last executing test programs: 1m44.727582488s ago: executing program 3 (id=45): openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) 1m43.540807297s ago: executing program 3 (id=48): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ac0)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 1m43.286364514s ago: executing program 3 (id=50): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') epoll_create1(0x80000) connect$unix(0xffffffffffffffff, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x3d, 0x22, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r1 = mq_open(&(0x7f0000000100)='\x00', 0x800, 0x5f, &(0x7f0000000280)={0x2433, 0x90, 0x3, 0x6}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) mq_notify(r1, &(0x7f0000000380)={0x0, 0x12, 0x0, @tid=r2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b1600000000000000000200000a4000048018000180080001006f7366000c000280080001400000000424000180090001006d617371000000001400028008663f400000001708000140000000100900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r4, 0x0, 0x0) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) userfaultfd(0x80001) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0xf8, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x8, 0x3}}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4c, 0x400}}, @common=@inet=@l2tp={{0x30}, {0x4, 0x0, 0x3, 0x1, 0x4}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x200}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) pipe(0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 1m42.974325861s ago: executing program 3 (id=53): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0xc1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) gettimeofday(0x0, &(0x7f0000000040)) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) 1m41.919449947s ago: executing program 3 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x2, 0x0, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xffffffff) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$netlink(r4, 0x0, 0x20000000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r4, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) close(r4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m41.310424232s ago: executing program 3 (id=56): openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) 1m40.771953075s ago: executing program 32 (id=56): openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) 12.051875568s ago: executing program 1 (id=264): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedf", 0x3d}, {&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000280)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446e2e75ac162f581368e4d71c61841b6db324bd3dc55ae", 0x3c}], 0x3, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x800) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random="010020004e0b"}) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r5, &(0x7f0000001800), 0x0, 0x0, 0x0) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc840}, 0xc0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000002a80)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002840)={0x1c0, r8, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6ad}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x2a}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2a, 0x8}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7ff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1e}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x890}, 0x40000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0x7c9}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10.184297623s ago: executing program 1 (id=266): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x32, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 9.446764181s ago: executing program 1 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x7) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r3, &(0x7f0000008380)={0x2020}, 0x2020) 8.852839555s ago: executing program 2 (id=270): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7500}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000180)='./trace/events/mac80211/enable\x00', 0x0) openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) r6 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r6, 0x400455c8, 0x0) 8.715720219s ago: executing program 4 (id=271): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@bh}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x42100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e320d0000000000008001f9090309006faaaaaaaaaa11001089924ba976424b2b900000000000000003d6300624008000000000000000"], 0x35) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmsg$sock(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)='2', 0x1}], 0x1}, 0x24000894) read$FUSE(0xffffffffffffffff, &(0x7f0000001e00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000003e40)={0xbe, 0xfffffffa, {}, {r6}, 0xff, 0x6}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd7) pwrite64(r7, &(0x7f0000000bc0)="6ce8", 0xfdef, 0x7ff) 8.715336979s ago: executing program 1 (id=272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 6.523377102s ago: executing program 4 (id=276): capset(&(0x7f0000019180)={0x19980330, 0xffffffffffffffff}, &(0x7f00000191c0)={0x5, 0x200003, 0x200bc2, 0x4, 0x3, 0xfffffffa}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) modify_ldt$read(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x6, 0x9, 0x9, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={'\x00', 0x800b, 0x15, 0x0, 0x3, 0x3000006, "550000001000", "1575a859", '\x00', '}]6O', ["aabe8459c62224475793e8a7", "000400000000000000000040", "d400", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ']}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000019200)=""/129, 0x81) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='nilfs2\x00', 0x0, &(0x7f0000000980)='norecovery') connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x80, 0x0, 0x2, 0x0, 0x200, 0x1}}, {0x6, 0x2, [0xfffc]}}]}]}, 0x58}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) socket$netlink(0x10, 0x3, 0x400000000000004) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000190c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) syz_usb_connect(0x6, 0x2d, &(0x7f0000019080)=ANY=[], 0x0) 5.560775095s ago: executing program 2 (id=277): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$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") socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000c0000000800000002"], 0x50) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.899102395s ago: executing program 1 (id=280): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001500), 0x101800, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, 0x0) 3.70560502s ago: executing program 2 (id=281): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x7) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r3, &(0x7f0000008380)={0x2020}, 0x2020) 2.936588059s ago: executing program 0 (id=282): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x615, &(0x7f0000001300)="$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") open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0x0, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, &(0x7f0000000780)={0x10, 0x8, 0x5}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) io_uring_enter(r9, 0x1, 0x1, 0x61, 0x0, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r13, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000000540)) lsetxattr$trusted_overlay_origin(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000c80), 0x0, 0x0, 0x3) setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000002c0)=[{0x7, 0xb5, 0x26, 0x80000001}, {0x9, 0x5, 0x3, 0x6}]}, 0xa) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3000}) sendmsg$NFQNL_MSG_CONFIG(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000000203050000288b00000000000a00000309000200000000010200000008000100010000270d18760ab8cc3a1a213a8e7f0b24e9161e3f2ed5a76f93a95fd6b613d76641e7336663831fb0ee381abe32014b3babdec23e263b3db80100e0c65dd2728497c68c"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x881) 2.90788475s ago: executing program 4 (id=283): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x2, 0xe}, {0xfff2, 0x4}}}, 0x24}}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r3, @ANYBLOB="100001800400", @ANYRES8=r0], 0x28}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.794244962s ago: executing program 1 (id=284): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x5, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x4000002, 0x1, 0x7f, 0x80000001, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f01, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x7, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0x8, 0x5, 0x8000, 0x0, 0x8, 0x129432e2, 0x40000cb, 0xf6, 0xb, 0xbf, 0x6c8, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x8, 0x2f, 0xe, 0x3, 0x78, 0xea4, 0x73b, 0x4, 0x4000, 0x108000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x6, 0x4, 0x9, 0x20000004, 0x100009, 0x6, 0x9, 0x40000006, 0x5, 0x0, 0x0, 0xf, 0xffff, 0x2, 0x7e, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0x102], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x40008ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x5, 0x86, 0x3, 0x10000009, 0x3e7, 0xfff, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x1fd, 0x7f, 0x3, 0x4, 0x2, 0x0, 0x4ccd, 0x7, 0x53cf697b, 0x7, 0x6, 0x9, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x2, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0xfff, 0x5, 0xce7, 0x1ff, 0x6, 0x7ff, 0x5, 0x1, 0x101, 0x10002, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x8001, 0x6, 0x7, 0x14c, 0x60a7, 0x6, 0x1, 0x0, 0x7ffffffe, 0x4f, 0x8, 0x0, 0x3, 0x3, 0xffff, 0x3, 0x9, 0xfe, 0x9602, 0xa, 0x97f, 0x2000001, 0x6, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0x4, 0x8, 0x9, 0x7fff, 0x6c1b, 0x0, 0x4, 0x5, 0x7, 0x1, 0x203, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000180)={0xb, 0x80000001, {0x54, 0x7fdf, 0x4, {0x1, 0x7}, {0x4d32, 0x8}, @ramp={0x70, 0x7, {0x4, 0x4, 0x6, 0x5}}}, {0x51, 0x6, 0x3, {0x4933, 0x737b}, {0xaf8, 0x1000}, @rumble={0x7, 0x3}}}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.412632432s ago: executing program 4 (id=285): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004084}, 0x480c4) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x4}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1}}, @TCA_U32_SEL={0x14, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f}}]}}]}, 0x4c}}, 0x24040084) set_mempolicy(0x6005, 0x0, 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@bh}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd7) pwrite64(r2, &(0x7f0000000bc0)="6ce8", 0xfdef, 0x7ff) 1.449717595s ago: executing program 2 (id=286): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x32, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.429774965s ago: executing program 4 (id=287): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}}) 1.389826646s ago: executing program 0 (id=288): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a00", @ANYRES32, @ANYBLOB="000000000000000010"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e20, @private=0xa010101}}}, 0x108) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x1a0c099, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 1.112924433s ago: executing program 0 (id=289): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @desc4}, &(0x7f0000000800)={0x0, "c94850b5422ef7349e00b19a68e1b8724095a25dcd3291884d1cdda78228ab264bc907f76304dd158ea3472972e50b3b674b92154dbfbd10938f75dcf44d2048", 0x35}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x31, 0x30, 0x30, 0x66, 0x30, 0x62, 0x30, 0x30, 0x66, 0x39, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x18}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 1.002272736s ago: executing program 4 (id=290): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) write$cgroup_devices(r1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) 917.514158ms ago: executing program 0 (id=291): sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./merge\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./merge\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000180)='lowerdir=./lower,upperdir=./upper,workdir=./work,index=on,nfs_export=on\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./merge\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[], 0x0) 618.338635ms ago: executing program 0 (id=292): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@bh}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x42100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e320d0000000000008001f9090309006faaaaaaaaaa11001089924ba976424b2b900000000000000003d6300624008000000000000000"], 0x35) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmsg$sock(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)='2', 0x1}], 0x1}, 0x24000894) read$FUSE(0xffffffffffffffff, &(0x7f0000001e00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000003e40)={0xbe, 0xfffffffa, {}, {r6}, 0xff, 0x6}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd7) pwrite64(r7, &(0x7f0000000bc0)="6ce8", 0xfdef, 0x7ff) 570.217886ms ago: executing program 2 (id=293): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x2, 0xe}, {0xfff2, 0x4}}}, 0x24}}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r3, @ANYBLOB="100001800400", @ANYRES8=r0], 0x28}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 63.421068ms ago: executing program 2 (id=294): unshare(0x8060400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"}) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 0s ago: executing program 0 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x7) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r3, &(0x7f0000008380)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts. [ 65.273534][ T5756] cgroup: Unknown subsys name 'net' [ 65.411812][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.748591][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.009660][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.018188][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.025868][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.034158][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.041863][ T5771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.049258][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.126905][ T5771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.134950][ T5771] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.142581][ T5771] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.176838][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.184105][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.195140][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.219335][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.246185][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.246832][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.261617][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.263061][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.276404][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.284023][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.291791][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.300703][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.314402][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.322552][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.330141][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.639186][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 68.733413][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 68.802048][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 68.821438][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.828705][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.836772][ T5769] bridge_slave_0: entered allmulticast mode [ 68.843471][ T5769] bridge_slave_0: entered promiscuous mode [ 68.856522][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.863642][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.871026][ T5769] bridge_slave_1: entered allmulticast mode [ 68.878260][ T5769] bridge_slave_1: entered promiscuous mode [ 68.898235][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 68.964154][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.977596][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.041507][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.048776][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.056250][ T5772] bridge_slave_0: entered allmulticast mode [ 69.062865][ T5772] bridge_slave_0: entered promiscuous mode [ 69.073381][ T5769] team0: Port device team_slave_0 added [ 69.082486][ T5769] team0: Port device team_slave_1 added [ 69.097334][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.104465][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.112198][ T5772] bridge_slave_1: entered allmulticast mode [ 69.118954][ T5772] bridge_slave_1: entered promiscuous mode [ 69.166490][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.173462][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.199861][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.223558][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.235237][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.251485][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.258590][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.284781][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.320155][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.327372][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.334476][ T5777] bridge_slave_0: entered allmulticast mode [ 69.341922][ T5777] bridge_slave_0: entered promiscuous mode [ 69.361589][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.368790][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.376064][ T5777] bridge_slave_1: entered allmulticast mode [ 69.382678][ T5777] bridge_slave_1: entered promiscuous mode [ 69.409010][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.416271][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.423358][ T5774] bridge_slave_0: entered allmulticast mode [ 69.430231][ T5774] bridge_slave_0: entered promiscuous mode [ 69.438986][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.446357][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.453462][ T5774] bridge_slave_1: entered allmulticast mode [ 69.462725][ T5774] bridge_slave_1: entered promiscuous mode [ 69.487896][ T5772] team0: Port device team_slave_0 added [ 69.497322][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.517566][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.537975][ T5772] team0: Port device team_slave_1 added [ 69.564222][ T5769] hsr_slave_0: entered promiscuous mode [ 69.571333][ T5769] hsr_slave_1: entered promiscuous mode [ 69.594461][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.615569][ T5777] team0: Port device team_slave_0 added [ 69.634071][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.645383][ T5777] team0: Port device team_slave_1 added [ 69.661437][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.668729][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.694713][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.707650][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.714610][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.740680][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.784514][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.791669][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.817908][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.849041][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.856083][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.882081][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.896463][ T5774] team0: Port device team_slave_0 added [ 69.929852][ T5774] team0: Port device team_slave_1 added [ 69.993929][ T5772] hsr_slave_0: entered promiscuous mode [ 70.001035][ T5772] hsr_slave_1: entered promiscuous mode [ 70.007302][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.014987][ T5772] Cannot create hsr debugfs directory [ 70.050625][ T5777] hsr_slave_0: entered promiscuous mode [ 70.057968][ T5777] hsr_slave_1: entered promiscuous mode [ 70.063967][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.071985][ T5777] Cannot create hsr debugfs directory [ 70.078665][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.085611][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.112054][ T5771] Bluetooth: hci0: command tx timeout [ 70.117681][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.135099][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.142158][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.168130][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.285340][ T5774] hsr_slave_0: entered promiscuous mode [ 70.292413][ T5774] hsr_slave_1: entered promiscuous mode [ 70.299562][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.307448][ T5774] Cannot create hsr debugfs directory [ 70.337861][ T5771] Bluetooth: hci1: command tx timeout [ 70.337903][ T5776] Bluetooth: hci3: command tx timeout [ 70.416051][ T5776] Bluetooth: hci2: command tx timeout [ 70.521777][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.552384][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.561633][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.584543][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.654782][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.664288][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.692415][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.701960][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.768561][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.787362][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.796865][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.811711][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.911805][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.921433][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.932089][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.943976][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.963249][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.001151][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.039158][ T967] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.046548][ T967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.084992][ T967] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.092164][ T967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.134013][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.169282][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.193735][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.231043][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.245357][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.252511][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.274004][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.290821][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.297997][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.327213][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.334411][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.382483][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.389652][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.425495][ T5772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.442990][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.470790][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.481755][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.494798][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.570292][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.608132][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.615264][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.669347][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.676570][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.779814][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.824699][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.945186][ T5772] veth0_vlan: entered promiscuous mode [ 71.967875][ T5769] veth0_vlan: entered promiscuous mode [ 71.991820][ T5772] veth1_vlan: entered promiscuous mode [ 72.008609][ T5769] veth1_vlan: entered promiscuous mode [ 72.083658][ T5772] veth0_macvtap: entered promiscuous mode [ 72.095228][ T5772] veth1_macvtap: entered promiscuous mode [ 72.115254][ T5769] veth0_macvtap: entered promiscuous mode [ 72.133253][ T5769] veth1_macvtap: entered promiscuous mode [ 72.155626][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.167897][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.178070][ T5776] Bluetooth: hci0: command tx timeout [ 72.186718][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.195563][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.204419][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.213675][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.236502][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.254670][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.299067][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.310293][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.322349][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.361317][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.372972][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.386855][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.408958][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.418073][ T5776] Bluetooth: hci3: command tx timeout [ 72.418117][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.433110][ T5776] Bluetooth: hci1: command tx timeout [ 72.437123][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.449494][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.492597][ T5777] veth0_vlan: entered promiscuous mode [ 72.496867][ T5776] Bluetooth: hci2: command tx timeout [ 72.518073][ T967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.530468][ T967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.567918][ T5777] veth1_vlan: entered promiscuous mode [ 72.590411][ T5774] veth0_vlan: entered promiscuous mode [ 72.618414][ T5774] veth1_vlan: entered promiscuous mode [ 72.634059][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.650351][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.698520][ T5777] veth0_macvtap: entered promiscuous mode [ 72.711532][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.721212][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.758661][ T5774] veth0_macvtap: entered promiscuous mode [ 72.773806][ T5777] veth1_macvtap: entered promiscuous mode [ 72.799033][ T5774] veth1_macvtap: entered promiscuous mode [ 72.807326][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.815172][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.873572][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.903995][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.913964][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.924492][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.942330][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.957331][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.969008][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.981706][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.992308][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.002543][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.014026][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.027566][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.069604][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.081060][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.095024][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.113266][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.125532][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.141761][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.152482][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.167130][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.178547][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.191242][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.211975][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.232990][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.273076][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.282875][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.300226][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.324554][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.338433][ T5838] syz.3.5[5838]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 73.351773][ T5838] loop3: detected capacity change from 0 to 256 [ 73.359911][ T5838] exfat: Deprecated parameter 'utf8' [ 73.365296][ T5838] exfat: Deprecated parameter 'namecase' [ 73.371018][ T5838] exfat: Deprecated parameter 'utf8' [ 73.382862][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.399100][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.415316][ T5838] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 73.437821][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.475789][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.056085][ T5776] Bluetooth: hci0: command tx timeout [ 75.061876][ T5776] Bluetooth: hci1: command tx timeout [ 75.067680][ T5776] Bluetooth: hci3: command tx timeout [ 75.073083][ T5776] Bluetooth: hci2: command tx timeout [ 75.181686][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.205241][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.334426][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.385608][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.460096][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.469590][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.512535][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.568975][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.838071][ T5861] Zero length message leads to an empty skb [ 76.003619][ T5865] xt_l2tp: invalid flags combination: 4 [ 76.238433][ T5871] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 76.245074][ T5871] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.262451][ T5871] vhci_hcd vhci_hcd.0: Device attached [ 76.415176][ T5875] loop2: detected capacity change from 0 to 256 [ 76.423226][ T5875] exfat: Deprecated parameter 'utf8' [ 76.428648][ T5875] exfat: Deprecated parameter 'namecase' [ 76.434295][ T5875] exfat: Deprecated parameter 'utf8' [ 76.460762][ T5875] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 76.546149][ T5809] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 76.554720][ T5807] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 77.847546][ T5780] Bluetooth: hci1: command tx timeout [ 77.847566][ T5771] Bluetooth: hci2: command tx timeout [ 77.854041][ T5780] Bluetooth: hci3: command tx timeout [ 77.858748][ T5771] Bluetooth: hci0: command tx timeout [ 78.010783][ T5809] usb 4-1: config 0 has no interfaces? [ 78.024544][ T5809] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 78.042650][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.088439][ T5809] usb 4-1: config 0 descriptor?? [ 78.511159][ T5872] vhci_hcd: connection closed [ 78.512421][ T5809] usb 4-1: USB disconnect, device number 2 [ 78.534268][ T1145] vhci_hcd: stop threads [ 78.545968][ T1145] vhci_hcd: release socket [ 78.565852][ T1145] vhci_hcd: disconnect device [ 78.576459][ T5807] vhci_hcd: vhci_device speed not set [ 79.062251][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.361764][ T5908] loop2: detected capacity change from 0 to 1024 [ 79.422741][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 79.504129][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.709280][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.077575][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.104805][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.113457][ T8] usb 2-1: Product: syz [ 80.118101][ T8] usb 2-1: Manufacturer: syz [ 80.122721][ T8] usb 2-1: SerialNumber: syz [ 80.220071][ T5917] loop2: detected capacity change from 0 to 256 [ 80.227906][ T5917] exfat: Deprecated parameter 'utf8' [ 80.233296][ T5917] exfat: Deprecated parameter 'namecase' [ 80.238998][ T5917] exfat: Deprecated parameter 'utf8' [ 80.266175][ T5917] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 81.025743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 81.436016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.534117][ T8] usb 2-1: 0:2 : does not exist [ 81.548787][ T8] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 81.632144][ T8] usb 2-1: USB disconnect, device number 2 [ 81.758871][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.871360][ T5932] xt_l2tp: invalid flags combination: 4 [ 83.487399][ T5806] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.737299][ T5806] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 83.750923][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.759588][ T5806] usb 4-1: Product: syz [ 83.763771][ T5806] usb 4-1: Manufacturer: syz [ 83.768835][ T5806] usb 4-1: SerialNumber: syz [ 83.781283][ T5806] usb 4-1: config 0 descriptor?? [ 83.905743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 84.775748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 85.125743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 85.155737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 85.277804][ T5806] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 85.319874][ T5806] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 85.357086][ T5806] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 85.367928][ T5806] usb 4-1: media controller created [ 85.393558][ T5806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.523474][ T5806] DVB: Unable to find symbol mt352_attach() [ 85.648914][ T5806] DVB: Unable to find symbol nxt6000_attach() [ 85.655098][ T5806] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 85.697110][ T5806] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 85.740151][ T5806] dvb-usb: schedule remote query interval to 1000 msecs. [ 85.755807][ T5806] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 85.776601][ T5806] dvb-usb: bulk message failed: -22 (7/0) [ 85.795032][ T5806] dvb-usb: bulk message failed: -22 (7/0) [ 85.817541][ T5806] usb 4-1: USB disconnect, device number 3 [ 85.937752][ T5806] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 86.350274][ T5984] xt_l2tp: invalid flags combination: 4 [ 87.240799][ T172] cfg80211: failed to load regulatory.db [ 88.983225][ T6009] xt_l2tp: invalid flags combination: 4 [ 89.189992][ T6013] loop3: detected capacity change from 0 to 2048 [ 89.205967][ T5759] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.245448][ T6013] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.344388][ T28] audit: type=1800 audit(1786596903.335:2): pid=6013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.53" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 89.421082][ T5759] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 89.435752][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.673234][ T5759] usb 2-1: Product: syz [ 89.893735][ T5759] usb 2-1: Manufacturer: syz [ 89.946829][ T5759] usb 2-1: SerialNumber: syz [ 89.958775][ T5759] usb 2-1: config 0 descriptor?? [ 90.019252][ T5759] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 90.064161][ T5759] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 90.112917][ T5759] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 90.141137][ T5759] usb 2-1: media controller created [ 90.205473][ T5769] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 90.229907][ T5759] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.234894][ T5769] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 90.396089][ T5759] DVB: Unable to find symbol mt352_attach() [ 90.541579][ T5759] DVB: Unable to find symbol nxt6000_attach() [ 90.577585][ T5759] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 90.632793][ T5759] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 90.675172][ T5759] dvb-usb: schedule remote query interval to 1000 msecs. [ 90.715271][ T5759] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 90.736183][ T5769] syz-executor (5769) used greatest stack depth: 19976 bytes left [ 90.785683][ T5759] dvb-usb: bulk message failed: -22 (7/0) [ 90.795869][ T5759] dvb-usb: bulk message failed: -22 (7/0) [ 90.840166][ T5759] usb 2-1: USB disconnect, device number 3 [ 91.039249][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.083811][ T5759] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 91.261118][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.469370][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.634849][ T6037] loop1: detected capacity change from 0 to 256 [ 91.702532][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.985916][ T5809] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.022889][ T6044] xt_l2tp: invalid flags combination: 4 [ 92.205821][ T5809] usb 3-1: Using ep0 maxpacket: 16 [ 92.242579][ T5809] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.384358][ T5809] usb 3-1: config 0 interface 0 has no altsetting 0 [ 92.415821][ T5809] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 92.424974][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.440703][ T5809] usb 3-1: config 0 descriptor?? [ 92.587110][ T5780] Bluetooth: hci3: command tx timeout [ 93.262094][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.276119][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.284129][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.292943][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.335841][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.356142][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.473676][ T5809] mcp2221 0003:04D8:00DD.0001: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 93.626110][ T6039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.714526][ T6039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.805949][ T5806] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.056811][ T5806] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 94.082856][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.092234][ T5806] usb 2-1: Product: syz [ 94.098854][ T5806] usb 2-1: Manufacturer: syz [ 94.103584][ T5806] usb 2-1: SerialNumber: syz [ 94.117047][ T5806] usb 2-1: config 0 descriptor?? [ 94.148250][ T5806] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 94.173130][ T5806] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 94.196612][ T5806] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 94.242977][ T5806] usb 2-1: media controller created [ 94.382614][ T5806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.637696][ T5806] DVB: Unable to find symbol mt352_attach() [ 94.683959][ T6053] chnl_net:caif_netlink_parms(): no params data found [ 94.792703][ T5806] DVB: Unable to find symbol nxt6000_attach() [ 94.811124][ T5806] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 94.889849][ T5806] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 94.917305][ T59] hsr_slave_0: left promiscuous mode [ 94.936927][ T59] hsr_slave_1: left promiscuous mode [ 94.946516][ T5806] dvb-usb: schedule remote query interval to 1000 msecs. [ 94.963262][ T5806] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 94.975028][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.995888][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.013330][ T5806] dvb-usb: bulk message failed: -22 (7/0) [ 95.032762][ T5806] dvb-usb: bulk message failed: -22 (7/0) [ 95.049891][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.074529][ T5806] usb 2-1: USB disconnect, device number 4 [ 95.101731][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.500674][ T5776] Bluetooth: hci0: command tx timeout [ 96.585032][ T59] bridge_slave_1: left allmulticast mode [ 96.688337][ T59] bridge_slave_1: left promiscuous mode [ 96.706988][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.729536][ T5806] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 96.792816][ T8] usb 3-1: USB disconnect, device number 2 [ 96.871779][ T59] bridge_slave_0: left allmulticast mode [ 96.895491][ T59] bridge_slave_0: left promiscuous mode [ 96.961583][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.039003][ T6086] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.084315][ T59] veth1_macvtap: left promiscuous mode [ 97.090342][ T59] veth0_macvtap: left promiscuous mode [ 97.115307][ T59] veth1_vlan: left promiscuous mode [ 97.127038][ T59] veth0_vlan: left promiscuous mode [ 97.648669][ T5806] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.838845][ T5806] usb 3-1: Using ep0 maxpacket: 8 [ 97.880500][ T5806] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 97.914633][ T5806] usb 3-1: config 179 has no interface number 0 [ 97.937448][ T5806] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 97.972371][ T5806] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 98.003683][ T5806] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 97, changing to 10 [ 98.031430][ T5806] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 24929, setting to 1024 [ 98.054536][ T5806] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 98.082586][ T5806] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 98.098485][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.128756][ T6089] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 98.374215][ T59] team0 (unregistering): Port device team_slave_1 removed [ 98.420284][ T59] team0 (unregistering): Port device team_slave_0 removed [ 98.460111][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.498839][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.579573][ T5776] Bluetooth: hci0: command tx timeout [ 98.784469][ T59] bond0 (unregistering): Released all slaves [ 98.936263][ T5759] usb 3-1: USB disconnect, device number 3 [ 98.936281][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 99.115119][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.132674][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.155953][ T6053] bridge_slave_0: entered allmulticast mode [ 99.174855][ T6053] bridge_slave_0: entered promiscuous mode [ 99.211394][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.250685][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.283337][ T6053] bridge_slave_1: entered allmulticast mode [ 99.292273][ T6053] bridge_slave_1: entered promiscuous mode [ 99.324605][ T6053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.337385][ T6053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.072804][ T6053] team0: Port device team_slave_0 added [ 100.135539][ T6053] team0: Port device team_slave_1 added [ 100.227614][ T6053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.378876][ T5776] Bluetooth: hci0: command tx timeout [ 101.405229][ T6053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.459726][ T6053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.575299][ T6053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.582356][ T6053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.701165][ T6053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.845276][ T6053] hsr_slave_0: entered promiscuous mode [ 101.873664][ T6053] hsr_slave_1: entered promiscuous mode [ 102.361366][ T6053] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.407844][ T6053] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.432186][ T6053] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.458848][ T6142] block device autoloading is deprecated and will be removed. [ 102.484423][ T6053] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.784793][ T6053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.824521][ T6053] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.853187][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.860387][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.935983][ T5759] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.967613][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.974820][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.284314][ T5759] usb 1-1: Using ep0 maxpacket: 8 [ 103.293223][ T5759] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 103.302985][ T5759] usb 1-1: config 179 has no interface number 0 [ 103.310306][ T5759] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 103.321653][ T5759] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 103.333204][ T5759] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 97, changing to 10 [ 103.466287][ T5780] Bluetooth: hci0: command tx timeout [ 104.035844][ T5759] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 24929, setting to 1024 [ 104.052054][ T5759] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 104.066829][ T5759] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 104.077615][ T5759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.113321][ T6144] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.199084][ T6053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.305793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 104.325796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 104.345743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 104.895775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 105.970307][ T5809] usb 1-1: USB disconnect, device number 2 [ 105.970323][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 105.984607][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 107.268104][ T6053] veth0_vlan: entered promiscuous mode [ 107.326259][ T6053] veth1_vlan: entered promiscuous mode [ 107.410430][ T6053] veth0_macvtap: entered promiscuous mode [ 107.439775][ T6053] veth1_macvtap: entered promiscuous mode [ 107.495356][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.532562][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.562503][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.585807][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.595634][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.625847][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.656106][ T6204] binder: BINDER_SET_CONTEXT_MGR already set [ 107.657464][ T6053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.685773][ T6204] binder: 6203:6204 ioctl 4018620d 200000000300 returned -16 [ 107.701214][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.743776][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.766050][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.795736][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.815028][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.836886][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.860855][ T6053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.917050][ T6053] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.926063][ T6212] block device autoloading is deprecated and will be removed. [ 107.945241][ T6053] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.970172][ T6053] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.985971][ T6053] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.829338][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.898733][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.026159][ T5806] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.058574][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.092943][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.114688][ T6233] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 109.121250][ T6233] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.187887][ T6233] vhci_hcd vhci_hcd.0: Device attached [ 109.246523][ T5806] usb 1-1: Using ep0 maxpacket: 8 [ 109.370219][ T5806] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 109.457665][ T5806] usb 1-1: config 179 has no interface number 0 [ 109.524761][ T27] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 109.532335][ T23] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 109.561217][ T5806] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 109.593566][ T5806] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 109.641475][ T5806] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 97, changing to 10 [ 109.674170][ T6242] warning: `syz.2.97' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.730029][ T5806] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 24929, setting to 1024 [ 109.783845][ T27] usb 2-1: config 0 has no interfaces? [ 109.810981][ T5806] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 109.824930][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 109.848662][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.862835][ T5806] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 109.894024][ T27] usb 2-1: config 0 descriptor?? [ 109.894197][ T5806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.910216][ T6220] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 110.232306][ T5808] usb 1-1: USB disconnect, device number 3 [ 110.232400][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 110.246734][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 111.101305][ T6234] usbip_core: unknown command [ 111.115013][ T9] usb 2-1: USB disconnect, device number 5 [ 111.126095][ T6234] vhci_hcd: unknown pdu 4294967295 [ 111.131249][ T6234] usbip_core: unknown command [ 111.172722][ T59] vhci_hcd: stop threads [ 111.183110][ T59] vhci_hcd: release socket [ 111.198813][ T59] vhci_hcd: disconnect device [ 111.926107][ T5806] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.176176][ T5806] usb 5-1: Using ep0 maxpacket: 16 [ 112.251764][ T5806] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.416818][ T5806] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.454077][ T5806] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.492076][ T5806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.532983][ T5806] usb 5-1: Product: syz [ 112.563329][ T5806] usb 5-1: Manufacturer: syz [ 112.590721][ T5806] usb 5-1: SerialNumber: syz [ 112.772271][ T6296] syz.0.107: attempt to access beyond end of device [ 112.772271][ T6296] loop0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 112.877564][ T5806] usb 5-1: 0:2 : does not exist [ 112.889931][ T5806] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 112.921004][ T5806] usb 5-1: USB disconnect, device number 2 [ 113.582200][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.775847][ T23] vhci_hcd: vhci_device speed not set [ 114.906083][ T6326] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 114.912658][ T6326] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.005500][ T6326] vhci_hcd vhci_hcd.0: Device attached [ 115.155779][ T5806] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 115.400805][ T8] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 115.428796][ T5806] usb 3-1: config 0 has no interfaces? [ 115.452193][ T5806] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.532733][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.148578][ T5806] usb 3-1: config 0 descriptor?? [ 116.232425][ T6348] loop4: detected capacity change from 0 to 256 [ 116.804485][ T6328] usbip_core: unknown command [ 116.809357][ T6328] vhci_hcd: unknown pdu 4294967295 [ 116.824101][ T6328] usbip_core: unknown command [ 117.217694][ T5759] usb 3-1: USB disconnect, device number 4 [ 117.232529][ T1145] vhci_hcd: stop threads [ 117.245873][ T1145] vhci_hcd: release socket [ 117.267173][ T1145] vhci_hcd: disconnect device [ 117.741482][ T6376] loop0: detected capacity change from 0 to 32768 [ 117.793934][ T6376] (syz.0.125,6376,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.811405][ T6376] (syz.0.125,6376,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.849327][ T6376] JBD2: Ignoring recovery information on journal [ 117.897491][ T6376] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 118.615893][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 119.091632][ T6403] xt_l2tp: invalid flags combination: 4 [ 119.901913][ T6425] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 119.908475][ T6425] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 119.975240][ T6425] vhci_hcd vhci_hcd.0: Device attached [ 120.161360][ T6407] loop4: detected capacity change from 0 to 32768 [ 120.255868][ T5808] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 120.428752][ T5806] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 120.472662][ T5808] usb 1-1: config 0 has no interfaces? [ 120.489281][ T5808] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 121.124690][ T8] vhci_hcd: vhci_device speed not set [ 121.240682][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.252804][ T5808] usb 1-1: config 0 descriptor?? [ 121.593372][ T6427] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 121.600840][ T23] usb 1-1: USB disconnect, device number 4 [ 121.619002][ T48] vhci_hcd: stop threads [ 121.628301][ T48] vhci_hcd: release socket [ 121.643721][ T48] vhci_hcd: disconnect device [ 121.656811][ T5759] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 121.854468][ T5759] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 121.865154][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.873477][ T5759] usb 3-1: Product: syz [ 121.878690][ T5759] usb 3-1: Manufacturer: syz [ 121.883314][ T5759] usb 3-1: SerialNumber: syz [ 121.892294][ T5759] usb 3-1: config 0 descriptor?? [ 122.089912][ T6465] process 'syz.4.143' launched './file2' with NULL argv: empty string added [ 122.524594][ T5759] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 122.540263][ T5759] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 122.550267][ T5759] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 122.559696][ T5759] usb 3-1: media controller created [ 122.583527][ T5759] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.665829][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.677244][ T5759] DVB: Unable to find symbol mt352_attach() [ 122.718662][ T6478] xt_l2tp: invalid flags combination: 4 [ 122.780652][ T5759] DVB: Unable to find symbol nxt6000_attach() [ 122.795060][ T5759] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 122.920132][ T5759] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 122.936165][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 122.946637][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.957782][ T5759] dvb-usb: schedule remote query interval to 1000 msecs. [ 123.036460][ T6482] loop4: detected capacity change from 0 to 1024 [ 124.112120][ T5759] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 124.122484][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.176496][ T5987] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 124.190064][ T5759] dvb-usb: bulk message failed: -22 (7/0) [ 124.201632][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.211055][ T5759] dvb-usb: bulk message failed: -22 (7/0) [ 124.222861][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.263589][ T5759] usb 3-1: USB disconnect, device number 5 [ 124.316094][ T9] usb 2-1: Product: syz [ 124.407703][ T9] usb 2-1: Manufacturer: syz [ 124.412355][ T9] usb 2-1: SerialNumber: syz [ 124.541724][ T5759] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 125.127939][ T6491] loop4: detected capacity change from 0 to 131072 [ 125.186838][ T9] usb 2-1: 0:2 : does not exist [ 125.205287][ T6491] F2FS-fs (loop4): invalid crc value [ 125.229333][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 125.326247][ T6491] F2FS-fs (loop4): Found nat_bits in checkpoint [ 125.394310][ T6491] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 125.425633][ T9] usb 2-1: USB disconnect, device number 6 [ 125.640260][ T5806] vhci_hcd: vhci_device speed not set [ 127.532419][ T6513] block device autoloading is deprecated and will be removed. [ 127.726091][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.120549][ T5809] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 128.427984][ T5809] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 128.528050][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 128.555161][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.582477][ T5809] usb 3-1: Product: syz [ 128.598115][ T5809] usb 3-1: Manufacturer: syz [ 128.602742][ T5809] usb 3-1: SerialNumber: syz [ 128.624006][ T5809] usb 3-1: config 0 descriptor?? [ 128.645279][ T8] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 128.652179][ T5809] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 128.658816][ T8] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 128.677948][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.700772][ T8] usb 1-1: Product: syz [ 128.704967][ T8] usb 1-1: Manufacturer: syz [ 128.708015][ T5809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.720810][ T8] usb 1-1: SerialNumber: syz [ 128.736199][ T5809] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 128.754876][ T8] snd-ua101 1-1:1.1: sample format descriptor not found [ 128.762208][ T5809] usb 3-1: media controller created [ 128.775775][ T8] snd-ua101 1-1:1.0: invalid num_altsetting [ 128.813994][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.937792][ T5809] DVB: Unable to find symbol mt352_attach() [ 128.984489][ T5809] DVB: Unable to find symbol nxt6000_attach() [ 128.994645][ T8] usb 1-1: USB disconnect, device number 5 [ 128.999477][ T5809] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 129.143971][ T6534] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 129.150541][ T6534] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 129.192776][ T6534] vhci_hcd vhci_hcd.0: Device attached [ 129.221787][ T5809] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 129.241605][ T5809] dvb-usb: schedule remote query interval to 1000 msecs. [ 129.248724][ T5809] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 129.261806][ T5809] dvb-usb: bulk message failed: -22 (7/0) [ 129.267620][ T5809] dvb-usb: bulk message failed: -22 (7/0) [ 129.277669][ T5809] usb 3-1: USB disconnect, device number 6 [ 129.897700][ T5809] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 130.092217][ T9] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 130.165786][ T172] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 130.339946][ T9] usb 5-1: config 0 has no interfaces? [ 130.345483][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 130.359770][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.916519][ T9] usb 5-1: config 0 descriptor?? [ 130.943113][ T6554] xt_l2tp: invalid flags combination: 4 [ 131.066109][ T5759] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.285883][ T5759] usb 1-1: Using ep0 maxpacket: 16 [ 131.291168][ T6535] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 131.309548][ T5759] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.316953][ T5809] usb 5-1: USB disconnect, device number 3 [ 131.340360][ T59] vhci_hcd: stop threads [ 131.345812][ T59] vhci_hcd: release socket [ 131.356316][ T5759] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.389672][ T59] vhci_hcd: disconnect device [ 131.397161][ T5759] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.416839][ T5759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.424858][ T5759] usb 1-1: Product: syz [ 131.454289][ T5759] usb 1-1: Manufacturer: syz [ 131.464438][ T5759] usb 1-1: SerialNumber: syz [ 131.721371][ T5759] usb 1-1: 0:2 : does not exist [ 131.744728][ T5759] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 131.801983][ T5759] usb 1-1: USB disconnect, device number 6 [ 131.883655][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.465051][ T6584] loop4: detected capacity change from 0 to 256 [ 132.526640][ T6584] exfat: Deprecated parameter 'utf8' [ 132.541034][ T6584] exfat: Deprecated parameter 'utf8' [ 132.555460][ T6584] exfat: Deprecated parameter 'utf8' [ 132.574808][ T6584] exfat: Deprecated parameter 'namecase' [ 132.779670][ T6584] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 132.946587][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.953135][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.957910][ T6598] loop4: detected capacity change from 0 to 1024 [ 133.977265][ T6598] ======================================================= [ 133.977265][ T6598] WARNING: The mand mount option has been deprecated and [ 133.977265][ T6598] and is ignored by this kernel. Remove the mand [ 133.977265][ T6598] option from the mount to silence this warning. [ 133.977265][ T6598] ======================================================= [ 134.032866][ T6598] EXT4-fs: inline encryption not supported [ 135.305794][ T172] vhci_hcd: vhci_device speed not set [ 135.608694][ T6609] xt_l2tp: invalid flags combination: 4 [ 135.773118][ T6598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 135.837075][ T6598] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.510280][ T6621] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 136.516855][ T6621] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 136.616074][ T6621] vhci_hcd vhci_hcd.0: Device attached [ 136.711427][ T6053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 136.874974][ T5806] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 136.936154][ T5809] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 137.657318][ T5806] usb 1-1: config 0 has no interfaces? [ 137.662853][ T5806] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 137.672392][ T5806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.687892][ T5806] usb 1-1: config 0 descriptor?? [ 138.034006][ T6622] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 2 [ 138.050794][ T172] usb 1-1: USB disconnect, device number 7 [ 138.057149][ T8] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 138.081525][ T3460] vhci_hcd: stop threads [ 138.086191][ T3460] vhci_hcd: release socket [ 138.097249][ T3460] vhci_hcd: disconnect device [ 138.523345][ T6657] loop2: detected capacity change from 0 to 1024 [ 138.622905][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.720586][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.783095][ T5985] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 139.115805][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 139.124909][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.271376][ T6663] loop0: detected capacity change from 0 to 512 [ 139.379249][ T8] usb 2-1: usb_control_msg returned -32 [ 139.384894][ T8] usbtmc 2-1:16.0: can't read capabilities [ 139.571320][ T6663] EXT4-fs (loop0): Test dummy encryption mode enabled [ 139.589812][ T6663] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 139.616607][ T6663] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.657904][ T6663] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.184: bad orphan inode 131083 [ 139.682286][ T6663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.537679][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.009962][ T6700] loop0: detected capacity change from 0 to 1024 [ 141.016986][ T6700] EXT4-fs: inline encryption not supported [ 141.298856][ T6699] xt_l2tp: invalid flags combination: 4 [ 141.402642][ T6700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 141.446125][ T6700] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.545670][ T8] usb 2-1: USB disconnect, device number 7 [ 142.456752][ T6719] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 142.463317][ T6719] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 142.483282][ T6719] vhci_hcd vhci_hcd.0: Device attached [ 142.707606][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 142.745818][ T8] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 142.779001][ T5809] vhci_hcd: vhci_device speed not set [ 143.385832][ T9] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 143.567770][ T6730] capability: warning: `syz.1.195' uses 32-bit capabilities (legacy support in use) [ 143.647123][ T9] usb 5-1: config 0 has no interfaces? [ 143.652670][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 143.698926][ T6733] NILFS (nbd1): device size too small [ 145.608701][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.666971][ T9] usb 5-1: config 0 descriptor?? [ 145.708625][ T6720] vhci_hcd: connection reset by peer [ 145.725828][ T967] vhci_hcd: stop threads [ 145.730114][ T967] vhci_hcd: release socket [ 145.738825][ T967] vhci_hcd: disconnect device [ 145.752481][ T9] usb 5-1: can't set config #0, error -71 [ 145.853395][ T9] usb 5-1: USB disconnect, device number 4 [ 146.625265][ T6764] loop4: detected capacity change from 0 to 1024 [ 146.675664][ T5985] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 147.025898][ T5809] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 147.256328][ T5809] usb 1-1: device descriptor read/64, error -71 [ 147.710722][ T5809] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 147.865823][ T8] vhci_hcd: vhci_device speed not set [ 148.666326][ T5809] usb 1-1: device descriptor read/64, error -71 [ 148.841771][ T5809] usb usb1-port1: attempt power cycle [ 149.944818][ T6787] loop2: detected capacity change from 0 to 32768 [ 149.975734][ T6787] (syz.2.203,6787,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 149.989512][ T6787] (syz.2.203,6787,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 150.048202][ T6787] JBD2: Ignoring recovery information on journal [ 150.116808][ T6787] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 151.780398][ T6804] xt_l2tp: invalid flags combination: 4 [ 151.816501][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 152.039324][ T6809] loop4: detected capacity change from 0 to 256 [ 152.046326][ T6809] exfat: Deprecated parameter 'utf8' [ 152.051656][ T6809] exfat: Deprecated parameter 'namecase' [ 152.057348][ T6809] exfat: Deprecated parameter 'utf8' [ 152.069692][ T6809] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 153.796163][ T6832] loop0: detected capacity change from 0 to 1024 [ 153.848425][ T6832] EXT4-fs: inline encryption not supported [ 154.185278][ T6832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 154.280295][ T6832] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.016745][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 156.118942][ T6860] loop2: detected capacity change from 0 to 32768 [ 156.164961][ T6860] (syz.2.215,6860,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 156.179547][ T6860] (syz.2.215,6860,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 156.420792][ T6860] JBD2: Ignoring recovery information on journal [ 157.231249][ T6860] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 157.365966][ T5809] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 157.546036][ T5809] usb 5-1: device descriptor read/64, error -71 [ 157.815829][ T5809] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 158.577182][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 158.755802][ T6884] NILFS (nbd4): device size too small [ 158.830521][ T6881] loop0: detected capacity change from 0 to 1024 [ 160.596160][ T6883] xt_l2tp: invalid flags combination: 4 [ 166.365797][ T5806] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 166.541371][ T6937] syz.4.234: attempt to access beyond end of device [ 166.541371][ T6937] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 166.545811][ T5806] usb 1-1: device descriptor read/64, error -71 [ 167.274511][ T6930] NILFS (nbd1): device size too small [ 167.446226][ T5806] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 167.542964][ T6946] xt_l2tp: invalid flags combination: 4 [ 167.660003][ T5806] usb 1-1: device descriptor read/64, error -71 [ 168.370590][ T5806] usb usb1-port1: attempt power cycle [ 169.068354][ T5806] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 169.696570][ T6960] loop2: detected capacity change from 0 to 32768 [ 169.704846][ T5806] usb 1-1: device not accepting address 13, error -71 [ 169.713585][ T6960] (syz.2.240,6960,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 169.727050][ T6960] (syz.2.240,6960,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 169.794036][ T6960] JBD2: Ignoring recovery information on journal [ 169.823702][ T6960] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 170.388640][ T6966] loop0: detected capacity change from 0 to 256 [ 170.513061][ T6966] Bluetooth: MGMT ver 1.22 [ 170.551138][ T6966] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 172.187252][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 173.330288][ T6982] NILFS (nbd1): device size too small [ 174.179621][ T6987] xt_l2tp: invalid flags combination: 4 [ 174.557453][ T6990] syz.2.244: attempt to access beyond end of device [ 174.557453][ T6990] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 175.303245][ T7007] loop4: detected capacity change from 0 to 4096 [ 175.728268][ T7007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.440772][ T6053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.463346][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 176.655809][ T9] usb 2-1: device descriptor read/64, error -71 [ 176.802966][ T7025] loop0: detected capacity change from 0 to 256 [ 176.926355][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 176.984809][ T7025] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 177.116822][ T9] usb 2-1: device descriptor read/64, error -71 [ 177.946419][ T9] usb usb2-port1: attempt power cycle [ 178.565927][ T5806] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 178.756150][ T5806] usb 1-1: Using ep0 maxpacket: 8 [ 178.805452][ T5806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 178.837540][ T5806] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 178.870786][ T5806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.907123][ T5806] usb 1-1: config 0 descriptor?? [ 179.816147][ T5806] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 180.013762][ T9] usb 1-1: USB disconnect, device number 15 [ 180.090355][ T7048] NILFS (nbd4): device size too small [ 182.132832][ T7057] binder: 7056:7057 ioctl 4018620d 0 returned -22 [ 183.598811][ T7075] loop4: detected capacity change from 0 to 1024 [ 183.672664][ T7075] EXT4-fs: Ignoring removed bh option [ 184.237505][ T3460] Bluetooth: hci4: Frame reassembly failed (-84) [ 184.363917][ T7075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 184.395863][ T7075] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.760541][ T7088] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.271: bg 0: block 112: padding at end of block bitmap is not set [ 185.069700][ T7088] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 50 with error 28 [ 185.147203][ T7088] EXT4-fs (loop4): This should not happen!! Data will be lost [ 185.147203][ T7088] [ 185.295743][ T7088] EXT4-fs (loop4): Total free blocks count 0 [ 185.301776][ T7088] EXT4-fs (loop4): Free/Dirty block details [ 185.318735][ T7088] EXT4-fs (loop4): free_blocks=0 [ 185.323734][ T7088] EXT4-fs (loop4): dirty_blocks=64 [ 185.435838][ T7088] EXT4-fs (loop4): Block reservation details [ 185.460592][ T7088] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 185.620516][ T6053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 185.797633][ T7092] binder: 7091:7092 ioctl 4018620d 0 returned -22 [ 185.855848][ T5780] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 185.984931][ T7095] NILFS (nbd4): device size too small [ 187.924336][ T7103] loop2: detected capacity change from 0 to 256 [ 188.154092][ T7103] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 189.453542][ T7113] syzkaller0: entered promiscuous mode [ 189.481835][ T7113] syzkaller0: entered allmulticast mode [ 189.828558][ T5759] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 190.146921][ T7121] loop4: detected capacity change from 0 to 1024 [ 190.167022][ T7121] EXT4-fs: Ignoring removed bh option [ 190.252798][ T7121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 190.265854][ T5759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.356749][ T5759] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 190.377769][ T7121] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.415947][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.453039][ T7121] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.285: bg 0: block 112: padding at end of block bitmap is not set [ 190.471615][ T7121] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 50 with error 28 [ 190.484137][ T7121] EXT4-fs (loop4): This should not happen!! Data will be lost [ 190.484137][ T7121] [ 190.494731][ T7121] EXT4-fs (loop4): Total free blocks count 0 [ 190.500773][ T7121] EXT4-fs (loop4): Free/Dirty block details [ 190.506688][ T7121] EXT4-fs (loop4): free_blocks=0 [ 190.511613][ T7121] EXT4-fs (loop4): dirty_blocks=64 [ 190.516742][ T7121] EXT4-fs (loop4): Block reservation details [ 190.522704][ T7121] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 190.556312][ T5759] usb 2-1: config 0 descriptor?? [ 190.753282][ T6053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 190.916267][ T5759] usbhid 2-1:0.0: can't add hid device: -71 [ 190.926350][ T5759] usbhid: probe of 2-1:0.0 failed with error -71 [ 190.944623][ T5759] usb 2-1: USB disconnect, device number 11 [ 191.120291][ T7133] binder: BINDER_SET_CONTEXT_MGR already set [ 191.163208][ T7133] binder: 7132:7133 ioctl 4018620d 200000000300 returned -16 [ 191.295850][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 191.301959][ T5771] Bluetooth: hci2: command 0x0406 tx timeout [ 191.357067][ T7141] overlayfs: failed to decode file handle (len=4, type=0, flags=0, err=-22) [ 191.519600][ T27] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 191.724289][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.754309][ T27] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 191.774333][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.816796][ T27] usb 2-1: config 0 descriptor?? [ 192.836260][ T27] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 192.946634][ T27] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 193.010294][ C1] ================================================================================ [ 193.019622][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 193.028237][ C1] index 1279 is out of range for type 'const int[34]' [ 193.035030][ C1] CPU: 1 PID: 27 Comm: kworker/1:1 Not tainted syzkaller #0 [ 193.042330][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.052409][ C1] Workqueue: usb_hub_wq hub_event [ 193.057460][ C1] Call Trace: [ 193.060736][ C1] [ 193.063573][ C1] dump_stack_lvl+0x18c/0x250 [ 193.068253][ C1] ? show_regs_print_info+0x20/0x20 [ 193.073454][ C1] ? load_image+0x420/0x420 [ 193.077967][ C1] ubsan_epilogue+0xa/0x30 [ 193.082384][ C1] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 193.088103][ C1] aiptek_irq+0x1eb8/0x2920 [ 193.092608][ C1] ? kcov_remote_start+0x8a/0x7e0 [ 193.097631][ C1] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 193.103350][ C1] __usb_hcd_giveback_urb+0x35d/0x520 [ 193.108721][ C1] dummy_timer+0xa58/0x34e0 [ 193.113252][ C1] ? dummy_free_streams+0x520/0x520 [ 193.118446][ C1] ? dummy_free_streams+0x520/0x520 [ 193.123641][ C1] __hrtimer_run_queues+0x525/0xc10 [ 193.128872][ C1] ? hrtimer_interrupt+0x980/0x980 [ 193.133979][ C1] ? read_tsc+0x9/0x20 [ 193.138075][ C1] hrtimer_run_softirq+0x177/0x290 [ 193.143186][ C1] handle_softirqs+0x27d/0x820 [ 193.147944][ C1] ? read_tsc+0x9/0x20 [ 193.152010][ C1] ? ktime_get+0x24b/0x280 [ 193.156428][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 193.161190][ C1] ? do_softirq+0x1a0/0x1a0 [ 193.165709][ C1] __irq_exit_rcu+0xd3/0x190 [ 193.170300][ C1] ? irq_exit_rcu+0x20/0x20 [ 193.174805][ C1] irq_exit_rcu+0x9/0x20 [ 193.179043][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 193.184688][ C1] [ 193.187700][ C1] [ 193.190625][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 193.196633][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 193.201928][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 193.221526][ C1] RSP: 0018:ffffc90000a2eac0 EFLAGS: 00000206 [ 193.227584][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 4b8356eed453b700 [ 193.235546][ C1] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d32e0 [ 193.243512][ C1] RBP: ffffc90000a2ebc8 R08: dffffc0000000000 R09: 1ffffffff223daa2 [ 193.251476][ C1] R10: dffffc0000000000 R11: fffffbfff223daa3 R12: 1ffff92000145d64 [ 193.259789][ C1] R13: ffffffff8d2280a0 R14: 0000000000000246 R15: dffffc0000000000 [ 193.267766][ C1] ? verify_lock_unused+0x140/0x140 [ 193.272971][ C1] ? read_lock_is_recursive+0x20/0x20 [ 193.278346][ C1] ? fs_reclaim_acquire+0x7c/0x100 [ 193.283453][ C1] fs_reclaim_acquire+0x98/0x100 [ 193.288382][ C1] ? fs_reclaim_acquire+0x7c/0x100 [ 193.293482][ C1] slab_pre_alloc_hook+0x2a/0x300 [ 193.298514][ C1] kmem_cache_alloc+0x5a/0x2c0 [ 193.303279][ C1] ? __kernfs_new_node+0xe5/0x7f0 [ 193.308308][ C1] __kernfs_new_node+0xe5/0x7f0 [ 193.313172][ C1] ? kernfs_new_node+0x260/0x260 [ 193.318118][ C1] ? up_write+0x1be/0x410 [ 193.322443][ C1] kernfs_new_node+0x14c/0x260 [ 193.327208][ C1] __kernfs_create_file+0x4b/0x2e0 [ 193.332336][ C1] sysfs_add_file_mode_ns+0x237/0x2f0 [ 193.337708][ C1] internal_create_group+0x431/0xd10 [ 193.342993][ C1] ? rcu_is_watching+0x15/0xb0 [ 193.347757][ C1] ? sysfs_create_group+0x20/0x20 [ 193.352800][ C1] ? usb_probe_interface+0x7d2/0xaf0 [ 193.358149][ C1] sysfs_create_groups+0x59/0x120 [ 193.363185][ C1] really_probe+0x54c/0xae0 [ 193.367688][ C1] ? pm_runtime_barrier+0x14b/0x1c0 [ 193.372895][ C1] __driver_probe_device+0x1f5/0x390 [ 193.378197][ C1] driver_probe_device+0x4f/0x420 [ 193.383227][ C1] __device_attach_driver+0x2ca/0x510 [ 193.388614][ C1] bus_for_each_drv+0x252/0x2e0 [ 193.393471][ C1] ? coredump_store+0x90/0x90 [ 193.398156][ C1] ? bus_find_device+0x300/0x300 [ 193.403101][ C1] __device_attach+0x2c1/0x420 [ 193.407870][ C1] ? device_attach+0x20/0x20 [ 193.412468][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 193.417671][ C1] bus_probe_device+0x180/0x260 [ 193.422524][ C1] device_add+0x87c/0xc40 [ 193.426854][ C1] usb_set_configuration+0x1ad0/0x2150 [ 193.432331][ C1] usb_generic_driver_probe+0x8d/0x150 [ 193.437791][ C1] usb_probe_device+0x12a/0x260 [ 193.442656][ C1] ? usb_register_device_driver+0x230/0x230 [ 193.448556][ C1] really_probe+0x247/0xae0 [ 193.453059][ C1] ? pm_runtime_barrier+0x14b/0x1c0 [ 193.458262][ C1] __driver_probe_device+0x1f5/0x390 [ 193.463554][ C1] driver_probe_device+0x4f/0x420 [ 193.468575][ C1] __device_attach_driver+0x2ca/0x510 [ 193.473951][ C1] bus_for_each_drv+0x252/0x2e0 [ 193.478807][ C1] ? coredump_store+0x90/0x90 [ 193.483490][ C1] ? bus_find_device+0x300/0x300 [ 193.488430][ C1] __device_attach+0x2c1/0x420 [ 193.493198][ C1] ? device_attach+0x20/0x20 [ 193.497796][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 193.503106][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 193.508326][ C1] bus_probe_device+0x180/0x260 [ 193.513193][ C1] device_add+0x87c/0xc40 [ 193.517526][ C1] usb_new_device+0x995/0x1550 [ 193.522294][ C1] ? lock_chain_count+0x20/0x20 [ 193.527157][ C1] ? usb_disconnect+0x8a0/0x8a0 [ 193.532032][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 193.537240][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 193.542442][ C1] hub_event+0x29d5/0x4a80 [ 193.546883][ C1] ? hub_post_resume+0x120/0x120 [ 193.551817][ C1] ? read_lock_is_recursive+0x20/0x20 [ 193.557193][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 193.562394][ C1] ? process_scheduled_works+0x975/0x1600 [ 193.568116][ C1] ? process_scheduled_works+0x975/0x1600 [ 193.573838][ C1] process_scheduled_works+0xa60/0x1600 [ 193.579427][ C1] ? worker_attach_to_pool+0x370/0x370 [ 193.584887][ C1] ? assign_work+0x3cc/0x5d0 [ 193.589507][ C1] worker_thread+0xa5e/0xfe0 [ 193.594113][ C1] kthread+0x2fa/0x390 [ 193.598177][ C1] ? pr_cont_work+0x550/0x550 [ 193.602851][ C1] ? kthread_blkcg+0xd0/0xd0 [ 193.607436][ C1] ret_from_fork+0x48/0x80 [ 193.611847][ C1] ? kthread_blkcg+0xd0/0xd0 [ 193.616433][ C1] ret_from_fork_asm+0x11/0x20 [ 193.621206][ C1] [ 193.624220][ C1] ================================================================================ [ 193.633495][ C1] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 193.640679][ C1] CPU: 1 PID: 27 Comm: kworker/1:1 Not tainted syzkaller #0 [ 193.647953][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.658001][ C1] Workqueue: usb_hub_wq hub_event [ 193.663045][ C1] Call Trace: [ 193.666328][ C1] [ 193.669167][ C1] dump_stack_lvl+0x18c/0x250 [ 193.673847][ C1] ? show_regs_print_info+0x20/0x20 [ 193.679044][ C1] ? load_image+0x420/0x420 [ 193.683566][ C1] panic+0x2ca/0x720 [ 193.687484][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 193.692006][ C1] check_panic_on_warn+0x84/0xa0 [ 193.696952][ C1] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 193.702679][ C1] aiptek_irq+0x1eb8/0x2920 [ 193.707182][ C1] ? kcov_remote_start+0x8a/0x7e0 [ 193.712205][ C1] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 193.717927][ C1] __usb_hcd_giveback_urb+0x35d/0x520 [ 193.723304][ C1] dummy_timer+0xa58/0x34e0 [ 193.727838][ C1] ? dummy_free_streams+0x520/0x520 [ 193.733043][ C1] ? dummy_free_streams+0x520/0x520 [ 193.738236][ C1] __hrtimer_run_queues+0x525/0xc10 [ 193.743446][ C1] ? hrtimer_interrupt+0x980/0x980 [ 193.748554][ C1] ? read_tsc+0x9/0x20 [ 193.752628][ C1] hrtimer_run_softirq+0x177/0x290 [ 193.757739][ C1] handle_softirqs+0x27d/0x820 [ 193.762499][ C1] ? read_tsc+0x9/0x20 [ 193.766566][ C1] ? ktime_get+0x24b/0x280 [ 193.770979][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 193.775745][ C1] ? do_softirq+0x1a0/0x1a0 [ 193.780258][ C1] __irq_exit_rcu+0xd3/0x190 [ 193.784840][ C1] ? irq_exit_rcu+0x20/0x20 [ 193.789340][ C1] irq_exit_rcu+0x9/0x20 [ 193.793572][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 193.799211][ C1] [ 193.802131][ C1] [ 193.805052][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 193.811027][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 193.816310][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 193.835906][ C1] RSP: 0018:ffffc90000a2eac0 EFLAGS: 00000206 [ 193.841966][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 4b8356eed453b700 [ 193.849928][ C1] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d32e0 [ 193.857893][ C1] RBP: ffffc90000a2ebc8 R08: dffffc0000000000 R09: 1ffffffff223daa2 [ 193.865854][ C1] R10: dffffc0000000000 R11: fffffbfff223daa3 R12: 1ffff92000145d64 [ 193.873817][ C1] R13: ffffffff8d2280a0 R14: 0000000000000246 R15: dffffc0000000000 [ 193.881800][ C1] ? verify_lock_unused+0x140/0x140 [ 193.887011][ C1] ? read_lock_is_recursive+0x20/0x20 [ 193.892380][ C1] ? fs_reclaim_acquire+0x7c/0x100 [ 193.897483][ C1] fs_reclaim_acquire+0x98/0x100 [ 193.902409][ C1] ? fs_reclaim_acquire+0x7c/0x100 [ 193.907510][ C1] slab_pre_alloc_hook+0x2a/0x300 [ 193.912538][ C1] kmem_cache_alloc+0x5a/0x2c0 [ 193.917299][ C1] ? __kernfs_new_node+0xe5/0x7f0 [ 193.922323][ C1] __kernfs_new_node+0xe5/0x7f0 [ 193.927176][ C1] ? kernfs_new_node+0x260/0x260 [ 193.932122][ C1] ? up_write+0x1be/0x410 [ 193.936464][ C1] kernfs_new_node+0x14c/0x260 [ 193.941244][ C1] __kernfs_create_file+0x4b/0x2e0 [ 193.946356][ C1] sysfs_add_file_mode_ns+0x237/0x2f0 [ 193.951731][ C1] internal_create_group+0x431/0xd10 [ 193.957014][ C1] ? rcu_is_watching+0x15/0xb0 [ 193.961781][ C1] ? sysfs_create_group+0x20/0x20 [ 193.966803][ C1] ? usb_probe_interface+0x7d2/0xaf0 [ 193.972096][ C1] sysfs_create_groups+0x59/0x120 [ 193.977121][ C1] really_probe+0x54c/0xae0 [ 193.981618][ C1] ? pm_runtime_barrier+0x14b/0x1c0 [ 193.986820][ C1] __driver_probe_device+0x1f5/0x390 [ 193.992115][ C1] driver_probe_device+0x4f/0x420 [ 193.997136][ C1] __device_attach_driver+0x2ca/0x510 [ 194.002514][ C1] bus_for_each_drv+0x252/0x2e0 [ 194.007365][ C1] ? coredump_store+0x90/0x90 [ 194.012043][ C1] ? bus_find_device+0x300/0x300 [ 194.016988][ C1] __device_attach+0x2c1/0x420 [ 194.021757][ C1] ? device_attach+0x20/0x20 [ 194.026348][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 194.031547][ C1] bus_probe_device+0x180/0x260 [ 194.036401][ C1] device_add+0x87c/0xc40 [ 194.040727][ C1] usb_set_configuration+0x1ad0/0x2150 [ 194.046201][ C1] usb_generic_driver_probe+0x8d/0x150 [ 194.051660][ C1] usb_probe_device+0x12a/0x260 [ 194.056512][ C1] ? usb_register_device_driver+0x230/0x230 [ 194.062400][ C1] really_probe+0x247/0xae0 [ 194.066892][ C1] ? pm_runtime_barrier+0x14b/0x1c0 [ 194.072090][ C1] __driver_probe_device+0x1f5/0x390 [ 194.077400][ C1] driver_probe_device+0x4f/0x420 [ 194.082430][ C1] __device_attach_driver+0x2ca/0x510 [ 194.087815][ C1] bus_for_each_drv+0x252/0x2e0 [ 194.092670][ C1] ? coredump_store+0x90/0x90 [ 194.097351][ C1] ? bus_find_device+0x300/0x300 [ 194.102301][ C1] __device_attach+0x2c1/0x420 [ 194.107074][ C1] ? device_attach+0x20/0x20 [ 194.111670][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 194.116704][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 194.121908][ C1] bus_probe_device+0x180/0x260 [ 194.126763][ C1] device_add+0x87c/0xc40 [ 194.131091][ C1] usb_new_device+0x995/0x1550 [ 194.135855][ C1] ? lock_chain_count+0x20/0x20 [ 194.140703][ C1] ? usb_disconnect+0x8a0/0x8a0 [ 194.145547][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 194.150751][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 194.155952][ C1] hub_event+0x29d5/0x4a80 [ 194.160391][ C1] ? hub_post_resume+0x120/0x120 [ 194.165321][ C1] ? read_lock_is_recursive+0x20/0x20 [ 194.170697][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 194.175913][ C1] ? process_scheduled_works+0x975/0x1600 [ 194.181653][ C1] ? process_scheduled_works+0x975/0x1600 [ 194.187397][ C1] process_scheduled_works+0xa60/0x1600 [ 194.192979][ C1] ? worker_attach_to_pool+0x370/0x370 [ 194.198447][ C1] ? assign_work+0x3cc/0x5d0 [ 194.203306][ C1] worker_thread+0xa5e/0xfe0 [ 194.207939][ C1] kthread+0x2fa/0x390 [ 194.212004][ C1] ? pr_cont_work+0x550/0x550 [ 194.216682][ C1] ? kthread_blkcg+0xd0/0xd0 [ 194.221267][ C1] ret_from_fork+0x48/0x80 [ 194.225689][ C1] ? kthread_blkcg+0xd0/0xd0 [ 194.230280][ C1] ret_from_fork_asm+0x11/0x20 [ 194.235059][ C1] [ 194.238300][ C1] Kernel Offset: disabled [ 194.242654][ C1] Rebooting in 86400 seconds..