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2250.279579][T22572] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 2250.310283][T22572] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2250.337090][T22572] usb 4-1: Product: syz [ 2250.370641][T22572] usb 4-1: Manufacturer: syz [ 2250.397252][T22572] usb 4-1: SerialNumber: syz [ 2251.360956][T22572] usb 4-1: Cannot retrieve CPort count: -110 [ 2251.382740][T22572] usb 4-1: Cannot retrieve CPort count: -110 [ 2251.389463][T22572] es2_ap_driver: probe of 4-1:1.0 failed with error -110 [ 2251.804419][T21513] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 2254.656076][T22572] usb 4-1: USB disconnect, device number 78 [ 2254.814053][ T6276] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS [ 2254.860816][ T6276] cdc_ncm 7-1:1.0: bind() failure [ 2254.979011][ T6276] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 2255.160647][ T6276] cdc_ncm 7-1:1.1: bind() failure [ 2255.271275][ T6276] cdc_mbim: probe of 7-1:1.144 failed with error -71 [ 2255.366637][T25152] autofs4:pid:25152:autofs_fill_super: called with bogus options [ 2255.386751][ T6276] usb 7-1: USB disconnect, device number 34 [ 2255.525207][T25155] loop6: detected capacity change from 0 to 512 [ 2255.591561][T25155] EXT4-fs: Ignoring removed i_version option [ 2255.643011][T25155] EXT4-fs (loop6): can't mount with both data=journal and dax [ 2256.480546][T16982] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 2256.662844][T16982] usb 9-1: config 1 has an invalid interface number: 144 but max is 1 [ 2256.678150][T16982] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2256.689681][T16982] usb 9-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 2256.703862][T16982] usb 9-1: config 1 has no interface number 2 [ 2256.710032][T16982] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2256.722143][T16982] usb 9-1: config 1 interface 144 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2256.747606][T16982] usb 9-1: config 1 interface 144 has no altsetting 0 [ 2256.760220][T16982] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2256.776701][T16982] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2256.785391][T16982] usb 9-1: Product: syz [ 2256.789689][T16982] usb 9-1: Manufacturer: syz [ 2256.799514][T16982] usb 9-1: SerialNumber: syz [ 2256.810883][T16982] usb 9-1: selecting invalid altsetting 1 [ 2257.122572][T21513] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 2257.224859][T16982] cdc_ncm 9-1:1.0: failed GET_NTB_PARAMETERS [ 2257.233762][T16982] cdc_ncm 9-1:1.0: bind() failure [ 2257.246973][T16982] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 2257.264529][T16982] cdc_ncm 9-1:1.1: bind() failure [ 2257.518599][T16982] usb 9-1: USB disconnect, device number 48 [ 2258.410622][T16982] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 2258.600574][T16982] usb 9-1: Using ep0 maxpacket: 32 [ 2258.624065][T16982] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2258.640718][T16982] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2258.647470][T16982] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 2258.660443][T16982] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2258.675179][T16982] usb 9-1: config 0 descriptor?? [ 2259.474635][T16982] corsair-psu 0003:1B1C:1C09.000F: unknown main item tag 0x0 [ 2259.497753][T16982] corsair-psu 0003:1B1C:1C09.000F: unknown main item tag 0x0 [ 2259.510199][T16982] corsair-psu 0003:1B1C:1C09.000F: unknown main item tag 0x0 [ 2259.522860][T16982] corsair-psu 0003:1B1C:1C09.000F: unknown main item tag 0x0 [ 2259.541141][T16982] corsair-psu 0003:1B1C:1C09.000F: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.8-1/input0 [ 2259.668146][ C1] usb 9-1: input irq status -75 received [ 2259.876311][T25176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2259.897191][T25176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2259.905298][T16982] corsair-psu 0003:1B1C:1C09.000F: unable to initialize device (-110) [ 2259.925819][T25176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2259.940969][T16982] corsair-psu: probe of 0003:1B1C:1C09.000F failed with error -110 [ 2259.967332][T25176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2260.069555][T25176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2260.097848][T25176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2260.112951][T16982] usb 9-1: USB disconnect, device number 49 [ 2260.768385][T25185] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2260.777415][T25185] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2260.786703][T25185] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2260.795660][T25185] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2261.006468][T25189] loop8: detected capacity change from 0 to 512 [ 2261.023091][T25189] EXT4-fs: Ignoring removed i_version option [ 2261.073522][T25189] EXT4-fs (loop8): can't mount with both data=journal and dax [ 2261.894618][T22572] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 2262.150894][T22572] usb 7-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 2262.265489][T22572] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2262.301821][T22572] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 2262.398700][T21513] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 2263.533650][T22572] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2263.603777][T22572] usb 7-1: Product: syz [ 2263.608495][T22572] usb 7-1: Manufacturer: syz [ 2263.682915][T22572] usb 7-1: SerialNumber: syz [ 2263.753165][T22572] usb 7-1: can't set config #1, error -71 [ 2263.825363][T22572] usb 7-1: USB disconnect, device number 35 [ 2266.451073][T22572] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 2266.695025][T22572] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2266.738912][T22572] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2266.780663][T22572] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 2266.815196][T22572] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2266.854396][T22572] usb 7-1: Product: syz [ 2266.879391][T22572] usb 7-1: Manufacturer: syz [ 2266.895158][T22572] usb 7-1: SerialNumber: syz [ 2267.165851][T22572] usb 7-1: Cannot retrieve CPort count: -71 [ 2267.204730][T22572] usb 7-1: Cannot retrieve CPort count: -71 [ 2267.280554][T22572] es2_ap_driver: probe of 7-1:1.0 failed with error -71 [ 2267.291083][T15127] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 2267.368802][T22572] usb 7-1: USB disconnect, device number 36 [ 2267.470491][T15127] usb 9-1: Using ep0 maxpacket: 16 [ 2267.479541][T15127] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2267.502215][T15127] usb 9-1: config 9 has an invalid interface number: 166 but max is 0 [ 2267.515555][T15127] usb 9-1: config 9 has no interface number 0 [ 2267.524261][T15127] usb 9-1: config 9 interface 166 has no altsetting 0 [ 2267.539373][T15127] usb 9-1: New USB device found, idVendor=1bc7, idProduct=1230, bcdDevice=3f.01 [ 2267.550273][T15127] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2267.563748][T15127] usb 9-1: Product: syz [ 2267.567972][T15127] usb 9-1: Manufacturer: syz [ 2267.574419][T15127] usb 9-1: SerialNumber: syz [ 2268.014434][T15127] option 9-1:9.166: GSM modem (1-port) converter detected [ 2268.056113][T15127] usb 9-1: USB disconnect, device number 50 [ 2268.078240][T15127] option 9-1:9.166: device disconnected [ 2269.111228][T25238] binder_alloc: 25237: binder_alloc_buf size 12280 failed, no address space [ 2269.182036][T25238] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 2269.502652][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 2269.502668][ T28] audit: type=1800 audit(1786197944.970:925): pid=25244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5454" name="memory_backed" dev="configfs" ino=101211 res=0 errno=0 [ 2269.542453][ T28] audit: type=1800 audit(1786197944.970:926): pid=25244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5454" name="zoned" dev="configfs" ino=101212 res=0 errno=0 [ 2269.598380][ T28] audit: type=1800 audit(1786197945.060:927): pid=25247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5454" name="power" dev="configfs" ino=101216 res=0 errno=0 [ 2269.619056][T16982] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 2269.816350][T16982] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2269.830801][T16982] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2269.844929][T16982] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2269.846140][T25247] null_blk: disk my_zoned_dev created [ 2269.859656][T16982] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2269.893406][T16982] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 2269.906296][T16982] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2269.911184][T11451] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2270.177524][T11451] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2270.205123][T11451] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2270.265546][T11451] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 2270.306994][T11451] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2270.360181][T11451] usb 4-1: Product: syz [ 2270.360672][T16982] gud: probe of 9-1:1.0 failed with error -71 [ 2270.375454][T11451] usb 4-1: Manufacturer: syz [ 2270.401487][T16982] usb 9-1: USB disconnect, device number 51 [ 2270.416417][T11451] usb 4-1: SerialNumber: syz [ 2271.336106][T11451] usb 4-1: Cannot retrieve CPort count: -32 [ 2271.370746][T11451] usb 4-1: Cannot retrieve CPort count: -32 [ 2273.097278][T25260] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 2273.165008][T11451] es2_ap_driver: probe of 4-1:1.0 failed with error -32 [ 2273.261324][T11451] usb 4-1: USB disconnect, device number 79 [ 2275.442526][T25286] misc userio: Invalid payload size [ 2276.040685][T15127] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 2276.234433][T15127] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2276.250524][T15127] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2276.268006][T15127] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 2276.277513][T15127] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2276.290578][T15127] usb 9-1: Product: syz [ 2276.296914][T15127] usb 9-1: Manufacturer: syz [ 2276.306842][T15127] usb 9-1: SerialNumber: syz [ 2276.581504][T15127] usb 9-1: Cannot retrieve CPort count: -32 [ 2276.597585][T15127] usb 9-1: Cannot retrieve CPort count: -32 [ 2276.614185][T15127] es2_ap_driver: probe of 9-1:1.0 failed with error -32 [ 2276.809675][T15127] usb 9-1: USB disconnect, device number 52 [ 2278.674960][T11451] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2278.922161][T11451] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2278.975739][T11451] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2279.039740][T11451] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2279.100882][T11451] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2279.177629][T11451] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 2279.231078][T11451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2279.906934][T11451] gud: probe of 4-1:1.0 failed with error -71 [ 2279.962280][T11451] usb 4-1: USB disconnect, device number 80 [ 2280.020188][T25310] loop7: detected capacity change from 0 to 512 [ 2280.056620][T25310] EXT4-fs: Ignoring removed i_version option [ 2280.086447][T25310] EXT4-fs (loop7): can't mount with both data=journal and dax [ 2280.870521][T15127] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 2281.060573][T15127] usb 9-1: Using ep0 maxpacket: 32 [ 2281.072949][T15127] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2281.095358][T15127] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2281.104927][T15127] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 2281.119293][T15127] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2281.139361][T15127] usb 9-1: config 0 descriptor?? [ 2281.146423][T25318] nvme nvme0: failed to connect socket: -111 [ 2281.925372][T15127] corsair-psu 0003:1B1C:1C09.0010: unknown main item tag 0x0 [ 2281.958078][T15127] corsair-psu 0003:1B1C:1C09.0010: unknown main item tag 0x0 [ 2281.976773][T15127] corsair-psu 0003:1B1C:1C09.0010: unknown main item tag 0x0 [ 2282.007022][T15127] corsair-psu 0003:1B1C:1C09.0010: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.8-1/input0 [ 2282.122189][ C1] usb 9-1: input irq status -75 received [ 2282.324728][T25312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2282.349972][T25312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2282.368005][T25312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2282.377005][T15127] corsair-psu 0003:1B1C:1C09.0010: unable to initialize device (-110) [ 2282.400213][T15127] corsair-psu: probe of 0003:1B1C:1C09.0010 failed with error -110 [ 2282.415692][T25312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2282.456873][T25312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2282.470714][T11451] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 2282.478062][T25312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2282.539351][T15127] usb 9-1: USB disconnect, device number 53 [ 2282.714743][T11451] usb 4-1: not running at top speed; connect to a high speed hub [ 2282.748535][T11451] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2282.832147][T11451] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 2282.880201][T11451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2282.952579][T11451] usb 4-1: Found UVC 1.00 device (046d:0825) [ 2282.982402][T11451] usb 4-1: No streaming interface found for terminal 2. [ 2283.200850][T11451] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 2283.420653][T11451] usb 7-1: Using ep0 maxpacket: 16 [ 2283.453979][ T6276] usb 4-1: USB disconnect, device number 81 [ 2283.516466][T11451] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2283.558178][T11451] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2283.597599][T11451] usb 7-1: Product: syz [ 2283.607704][T11451] usb 7-1: Manufacturer: syz [ 2283.628083][T11451] usb 7-1: SerialNumber: syz [ 2283.656625][T11451] usb 7-1: config 0 descriptor?? [ 2283.677594][T11451] visor 7-1:0.0: Sony Clie 3.5 converter detected [ 2283.949333][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.956079][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.102480][T11451] usb 7-1: clie_3_5_startup: get interface number bad return length: 0 [ 2284.133613][T11451] visor: probe of 7-1:0.0 failed with error -5 [ 2284.357231][T11451] usb 7-1: USB disconnect, device number 37 [ 2284.816355][T25333] loop7: detected capacity change from 0 to 40427 [ 2284.842369][T25333] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 2284.857151][T25333] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 2285.117368][T25333] F2FS-fs (loop7): invalid crc value [ 2285.219776][T25333] F2FS-fs (loop7): Found nat_bits in checkpoint [ 2285.253684][T25359] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5494'. [ 2285.285372][T25359] bond0: entered promiscuous mode [ 2285.296416][T25359] bond_slave_0: entered promiscuous mode [ 2285.304170][T25359] bond_slave_1: entered promiscuous mode [ 2285.420216][T25359] bond0: left promiscuous mode [ 2285.426662][T25359] bond_slave_0: left promiscuous mode [ 2285.433790][T25359] bond_slave_1: left promiscuous mode [ 2286.430811][T21513] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 2289.418718][T25374] bridge0: port 2(bridge_slave_1) entered disabled state [ 2289.428026][T25374] bridge0: port 1(bridge_slave_0) entered disabled state [ 2290.412421][T21513] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 2293.078213][T21513] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 2294.499837][T25374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2294.564330][T25374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2295.188094][T25374] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2295.199302][T25374] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2295.211891][T25374] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2295.222244][T25374] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2297.653025][T21513] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 2299.070637][T15127] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 2299.267807][T15127] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2299.279465][T15127] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2299.294252][T15127] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2299.333882][T15127] usb 9-1: config 0 descriptor?? [ 2299.348957][T15127] pwc: Askey VC010 type 2 USB webcam detected. [ 2299.565104][T15127] pwc: send_video_command error -71 [ 2299.582301][T15127] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2299.589945][T15127] Philips webcam: probe of 9-1:0.0 failed with error -71 [ 2299.615462][T15127] usb 9-1: USB disconnect, device number 54 [ 2299.850993][T21513] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 2300.180769][T15127] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 2300.383542][T15127] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2300.398835][T15127] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2300.409951][T15127] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2300.431397][T15127] usb 9-1: config 0 descriptor?? [ 2300.458677][T15127] pwc: Askey VC010 type 2 USB webcam detected. [ 2300.850555][T15127] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2300.858133][T15127] pwc: recv_control_msg error -32 req 02 val 2700 [ 2300.872905][T15127] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2300.887841][T15127] pwc: recv_control_msg error -32 req 04 val 1000 [ 2300.897023][T15127] pwc: recv_control_msg error -32 req 04 val 1300 [ 2300.914474][T15127] pwc: recv_control_msg error -32 req 04 val 1400 [ 2301.125329][T15127] pwc: recv_control_msg error -71 req 02 val 2100 [ 2301.145044][T15127] pwc: recv_control_msg error -71 req 04 val 1500 [ 2301.156231][T15127] pwc: recv_control_msg error -71 req 02 val 2500 [ 2301.163429][T15127] pwc: recv_control_msg error -71 req 02 val 2400 [ 2301.175476][T15127] pwc: recv_control_msg error -71 req 02 val 2600 [ 2301.182527][T15127] pwc: recv_control_msg error -71 req 02 val 2900 [ 2301.189387][T15127] pwc: recv_control_msg error -71 req 02 val 2800 [ 2301.197239][T15127] pwc: recv_control_msg error -71 req 04 val 1100 [ 2301.211581][T15127] pwc: recv_control_msg error -71 req 04 val 1200 [ 2301.220815][T15127] pwc: Registered as video103. [ 2301.227433][T15127] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input25 [ 2301.304528][T15127] usb 9-1: USB disconnect, device number 55 [ 2302.860612][T15127] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 2303.074094][T15127] usb 9-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 2303.089333][T15127] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2303.109416][T15127] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 2303.118706][T15127] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2303.130455][T15127] usb 9-1: Product: syz [ 2303.134684][T15127] usb 9-1: Manufacturer: syz [ 2303.139306][T15127] usb 9-1: SerialNumber: syz [ 2303.372081][T15127] usb 9-1: 0:1 : does not exist [ 2303.392924][T15127] usb 9-1: 3:0: failed to get current value for ch 0 (-71) [ 2303.411255][T15127] usb 9-1: unit 13 not found! [ 2303.439170][T15127] usb 9-1: USB disconnect, device number 56 [ 2303.528159][T24336] udevd[24336]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2304.676489][T25444] bridge0: port 2(bridge_slave_1) entered disabled state [ 2304.688584][T25444] bridge0: port 1(bridge_slave_0) entered disabled state [ 2306.301894][T21513] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 2309.583719][T21513] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 2314.036756][T25444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2314.435940][T25444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2314.604720][T22158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2314.622617][T22158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2314.639137][T22158] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2314.658196][T22158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2314.669666][T22158] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2314.677496][T22158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2315.920860][T25444] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2315.950589][T25444] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2315.975392][T25444] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2316.000749][T25444] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2316.523602][T25488] wlan0 speed is unknown, defaulting to 1000 [ 2316.746431][T22158] Bluetooth: hci4: command tx timeout [ 2316.915949][T25488] chnl_net:caif_netlink_parms(): no params data found [ 2317.147149][T25488] bridge0: port 1(bridge_slave_0) entered blocking state [ 2317.170025][T25488] bridge0: port 1(bridge_slave_0) entered disabled state [ 2317.177873][T25488] bridge_slave_0: entered allmulticast mode [ 2317.193203][T25488] bridge_slave_0: entered promiscuous mode [ 2317.207843][T25488] bridge0: port 2(bridge_slave_1) entered blocking state [ 2317.217098][T25488] bridge0: port 2(bridge_slave_1) entered disabled state [ 2317.236879][T25488] bridge_slave_1: entered allmulticast mode [ 2317.253047][T25488] bridge_slave_1: entered promiscuous mode [ 2317.318208][T25488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2317.336837][T25488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2317.446079][T25488] team0: Port device team_slave_0 added [ 2317.469555][T25488] team0: Port device team_slave_1 added [ 2317.568939][T25488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2317.637096][T25488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2317.735254][T25488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2317.766058][T25488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2317.776004][T25488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2317.810085][T25488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2317.911042][T25488] hsr_slave_0: entered promiscuous mode [ 2317.931262][T25488] hsr_slave_1: entered promiscuous mode [ 2317.944336][T25488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2317.967026][T25488] Cannot create hsr debugfs directory [ 2318.010486][T10452] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 2318.161291][T10452] usb 9-1: device descriptor read/64, error -71 [ 2318.407266][T25488] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2318.440461][T10452] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 2318.590646][T10452] usb 9-1: device descriptor read/64, error -71 [ 2318.720759][T10452] usb usb9-port1: attempt power cycle [ 2318.821037][T22158] Bluetooth: hci4: command tx timeout [ 2319.140641][T10452] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 2319.181234][T10452] usb 9-1: device descriptor read/8, error -71 [ 2319.460554][T10452] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 2319.508233][T10452] usb 9-1: device descriptor read/8, error -71 [ 2319.630828][T10452] usb usb9-port1: unable to enumerate USB device [ 2321.048674][T22158] Bluetooth: hci4: command tx timeout [ 2322.839385][T25488] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2323.002065][T25536] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5543'. [ 2323.060551][T22158] Bluetooth: hci4: command tx timeout [ 2323.098002][T25536] bond0: entered promiscuous mode [ 2323.103261][T25536] bond_slave_0: entered promiscuous mode [ 2323.109149][T25536] bond_slave_1: entered promiscuous mode [ 2323.137186][T25536] bond0: left promiscuous mode [ 2323.142414][T25536] bond_slave_0: left promiscuous mode [ 2323.148054][T25536] bond_slave_1: left promiscuous mode [ 2323.303929][T25488] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2323.327516][T25488] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2323.870722][T25488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2323.909654][T25488] 8021q: adding VLAN 0 to HW filter on device team0 [ 2324.011277][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state [ 2324.018523][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2324.032393][T22158] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 2324.139908][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state [ 2324.147213][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2324.745989][T25488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2325.251560][T25488] veth0_vlan: entered promiscuous mode [ 2325.278302][T25488] veth1_vlan: entered promiscuous mode [ 2325.348106][T25488] veth0_macvtap: entered promiscuous mode [ 2325.364776][T25488] veth1_macvtap: entered promiscuous mode [ 2325.416273][T25488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2325.433969][T25488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2325.448474][T25488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2325.473592][T25488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2325.496068][T25488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2325.509378][T25488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2325.534612][T25488] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2325.548991][T25488] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2325.560308][T25488] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2325.575822][T25488] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2326.623289][T14648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2326.661738][T14648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2326.897467][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2326.927864][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2327.588889][T25571] loop6: detected capacity change from 0 to 512 [ 2327.613829][T25571] EXT4-fs: Ignoring removed i_version option [ 2327.731437][T25571] EXT4-fs (loop6): can't mount with both data=journal and dax [ 2327.822078][T25579] binder: BINDER_SET_CONTEXT_MGR already set [ 2327.890033][T25579] binder: 25578:25579 ioctl 4018620d 200000000040 returned -16 [ 2328.240642][T24428] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 2329.383510][T24428] usb 10-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 2329.400481][T24428] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2329.444839][T24428] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 2329.697106][T24428] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2330.200662][T22158] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 2332.154060][T24428] usb 10-1: Product: syz [ 2332.158396][T24428] usb 10-1: Manufacturer: syz [ 2332.293562][T24428] usb 10-1: SerialNumber: syz [ 2332.443722][T24428] usb 10-1: can't set config #1, error -71 [ 2332.502473][T24428] usb 10-1: USB disconnect, device number 2 [ 2332.519214][ T6276] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 2332.721067][ T6276] usb 7-1: device descriptor read/64, error -71 [ 2335.020138][T25615] loop8: detected capacity change from 0 to 512 [ 2335.130269][T25615] EXT4-fs: Ignoring removed i_version option [ 2335.259649][T25615] EXT4-fs (loop8): can't mount with both data=journal and dax [ 2336.145661][ T6276] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 2337.427122][T15651] hsr_slave_0: left promiscuous mode [ 2337.450721][T15651] hsr_slave_1: left promiscuous mode [ 2337.463823][T15651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2337.496592][T15651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2337.537679][T15651] bridge_slave_1: left allmulticast mode [ 2337.561779][T15651] bridge_slave_1: left promiscuous mode [ 2337.587077][T15651] bridge0: port 2(bridge_slave_1) entered disabled state [ 2337.633122][T15651] bridge_slave_0: left allmulticast mode [ 2337.654957][T15651] bridge_slave_0: left promiscuous mode [ 2337.675244][T15651] bridge0: port 1(bridge_slave_0) entered disabled state [ 2338.783299][T22158] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 2339.779660][T15651] team0 (unregistering): Port device team_slave_1 removed [ 2339.936605][T15651] team0 (unregistering): Port device team_slave_0 removed [ 2340.069446][T15651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2340.162739][T15651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2341.253216][T15651] bond0 (unregistering): Released all slaves [ 2341.538794][T25629] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5561'. [ 2341.557787][T25629] bond0: entered promiscuous mode [ 2341.563043][T25629] bond_slave_0: entered promiscuous mode [ 2341.568895][T25629] bond_slave_1: entered promiscuous mode [ 2341.600065][T25629] bond0: left promiscuous mode [ 2341.605244][T25629] bond_slave_0: left promiscuous mode [ 2341.611137][T25629] bond_slave_1: left promiscuous mode [ 2346.788121][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2346.795718][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2348.295542][T25695] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5573'. [ 2348.326037][T25695] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5573'. [ 2348.377468][T25695] vxcan1: entered promiscuous mode [ 2348.410752][T25695] vxcan1: entered allmulticast mode [ 2348.428580][T25697] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5573'. [ 2348.470844][T25697] vxcan1: left promiscuous mode [ 2348.475798][T25697] vxcan1: left allmulticast mode [ 2348.703262][T23554] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 2348.940773][T23554] usb 7-1: Using ep0 maxpacket: 16 [ 2348.976196][T23554] usb 7-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 2349.585982][T25714] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5574'. [ 2349.603901][T25714] bond0: entered promiscuous mode [ 2349.609124][T25714] bond_slave_0: entered promiscuous mode [ 2349.615039][T25714] bond_slave_1: entered promiscuous mode [ 2349.623366][T25714] bond0: left promiscuous mode [ 2349.628305][T25714] bond_slave_0: left promiscuous mode [ 2349.634304][T25714] bond_slave_1: left promiscuous mode [ 2349.840504][T23554] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2349.869279][T23554] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2354.869593][T23554] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.917472][T23554] usb 7-1: Product: syz [ 2354.935727][T23554] usb 7-1: Manufacturer: syz [ 2354.974426][T23554] usb 7-1: SerialNumber: syz [ 2355.085217][T23554] usb 7-1: can't set config #1, error -71 [ 2355.135877][T23554] usb 7-1: USB disconnect, device number 40 [ 2356.885938][T25798] program syz.9.5587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2357.420551][T24427] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 2357.638341][T24427] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2357.661447][T11451] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 2357.665560][T24427] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2357.701406][T24427] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 2357.716855][T24427] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2357.748649][T24427] usb 9-1: Product: syz [ 2357.757014][T24427] usb 9-1: Manufacturer: syz [ 2357.775032][T24427] usb 9-1: SerialNumber: syz [ 2357.910856][T11451] usb 10-1: Using ep0 maxpacket: 32 [ 2357.956005][T11451] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2358.030653][T11451] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2358.037205][T24427] usb 9-1: 0:1 : does not exist [ 2358.066697][T24427] usb 9-1: 3:0: failed to get current value for ch 0 (-71) [ 2358.069948][T11451] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 2358.092874][T24427] usb 9-1: unit 13 not found! [ 2358.096067][T25817] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5590'. [ 2358.139436][T24427] usb 9-1: USB disconnect, device number 61 [ 2358.150624][T11451] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2358.245296][T11451] usb 10-1: config 0 descriptor?? [ 2358.277886][T25664] udevd[25664]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2359.059840][T22158] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 2359.160990][T11451] corsair-psu 0003:1B1C:1C09.0011: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.9-1/input0 [ 2359.509234][T25810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2359.548884][T25810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2359.578671][T25810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2359.610805][T11451] corsair-psu 0003:1B1C:1C09.0011: unable to initialize device (-110) [ 2359.652894][T25810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2359.785869][T11451] corsair-psu: probe of 0003:1B1C:1C09.0011 failed with error -110 [ 2359.921527][T11451] usb 10-1: USB disconnect, device number 3 [ 2360.798718][T25862] loop8: detected capacity change from 0 to 512 [ 2360.881034][T25862] EXT4-fs: Ignoring removed i_version option [ 2360.962734][T25862] EXT4-fs (loop8): can't mount with both data=journal and dax [ 2362.640762][T22158] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 2371.215196][T22158] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 2373.334523][T25960] loop3: detected capacity change from 0 to 256 [ 2373.464488][T25664] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2374.003866][T25967] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5619'. [ 2374.377986][T25967] bond0: entered promiscuous mode [ 2374.384261][T25967] bond_slave_0: entered promiscuous mode [ 2374.391341][T25967] bond_slave_1: entered promiscuous mode [ 2376.981391][T25967] bond0: left promiscuous mode [ 2376.987344][T25967] bond_slave_0: left promiscuous mode [ 2376.994203][T25967] bond_slave_1: left promiscuous mode [ 2382.751703][T26024] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 2382.759894][T26024] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 2382.768281][T26024] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2382.782807][T26024] Error parsing options; rc = [-22] [ 2382.970449][T24428] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 2383.154781][T24428] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2383.189929][T24428] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2383.240511][T24428] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 2383.276372][T24428] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2383.312992][T24428] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2383.391204][T24428] usb 9-1: Quirk or no altest; falling back to MIDI 1.0 [ 2383.856795][T24428] snd-usb-audio: probe of 9-1:27.0 failed with error -12 [ 2385.088627][T23169] usb 9-1: USB disconnect, device number 62 [ 2386.052691][T21513] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2386.071123][T21513] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2386.086569][T21513] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2386.103748][T21513] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2386.121403][T21513] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2386.135706][T21513] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2386.558777][T21513] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 2386.586249][T26047] wlan0 speed is unknown, defaulting to 1000 [ 2386.754128][T26040] loop9: detected capacity change from 0 to 32768 [ 2386.914444][T26040] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2387.269809][T26040] XFS (loop9): Ending clean mount [ 2387.462026][T22572] XFS (loop9): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 [ 2387.524317][T22572] XFS (loop9): Unmount and run xfs_repair [ 2387.569829][T22572] XFS (loop9): First 128 bytes of corrupted metadata buffer: [ 2387.601391][T22572] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 2387.640904][T22572] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 2387.685968][T22572] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 2387.728274][T22572] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 2387.813211][T22572] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 2387.869702][T22572] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 2387.895005][T16421] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2387.920526][T22572] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 2387.952407][T16421] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2387.982033][T22572] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 2388.014000][T26040] XFS (loop9): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x14 len 4 error 74 [ 2388.070504][T26040] XFS (loop9): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0xc7d/0x1230 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 2388.170684][T26040] XFS (loop9): Please unmount the filesystem and rectify the problem(s) [ 2388.189904][T21513] Bluetooth: hci1: command tx timeout [ 2388.331629][T25488] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2388.483768][T16421] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2388.570760][T16421] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2388.787314][T16421] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2388.814811][T16421] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2388.896119][T26047] chnl_net:caif_netlink_parms(): no params data found [ 2389.172698][T16421] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2389.197246][T16421] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2389.806930][T26047] bridge0: port 1(bridge_slave_0) entered blocking state [ 2389.840690][T26047] bridge0: port 1(bridge_slave_0) entered disabled state [ 2389.870996][T26047] bridge_slave_0: entered allmulticast mode [ 2389.920819][T26047] bridge_slave_0: entered promiscuous mode [ 2390.005755][T26047] bridge0: port 2(bridge_slave_1) entered blocking state [ 2390.032898][T26047] bridge0: port 2(bridge_slave_1) entered disabled state [ 2390.050950][T26047] bridge_slave_1: entered allmulticast mode [ 2390.058407][T26047] bridge_slave_1: entered promiscuous mode [ 2390.264248][T21513] Bluetooth: hci1: command tx timeout [ 2390.287326][T26047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2390.323850][T26047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2390.418573][T16421] tipc: Left network mode [ 2390.525994][T26047] team0: Port device team_slave_0 added [ 2390.621156][T26047] team0: Port device team_slave_1 added [ 2391.067458][T21513] Bluetooth: hci4: failed to read key size for handle 200 [ 2391.533727][T26047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2391.554175][T26047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2391.626190][T26047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2391.685779][T26047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2391.719531][T26047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2391.861130][T26047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2392.286965][T26047] hsr_slave_0: entered promiscuous mode [ 2392.321763][T26047] hsr_slave_1: entered promiscuous mode [ 2392.330976][T26047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2392.338596][T26047] Cannot create hsr debugfs directory [ 2392.345109][T21513] Bluetooth: hci1: command tx timeout [ 2393.668682][T26129] loop9: detected capacity change from 0 to 32768 [ 2393.888234][T26129] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2394.147355][T26129] XFS (loop9): Ending clean mount [ 2394.321703][T15127] XFS (loop9): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 [ 2394.355818][T15127] XFS (loop9): Unmount and run xfs_repair [ 2394.378523][T15127] XFS (loop9): First 128 bytes of corrupted metadata buffer: [ 2394.414004][T15127] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 2394.426316][T21513] Bluetooth: hci1: command tx timeout [ 2394.435253][T15127] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 2394.444981][T15127] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 2394.455511][T15127] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 2394.465274][T15127] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 2394.476826][T15127] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 2394.487291][T15127] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 2394.497789][T15127] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 2394.523347][T26129] XFS (loop9): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x14 len 4 error 74 [ 2394.561029][T26129] XFS (loop9): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0xc7d/0x1230 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 2394.636319][T26129] XFS (loop9): Please unmount the filesystem and rectify the problem(s) [ 2394.778927][T25488] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2395.344796][T22572] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2395.586735][T22572] usb 4-1: Using ep0 maxpacket: 16 [ 2395.622381][T22572] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2395.684873][T22572] usb 4-1: config 9 has an invalid interface number: 166 but max is 0 [ 2395.730523][T22572] usb 4-1: config 9 has no interface number 0 [ 2395.748445][T22572] usb 4-1: config 9 interface 166 has no altsetting 0 [ 2395.779965][T22572] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1230, bcdDevice=3f.01 [ 2395.848849][T22572] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2395.872442][T22572] usb 4-1: Product: syz [ 2395.889386][T22572] usb 4-1: Manufacturer: syz [ 2395.910420][T22572] usb 4-1: SerialNumber: syz [ 2396.313617][T22572] option 4-1:9.166: GSM modem (1-port) converter detected [ 2396.343235][T22572] usb 4-1: USB disconnect, device number 82 [ 2396.355690][T16421] hsr_slave_0: left promiscuous mode [ 2396.411689][T22572] option 4-1:9.166: device disconnected [ 2396.455775][T16421] hsr_slave_1: left promiscuous mode [ 2396.478571][T16421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2396.522592][T16421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2396.587989][T16421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2396.618633][T16421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2396.669878][T16421] bridge_slave_1: left allmulticast mode [ 2396.690534][T16421] bridge_slave_1: left promiscuous mode [ 2396.704308][T16421] bridge0: port 2(bridge_slave_1) entered disabled state [ 2396.764092][T16421] bridge_slave_0: left allmulticast mode [ 2396.790760][T16421] bridge_slave_0: left promiscuous mode [ 2396.825094][T16421] bridge0: port 1(bridge_slave_0) entered disabled state [ 2396.969400][T16421] veth1_macvtap: left promiscuous mode [ 2397.000531][T16421] veth0_macvtap: left promiscuous mode [ 2397.006162][T16421] veth1_vlan: left promiscuous mode [ 2397.027193][T16421] veth0_vlan: left promiscuous mode [ 2397.036947][T21513] Bluetooth: hci4: failed to read key size for handle 200 [ 2397.703045][T22572] usb 9-1: new full-speed USB device number 63 using dummy_hcd [ 2397.750932][T23554] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2397.934247][T22572] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2397.944557][T23554] usb 4-1: Using ep0 maxpacket: 32 [ 2397.953341][T22572] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2397.967608][T22572] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2397.977207][T23554] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 2397.985987][T22572] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2397.994184][T23554] usb 4-1: config 0 has no interface number 0 [ 2398.000877][T23554] usb 4-1: config 0 interface 12 has no altsetting 0 [ 2398.012674][T23554] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2398.030413][T23554] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2398.045161][T23554] usb 4-1: Product: syz [ 2398.049534][T23554] usb 4-1: Manufacturer: syz [ 2398.055290][T23554] usb 4-1: SerialNumber: syz [ 2398.069509][T23554] usb 4-1: config 0 descriptor?? [ 2398.268205][T22572] usb 9-1: usb_control_msg returned -32 [ 2398.279183][T22572] usbtmc 9-1:16.0: can't read capabilities [ 2398.674239][T16421] team0 (unregistering): Port device team_slave_1 removed [ 2398.772850][T16421] team0 (unregistering): Port device team_slave_0 removed [ 2398.857537][T16421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2398.939278][T16421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2398.945590][T23554] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 80 failed: -71 [ 2398.982870][T23554] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 2399.006389][T23554] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2399.014709][T23554] f81534: probe of 4-1:0.12 failed with error -71 [ 2399.030069][T23554] usb 4-1: USB disconnect, device number 83 [ 2399.679005][T26227] loop3: detected capacity change from 0 to 512 [ 2399.689589][T26227] EXT4-fs: Ignoring removed i_version option [ 2399.699020][T16421] bond0 (unregistering): Released all slaves [ 2399.713116][T26227] EXT4-fs (loop3): can't mount with both data=journal and dax [ 2400.607746][T10452] usb 9-1: USB disconnect, device number 63 [ 2400.644379][T26230] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5653'. [ 2401.116117][T16421] IPVS: stop unused estimator thread 0... [ 2401.210621][T26047] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2401.290992][T26047] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2401.421674][T26047] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2401.466847][T26047] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2401.838774][T26047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2401.907588][T26047] 8021q: adding VLAN 0 to HW filter on device team0 [ 2401.939060][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2401.946349][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2402.003404][T16421] bridge0: port 2(bridge_slave_1) entered blocking state [ 2402.010739][T16421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2402.813884][T21513] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 2403.976612][T26047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2404.263497][T26047] veth0_vlan: entered promiscuous mode [ 2404.373755][T26047] veth1_vlan: entered promiscuous mode [ 2404.594273][T26047] veth0_macvtap: entered promiscuous mode [ 2404.685952][T26047] veth1_macvtap: entered promiscuous mode [ 2404.812468][T26047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2404.865325][T26047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2404.932397][T26047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2404.955327][T26265] loop9: detected capacity change from 0 to 32768 [ 2404.999362][T26047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2405.049644][T26265] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop9": -EINTR [ 2405.086203][T26047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2405.168951][T26047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2405.253129][T26047] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2405.296134][T26047] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2405.335022][T26047] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2405.384078][T26047] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2405.792943][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2405.835420][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2405.954003][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2405.989565][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2406.827091][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.833723][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2407.120793][T22572] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2407.331634][T22572] usb 2-1: Using ep0 maxpacket: 16 [ 2407.352612][T22572] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2407.388261][T22572] usb 2-1: config 0 has no interfaces? [ 2407.416819][T22572] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2407.440216][T22572] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2407.475645][T22572] usb 2-1: Product: syz [ 2407.480173][T22572] usb 2-1: Manufacturer: syz [ 2407.510420][T22572] usb 2-1: SerialNumber: syz [ 2407.529157][T22572] usb 2-1: config 0 descriptor?? [ 2408.190727][T21513] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 2415.016718][T23554] usb 2-1: USB disconnect, device number 27 [ 2417.183512][T21513] Bluetooth: hci4: failed to read key size for handle 200 [ 2417.748661][T26401] tty tty1: ldisc open failed (-12), clearing slot 0 [ 2418.621421][T26395] futex_wake_op: syz.1.5682 tries to shift op by 144; fix this program [ 2421.581986][T26448] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 2421.608291][T26448] CIFS: Attempting to mount //127.0.0.1/share [ 2421.790395][T26448] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2421.797991][T26448] CIFS: VFS: cifs_mount failed w/return code = -4 [ 2422.028571][T26466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5694'. [ 2422.890172][T21513] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 2426.008998][T26466] macvtap1: entered promiscuous mode [ 2426.040573][T26466] syz_tun: entered promiscuous mode [ 2426.046051][T26466] macvtap1: entered allmulticast mode [ 2426.070479][T26466] syz_tun: entered allmulticast mode [ 2427.017882][T26484] netlink: 'syz.8.5699': attribute type 1 has an invalid length. [ 2427.125522][T26484] netlink: 'syz.8.5699': attribute type 2 has an invalid length. [ 2428.139641][T26179] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 2428.332940][T26179] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 2428.341611][T26179] usb 2-1: config 0 has no interface number 0 [ 2428.348130][T26179] usb 2-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 2428.416016][T26179] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2428.436351][T26179] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2428.489406][T26179] usb 2-1: Product: syz [ 2428.494805][T26179] usb 2-1: SerialNumber: syz [ 2428.519930][T26179] usb 2-1: config 0 descriptor?? [ 2428.541247][T26179] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 2428.826465][T21513] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 2428.902552][T21513] Bluetooth: hci4: failed to read key size for handle 200 [ 2429.061263][T23554] usb 2-1: USB disconnect, device number 28 [ 2430.919740][T26561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5715'. [ 2430.955110][T26561] bond0: entered promiscuous mode [ 2430.960420][T26561] bond_slave_0: entered promiscuous mode [ 2430.967355][T26561] bond_slave_1: entered promiscuous mode [ 2431.000147][T26561] bond0: left promiscuous mode [ 2431.005285][T26561] bond_slave_0: left promiscuous mode [ 2431.011097][T26561] bond_slave_1: left promiscuous mode [ 2431.288328][T21513] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 2431.680982][T26588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5723'. [ 2431.922314][T26596] CIFS: Attempting to mount //127.0.0.1/share [ 2432.447253][T26606] autofs4:pid:26606:autofs_fill_super: called with bogus options [ 2432.902806][T21513] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 2432.912968][T21513] Bluetooth: hci0: Injecting HCI hardware error event [ 2432.929014][T22158] Bluetooth: hci0: hardware error 0x00 [ 2434.983006][T22158] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2435.064085][T22158] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 2435.074243][T22158] Bluetooth: hci4: Injecting HCI hardware error event [ 2435.093703][T21513] Bluetooth: hci4: hardware error 0x00 [ 2436.386746][T26596] CIFS: VFS: cifs_mount failed w/return code = -512 [ 2437.381719][T21513] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2439.380837][T22741] usb 9-1: new full-speed USB device number 64 using dummy_hcd [ 2440.518007][T22741] usb 9-1: too many configurations: 253, using maximum allowed: 8 [ 2440.551668][T22741] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2440.582517][T22741] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2440.601894][T22741] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2440.622331][T22741] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2440.641820][T22741] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2440.654058][T22741] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2440.672157][T22741] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2440.707259][T22741] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2440.720412][T22741] usb 9-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 2440.740957][T22741] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2440.783210][T22741] usb 9-1: config 0 descriptor?? [ 2440.813873][T22741] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 2441.056810][T22572] usb 9-1: USB disconnect, device number 64 [ 2441.590481][T26179] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2441.670716][T22572] usb 9-1: new full-speed USB device number 65 using dummy_hcd [ 2441.794651][T26179] usb 4-1: Using ep0 maxpacket: 32 [ 2441.811690][T26179] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 2441.820244][T26179] usb 4-1: config 0 has no interface number 0 [ 2441.832813][T26179] usb 4-1: config 0 interface 12 has no altsetting 0 [ 2441.848881][T26179] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2441.858422][T26179] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2441.867324][T26179] usb 4-1: Product: syz [ 2441.881375][T22572] usb 9-1: config 4 has an invalid interface number: 44 but max is 0 [ 2441.894753][T26179] usb 4-1: Manufacturer: syz [ 2441.899431][T26179] usb 4-1: SerialNumber: syz [ 2441.909477][T22572] usb 9-1: config 4 has no interface number 0 [ 2441.922570][T22572] usb 9-1: config 4 interface 44 altsetting 0 has an invalid endpoint with address 0xFD, skipping [ 2441.935503][T26179] usb 4-1: config 0 descriptor?? [ 2441.958775][T22572] usb 9-1: config 4 interface 44 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2441.973688][T22572] usb 9-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 2441.984669][T22572] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2441.993658][T22572] usb 9-1: Product: syz [ 2441.998016][T22572] usb 9-1: Manufacturer: syz [ 2442.003912][T22572] usb 9-1: SerialNumber: syz [ 2442.242804][T22572] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 2442.350238][T22572] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2442.366391][T22572] dib0700: firmware download failed at 7 with -8 [ 2442.380817][T26179] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2442.395563][T26179] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 2442.408269][T22572] usb 9-1: USB disconnect, device number 65 [ 2442.419734][T26179] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2442.444022][T26179] f81534: probe of 4-1:0.12 failed with error -71 [ 2442.482793][T26179] usb 4-1: USB disconnect, device number 84 [ 2442.780813][T26693] nvme nvme0: failed to connect socket: -111 [ 2449.538405][T22158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2449.555077][T22158] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2449.564472][T22158] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2449.579372][T22158] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2449.589095][T22158] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2449.596814][T22158] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2449.683841][T26732] wlan0 speed is unknown, defaulting to 1000 [ 2450.027367][T26732] chnl_net:caif_netlink_parms(): no params data found [ 2450.266227][T26732] bridge0: port 1(bridge_slave_0) entered blocking state [ 2450.274058][T26732] bridge0: port 1(bridge_slave_0) entered disabled state [ 2450.281553][T26732] bridge_slave_0: entered allmulticast mode [ 2450.289286][T26732] bridge_slave_0: entered promiscuous mode [ 2450.299675][T26732] bridge0: port 2(bridge_slave_1) entered blocking state [ 2450.307055][T26732] bridge0: port 2(bridge_slave_1) entered disabled state [ 2450.314992][T26732] bridge_slave_1: entered allmulticast mode [ 2450.323250][T26732] bridge_slave_1: entered promiscuous mode [ 2450.391877][T26732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2450.429150][T26732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2450.608035][T26732] team0: Port device team_slave_0 added [ 2450.628599][T26732] team0: Port device team_slave_1 added [ 2450.750248][T26732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2450.794652][T26732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2450.871331][T26732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2450.908588][T26732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2450.926111][T26732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2450.962613][T26732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2450.990478][T16585] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 2451.165385][T26732] hsr_slave_0: entered promiscuous mode [ 2451.180599][T16585] usb 9-1: Using ep0 maxpacket: 32 [ 2451.190512][T16585] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 2451.199406][T26732] hsr_slave_1: entered promiscuous mode [ 2451.205190][T16585] usb 9-1: config 0 has no interface number 0 [ 2451.212605][T26732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2451.220466][T16585] usb 9-1: config 0 interface 12 has no altsetting 0 [ 2451.234718][T26732] Cannot create hsr debugfs directory [ 2451.245477][T16585] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2451.262513][T16585] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2451.281073][T16585] usb 9-1: Product: syz [ 2451.288776][T16585] usb 9-1: Manufacturer: syz [ 2451.299366][T16585] usb 9-1: SerialNumber: syz [ 2451.311620][T16585] usb 9-1: config 0 descriptor?? [ 2451.712340][T21513] Bluetooth: hci2: command tx timeout [ 2451.748068][T16585] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2451.763797][T26768] nvme nvme0: failed to connect socket: -512 [ 2451.794251][T16585] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 2451.826572][T16585] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2451.870701][T16585] f81534: probe of 9-1:0.12 failed with error -71 [ 2451.927386][T16585] usb 9-1: USB disconnect, device number 66 [ 2453.781167][T21513] Bluetooth: hci2: command tx timeout [ 2453.822286][T26800] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 2455.860769][T21513] Bluetooth: hci2: command tx timeout [ 2457.419403][T26799] pty pty26: ldisc open failed (-12), clearing slot 26 [ 2457.946250][T21513] Bluetooth: hci2: command tx timeout [ 2458.453267][T26819] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5756'. [ 2458.491601][T26732] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2458.541797][T26732] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2458.574314][T26732] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2459.414947][T26732] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2463.228256][T26834] nvme nvme0: failed to connect socket: -111 [ 2463.296393][T26732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2463.310794][T23169] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 2463.353184][T26732] 8021q: adding VLAN 0 to HW filter on device team0 [ 2463.400901][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state [ 2463.408072][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2463.430090][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state [ 2463.437526][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2463.520574][T23169] usb 9-1: Using ep0 maxpacket: 16 [ 2463.529261][T23169] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2463.564326][T23169] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2463.577879][T23169] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2463.592611][T23169] usb 9-1: Product: syz [ 2463.598309][T23169] usb 9-1: Manufacturer: syz [ 2463.603368][T23169] usb 9-1: SerialNumber: syz [ 2463.629958][T23169] usb 9-1: config 0 descriptor?? [ 2464.139319][T26732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2464.265160][T26732] veth0_vlan: entered promiscuous mode [ 2464.293565][T26732] veth1_vlan: entered promiscuous mode [ 2464.344534][T26854] netlink: 'syz.9.5763': attribute type 1 has an invalid length. [ 2464.393342][T26732] veth0_macvtap: entered promiscuous mode [ 2464.399264][T26854] netlink: 'syz.9.5763': attribute type 2 has an invalid length. [ 2464.424268][T26732] veth1_macvtap: entered promiscuous mode [ 2464.473954][T26732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2464.494688][T26732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2464.512211][T26732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2464.540380][T26732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2464.563380][T26732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2464.612094][T26732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2464.640337][T26732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2464.677836][T26732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2464.689900][T26732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.055574][T26732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2466.038104][T26732] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2466.298606][T26732] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2466.535000][T26732] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2466.735619][T26732] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2467.537330][T22741] usb 9-1: USB disconnect, device number 67 [ 2468.270859][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2468.279272][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.383213][T24333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2468.432145][T24333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2468.532991][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2468.560222][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2469.279356][T21513] Bluetooth: hci2: failed to read key size for handle 200 [ 2469.371499][T26873] nvme nvme0: failed to connect socket: -512 [ 2470.604573][ T28] audit: type=1800 audit(1786198146.000:928): pid=26894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5775" name="memory_backed" dev="configfs" ino=112050 res=0 errno=0 [ 2472.130582][T23554] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2472.715068][T21513] Bluetooth: hci2: failed to read key size for handle 200 [ 2472.911371][T23554] usb 10-1: Using ep0 maxpacket: 16 [ 2472.946111][T23554] usb 10-1: string descriptor 0 read error: -22 [ 2472.961474][T23554] usb 10-1: New USB device found, idVendor=0499, idProduct=101d, bcdDevice= 0.40 [ 2472.980836][T23554] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2473.018134][T23554] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 2473.044365][T23554] snd-usb-audio: probe of 10-1:1.0 failed with error -2 [ 2473.078977][T23554] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 2473.120038][T23554] snd-usb-audio: probe of 10-1:1.1 failed with error -2 [ 2473.131668][T26928] nvme nvme0: failed to connect socket: -111 [ 2473.164876][T23554] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 2473.267839][T23554] snd-usb-audio: probe of 10-1:1.2 failed with error -2 [ 2473.276190][T26777] udevd[26777]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2473.332023][T23554] usb 10-1: USB disconnect, device number 4 [ 2473.968351][T15129] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 2474.295619][T15129] usb 9-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 2474.352753][T26958] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5788'. [ 2474.977352][T26958] bond0: entered promiscuous mode [ 2474.977639][T15129] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2474.983012][T26958] bond_slave_0: entered promiscuous mode [ 2474.983235][T26958] bond_slave_1: entered promiscuous mode [ 2475.024313][T15129] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 2475.039273][T15129] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2475.057787][T15129] usb 9-1: Product: syz [ 2475.057810][T26958] bond0: left promiscuous mode [ 2475.067421][T26958] bond_slave_0: left promiscuous mode [ 2475.073134][T26958] bond_slave_1: left promiscuous mode [ 2475.084427][T15129] usb 9-1: Manufacturer: syz [ 2475.105266][T15129] usb 9-1: SerialNumber: syz [ 2475.338227][T15129] usb 9-1: 0:1 : does not exist [ 2475.359593][T15129] usb 9-1: 3:0: failed to get current value for ch 0 (-71) [ 2475.378684][T15129] usb 9-1: unit 13 not found! [ 2475.448405][T15129] usb 9-1: USB disconnect, device number 68 [ 2475.533728][T26777] udevd[26777]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2475.640411][T24428] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 2475.822357][T24428] usb 10-1: Using ep0 maxpacket: 32 [ 2475.837461][T24428] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2475.870586][T24428] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2475.909038][T24428] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2475.941246][T24428] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2476.000799][T24428] usb 10-1: config 0 descriptor?? [ 2476.042827][T24428] hub 10-1:0.0: USB hub found [ 2476.545492][T24428] hub 10-1:0.0: config failed, can't read hub descriptor (err -22) [ 2476.587022][T24428] usbhid 10-1:0.0: can't add hid device: -71 [ 2476.616316][T24428] usbhid: probe of 10-1:0.0 failed with error -71 [ 2476.756199][T24428] usb 10-1: USB disconnect, device number 5 [ 2478.128560][T26996] loop9: detected capacity change from 0 to 512 [ 2478.164224][T26996] EXT4-fs: Ignoring removed i_version option [ 2478.194348][T26996] EXT4-fs (loop9): can't mount with both data=journal and dax [ 2478.231189][T26996] overlayfs: missing 'workdir' [ 2479.013283][T27003] nvme nvme0: failed to connect socket: -111 [ 2479.650449][T22572] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2479.851570][T22572] usb 4-1: Using ep0 maxpacket: 8 [ 2479.859529][T22572] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2479.879220][T22572] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2479.907700][T22572] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2479.919340][T22572] pvrusb2: ********** [ 2479.925922][T22572] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2479.957488][T22572] pvrusb2: Important functionality might not be entirely working. [ 2479.960611][T24428] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 2479.980389][T22572] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2480.018603][T22572] pvrusb2: ********** [ 2480.115850][ T2323] pvrusb2: Invalid write control endpoint [ 2480.161166][T24428] usb 9-1: Using ep0 maxpacket: 32 [ 2480.175109][T24428] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2480.210765][T24428] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2480.268480][T24428] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2480.288130][T24428] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2480.315996][T24428] usb 9-1: config 0 descriptor?? [ 2480.335244][T24428] hub 9-1:0.0: USB hub found [ 2480.350569][ T2323] pvrusb2: Invalid write control endpoint [ 2480.357124][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2480.439803][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2480.468662][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2480.501637][ T2323] pvrusb2: Device being rendered inoperable [ 2480.532447][T27017] pvrusb2: Attempted to execute control transfer when device not ok [ 2480.554979][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2480.563302][T26183] usb 4-1: USB disconnect, device number 85 [ 2480.581457][T24428] hub 9-1:0.0: config failed, can't read hub descriptor (err -22) [ 2480.586827][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 2480.602104][T24428] usbhid 9-1:0.0: can't add hid device: -71 [ 2480.608178][T24428] usbhid: probe of 9-1:0.0 failed with error -71 [ 2480.634368][ T2323] pvrusb2: Attached sub-driver cx25840 [ 2480.646928][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2480.676232][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2480.711766][T24428] usb 9-1: USB disconnect, device number 69 [ 2481.035782][T27053] loop9: detected capacity change from 0 to 512 [ 2481.051864][T27053] EXT4-fs: Ignoring removed i_version option [ 2481.073795][T27053] EXT4-fs (loop9): can't mount with both data=journal and dax [ 2481.156917][T27053] overlayfs: missing 'workdir' [ 2482.243235][T27072] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 2482.253121][T27072] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 2482.262060][T27072] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 2483.049920][T27071] nvme nvme0: failed to connect socket: -512 [ 2486.457774][T27126] nvme nvme0: failed to connect socket: -512 [ 2489.342093][T27170] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 2489.349535][T27170] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 2489.357106][T27170] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2489.370488][T27170] Error parsing options; rc = [-22] [ 2492.949445][T27190] KVM: debugfs: duplicate directory 27190-4 [ 2494.830716][T26183] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2495.101851][T26183] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2495.120516][T26183] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2495.156326][T26183] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2495.177994][T26183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2495.232106][T26183] usb 4-1: config 0 descriptor?? [ 2495.471704][T16585] usb 4-1: USB disconnect, device number 86 [ 2496.061637][T16585] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2496.282791][T16585] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2496.304193][T16585] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2496.320202][T16585] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2496.339671][T16585] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2496.362194][T16585] usb 4-1: config 0 descriptor?? [ 2496.962743][T15129] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 2497.153778][T15129] usb 9-1: Using ep0 maxpacket: 32 [ 2497.349972][T15129] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2497.364202][T15129] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2497.374948][T15129] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2497.388976][T15129] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2497.399552][T15129] usb 9-1: config 0 descriptor?? [ 2497.427032][T15129] hub 9-1:0.0: USB hub found [ 2497.647193][T15129] hub 9-1:0.0: config failed, can't read hub descriptor (err -22) [ 2497.725211][T26183] usb 4-1: USB disconnect, device number 87 [ 2497.864945][T15129] usbhid 9-1:0.0: can't add hid device: -71 [ 2497.888370][T15129] usbhid: probe of 9-1:0.0 failed with error -71 [ 2497.981553][T15129] usb 9-1: USB disconnect, device number 70 [ 2499.664204][T27314] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 2499.672131][T27314] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 2499.679691][T27314] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2499.693232][T27314] Error parsing options; rc = [-22] [ 2500.622149][T27296] nvme nvme0: failed to connect socket: -512 [ 2503.746592][T27322] program syz.0.5858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2506.538481][T27351] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 2506.546002][T27351] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 2506.553553][T27351] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2506.567166][T27351] Error parsing options; rc = [-22] [ 2507.020474][T24428] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 2507.144033][T27365] nvme nvme0: failed to connect socket: -111 [ 2507.206504][T24428] usb 10-1: config 4 has an invalid interface number: 29 but max is 0 [ 2507.223780][T24428] usb 10-1: config 4 has no interface number 0 [ 2507.233781][T24428] usb 10-1: config 4 interface 29 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2507.247969][T24428] usb 10-1: config 4 interface 29 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2507.269384][T24428] usb 10-1: Dual-Role OTG device on HNP port [ 2507.278400][T24428] usb 10-1: New USB device found, idVendor=0bda, idProduct=c811, bcdDevice=b0.13 [ 2507.295128][T24428] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2507.305182][T24428] usb 10-1: Product: syz [ 2507.309563][T24428] usb 10-1: Manufacturer: syz [ 2507.323678][T24428] usb 10-1: SerialNumber: syz [ 2507.612037][T24428] usb 10-1: USB disconnect, device number 6 [ 2508.053101][T27390] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 2510.903880][T27421] nvme nvme0: failed to connect socket: -512 [ 2511.370384][T21513] Bluetooth: hci1: command 0x0406 tx timeout [ 2513.027918][T27459] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[25488] was attempted by ""[27459] [ 2514.336509][T27479] nvme nvme0: failed to connect socket: -111 [ 2514.464786][T27482] kvm: kvm [27478]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x2c000000792c [ 2516.050423][T26183] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2516.240373][T26183] usb 1-1: Using ep0 maxpacket: 16 [ 2516.271994][T26183] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2516.292295][T26183] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2516.313415][T26183] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 2516.335527][T26183] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2516.355901][T26183] usb 1-1: SerialNumber: syz [ 2516.394935][T26183] usb 1-1: 0:2 : does not exist [ 2516.810190][T26183] usb 1-1: USB disconnect, device number 36 [ 2517.294704][T22158] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 2518.384083][T27543] nvme nvme0: failed to connect socket: -512 [ 2520.926352][T27576] CIFS: Attempting to mount //127.0.0.1/share [ 2520.934201][T27576] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2520.941706][T27576] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2521.626410][T27593] mmap: syz.0.5914 (27593) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 2529.707903][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.714678][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2531.066094][T27657] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 2531.073661][T27657] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 2531.081217][T27657] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2531.094422][T27657] Error parsing options; rc = [-22] [ 2531.319148][T27660] CIFS: Attempting to mount //127.0.0.1/share [ 2531.326981][T27660] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2531.334593][T27660] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2533.800905][T27682] overlayfs: failed to clone upperpath [ 2536.300694][T27688] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 2536.308125][T27688] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 2536.315708][T27688] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2536.329244][T27688] Error parsing options; rc = [-22] [ 2539.563500][T27731] loop8: detected capacity change from 0 to 512 [ 2539.577698][T27731] EXT4-fs: Ignoring removed i_version option [ 2539.586877][T27731] EXT4-fs (loop8): can't mount with both data=journal and dax [ 2541.280678][T27748] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 2541.288095][T27748] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 2541.295641][T27748] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2541.308718][T27748] Error parsing options; rc = [-22] [ 2549.752768][T27787] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 2549.760203][T27787] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 2549.767726][T27787] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2549.780937][T27787] Error parsing options; rc = [-22] [ 2551.640517][T26183] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 2551.842866][T26183] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2551.870422][T26183] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2551.910133][T26183] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2551.942064][T26183] usb 9-1: config 0 descriptor?? [ 2551.973887][T26183] pwc: Askey VC010 type 2 USB webcam detected. [ 2552.171624][T26183] pwc: send_video_command error -71 [ 2552.189281][T26183] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2552.210624][T26183] Philips webcam: probe of 9-1:0.0 failed with error -71 [ 2552.242804][T26183] usb 9-1: USB disconnect, device number 71 [ 2552.790693][T26183] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 2553.012705][T26183] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2553.038587][T26183] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2553.072787][T26183] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2553.108913][T26183] usb 9-1: config 0 descriptor?? [ 2553.151827][T26183] pwc: Askey VC010 type 2 USB webcam detected. [ 2554.181212][T26183] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2554.204359][T26183] pwc: recv_control_msg error -32 req 02 val 2700 [ 2554.225923][T26183] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2554.247237][T26183] pwc: recv_control_msg error -32 req 04 val 1000 [ 2554.280597][T26183] pwc: recv_control_msg error -32 req 04 val 1300 [ 2554.300388][T26183] pwc: recv_control_msg error -32 req 04 val 1400 [ 2554.321934][T26183] pwc: recv_control_msg error -32 req 02 val 2000 [ 2554.350501][T26183] pwc: recv_control_msg error -32 req 02 val 2100 [ 2554.380341][T26183] pwc: recv_control_msg error -71 req 04 val 1500 [ 2554.400861][T26183] pwc: recv_control_msg error -71 req 02 val 2500 [ 2554.420402][T26183] pwc: recv_control_msg error -71 req 02 val 2400 [ 2554.441275][T26183] pwc: recv_control_msg error -71 req 02 val 2600 [ 2555.306963][T27850] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 2555.314488][T27850] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 2555.322024][T27850] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2555.335113][T27850] Error parsing options; rc = [-22] [ 2555.460403][T26183] pwc: recv_control_msg error -71 req 02 val 2900 [ 2555.487110][T26183] pwc: recv_control_msg error -71 req 02 val 2800 [ 2555.546172][T26183] pwc: recv_control_msg error -71 req 04 val 1100 [ 2555.586062][T26183] pwc: recv_control_msg error -71 req 04 val 1200 [ 2555.629934][T26183] pwc: Registered as video103. [ 2555.654438][T27858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5965'. [ 2555.673036][T26183] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input26 [ 2555.720811][T27858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2555.791127][T26183] usb 9-1: USB disconnect, device number 72 [ 2559.290713][T27886] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 2559.298123][T27886] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 2559.305709][T27886] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2559.319329][T27886] Error parsing options; rc = [-22] [ 2561.142537][T27902] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5980'. [ 2561.180450][T27902] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 2565.561048][T27939] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 2565.568530][T27939] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 2565.576081][T27939] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2565.589216][T27939] Error parsing options; rc = [-22] [ 2566.091988][T27950] tmpfs: Unknown parameter 'grpquota_block_hardli' [ 2566.276685][T27954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5989'. [ 2566.340688][T27954] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 2566.920638][T27968] netlink: 'syz.9.5991': attribute type 3 has an invalid length. [ 2567.048123][ T28] audit: type=1326 audit(1786198242.510:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27970 comm="syz.3.5992" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b7259e0d9 code=0x0 [ 2569.339469][T27989] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 2569.346957][T27989] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 2569.354563][T27989] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2569.367782][T27989] Error parsing options; rc = [-22] [ 2569.883621][T28003] overlayfs: failed to clone upperpath [ 2570.055967][T28001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5986'. [ 2571.807978][T28025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5998'. [ 2571.830484][T28025] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 2571.992544][T26588] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 2572.740619][T22158] Bluetooth: hci2: command 0x0406 tx timeout