last executing test programs: 11m31.812737989s ago: executing program 32 (id=222): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000cc0)={0x30, r6, 0x1, 0x0, 0xfffffffc, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x30}}, 0x4) 8m28.359441715s ago: executing program 33 (id=786): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @multicast1, @random="8528d5915819", @private=0x2}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000180)={0x0, "f1ffffffffff63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee04200", 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 8m28.067260121s ago: executing program 34 (id=816): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r1 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r2 = fsopen(&(0x7f0000001000)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000e00)={0x0, 0x7a120}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000e00)={0x0, 0xf4240}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 7m42.483074463s ago: executing program 6 (id=817): r0 = open$dir(0x0, 0x408800, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0/file0\x00', 0x40042, 0x1) flock(r1, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0134012030d9"}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) 7m40.848360993s ago: executing program 6 (id=911): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x800080, &(0x7f0000000540)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=ad,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00', @ANYRESOCT=0x0, @ANYRESOCT, @ANYBLOB="57763f8b80ccb54515aa467d89bbb893a63f49cae5772efb6bb2d1d03fd1742a12e8978807c6a53aae173e5c08461b1d2594eed5030000002e74086cd91724e5631fa9733e7a1e4017c3d4264edd910e", @ANYRESDEC], 0x1, 0x105ea, &(0x7f000000d000)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0xfdfffffffffffffc) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace(0x10, r2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r6, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x4, 0x2, 0x8d, 0x4, 0x3, 0x6, 0x4004, 0x1c7, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x1, 0x5, 0x3ff, 0x200}, [{0x6474e551, 0x400, 0xb0, 0x7f, 0x1, 0x6, 0x3, 0x7ff}]}, 0x58) sendmsg$nl_xfrm(r5, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) dup2(r5, r0) getdents64(0xffffffffffffffff, &(0x7f00000005c0)=""/4096, 0x1000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) 7m34.840301458s ago: executing program 6 (id=921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={0x0, 0x0, 0x3f, 0x0, 0x0, 0xb}, 0x28) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, r3, 0xd6fff000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x1a, 0x0, &(0x7f0000000140)) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) 7m19.201372506s ago: executing program 35 (id=921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={0x0, 0x0, 0x3f, 0x0, 0x0, 0xb}, 0x28) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, r3, 0xd6fff000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x1a, 0x0, &(0x7f0000000140)) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) 6m25.753349738s ago: executing program 5 (id=1016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000880) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6m25.725173839s ago: executing program 2 (id=1017): setuid(0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0xa04080, &(0x7f0000000000)={[{@block_validity}, {@test_dummy_encryption_v1}]}, 0x4, 0xbac, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0xffffffffffffffff}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004000)={0x2020}, 0x2020) 6m21.470255872s ago: executing program 2 (id=1021): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r3) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close(r4) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r1, @ANYRES16=0x0, @ANYRES32, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES64, @ANYBLOB="5aed7374a67ddd3594e9e15fd9927ff8e7bf548ed798ce346f626298625c3d3ec40272a6449dffb171c942146f3881b67b6dfe18cf5ceceb374787a8266b13111d1fb7f5e97d62c9671be9dccfafc1fa175053a18724cdba3727a2ddad0f447eb8db45038d1e16f4efc4289ffa7e3ba3a0481d944c87b5e29c8be8e884acb2aaf21d3466459c2e70a6133ebfe64829bee11f10d6b8eb11f8e26a4772aeb4558e978fea461e482e801627aeb435944f0f2d6938fbe7f33cd8253ab3601ecbd75e2c0f3f52e6a1e4f69f04d21656", @ANYRES32, @ANYRES8, @ANYRES8], 0x1, 0x1ef, &(0x7f0000000300)="$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") 6m21.469508222s ago: executing program 5 (id=1022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 6m15.251910932s ago: executing program 2 (id=1026): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r0, &(0x7f0000000b40)=[{&(0x7f0000000cc0)=""/154, 0xfdef}, {0x0}, {0x0}], 0x3) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 6m14.612667298s ago: executing program 5 (id=1030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(0xffffffffffffffff, 0x4030582b, 0x0) r4 = memfd_create(&(0x7f0000000840)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xe5,\x82\x03\x00\x19\x8d\xff\xff\xff\xff\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xe7!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7c\x06\x00\x00\x00\x00\x00\x00\x001\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfc^\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11X\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xfc\xbc\xeb[^\xc7\xc0v/\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0a\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xed\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x9f\x0f\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S\x00\x00\x00\x00\x00\x00\x00', 0x6) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) fallocate(r4, 0x0, 0xb, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x13, 0x10, 0x41, 0x5}}) 6m12.523496268s ago: executing program 2 (id=1032): r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f00000001c0)=""/204, 0xcc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@perf_event={0xf346}}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000fc0)={0x3, 0x0, [{0x0, 0x32, &(0x7f0000000200)=""/50}, {0xdddd1000, 0xea, &(0x7f0000000bc0)=""/234}, {0x25000, 0x33, &(0x7f0000000cc0)=""/51}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffdf6, 0x0, 0x100, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400005}, 0x94) 6m11.989668591s ago: executing program 2 (id=1033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020}, 0x2020) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40044c4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x10) 6m10.995514965s ago: executing program 5 (id=1045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x326d}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="05006788031c09102c2855000000", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x16, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m10.76825941s ago: executing program 2 (id=1036): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) fcntl$getown(r4, 0x9) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x3) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc044) close_range(r1, r1, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001200add427ab62201745b4560a117fffffff81000e224e227f0000089210a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffe0f7ffffe7ee000000deff0000000200000000", 0x58}], 0x1) 6m9.1212625s ago: executing program 5 (id=1038): r0 = open$dir(0x0, 0x408800, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0/file0\x00', 0x40042, 0x1) flock(r1, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0134012030d9"}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x801) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) 6m7.108934879s ago: executing program 5 (id=1042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m55.612635657s ago: executing program 36 (id=1036): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) fcntl$getown(r4, 0x9) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x3) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc044) close_range(r1, r1, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001200add427ab62201745b4560a117fffffff81000e224e227f0000089210a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffe0f7ffffe7ee000000deff0000000200000000", 0x58}], 0x1) 5m51.396569259s ago: executing program 37 (id=1042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m41.248282341s ago: executing program 4 (id=1177): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) readahead(r3, 0x8, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.swap.current\x00', 0x275a, 0x0) write(r6, &(0x7f00000020c0)="45041a82eaec4743f56c0568fbc48e64307e18f0f65eb3b67e620374164f57cf681c", 0x22) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r6, 0x0) ioctl(r6, 0x1, &(0x7f0000000080)) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000380)=ANY=[]) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x89fd, 0x0) write(r7, &(0x7f0000000140)="24000000010006", 0x7) 4m39.737747618s ago: executing program 4 (id=1180): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 4m39.657897139s ago: executing program 4 (id=1181): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdc00, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x34}}, 0x8000) r7 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1, 0x48182) ioctl$SNDRV_PCM_IOCTL_XRUN(r7, 0x4148, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r10, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000016c0)={r10, &(0x7f0000000640)="46fb104f5a8f63b3469b2573c6527f1c9d34d696479423453141b1b806535c37cf8acc91f284941d2fbeb887a52cdf08091f", &(0x7f00000006c0)=""/4096}, 0x20) ioctl$SIOCSIFHWADDR(r8, 0x8b26, 0x0) socket$nl_route(0x10, 0x3, 0x0) readahead(r9, 0x6, 0x7) 4m38.087213998s ago: executing program 4 (id=1184): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x40042, 0x1) flock(r0, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0134012030d9"}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x801) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) 4m34.666569742s ago: executing program 4 (id=1190): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4c800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x705, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000810) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0xf0, 0xf0, 0x0, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x3, 0x1, [0x5, 0x5, 0x8000, 0x0, 0xc, 0x4, 0x4, 0x0, 0x9d3, 0xd77, 0x3, 0x8, 0x477, 0x5, 0xffff, 0x6], 0x5}}, @common=@srh={{0x30}, {0x0, 0xa5, 0x1, 0x9, 0xf, 0x1208, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x1, 0xbd16, 0x4ad, 0x1, 0x8000}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0xa, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0x13}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000980)={0xffff, 0x0, "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"}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffe, 0x8000, 0x4, 0x3}, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0xffffffffffffff49}, 0x28) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002f00090027f38200000000000400"], 0x14}, 0x1, 0x0, 0x0, 0x42884}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) 4m32.519772084s ago: executing program 4 (id=1196): sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f00000003c0)="d970a9b192ddf48c664aaf0cfa972e44df5f298574937ca37c93cbc72d9b2de5f7837d38ce87aeac93b74ea6640a4526a3ccad015a20bccd05f4854ce3281fccef72daed3f9f3e3170da12d61cbac563c8ecad7a7b20ace4e4a3ac025cc633725325", 0x62, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x27) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x5, 0x1) setuid(0xee01) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000cdf000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 4m16.980173613s ago: executing program 38 (id=1196): sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f00000003c0)="d970a9b192ddf48c664aaf0cfa972e44df5f298574937ca37c93cbc72d9b2de5f7837d38ce87aeac93b74ea6640a4526a3ccad015a20bccd05f4854ce3281fccef72daed3f9f3e3170da12d61cbac563c8ecad7a7b20ace4e4a3ac025cc633725325", 0x62, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x27) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x5, 0x1) setuid(0xee01) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000cdf000/0x3000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 29.189572098s ago: executing program 8 (id=1989): socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000080), &(0x7f0000000400)=r0}, 0x20) 29.056389381s ago: executing program 8 (id=1992): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback, 0xfffffffb}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x1400c0c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x25, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)}], 0x1, 0x0, 0x0, 0x10}, 0x0) 28.446090636s ago: executing program 8 (id=1994): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089000000e024c283", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x9}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000300)) getsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa040090780008000045a60007006600810229100000200000e0000001"], 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x8914, &(0x7f0000000040)='dummy0\x00'/40) ioctl(r6, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40) ioctl(r6, 0x890b, &(0x7f0000000100)="00000000000000000000000000000000020000006c6170623000"/64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) close(0x3) socket(0x8, 0x800, 0xdf5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={&(0x7f0000000740)="674eeaf37e6df597d30c072b031c6b3268974b2e9cc7895c19ff9fa43465e6d105ac7b297c91283a673f81c36d51acc906127d57753f3c10c4b09c9671c37fa28f13a27558995567ae4dfc811e7a0a282901fd585f21626be02de00e2dab97c0f190bfe8dd84b5dd393aff4851723989268dc8af9b371942338c86d42d2bec2ea53cb771e3a91d47f3ce2643f4ce12b8db2d9ea2aac4b4dd3da1d304281975d7bc603b51eab080a4ee8fb047a5cf44429a2b3eeae7664018627ad29e802bc4e025892a86b2e25ee5b3265cc33f8c89e1c575bfa5db7e0904962938", &(0x7f0000000b40)=""/213, &(0x7f0000000c40)="8d7d24ba663efc470b53f8f85b179597635c7972d132034ca4d44316a945c361e465cbb072060b64d3912b4dc5b421b44c5fa89f2b7624556c103bb38a80f44367a213dcbf25f986cd9688e33f6e16d25696d5d7dd110bdc12085de731f90d7c1bc86ed933bb0a9a7cf0afa058cb2c3bc052c24b32dcb2269b6c292cb0468eebe74097812eaa54a0130e7d84d054f51a611aef480a86b925", &(0x7f00000008c0)="91d92a5e9820d340cc180e5c6cea5adb2173c7951c9b89c5e15601e9b19e6e5715cfa955d4c6e813e3e78e45d33eb4bd55487b1763bfad59a6f37b7bc3468c01a1adeadc248c74a949c37ec2f95511ef827974a4e0f1486ab8a124154cc2c3cfa06dedfabb4cdfc23d33a93dcb69806d5800be2cba11b103081637719d418b3d809d92f2d630769c653b72e75de3fa300205b5", 0x70, r0}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) 28.29197922s ago: executing program 8 (id=1996): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@init_itable}, {@jqfmt_vfsv1}, {@nolazytime}, {@grpjquota}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0xb}}, {@bh}, {@init_itable}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) unlink(&(0x7f00000002c0)='./file0/file2\x00') 27.633792766s ago: executing program 8 (id=2004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x81}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000100), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000004400004803c0001800b00010065787468db3336ab82044ebc38f5cf647200002c000280080003400000001908000140000000020500020007000000080006400000000208000440000000040900010073797a30000000000900020073797a3200000000140000001100010000"], 0x94}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r7, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @local, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "6b210acfeda5a0d6c477d874f77f552917"}], 0x28}}], 0x1, 0x4000000) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x3ff, 0x8}, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f0000000440)={r6, &(0x7f0000000340)='-\x00', 0x101201, &(0x7f0000000380)={@align=0xff, {0x6, 0x5, 0x9, 0x1ff}}, 0x0, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0xfffffff6}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r8, &(0x7f0000000240)="70fbb361da4a84af4312caea1726a949e529befa370c90e9beb9495281b732b1401ae66d32b3b6b4bbb11962b5a9a472e61691f74238ba796d13ec82e6e2d24525c195912178422c5dea67dcc6622ac1632f068f6af11807ce4645deef87751908420765f035d16c07b81c5bda42c35ea27a83fd8f6944f63242ddbe5a8865f34d17119bda0532686a385b7ae7c0f2907bb46854cdbfa4c6f63e5c4e63f91f22546e634669aafda0e988ffdf5ab2f0527ebe80686d803ff6b1a3e24faf7b6e27aec99c8ed9009e8f4f80516d8c6fd10315037b04b9cc96f71b", &(0x7f0000000480)=@tcp=r9, 0x2}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000780), 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000540)={0x28, r11, 0x211, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004010}, 0x80) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000f8ffffff850000002d000000a50000009e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r13}, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000b80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x11c, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_FILTER={0x4c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x24}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x44}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x900}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x402}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x405}, @CTA_FILTER_REPLY_FLAGS={0x8}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x66}]}, @CTA_LABELS={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xa11}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}, @CTA_TUPLE_MASTER={0x1c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c014) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r9, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0xbf, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000940), &(0x7f0000000bc0), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000d80)={r14, 0x1, 0x6}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@end]}}, {{0x0, 0x20, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r10, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x28, r15, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) 24.771359176s ago: executing program 8 (id=2019): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089000000e024c283", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x9}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000300)) getsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa040090780008000045a60007006600810229100000200000e0000001"], 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r6, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40) ioctl(r6, 0x890b, &(0x7f0000000100)="00000000000000000000000000000000020000006c6170623000"/64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) close(0x3) socket(0x8, 0x800, 0xdf5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={&(0x7f0000000740)="674eeaf37e6df597d30c072b031c6b3268974b2e9cc7895c19ff9fa43465e6d105ac7b297c91283a673f81c36d51acc906127d57753f3c10c4b09c9671c37fa28f13a27558995567ae4dfc811e7a0a282901fd585f21626be02de00e2dab97c0f190bfe8dd84b5dd393aff4851723989268dc8af9b371942338c86d42d2bec2ea53cb771e3a91d47f3ce2643f4ce12b8db2d9ea2aac4b4dd3da1d304281975d7bc603b51eab080a4ee8fb047a5cf44429a2b3eeae7664018627ad29e802bc4e025892a86b2e25ee5b3265cc33f8c89e1c575bfa5db7e0904962938", &(0x7f0000000b40)=""/213, &(0x7f0000000c40)="8d7d24ba663efc470b53f8f85b179597635c7972d132034ca4d44316a945c361e465cbb072060b64d3912b4dc5b421b44c5fa89f2b7624556c103bb38a80f44367a213dcbf25f986cd9688e33f6e16d25696d5d7dd110bdc12085de731f90d7c1bc86ed933bb0a9a7cf0afa058cb2c3bc052c24b32dcb2269b6c292cb0468eebe74097812eaa54a0130e7d84d054f51a611aef480a86b925", &(0x7f00000008c0)="91d92a5e9820d340cc180e5c6cea5adb2173c7951c9b89c5e15601e9b19e6e5715cfa955d4c6e813e3e78e45d33eb4bd55487b1763bfad59a6f37b7bc3468c01a1adeadc248c74a949c37ec2f95511ef827974a4e0f1486ab8a124154cc2c3cfa06dedfabb4cdfc23d33a93dcb69806d5800be2cba11b103081637719d418b3d809d92f2d630769c653b72e75de3fa300205b5", 0x70, r0}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) 24.622334329s ago: executing program 39 (id=2019): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089000000e024c283", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x9}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000300)) getsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa040090780008000045a60007006600810229100000200000e0000001"], 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r6, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40) ioctl(r6, 0x890b, &(0x7f0000000100)="00000000000000000000000000000000020000006c6170623000"/64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) close(0x3) socket(0x8, 0x800, 0xdf5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={&(0x7f0000000740)="674eeaf37e6df597d30c072b031c6b3268974b2e9cc7895c19ff9fa43465e6d105ac7b297c91283a673f81c36d51acc906127d57753f3c10c4b09c9671c37fa28f13a27558995567ae4dfc811e7a0a282901fd585f21626be02de00e2dab97c0f190bfe8dd84b5dd393aff4851723989268dc8af9b371942338c86d42d2bec2ea53cb771e3a91d47f3ce2643f4ce12b8db2d9ea2aac4b4dd3da1d304281975d7bc603b51eab080a4ee8fb047a5cf44429a2b3eeae7664018627ad29e802bc4e025892a86b2e25ee5b3265cc33f8c89e1c575bfa5db7e0904962938", &(0x7f0000000b40)=""/213, &(0x7f0000000c40)="8d7d24ba663efc470b53f8f85b179597635c7972d132034ca4d44316a945c361e465cbb072060b64d3912b4dc5b421b44c5fa89f2b7624556c103bb38a80f44367a213dcbf25f986cd9688e33f6e16d25696d5d7dd110bdc12085de731f90d7c1bc86ed933bb0a9a7cf0afa058cb2c3bc052c24b32dcb2269b6c292cb0468eebe74097812eaa54a0130e7d84d054f51a611aef480a86b925", &(0x7f00000008c0)="91d92a5e9820d340cc180e5c6cea5adb2173c7951c9b89c5e15601e9b19e6e5715cfa955d4c6e813e3e78e45d33eb4bd55487b1763bfad59a6f37b7bc3468c01a1adeadc248c74a949c37ec2f95511ef827974a4e0f1486ab8a124154cc2c3cfa06dedfabb4cdfc23d33a93dcb69806d5800be2cba11b103081637719d418b3d809d92f2d630769c653b72e75de3fa300205b5", 0x70, r0}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) 4.169881948s ago: executing program 7 (id=2173): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089000000e024c283", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x9}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000300)) getsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa040090780008000045a60007006600810229100000200000e0000001"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x8914, &(0x7f0000000040)='dummy0\x00'/40) ioctl(r6, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r6, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40) ioctl(r6, 0x890b, &(0x7f0000000100)="00000000000000000000000000000000020000006c6170623000"/64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) close(0x3) socket(0x8, 0x800, 0xdf5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={&(0x7f0000000740)="674eeaf37e6df597d30c072b031c6b3268974b2e9cc7895c19ff9fa43465e6d105ac7b297c91283a673f81c36d51acc906127d57753f3c10c4b09c9671c37fa28f13a27558995567ae4dfc811e7a0a282901fd585f21626be02de00e2dab97c0f190bfe8dd84b5dd393aff4851723989268dc8af9b371942338c86d42d2bec2ea53cb771e3a91d47f3ce2643f4ce12b8db2d9ea2aac4b4dd3da1d304281975d7bc603b51eab080a4ee8fb047a5cf44429a2b3eeae7664018627ad29e802bc4e025892a86b2e25ee5b3265cc33f8c89e1c575bfa5db7e0904962938", &(0x7f0000000b40)=""/213, &(0x7f0000000c40)="8d7d24ba663efc470b53f8f85b179597635c7972d132034ca4d44316a945c361e465cbb072060b64d3912b4dc5b421b44c5fa89f2b7624556c103bb38a80f44367a213dcbf25f986cd9688e33f6e16d25696d5d7dd110bdc12085de731f90d7c1bc86ed933bb0a9a7cf0afa058cb2c3bc052c24b32dcb2269b6c292cb0468eebe74097812eaa54a0130e7d84d054f51a611aef480a86b925", &(0x7f00000008c0)="91d92a5e9820d340cc180e5c6cea5adb2173c7951c9b89c5e15601e9b19e6e5715cfa955d4c6e813e3e78e45d33eb4bd55487b1763bfad59a6f37b7bc3468c01a1adeadc248c74a949c37ec2f95511ef827974a4e0f1486ab8a124154cc2c3cfa06dedfabb4cdfc23d33a93dcb69806d5800be2cba11b103081637719d418b3d809d92f2d630769c653b72e75de3fa300205b5", 0x70, r0}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) 3.851667996s ago: executing program 7 (id=2174): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fsync(r0) 1.899383704s ago: executing program 1 (id=2199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xa2201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x2000, 0xf000, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0x1, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0x0, 0xe}, {0xeffd, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0xf, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0x3}, {0xdddd0000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0xff, 0x0, 0x9, 0x1, 0xf, 0xb}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x2, 0x5462a0, 0x5, 0xe801, 0x8000900, 0x1, [0xb, 0x2, 0x200000000003, 0x3]}) 1.796339756s ago: executing program 9 (id=2201): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.795935366s ago: executing program 3 (id=2202): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, &(0x7f0000000900)={0x8000004}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 1.63899373s ago: executing program 1 (id=2203): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x6c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x4}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.587903731s ago: executing program 7 (id=2204): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x10, r0) ptrace(0x11, r0) 1.582380771s ago: executing program 3 (id=2205): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 1.476634134s ago: executing program 9 (id=2206): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089000000e024c283", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x9}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000300)) getsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa040090780008000045a60007006600810229100000200000e0000001"], 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r5, 0x8914, &(0x7f0000000040)='dummy0\x00'/40) ioctl(r5, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r5, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40) ioctl(r5, 0x890b, &(0x7f0000000100)="00000000000000000000000000000000020000006c6170623000"/64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) close(0x3) socket(0x8, 0x800, 0xdf5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={&(0x7f0000000740)="674eeaf37e6df597d30c072b031c6b3268974b2e9cc7895c19ff9fa43465e6d105ac7b297c91283a673f81c36d51acc906127d57753f3c10c4b09c9671c37fa28f13a27558995567ae4dfc811e7a0a282901fd585f21626be02de00e2dab97c0f190bfe8dd84b5dd393aff4851723989268dc8af9b371942338c86d42d2bec2ea53cb771e3a91d47f3ce2643f4ce12b8db2d9ea2aac4b4dd3da1d304281975d7bc603b51eab080a4ee8fb047a5cf44429a2b3eeae7664018627ad29e802bc4e025892a86b2e25ee5b3265cc33f8c89e1c575bfa5db7e0904962938", &(0x7f0000000b40)=""/213, &(0x7f0000000c40)="8d7d24ba663efc470b53f8f85b179597635c7972d132034ca4d44316a945c361e465cbb072060b64d3912b4dc5b421b44c5fa89f2b7624556c103bb38a80f44367a213dcbf25f986cd9688e33f6e16d25696d5d7dd110bdc12085de731f90d7c1bc86ed933bb0a9a7cf0afa058cb2c3bc052c24b32dcb2269b6c292cb0468eebe74097812eaa54a0130e7d84d054f51a611aef480a86b925", &(0x7f00000008c0)="91d92a5e9820d340cc180e5c6cea5adb2173c7951c9b89c5e15601e9b19e6e5715cfa955d4c6e813e3e78e45d33eb4bd55487b1763bfad59a6f37b7bc3468c01a1adeadc248c74a949c37ec2f95511ef827974a4e0f1486ab8a124154cc2c3cfa06dedfabb4cdfc23d33a93dcb69806d5800be2cba11b103081637719d418b3d809d92f2d630769c653b72e75de3fa300205b5", 0x70, r0}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) 1.476099203s ago: executing program 1 (id=2207): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x1c, r1, 0x801, 0x70bd2c, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) 1.334393927s ago: executing program 3 (id=2208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x81}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000100), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000004400004803c0001800b00010065787468db3336ab82044ebc38f5cf647200002c000280080003400000001908000140000000020500020007000000080006400000000208000440000000040900010073797a30000000000900020073797a3200000000140000001100010000"], 0x94}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r7, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @local, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "6b210acfeda5a0d6c477d874f77f552917"}], 0x28}}], 0x1, 0x4000000) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x3ff, 0x8}, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f0000000440)={r6, &(0x7f0000000340)='-\x00', 0x101201, &(0x7f0000000380)={@align=0xff, {0x6, 0x5, 0x9, 0x1ff}}, 0x0, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0xfffffff6}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r8, &(0x7f0000000240)="70fbb361da4a84af4312caea1726a949e529befa370c90e9beb9495281b732b1401ae66d32b3b6b4bbb11962b5a9a472e61691f74238ba796d13ec82e6e2d24525c195912178422c5dea67dcc6622ac1632f068f6af11807ce4645deef87751908420765f035d16c07b81c5bda42c35ea27a83fd8f6944f63242ddbe5a8865f34d17119bda0532686a385b7ae7c0f2907bb46854cdbfa4c6f63e5c4e63f91f22546e634669aafda0e988ffdf5ab2f0527ebe80686d803ff6b1a3e24faf7b6e27aec99c8ed9009e8f4f80516d8c6fd10315037b04b9cc96f71b", &(0x7f0000000480)=@tcp=r9, 0x2}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000780), 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000540)={0x28, r11, 0x211, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004010}, 0x80) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000f8ffffff850000002d000000a50000009e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r13}, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000b80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x11c, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_FILTER={0x4c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x24}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x44}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x900}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x402}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x405}, @CTA_FILTER_REPLY_FLAGS={0x8}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x66}]}, @CTA_LABELS={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xa11}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}, @CTA_TUPLE_MASTER={0x1c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c014) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r9, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0xbf, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000940), &(0x7f0000000bc0), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000d80)={r14, 0x1, 0x6}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@end]}}, {{0x0, 0x20, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r10, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x28, r15, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) 1.288299068s ago: executing program 7 (id=2209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) chdir(&(0x7f0000000100)='./file0\x00') getdents64(0xffffffffffffffff, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x1000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[], 0xf0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1.288130308s ago: executing program 1 (id=2210): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a004e220000000500002d003a2d003a0040ffffe000000102000000200002000a00000000000000ff0100000000000000000000000000019c0000000d0001007564703a"], 0x6c}, 0x1, 0x0, 0x0, 0x20000014}, 0x20040084) 1.270029009s ago: executing program 9 (id=2211): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089000000e024c283", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x9}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000300)) getsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x8914, &(0x7f0000000040)='dummy0\x00'/40) ioctl(r6, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r6, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40) ioctl(r6, 0x890b, &(0x7f0000000100)="00000000000000000000000000000000020000006c6170623000"/64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) close(0x3) socket(0x8, 0x800, 0xdf5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={&(0x7f0000000740)="674eeaf37e6df597d30c072b031c6b3268974b2e9cc7895c19ff9fa43465e6d105ac7b297c91283a673f81c36d51acc906127d57753f3c10c4b09c9671c37fa28f13a27558995567ae4dfc811e7a0a282901fd585f21626be02de00e2dab97c0f190bfe8dd84b5dd393aff4851723989268dc8af9b371942338c86d42d2bec2ea53cb771e3a91d47f3ce2643f4ce12b8db2d9ea2aac4b4dd3da1d304281975d7bc603b51eab080a4ee8fb047a5cf44429a2b3eeae7664018627ad29e802bc4e025892a86b2e25ee5b3265cc33f8c89e1c575bfa5db7e0904962938", &(0x7f0000000b40)=""/213, &(0x7f0000000c40)="8d7d24ba663efc470b53f8f85b179597635c7972d132034ca4d44316a945c361e465cbb072060b64d3912b4dc5b421b44c5fa89f2b7624556c103bb38a80f44367a213dcbf25f986cd9688e33f6e16d25696d5d7dd110bdc12085de731f90d7c1bc86ed933bb0a9a7cf0afa058cb2c3bc052c24b32dcb2269b6c292cb0468eebe74097812eaa54a0130e7d84d054f51a611aef480a86b925", &(0x7f00000008c0)="91d92a5e9820d340cc180e5c6cea5adb2173c7951c9b89c5e15601e9b19e6e5715cfa955d4c6e813e3e78e45d33eb4bd55487b1763bfad59a6f37b7bc3468c01a1adeadc248c74a949c37ec2f95511ef827974a4e0f1486ab8a124154cc2c3cfa06dedfabb4cdfc23d33a93dcb69806d5800be2cba11b103081637719d418b3d809d92f2d630769c653b72e75de3fa300205b5", 0x70, r0}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) 1.039276715s ago: executing program 0 (id=2212): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x1, @empty, 0x9}]}}}}}}}}, 0x0) 761.942411ms ago: executing program 0 (id=2213): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nf_conntrack\x00') sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x74, 0x1, 0x3, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_PAYLOAD={0x4}, @NFQA_EXP={0x28, 0xf, 0x0, 0x1, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5071af}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_MASK={0x14, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @NFQA_CT={0x34, 0xb, 0x0, 0x1, [@CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x4a}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x40}]}}]}]}, 0x74}}, 0x1) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) close_range(r1, r0, 0x0) 761.773001ms ago: executing program 1 (id=2214): unshare(0x6020400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 749.518802ms ago: executing program 3 (id=2215): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, &(0x7f0000000900)={0x8000004}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 517.202327ms ago: executing program 9 (id=2216): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c3cb5b0006020000", 0x10, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 517.033677ms ago: executing program 0 (id=2217): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000c40)={0x0, [{0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0xe, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x6a5c, 0x0}, {0x1, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x0, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x1, 0x0, 0xffffffc0, 0x0}, {0x3, 0x0, 0xffff, 0x0}, {0x2, 0x0, 0x988, 0x0}, {0x3, 0x0, 0x717f, 0x0}, {0x2, 0x0, 0x9d19, 0x0}, {0x3, 0x0, 0xbdf, 0x0}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 516.834967ms ago: executing program 1 (id=2218): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18}, 0x1400c0c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x25, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)}], 0x1, 0x0, 0x0, 0x10}, 0x0) 478.884558ms ago: executing program 7 (id=2219): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x7, 0x6}, {0x6, 0xff, 0x0, 0x4}]}) write$ppp(r0, &(0x7f0000000140)="3a7914c86999", 0x6) 448.513209ms ago: executing program 9 (id=2220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0xfffffed3, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x840) writev(r0, &(0x7f0000000380), 0x4) 403.23071ms ago: executing program 3 (id=2221): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089000000e024c283", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x9}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000300)) getsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa040090780008000045a60007006600810229100000200000e0000001"], 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r5, 0x8914, &(0x7f0000000040)='dummy0\x00'/40) ioctl(r5, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r5, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40) ioctl(r5, 0x890b, &(0x7f0000000100)="00000000000000000000000000000000020000006c6170623000"/64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) close(0x3) socket(0x8, 0x800, 0xdf5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={&(0x7f0000000740)="674eeaf37e6df597d30c072b031c6b3268974b2e9cc7895c19ff9fa43465e6d105ac7b297c91283a673f81c36d51acc906127d57753f3c10c4b09c9671c37fa28f13a27558995567ae4dfc811e7a0a282901fd585f21626be02de00e2dab97c0f190bfe8dd84b5dd393aff4851723989268dc8af9b371942338c86d42d2bec2ea53cb771e3a91d47f3ce2643f4ce12b8db2d9ea2aac4b4dd3da1d304281975d7bc603b51eab080a4ee8fb047a5cf44429a2b3eeae7664018627ad29e802bc4e025892a86b2e25ee5b3265cc33f8c89e1c575bfa5db7e0904962938", &(0x7f0000000b40)=""/213, &(0x7f0000000c40)="8d7d24ba663efc470b53f8f85b179597635c7972d132034ca4d44316a945c361e465cbb072060b64d3912b4dc5b421b44c5fa89f2b7624556c103bb38a80f44367a213dcbf25f986cd9688e33f6e16d25696d5d7dd110bdc12085de731f90d7c1bc86ed933bb0a9a7cf0afa058cb2c3bc052c24b32dcb2269b6c292cb0468eebe74097812eaa54a0130e7d84d054f51a611aef480a86b925", &(0x7f00000008c0)="91d92a5e9820d340cc180e5c6cea5adb2173c7951c9b89c5e15601e9b19e6e5715cfa955d4c6e813e3e78e45d33eb4bd55487b1763bfad59a6f37b7bc3468c01a1adeadc248c74a949c37ec2f95511ef827974a4e0f1486ab8a124154cc2c3cfa06dedfabb4cdfc23d33a93dcb69806d5800be2cba11b103081637719d418b3d809d92f2d630769c653b72e75de3fa300205b5", 0x70, r0}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) 332.389711ms ago: executing program 0 (id=2222): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f00000001c0)={0x1, 0x1, 0x1}, &(0x7f0000001500)=[{}]) 214.363125ms ago: executing program 0 (id=2223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xa, 0xa8, @random='node1\x00'}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xaa, 0xaa}]}, 0x3c}}, 0x0) 108.406687ms ago: executing program 0 (id=2224): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) rmdir(&(0x7f0000000000)='./config/usb_gadget/g1/functions/gser.usb0\x00') 104.644308ms ago: executing program 3 (id=2225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000440)={0x1, 0x0, [{0x17b, 0x0, 0x1000}]}) 76.020068ms ago: executing program 7 (id=2226): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000080000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 0s ago: executing program 9 (id=2227): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089000000e024c283", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x9}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000300)) getsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x8914, &(0x7f0000000040)='dummy0\x00'/40) ioctl(r6, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r6, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40) ioctl(r6, 0x890b, &(0x7f0000000100)="00000000000000000000000000000000020000006c6170623000"/64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) close(0x3) socket(0x8, 0x800, 0xdf5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={&(0x7f0000000740)="674eeaf37e6df597d30c072b031c6b3268974b2e9cc7895c19ff9fa43465e6d105ac7b297c91283a673f81c36d51acc906127d57753f3c10c4b09c9671c37fa28f13a27558995567ae4dfc811e7a0a282901fd585f21626be02de00e2dab97c0f190bfe8dd84b5dd393aff4851723989268dc8af9b371942338c86d42d2bec2ea53cb771e3a91d47f3ce2643f4ce12b8db2d9ea2aac4b4dd3da1d304281975d7bc603b51eab080a4ee8fb047a5cf44429a2b3eeae7664018627ad29e802bc4e025892a86b2e25ee5b3265cc33f8c89e1c575bfa5db7e0904962938", &(0x7f0000000b40)=""/213, &(0x7f0000000c40)="8d7d24ba663efc470b53f8f85b179597635c7972d132034ca4d44316a945c361e465cbb072060b64d3912b4dc5b421b44c5fa89f2b7624556c103bb38a80f44367a213dcbf25f986cd9688e33f6e16d25696d5d7dd110bdc12085de731f90d7c1bc86ed933bb0a9a7cf0afa058cb2c3bc052c24b32dcb2269b6c292cb0468eebe74097812eaa54a0130e7d84d054f51a611aef480a86b925", &(0x7f00000008c0)="91d92a5e9820d340cc180e5c6cea5adb2173c7951c9b89c5e15601e9b19e6e5715cfa955d4c6e813e3e78e45d33eb4bd55487b1763bfad59a6f37b7bc3468c01a1adeadc248c74a949c37ec2f95511ef827974a4e0f1486ab8a124154cc2c3cfa06dedfabb4cdfc23d33a93dcb69806d5800be2cba11b103081637719d418b3d809d92f2d630769c653b72e75de3fa300205b5", 0x70, r0}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): eed USB device number 6 using dummy_hcd [ 729.046709][T11374] loop1: detected capacity change from 0 to 512 [ 729.069661][ T9046] usb 4-1: Using ep0 maxpacket: 8 [ 729.149904][T11374] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.1630: bad orphan inode 15 [ 729.169573][ T23] usb 8-1: Using ep0 maxpacket: 8 [ 729.235166][T11374] ext4_test_bit(bit=14, block=18) = 1 [ 729.257253][T11374] is_bad_inode(inode)=0 [ 729.262627][T11374] NEXT_ORPHAN(inode)=1023 [ 729.267605][T11374] max_ino=32 [ 729.271833][T11374] i_nlink=0 [ 729.277777][T11374] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2925: inode #15: comm syz.1.1630: corrupted xattr block 19 [ 729.291641][ T23] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 729.306970][ T23] usb 8-1: config 0 has no interface number 0 [ 729.315287][T11374] EXT4-fs warning (device loop1): ext4_evict_inode:304: xattr delete (err -117) [ 729.379914][T11374] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 729.400055][ T9046] usb 4-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 729.429460][ T9046] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.468026][T11374] ext4 filesystem being mounted at /65/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 729.469142][ T9046] usb 4-1: Product: syz [ 729.490009][ T23] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 729.520556][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.541691][ T9046] usb 4-1: Manufacturer: syz [ 729.546810][ T9046] usb 4-1: SerialNumber: syz [ 729.562602][ T23] usb 8-1: Product: syz [ 729.567454][ T23] usb 8-1: Manufacturer: syz [ 729.624076][ T23] usb 8-1: SerialNumber: syz [ 729.688073][ T23] usb 8-1: config 0 descriptor?? [ 729.971102][ T9046] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 729.997679][ T23] usb 8-1: USB disconnect, device number 6 [ 730.004851][ T9046] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 730.044756][ T9046] usb 4-1: 2:1 : unsupported sample bitwidth 5 in 9 bytes [ 730.079791][T10997] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 730.147301][ T9046] usb 4-1: USB disconnect, device number 7 [ 730.329853][T10997] usb 9-1: Using ep0 maxpacket: 8 [ 730.424483][T11394] loop9: detected capacity change from 0 to 512 [ 730.431730][ T4234] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 730.516400][T11394] EXT4-fs (loop9): Ignoring removed bh option [ 730.552769][ T8528] udevd[8528]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 730.585117][T11394] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 730.641095][T11394] EXT4-fs (loop9): 1 truncate cleaned up [ 730.691488][T10997] usb 9-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 730.722559][T11394] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,bh,noblock_validity,,errors=continue. Quota mode: writeback. [ 730.759186][T10997] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.769420][T11394] EXT4-fs (loop9): re-mounted. Opts: (null). Quota mode: writeback. [ 730.835382][T11402] loop7: detected capacity change from 0 to 16 [ 730.842451][T10997] usb 9-1: Product: syz [ 730.842491][T10997] usb 9-1: Manufacturer: syz [ 730.842523][T10997] usb 9-1: SerialNumber: syz [ 730.880169][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.940102][T11402] erofs: (device loop7): mounted with root inode @ nid 36. [ 730.968584][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.042215][T11402] erofs: (device loop7): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 731.058238][ T4234] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 731.103462][T11402] erofs: (device loop7): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 731.117101][T11402] erofs: (device loop7): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 731.163241][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.164118][T11402] attempt to access beyond end of device [ 731.164118][T11402] loop7: rw=524288, want=24, limit=16 [ 731.228319][ T4234] usb 2-1: config 0 descriptor?? [ 731.311872][T10997] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 731.393794][T11402] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 731.465624][ T26] audit: type=1800 audit(1785264105.464:29): pid=11402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1636" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 731.491646][T10997] snd-usb-audio: probe of 9-1:1.0 failed with error -71 [ 731.622790][T10997] usb 9-1: USB disconnect, device number 5 [ 731.941079][ T8528] udevd[8528]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 731.979745][ T4234] usb 2-1: string descriptor 0 read error: -71 [ 731.998647][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1643'. [ 732.024966][ T4234] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 732.112359][ T4234] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 732.317725][ T4234] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 732.340783][ T4234] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 732.363851][ T4234] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 732.474355][ T4234] usb 2-1: USB disconnect, device number 5 [ 732.959957][T11441] loop7: detected capacity change from 0 to 1024 [ 733.559662][T10997] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 733.819903][T10997] usb 4-1: Using ep0 maxpacket: 16 [ 733.850712][ T4234] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 733.940019][T10997] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 734.018129][T10997] usb 4-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 734.070112][T10997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.089632][T10290] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 734.128658][T10997] usb 4-1: config 0 descriptor?? [ 734.129480][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 734.339989][ T4234] usb 2-1: unable to get BOS descriptor or descriptor too short [ 734.430164][ T4234] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.459959][ T4234] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 734.490921][T10290] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 734.519659][T10290] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.559504][T10290] usb 8-1: config 0 has no interface number 0 [ 734.587399][T10290] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 734.630299][T10290] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 734.643372][T10997] chicony 0003:04F2:1123.0002: ignoring exceeding usage max [ 734.660117][T10290] usb 8-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 734.664178][T10997] chicony 0003:04F2:1123.0002: unknown main item tag 0x4 [ 734.710088][ T4234] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 734.733980][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.743077][T10997] chicony 0003:04F2:1123.0002: collection stack underflow [ 734.743140][T10997] chicony 0003:04F2:1123.0002: item 0 0 0 12 parsing failed [ 734.743864][T10997] chicony 0003:04F2:1123.0002: Chicony hid parse failed: -22 [ 734.818774][ T4234] usb 2-1: Product: syz [ 734.840175][ T4234] usb 2-1: Manufacturer: syz [ 734.852985][T10997] chicony: probe of 0003:04F2:1123.0002 failed with error -22 [ 734.866689][ T4234] usb 2-1: SerialNumber: syz [ 734.889959][T10290] usb 8-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 734.919575][T10290] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.939865][T10997] usb 4-1: USB disconnect, device number 8 [ 734.992518][T10290] usb 8-1: Product: syz [ 735.016643][T10290] usb 8-1: Manufacturer: syz [ 735.037145][T10290] usb 8-1: SerialNumber: syz [ 735.087001][T10290] usb 8-1: config 0 descriptor?? [ 735.399998][ T4234] usb 2-1: unit 0 not found! [ 735.649965][ T4234] usb 2-1: USB disconnect, device number 6 [ 735.717602][T10997] usb 8-1: USB disconnect, device number 7 [ 736.146553][T11484] loop9: detected capacity change from 0 to 64 [ 736.149655][ T8528] udevd[8528]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 736.489570][T10997] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 736.542788][T11495] loop9: detected capacity change from 0 to 128 [ 736.589257][T11495] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 736.849826][T10997] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 736.849896][T10997] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 736.849954][T10997] usb 9-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 736.849993][T10997] usb 9-1: config 1 interface 1 has no altsetting 0 [ 737.010736][T10997] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 737.010799][T10997] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.010860][T10997] usb 9-1: Product: syz [ 737.010923][T10997] usb 9-1: Manufacturer: syz [ 737.010955][T10997] usb 9-1: SerialNumber: syz [ 737.052021][T10997] cdc_ncm 9-1:1.0: skipping garbage [ 737.052083][T10997] cdc_ncm 9-1:1.0: NCM or ECM functional descriptors missing [ 737.052153][T10997] cdc_ncm 9-1:1.0: bind() failure [ 737.379749][ T4234] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 737.516225][T10290] usb 9-1: USB disconnect, device number 6 [ 739.031657][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.649867][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.679617][ T4234] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 740.698780][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.739669][ T1108] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 740.819544][T10997] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 740.916926][ T4234] usb 2-1: config 0 descriptor?? [ 740.951031][ T4234] usb 2-1: can't set config #0, error -71 [ 740.995736][T11535] loop1: detected capacity change from 0 to 128 [ 741.007761][ T4234] usb 2-1: USB disconnect, device number 7 [ 741.171678][T11535] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 741.191657][T10997] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 741.221182][T10997] usb 4-1: config 0 has no interface number 0 [ 741.261720][T10997] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.274244][ T1108] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 741.317555][T11546] loop7: detected capacity change from 0 to 256 [ 741.325912][ T1108] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.355959][T10997] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.360710][T11546] exfat: Deprecated parameter 'utf8' [ 741.368353][T11535] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 741.382343][T11546] exfat: Deprecated parameter 'utf8' [ 741.388697][T11546] exfat: Deprecated parameter 'utf8' [ 741.389559][ T1108] usb 10-1: Product: syz [ 741.397556][T11546] exfat: Deprecated parameter 'namecase' [ 741.408691][T11535] ext2 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 741.478692][T11546] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 741.513319][T10997] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 741.524305][ T1108] usb 10-1: Manufacturer: syz [ 741.589812][ T1108] usb 10-1: SerialNumber: syz [ 741.626014][T10997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.706096][ T1108] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 741.727996][T10997] usb 4-1: config 0 descriptor?? [ 741.968513][ T1325] usb 10-1: USB disconnect, device number 6 [ 741.981654][ T4232] usb 10-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 742.080552][ T1325] usb 10-1: ath9k_htc: USB layer deinitialized [ 742.109655][T10997] usbhid 4-1:0.1: can't add hid device: -71 [ 742.118755][T10997] usbhid: probe of 4-1:0.1 failed with error -71 [ 742.540031][T10997] usb 4-1: USB disconnect, device number 9 [ 743.055787][T11562] loop7: detected capacity change from 0 to 1024 [ 743.530451][T11568] loop9: detected capacity change from 0 to 256 [ 743.610635][T11568] exfat: Deprecated parameter 'namecase' [ 743.617329][T11568] exfat: Deprecated parameter 'namecase' [ 743.629615][T11562] EXT4-fs (loop7): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,nojournal_checksum,grpquota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,mb_optimize_scan=0x0000000000000001,i_version,,errors=continue. Quota mode: writeback. [ 743.785627][T11568] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 743.836419][T11555] loop8: detected capacity change from 0 to 32768 [ 743.945904][T11555] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 744.033191][T11555] BTRFS warning (device loop8): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 744.193295][T11555] BTRFS info (device loop8): trying to use backup root at mount time [ 744.306133][T11555] BTRFS info (device loop8): setting nodatasum [ 744.390119][T11555] BTRFS info (device loop8): enabling ssd optimizations [ 744.839252][T11555] BTRFS info (device loop8): using spread ssd allocation scheme [ 745.553308][T11555] BTRFS info (device loop8): force zlib compression, level 3 [ 745.606295][T11555] BTRFS info (device loop8): allowing degraded mounts [ 745.652138][T11555] BTRFS info (device loop8): turning on flush-on-commit [ 745.660472][T11555] BTRFS info (device loop8): setting nodatacow [ 745.667703][T11555] BTRFS info (device loop8): using free space tree [ 745.675964][T11555] BTRFS info (device loop8): has skinny extents [ 745.980124][T11614] loop1: detected capacity change from 0 to 1024 [ 746.450131][ T4232] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 746.860345][ T4232] usb 10-1: Using ep0 maxpacket: 16 [ 747.160109][ T4232] usb 10-1: unable to get BOS descriptor or descriptor too short [ 747.269919][ T4232] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 747.291703][ T4232] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 747.319964][ T4232] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 747.610131][ T4232] usb 10-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 747.639815][ T4232] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.697261][ T4232] usb 10-1: Product: syz [ 747.719898][ T4232] usb 10-1: Manufacturer: syz [ 747.725141][ T4232] usb 10-1: SerialNumber: syz [ 747.766637][T11555] BTRFS error (device loop8): open_ctree failed: -12 [ 747.770529][ T9155] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by udevd (9155) [ 748.130103][ T4232] usb 10-1: 1:1 : no or invalid class specific endpoint descriptor [ 748.149543][ T4232] usb 10-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 748.204418][T11645] loop7: detected capacity change from 0 to 1024 [ 748.229629][ T4232] usb 10-1: 1:1 : unsupported format bits 0x28b06562 [ 748.269576][ T4232] usb 10-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 748.427391][ T4232] usb 10-1: unit 3 not found! [ 748.440522][T11637] loop1: detected capacity change from 0 to 4096 [ 750.238292][ T4232] usb 10-1: USB disconnect, device number 7 [ 750.412459][T11667] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 750.750995][T10413] udevd[10413]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 751.089565][ T3518] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 753.360010][ T3518] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.428991][ T3518] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.599619][ T3518] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 753.709325][T11697] loop3: detected capacity change from 0 to 1024 [ 753.746514][ T3518] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.872772][ T3518] usb 9-1: config 0 descriptor?? [ 753.952732][ T3518] usb 9-1: can't set config #0, error -71 [ 754.148200][ T3518] usb 9-1: USB disconnect, device number 7 [ 754.919585][ T4232] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 755.061205][T11706] loop7: detected capacity change from 0 to 4096 [ 755.189892][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 755.259692][T11716] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 755.310936][ T4232] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 755.379268][ T4232] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 755.440211][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.511844][ T4232] usb 2-1: config 0 descriptor?? [ 757.517464][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.524656][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.859874][ T4232] usbhid 2-1:0.0: can't add hid device: -71 [ 757.866724][ T4232] usbhid: probe of 2-1:0.0 failed with error -71 [ 757.992287][T11733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1720'. [ 758.021303][ T4232] usb 2-1: USB disconnect, device number 8 [ 758.432082][T11744] loop7: detected capacity change from 0 to 512 [ 758.655023][T11744] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 758.783513][T11744] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 758.839602][T10290] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 758.902928][T11744] EXT4-fs error (device loop7): ext4_ext_remove_space:2944: inode #15: comm syz.7.1722: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 759.016540][T11744] EXT4-fs error (device loop7): ext4_evict_inode:295: comm syz.7.1722: couldn't truncate inode 15 (err -117) [ 759.109784][T10290] usb 10-1: Using ep0 maxpacket: 8 [ 759.279688][T10290] usb 10-1: unable to get BOS descriptor or descriptor too short [ 759.363850][T10290] usb 10-1: config 4 interface 0 has no altsetting 0 [ 759.476203][T11736] loop3: detected capacity change from 0 to 32768 [ 759.604176][T11736] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 759.615421][T11790] loop8: detected capacity change from 0 to 64 [ 759.619511][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 759.629445][T11736] BTRFS info (device loop3): setting nodatasum [ 759.629507][T11736] BTRFS info (device loop3): force zlib compression, level 3 [ 759.629530][T11736] BTRFS info (device loop3): turning on flush-on-commit [ 759.629583][T11736] BTRFS info (device loop3): max_inline at 4096 [ 759.629603][T11736] BTRFS info (device loop3): using free space tree [ 759.629617][T11736] BTRFS info (device loop3): has skinny extents [ 759.641323][T10290] usb 10-1: string descriptor 0 read error: -22 [ 759.698743][T10290] usb 10-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 759.733081][T10290] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 759.791819][T10290] usb 10-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 759.809594][ T1108] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 759.863171][T10290] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 759.884714][T10290] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 759.899107][T10290] usb 10-1: media controller created [ 759.952479][T10290] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 759.996501][T11752] usb 10-1: dvb_usb_au6610: wlen=0, aborting [ 760.005834][T11752] usb 10-1: dvb_usb_au6610: wlen=4100, aborting [ 760.059857][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.071738][ T7] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 760.083678][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 760.093264][T11736] BTRFS info (device loop3): enabling ssd optimizations [ 760.097929][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 760.120051][T10290] zl10353_read_register: readreg error (reg=127, ret==0) [ 760.170060][ T1108] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 760.183885][ T1108] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.197942][ T1108] usb 8-1: config 0 descriptor?? [ 760.250110][ T1108] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 760.269909][ T7] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 760.280383][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.289696][ T7] usb 2-1: Product: syz [ 760.294512][ T7] usb 2-1: Manufacturer: syz [ 760.299789][ T7] usb 2-1: SerialNumber: syz [ 760.331217][ T7] usb 2-1: config 0 descriptor?? [ 760.364048][T10290] usb 10-1: USB disconnect, device number 8 [ 760.381678][ T7] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected [ 760.403212][ T7] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 760.461963][ T7] garmin_gps: probe of ttyUSB0 failed with error -8 [ 760.549565][ T4426] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 760.679871][ T1108] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 760.701607][ T1108] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 760.801122][ T8504] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (8504) [ 760.813206][ T4426] usb 9-1: Using ep0 maxpacket: 16 [ 760.959638][ T4426] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.979733][ T4426] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 761.003944][ T4426] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 761.044049][ T4426] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.136726][ T4426] usb 9-1: config 0 descriptor?? [ 761.191657][ T4426] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 761.198416][ T4426] dvb-usb: bulk message failed: -22 (3/0) [ 761.262886][ T4426] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 761.309938][ T4426] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 761.317238][ T4426] usb 9-1: media controller created [ 761.366713][ T4426] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 761.397239][T11817] dvb-usb: bulk message failed: -22 (2/0) [ 761.451306][ T4426] dvb-usb: bulk message failed: -22 (6/0) [ 761.461100][ T4426] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 761.512575][ T4426] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input11 [ 761.553748][ T4426] dvb-usb: schedule remote query interval to 150 msecs. [ 761.560903][ T4426] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 761.610993][ T4426] usb 9-1: USB disconnect, device number 8 [ 761.636916][ T9643] usb 2-1: USB disconnect, device number 9 [ 761.666859][T11843] usb 8-1: USB disconnect, device number 8 [ 761.700933][ T9643] garmin_gps 2-1:0.0: device disconnected [ 761.795067][T11848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1739'. [ 761.802683][T11852] loop7: detected capacity change from 0 to 24 [ 761.822388][T11851] loop1: detected capacity change from 0 to 1024 [ 761.844432][ T4426] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 761.865763][T11854] loop9: detected capacity change from 0 to 512 [ 761.900210][T11852] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 761.965623][T11852] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 762.143102][T11854] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 762.218116][T11854] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 762.280179][T11854] EXT4-fs error (device loop9): ext4_ext_remove_space:2944: inode #15: comm syz.9.1743: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 762.370080][T11854] EXT4-fs error (device loop9): ext4_evict_inode:295: comm syz.9.1743: couldn't truncate inode 15 (err -117) [ 762.569485][ T1108] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 762.960573][ T1108] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.010197][ T1108] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.038195][ T1108] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 763.059332][ T1108] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.120849][ T4426] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 763.168922][ T1108] usb 8-1: config 0 descriptor?? [ 763.348420][ T4232] kernel read not supported for file /370/net/rt6_stats (pid: 4232 comm: kworker/0:5) [ 763.361921][T11894] sctp: [Deprecated]: syz.1.1755 (pid 11894) Use of int in max_burst socket option deprecated. [ 763.361921][T11894] Use struct sctp_assoc_value instead [ 763.392551][ T4426] usb 9-1: Using ep0 maxpacket: 16 [ 763.552950][T11897] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1755'. [ 764.249672][ T4426] usb 9-1: unable to get BOS descriptor or descriptor too short [ 764.300871][T11902] loop3: detected capacity change from 0 to 1024 [ 764.364147][T11907] loop1: detected capacity change from 0 to 256 [ 764.370904][ T4426] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 764.399602][ T4426] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 764.429231][T11907] exfat: Deprecated parameter 'namecase' [ 764.462431][ T4426] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 764.476381][T11907] exfat: Deprecated parameter 'namecase' [ 764.541699][T11911] loop3: detected capacity change from 0 to 1024 [ 764.545177][T11907] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 764.649690][ T1108] usb 8-1: string descriptor 0 read error: -71 [ 764.685596][ T1108] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 764.699651][ T4426] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 764.700303][T11911] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,nojournal_checksum,grpquota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,mb_optimize_scan=0x0000000000000001,i_version,,errors=continue. Quota mode: writeback. [ 764.709534][T11917] loop9: detected capacity change from 0 to 4096 [ 764.742425][ T4426] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.750863][ T4426] usb 9-1: Product: syz [ 764.755056][ T4426] usb 9-1: Manufacturer: syz [ 764.759739][ T4426] usb 9-1: SerialNumber: syz [ 764.765187][ T1108] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 764.817192][T11917] ntfs3: loop9: Different NTFS' sector size (4096) and media sector size (512) [ 764.856276][ T1108] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 764.880208][T11924] netlink: 'syz.1.1762': attribute type 8 has an invalid length. [ 764.889952][ T1108] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 764.906566][ T1108] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 764.950340][ T1108] usb 8-1: USB disconnect, device number 9 [ 765.089722][ T4426] usb 9-1: 1:1 : no or invalid class specific endpoint descriptor [ 765.123917][ T4426] usb 9-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 765.169751][ T4426] usb 9-1: 1:1 : unsupported format bits 0x28b06562 [ 765.187354][ T4426] usb 9-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 765.278171][T11938] IPVS: Error connecting to the multicast addr [ 765.334810][ T4426] usb 9-1: unit 3 not found! [ 765.352969][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1770'. [ 765.377514][T11941] device batadv0 entered promiscuous mode [ 765.414571][ T4426] usb 9-1: USB disconnect, device number 9 [ 765.421953][T11941] device macsec1 entered promiscuous mode [ 765.458201][T11941] device batadv0 left promiscuous mode [ 765.614025][T11954] loop3: detected capacity change from 0 to 1024 [ 765.689622][ T1108] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 765.697692][T11954] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 765.719514][ T9638] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 765.761604][ T9155] udevd[9155]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 765.931837][T11963] loop3: detected capacity change from 0 to 512 [ 765.949441][ T1108] usb 8-1: Using ep0 maxpacket: 16 [ 765.999970][ T9638] usb 10-1: Using ep0 maxpacket: 32 [ 766.026977][T11963] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nombcache,quota,,errors=continue. Quota mode: writeback. [ 766.079889][T11963] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 766.119798][ T1108] usb 8-1: unable to get BOS descriptor or descriptor too short [ 766.129646][ T9638] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 766.150476][T11929] loop1: detected capacity change from 0 to 32768 [ 766.191582][ T9638] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.218121][ T9638] usb 10-1: config 0 descriptor?? [ 766.229737][ T1108] usb 8-1: config 9 has an invalid interface number: 57 but max is 0 [ 766.264614][ T1108] usb 8-1: config 9 has no interface number 0 [ 766.272518][ T1108] usb 8-1: config 9 interface 57 has no altsetting 0 [ 766.286340][ T9638] gspca_main: sunplus-2.14.0 probing 041e:400b [ 766.345032][T11929] XFS (loop1): Mounting V5 Filesystem [ 766.349193][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1785'. [ 766.364182][T11981] device batadv0 entered promiscuous mode [ 766.409841][T11981] device macsec1 entered promiscuous mode [ 766.429476][ T26] audit: type=1326 audit(1785264140.424:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.3.1782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b845a4e99 code=0x50000 [ 766.447943][T11929] XFS (loop1): Ending clean mount [ 766.459872][T11981] device batadv0 left promiscuous mode [ 766.483314][ T26] audit: type=1326 audit(1785264140.454:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.3.1782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b845a4e99 code=0x50000 [ 766.512100][ T26] audit: type=1326 audit(1785264140.454:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.3.1782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b845a4e99 code=0x50000 [ 766.538710][ T26] audit: type=1326 audit(1785264140.454:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.3.1782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b845a4e99 code=0x50000 [ 766.564929][ T26] audit: type=1326 audit(1785264140.454:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.3.1782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b845a4e99 code=0x50000 [ 766.569789][ T1108] usb 8-1: string descriptor 0 read error: -22 [ 766.610096][ T9635] XFS (loop1): Unmounting Filesystem [ 766.641939][ T1108] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 766.658232][ T1108] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.658562][ T26] audit: type=1326 audit(1785264140.454:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.3.1782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b845a4e99 code=0x50000 [ 766.739790][ T9638] gspca_sunplus: reg_w_riv err -71 [ 766.752505][ T9638] sunplus: probe of 10-1:0.0 failed with error -71 [ 766.758309][ T26] audit: type=1326 audit(1785264140.454:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.3.1782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b845a4e99 code=0x50000 [ 766.801969][ T9638] usb 10-1: USB disconnect, device number 9 [ 766.805848][ T26] audit: type=1326 audit(1785264140.454:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.3.1782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b845a4e99 code=0x50000 [ 766.850397][ T26] audit: type=1326 audit(1785264140.454:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.3.1782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b845a4e99 code=0x50000 [ 766.934667][ T26] audit: type=1326 audit(1785264140.454:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.3.1782" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b845a4e99 code=0x50000 [ 767.386788][T12003] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1792'. [ 767.419611][ T1108] video4linux radio48: keene_cmd_set failed (-71) [ 767.427115][ T1108] radio-keene 8-1:9.57: V4L2 device registered as radio48 [ 767.465601][ T1108] usb 8-1: USB disconnect, device number 10 [ 767.779542][ T4232] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 767.892333][T12026] loop1: detected capacity change from 0 to 256 [ 767.963274][T12026] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 767.997709][T12026] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 768.048320][T12026] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 768.051578][ T4232] usb 10-1: Using ep0 maxpacket: 8 [ 768.359697][ T4232] usb 10-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 768.409820][ T4232] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.417949][ T4232] usb 10-1: Product: syz [ 768.467516][ T4232] usb 10-1: Manufacturer: syz [ 768.467538][ T4232] usb 10-1: SerialNumber: syz [ 768.470206][ T4232] usb 10-1: config 0 descriptor?? [ 768.511382][ T4232] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 768.511424][ T4232] pctv452e: pctv452e_power_ctrl: 1 [ 768.511424][ T4232] [ 768.511498][ T4232] usb 10-1: selecting invalid altsetting 3 [ 768.511513][ T4232] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 768.511513][ T4232] [ 768.511527][ T4232] dvb-usb: bulk message failed: -22 (5/0) [ 768.516584][ T4232] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 768.529734][ T4232] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 768.529804][ T4232] usb 10-1: media controller created [ 768.531759][ T4232] dvb-usb: bulk message failed: -22 (8/0) [ 768.531854][ T4232] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 768.531979][ T4232] dvb-usb: MAC address reading failed. [ 768.560429][ T4232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 768.674255][ T4232] DVB: Unable to find symbol stb0899_attach() [ 768.674271][ T4232] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 768.739290][T12053] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 768.859679][ T4232] rc_core: IR keymap rc-tt-1500 not found [ 768.859698][ T4232] Registered IR keymap rc-empty [ 768.862951][ T4232] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 768.864331][ T4232] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input12 [ 768.865972][ T4232] dvb-usb: schedule remote query interval to 100 msecs. [ 768.865994][ T4232] pctv452e: pctv452e_power_ctrl: 0 [ 768.865994][ T4232] [ 768.866006][ T4232] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 768.889798][ T4232] usb 10-1: USB disconnect, device number 10 [ 769.046121][ T4232] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 769.590441][T12074] loop9: detected capacity change from 0 to 32768 [ 769.692499][T12074] JBD2: Ignoring recovery information on journal [ 769.700348][T12074] jbd2_journal_bmap: journal block not found at offset 32 on loop9-75 [ 769.709140][T12074] JBD2: bad block at offset 32 [ 769.746442][T12074] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 769.782294][T12084] loop3: detected capacity change from 0 to 128 [ 769.815053][ T8755] ocfs2: Unmounting device (7,9) on (node local) [ 769.901279][T12084] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 769.985528][T12084] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 770.046541][T12084] ext2 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 770.079559][ T4426] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 770.280512][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1819'. [ 770.344414][T12107] device batadv0 entered promiscuous mode [ 770.368774][T12107] device macsec1 entered promiscuous mode [ 770.392671][T12107] device batadv0 left promiscuous mode [ 770.489727][ T4426] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 770.497983][ T4426] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.569246][ T4426] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.595039][ T4426] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 770.612303][ T4426] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 770.628996][T11843] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 770.637396][ T4426] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.711017][ T4426] usb 8-1: config 0 descriptor?? [ 770.759473][T10997] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 771.007418][T12139] netlink: 'syz.1.1826': attribute type 4 has an invalid length. [ 771.159711][T10997] usb 10-1: unable to get BOS descriptor or descriptor too short [ 771.213056][T10997] usb 10-1: not running at top speed; connect to a high speed hub [ 771.229180][ T4426] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 771.237699][T11843] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 771.268888][T11843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.273946][T12152] loop8: detected capacity change from 0 to 128 [ 771.299653][T10997] usb 10-1: config 5 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 771.308934][T11843] usb 4-1: Product: syz [ 771.339494][T11843] usb 4-1: Manufacturer: syz [ 771.361486][T11843] usb 4-1: SerialNumber: syz [ 771.368409][ T4426] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 771.385928][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1831'. [ 771.386397][T11843] usb 4-1: config 0 descriptor?? [ 771.411300][T12152] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 771.435974][T12157] device batadv0 entered promiscuous mode [ 771.446080][ T4426] usb 8-1: USB disconnect, device number 11 [ 771.450183][T12157] device macsec1 entered promiscuous mode [ 771.479977][T10997] usb 10-1: New USB device found, idVendor=15c2, idProduct=003c, bcdDevice=8a.3e [ 771.495328][T12152] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 771.511547][T11843] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 771.512373][T10997] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.523237][T12152] ext2 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 771.546192][T12157] device batadv0 left promiscuous mode [ 771.585192][T12159] fido_id[12159]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 771.588534][T10997] usb 10-1: Product: syz [ 771.626812][T10997] usb 10-1: Manufacturer: syz [ 771.633475][T10997] usb 10-1: SerialNumber: syz [ 771.778391][T12168] loop8: detected capacity change from 0 to 256 [ 771.806844][T12168] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 771.848970][T12168] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 771.962476][T10997] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 771.998103][T12176] device ip6gre1 entered promiscuous mode [ 772.005513][T10997] imon 10-1:5.0: unable to initialize intf0, err -19 [ 772.037786][T10997] imon:imon_probe: failed to initialize context! [ 772.069877][T10997] imon 10-1:5.0: unable to register, err -19 [ 772.090184][T10997] usb 10-1: USB disconnect, device number 11 [ 772.140014][T11843] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 772.147806][T11843] sq905c: probe of 4-1:0.0 failed with error -71 [ 772.189004][T11843] usb 4-1: USB disconnect, device number 10 [ 772.277983][T12190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1840'. [ 773.227957][T12205] loop3: detected capacity change from 0 to 16 [ 773.304665][T12205] erofs: (device loop3): mounted with root inode @ nid 36. [ 773.308260][T12185] loop7: detected capacity change from 0 to 32768 [ 773.363970][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1844'. [ 773.411701][T12185] ERROR: (device loop7): dbAlloc: the hint is outside the map [ 773.411701][T12185] [ 773.445413][T12209] device batadv0 entered promiscuous mode [ 773.452862][T12185] ERROR: (device loop7): remounting filesystem as read-only [ 773.469629][ T4426] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 773.475715][T12185] read_mapping_page failed! [ 773.481023][T12209] device macsec1 entered promiscuous mode [ 773.497635][T12185] ERROR: (device loop7): txCommit: [ 773.497635][T12185] [ 773.527461][T12209] device batadv0 left promiscuous mode [ 773.614297][T12218] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 773.629583][T10997] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 773.719508][ T4426] usb 10-1: Using ep0 maxpacket: 32 [ 773.879785][ T4426] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.889535][T10997] usb 2-1: Using ep0 maxpacket: 32 [ 773.898041][ T4426] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.942441][ T4426] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 773.969575][ T9638] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 774.004051][T12237] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1852'. [ 774.008813][ T4426] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.019530][T10997] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 774.042348][ T4426] usb 10-1: config 0 descriptor?? [ 774.214671][T10997] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 774.234425][T10997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.262794][T10997] usb 2-1: Product: syz [ 774.268791][T10997] usb 2-1: Manufacturer: syz [ 774.283917][T10997] usb 2-1: SerialNumber: syz [ 774.319532][ T1108] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 774.333452][T10997] usb 2-1: config 0 descriptor?? [ 774.457366][T10997] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 774.515254][T10997] dvb-usb: bulk message failed: -22 (2/0) [ 774.651321][T10997] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 774.695769][T12210] cxusb: i2c wr: len=79 is too big! [ 774.695769][T12210] [ 774.719960][ T1108] usb 9-1: config 64 has an invalid interface number: 68 but max is 0 [ 774.762907][ T1108] usb 9-1: config 64 has no interface number 0 [ 774.798572][ T1108] usb 9-1: config 64 interface 68 has no altsetting 0 [ 774.813182][T10997] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 774.826754][T10997] usb 2-1: media controller created [ 774.863272][T10997] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 774.879578][ T9638] usb 4-1: Using ep0 maxpacket: 32 [ 774.891965][T10997] usb 2-1: selecting invalid altsetting 7 [ 774.898048][T10997] cxusb: set interface failed [ 774.902857][T10997] dvb-usb: bulk message failed: -22 (1/0) [ 774.989700][ T1108] usb 9-1: New USB device found, idVendor=0e41, idProduct=5058, bcdDevice=9d.b5 [ 775.024589][ T1108] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.046873][T10997] DVB: Unable to find symbol lgdt330x_attach() [ 775.058559][T10997] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 775.067207][ T1108] usb 9-1: Product: syz [ 775.077329][ T1108] usb 9-1: Manufacturer: syz [ 775.087697][ T1108] usb 9-1: SerialNumber: syz [ 775.181050][ T4426] ft260 0003:0403:6030.0005: collection stack underflow [ 775.188851][ T9638] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 775.197505][ T9638] usb 4-1: config 0 has no interface number 0 [ 775.203750][ T4426] ft260 0003:0403:6030.0005: item 0 1 0 12 parsing failed [ 775.210975][ T9638] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.222229][ T4426] ft260 0003:0403:6030.0005: failed to parse HID [ 775.228674][ T4426] ft260: probe of 0003:0403:6030.0005 failed with error -22 [ 775.236078][ T9638] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.252729][ T9638] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 775.259653][T10997] rc_core: IR keymap rc-dvico-portable not found [ 775.268523][ T4426] usb 10-1: USB disconnect, device number 12 [ 775.282283][T10997] Registered IR keymap rc-empty [ 775.309648][ T9638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.324525][T10997] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 775.338984][ T9638] usb 4-1: config 0 descriptor?? [ 775.381022][T10997] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input13 [ 775.425808][ T1108] snd_usb_podhd 9-1:64.68: Line 6 POD HD400 found [ 775.440905][ T1108] usb 9-1: selecting invalid altsetting 5 [ 775.452600][T10997] dvb-usb: schedule remote query interval to 100 msecs. [ 775.464055][ T1108] snd_usb_podhd 9-1:64.68: set_interface failed [ 775.467972][T12273] loop1: detected capacity change from 0 to 4096 [ 775.475809][T10997] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 775.489127][ T1108] snd_usb_podhd 9-1:64.68: Line 6 POD HD400 now disconnected [ 775.511855][T12273] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 775.530536][ T1108] snd_usb_podhd: probe of 9-1:64.68 failed with error -22 [ 775.542271][T12273] NILFS (loop1): mounting unchecked fs [ 775.567789][T10997] usb 2-1: USB disconnect, device number 10 [ 775.573902][T12273] NILFS (loop1): recovery required for readonly filesystem [ 775.607215][ T1108] usb 9-1: USB disconnect, device number 10 [ 775.609438][T12273] NILFS (loop1): write access will be enabled during recovery [ 775.616919][T10413] udevd[10413]: incorrect nilfs2 checksum on /dev/loop1 [ 775.703572][T10997] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 775.720941][T12273] NILFS (loop1): norecovery option specified, skipping roll-forward recovery [ 775.766425][ T8504] udevd[8504]: incorrect nilfs2 checksum on /dev/loop1 [ 776.017774][T12289] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1860'. [ 776.069515][ T9638] uclogic 0003:28BD:0094.0006: failed retrieving string descriptor #100: -71 [ 776.076741][T12289] device batadv0 entered promiscuous mode [ 776.084325][ T9638] uclogic 0003:28BD:0094.0006: failed retrieving pen parameters: -71 [ 776.099872][T12289] device macsec1 entered promiscuous mode [ 776.112637][ T9638] uclogic 0003:28BD:0094.0006: pen probing failed: -71 [ 776.120443][T12289] device batadv0 left promiscuous mode [ 776.137537][T12291] loop7: detected capacity change from 0 to 4096 [ 776.146828][ T9638] uclogic 0003:28BD:0094.0006: failed probing parameters: -71 [ 776.164412][ T9638] uclogic: probe of 0003:28BD:0094.0006 failed with error -71 [ 776.189478][ T9638] usb 4-1: USB disconnect, device number 11 [ 776.297378][T12291] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 776.348770][T12291] ntfs3: loop7: Failed to load $Extend. [ 776.354681][ T9046] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 776.658145][T12293] loop1: detected capacity change from 0 to 32768 [ 776.691218][T12293] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1858 (12293) [ 776.783584][ T9046] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 776.855805][ T9046] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 776.986920][ T9046] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 777.339611][ T9638] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 777.379834][ T9046] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 777.435239][ T9046] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.437009][T12317] tipc: Started in network mode [ 777.452692][T12317] tipc: Node identity -, cluster identity 4711 [ 777.639648][ T9046] usb 10-1: Product: syz [ 777.643944][ T9046] usb 10-1: Manufacturer: syz [ 777.649252][ T9046] usb 10-1: SerialNumber: syz [ 777.656796][T12293] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 777.700555][T12293] BTRFS info (device loop1): using free space tree [ 777.707295][T12293] BTRFS info (device loop1): has skinny extents [ 778.283622][ T9046] cdc_mbim 10-1:1.0: skipping garbage [ 778.289080][ T9046] usb 10-1: selecting invalid altsetting 1 [ 778.390723][ T9046] cdc_mbim 10-1:1.0: bind() failure [ 778.425733][ T9046] usb 10-1: USB disconnect, device number 13 [ 778.539690][ T9638] usb 4-1: unable to get BOS descriptor or descriptor too short [ 778.597456][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1873'. [ 778.630092][ T9638] usb 4-1: not running at top speed; connect to a high speed hub [ 778.656691][T12355] device batadv0 entered promiscuous mode [ 778.663542][T12293] BTRFS info (device loop1): enabling ssd optimizations [ 778.677196][T12355] device macsec1 entered promiscuous mode [ 778.693564][ T26] kauditd_printk_skb: 4442 callbacks suppressed [ 778.693640][ T26] audit: type=1800 audit(1785264152.694:4482): pid=12293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1858" name="file3" dev="loop1" ino=261 res=0 errno=0 [ 778.721544][T12355] device batadv0 left promiscuous mode [ 778.750830][ T9638] usb 4-1: config 5 has an invalid interface number: 203 but max is 0 [ 778.775898][ T9638] usb 4-1: config 5 has no interface number 0 [ 778.788989][ T9638] usb 4-1: config 5 interface 203 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 10 [ 778.800922][ T9638] usb 4-1: config 5 interface 203 altsetting 0 endpoint 0xC has invalid maxpacket 1847, setting to 64 [ 778.989850][ T9638] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=7d.53 [ 779.002431][ T9638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.041896][ T9638] usb 4-1: Product: syz [ 779.050628][ T9638] usb 4-1: Manufacturer: syz [ 779.073309][ T9638] usb 4-1: SerialNumber: syz [ 779.129756][T12311] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 779.365492][T12311] udc-core: couldn't find an available UDC or it's busy [ 779.393073][T12311] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 779.408372][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1888'. [ 779.450084][T12311] udc-core: couldn't find an available UDC or it's busy [ 779.455236][T12390] device batadv0 entered promiscuous mode [ 779.486176][T12311] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 779.513958][T12390] device macsec1 entered promiscuous mode [ 779.555030][T12396] loop8: detected capacity change from 0 to 64 [ 779.580673][ T9638] kobil_sct 4-1:5.203: KOBIL USB smart card terminal converter detected [ 779.626469][ T9638] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 779.766737][ T9638] usb 4-1: USB disconnect, device number 12 [ 780.187059][T12390] device batadv0 left promiscuous mode [ 780.261216][ T9638] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 780.296452][ T9638] kobil_sct 4-1:5.203: device disconnected [ 780.591067][T12421] loop3: detected capacity change from 0 to 128 [ 780.594138][T12419] loop9: detected capacity change from 0 to 256 [ 780.657943][T12421] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 780.663609][T12418] loop7: detected capacity change from 0 to 4096 [ 780.685962][T12421] System zones: 1-3, 19-19, 35-36 [ 780.776218][T12418] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 780.794450][T12421] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 780.815529][T12419] FAT-fs (loop9): Directory bread(block 64) failed [ 780.845209][T12419] FAT-fs (loop9): Directory bread(block 65) failed [ 780.902023][T12421] ext4 filesystem being mounted at /167/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 780.936360][T12419] FAT-fs (loop9): Directory bread(block 66) failed [ 780.987368][T12419] FAT-fs (loop9): Directory bread(block 67) failed [ 780.992638][ T26] audit: type=1800 audit(1785264154.984:4483): pid=12418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1883" name="file1" dev="loop7" ino=30 res=0 errno=0 [ 780.994282][T12419] FAT-fs (loop9): Directory bread(block 68) failed [ 781.083757][T12419] FAT-fs (loop9): Directory bread(block 69) failed [ 781.098127][T12419] FAT-fs (loop9): Directory bread(block 70) failed [ 781.123848][T12419] FAT-fs (loop9): Directory bread(block 71) failed [ 781.131942][T12419] FAT-fs (loop9): Directory bread(block 72) failed [ 781.138780][T12419] FAT-fs (loop9): Directory bread(block 73) failed [ 781.212957][T12437] loop3: detected capacity change from 0 to 256 [ 781.327886][T12437] FAT-fs (loop3): Directory bread(block 64) failed [ 781.371551][T12437] FAT-fs (loop3): Directory bread(block 65) failed [ 781.378227][T12437] FAT-fs (loop3): Directory bread(block 66) failed [ 781.459623][T12437] FAT-fs (loop3): Directory bread(block 67) failed [ 781.470661][T12437] FAT-fs (loop3): Directory bread(block 68) failed [ 781.477241][T12437] FAT-fs (loop3): Directory bread(block 69) failed [ 781.515426][T12437] FAT-fs (loop3): Directory bread(block 70) failed [ 781.531120][T12437] FAT-fs (loop3): Directory bread(block 71) failed [ 781.557660][T12437] FAT-fs (loop3): Directory bread(block 72) failed [ 781.579898][T12437] FAT-fs (loop3): Directory bread(block 73) failed [ 782.031833][T12437] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 782.468005][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1895'. [ 782.556271][T12457] device batadv0 entered promiscuous mode [ 782.600741][T12457] device macsec1 entered promiscuous mode [ 782.628341][T12457] device batadv0 left promiscuous mode [ 784.141123][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1913'. [ 784.179651][ T23] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 784.189152][T12513] device batadv0 entered promiscuous mode [ 784.212480][T12513] device macsec1 entered promiscuous mode [ 784.242452][T12513] device batadv0 left promiscuous mode [ 784.459549][ T23] usb 9-1: Using ep0 maxpacket: 8 [ 784.660994][T12538] loop7: detected capacity change from 0 to 1024 [ 784.789805][T12381] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 784.832934][T12538] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 785.121648][T12381] usb 10-1: Using ep0 maxpacket: 32 [ 785.306065][ T23] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.317140][ T23] usb 9-1: config 0 interface 0 has no altsetting 0 [ 785.390589][ T23] usb 9-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 785.400111][ T23] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.413327][ T23] usb 9-1: config 0 descriptor?? [ 785.430160][T12381] usb 10-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 785.469525][T12381] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.544807][T12381] usb 10-1: Product: syz [ 785.571315][T12381] usb 10-1: Manufacturer: syz [ 785.590581][T12381] usb 10-1: SerialNumber: syz [ 785.636816][T12381] usb 10-1: config 0 descriptor?? [ 785.643088][T12557] loop1: detected capacity change from 0 to 1024 [ 785.706365][T12381] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 785.753973][T12381] dvb-usb: bulk message failed: -22 (4/0) [ 785.789474][T12381] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 785.829604][T12381] dvb-usb: bulk message failed: -22 (5/0) [ 785.839942][T12381] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 785.880987][T12381] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 785.882291][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 785.903613][ T7597] hfsplus: b-tree write err: -5, ino 8 [ 785.915175][T12533] dvb-usb: bulk message failed: -22 (7/0) [ 785.924196][T12381] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 785.941387][T12533] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 785.954788][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 785.976285][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 785.994222][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.013354][T12381] usb 10-1: media controller created [ 786.014487][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.025515][T12533] ttusb2: i2c transfer failed. [ 786.057439][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.068941][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.074475][T12381] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 786.100781][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.125527][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.134063][T12381] usb 10-1: selecting invalid altsetting 3 [ 786.146338][T12381] ttusb2: set interface to alts=3 failed [ 786.157742][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.189958][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.221640][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.227811][T12381] DVB: Unable to find symbol tda10086_attach() [ 786.247602][T12381] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 786.252844][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.289696][T12381] dvb-usb: bulk message failed: -22 (4/0) [ 786.295462][T12381] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 786.297415][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.335259][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.343465][T12381] dvb-usb: bulk message failed: -22 (5/0) [ 786.365269][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.370378][T12381] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 786.387395][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.403526][T12381] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 786.411245][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.427519][T12381] usb 10-1: USB disconnect, device number 14 [ 786.460309][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.489755][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.503366][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.504985][T12381] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 786.531860][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.571107][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.578522][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.609181][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.626806][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.635028][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.643113][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.651359][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.674252][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.693750][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.713686][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.727856][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.743628][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.757490][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.770870][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.778444][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.796063][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.806726][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.821738][ T23] pantherlord 0003:0810:0001.0007: unknown main item tag 0x0 [ 786.845782][ T23] pantherlord 0003:0810:0001.0007: hidraw0: USB HID v7f.ff Device [HID 0810:0001] on usb-dummy_hcd.8-1/input0 [ 786.866055][ T23] pantherlord 0003:0810:0001.0007: no output reports found [ 786.894072][ T23] usb 9-1: USB disconnect, device number 11 [ 786.936358][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1931'. [ 786.963737][T12577] device batadv0 entered promiscuous mode [ 787.000788][T12577] device macsec1 entered promiscuous mode [ 787.015127][T12577] device batadv0 left promiscuous mode [ 787.058920][T12596] fido_id[12596]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 787.177637][T12381] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 787.419914][T12381] usb 10-1: Using ep0 maxpacket: 16 [ 787.540108][T12381] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.610280][T12381] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.750312][T12381] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 788.169518][T12381] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 788.181811][T12381] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.219764][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 788.277362][T12381] usb 10-1: config 0 descriptor?? [ 788.458150][T12614] loop7: detected capacity change from 0 to 64 [ 788.499914][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 788.619743][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 788.642885][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 788.714162][T12622] loop8: detected capacity change from 0 to 512 [ 788.751722][T12381] kone 0003:1E7D:2CED.0008: unknown main item tag 0x3 [ 788.758550][T12381] kone 0003:1E7D:2CED.0008: unknown main item tag 0x0 [ 788.800169][T12381] kone 0003:1E7D:2CED.0008: unknown main item tag 0x0 [ 788.819280][T12381] kone 0003:1E7D:2CED.0008: unknown main item tag 0x0 [ 788.826882][T12381] kone 0003:1E7D:2CED.0008: unknown main item tag 0x0 [ 788.835312][T12381] kone 0003:1E7D:2CED.0008: unknown main item tag 0x0 [ 788.842426][T12381] kone 0003:1E7D:2CED.0008: unknown main item tag 0x0 [ 788.850031][ T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 788.866015][T12381] kone 0003:1E7D:2CED.0008: hidraw0: USB HID v0.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.9-1/input0 [ 788.893248][T12622] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 788.919308][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.923280][T12622] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 789.013468][ T4233] usb 10-1: USB disconnect, device number 15 [ 789.119723][ T23] usb 2-1: Product: syz [ 789.124514][ T23] usb 2-1: Manufacturer: syz [ 789.129144][ T23] usb 2-1: SerialNumber: syz [ 789.839775][ T23] usb 2-1: 0:2 : does not exist [ 789.872083][T12649] loop8: detected capacity change from 0 to 164 [ 789.912803][ T23] usb 2-1: USB disconnect, device number 11 [ 789.945130][T12649] ISOFS: unable to read i-node block [ 789.962827][T12639] fido_id[12639]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 789.992959][T12649] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 790.154863][T12656] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1956'. [ 790.199642][T12656] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1956'. [ 790.233759][T12664] loop1: detected capacity change from 0 to 512 [ 790.250839][T12662] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1956'. [ 790.270015][ T8504] udevd[8504]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 790.288932][T12656] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1956'. [ 790.341295][T12664] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 790.358527][T12668] netlink: 'syz.9.1960': attribute type 4 has an invalid length. [ 790.423213][T12664] EXT4-fs warning (device loop1): ext4_xattr_inode_get:506: inode #11: comm syz.1.1959: EA inode hash validation failed [ 790.481018][T12664] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.1959: corrupted inode contents [ 790.498191][T12664] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 790.520082][T12664] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.1959: corrupted inode contents [ 790.534354][T12670] lo speed is unknown, defaulting to 1000 [ 790.585544][T12664] EXT4-fs error (device loop1): ext4_evict_inode:332: inode #15: comm syz.1.1959: mark_inode_dirty error [ 790.599958][T12670] lo speed is unknown, defaulting to 1000 [ 790.643514][T12670] lo speed is unknown, defaulting to 1000 [ 790.660931][T12664] EXT4-fs error (device loop1): ext4_free_inode:355: comm syz.1.1959: bit already cleared for inode 11 [ 790.711804][T12664] EXT4-fs (loop1): 1 orphan inode deleted [ 790.730660][T12664] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,jqfmt=vfsold,grpid,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x000000000000003c,nodelalloc,,errors=continue. Quota mode: none. [ 790.753432][ C1] vkms_vblank_simulate: vblank timer overrun [ 790.761084][T12680] loop3: detected capacity change from 0 to 2048 [ 790.845660][T12680] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 790.876381][T12664] EXT4-fs (loop1): shut down requested (1) [ 791.151860][T12670] infiniband syz1: set down [ 791.188314][T11845] lo speed is unknown, defaulting to 1000 [ 791.207091][T12670] infiniband syz1: added lo [ 791.443193][T12670] infiniband syz1: Couldn't open port 1 [ 792.043017][T12670] RDS/IB: syz1: added [ 792.048150][T12670] smc: adding ib device syz1 with port count 1 [ 792.072657][T12670] smc: ib device syz1 port 1 has pnetid [ 792.084585][T11845] lo speed is unknown, defaulting to 1000 [ 792.142767][T12670] lo speed is unknown, defaulting to 1000 [ 792.234194][T12679] loop8: detected capacity change from 0 to 32768 [ 792.349634][ T13] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 792.447945][T12670] lo speed is unknown, defaulting to 1000 [ 792.599520][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 792.719752][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.729511][ T9046] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 792.749775][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.777106][T12670] lo speed is unknown, defaulting to 1000 [ 792.779200][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 792.829242][ T13] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 792.869450][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.910643][ T13] usb 2-1: config 0 descriptor?? [ 793.025829][T12717] loop8: detected capacity change from 0 to 32768 [ 793.109653][ T9046] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 793.118331][ T9046] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 793.143215][T12670] lo speed is unknown, defaulting to 1000 [ 793.164530][ T9046] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 793.218595][ T9046] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.389670][ T9046] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 793.391825][ T13] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 793.398758][ T9046] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 793.398781][ T9046] usb 4-1: Product: syz [ 793.398794][ T9046] usb 4-1: Manufacturer: syz [ 793.450957][ T9046] cdc_wdm 4-1:1.0: skipping garbage [ 793.456836][ T9046] cdc_wdm 4-1:1.0: skipping garbage [ 793.512099][ T9046] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 793.518858][ T9046] cdc_wdm 4-1:1.0: Unknown control protocol [ 793.574673][T12670] lo speed is unknown, defaulting to 1000 [ 793.584291][ T13] microsoft 0003:045E:07DA.0009: report is too long [ 793.596309][ T13] microsoft 0003:045E:07DA.0009: item 0 4 0 8 parsing failed [ 793.604645][ T13] microsoft 0003:045E:07DA.0009: parse failed [ 793.620161][ T13] microsoft: probe of 0003:045E:07DA.0009 failed with error -22 [ 794.393470][T11845] usb 4-1: USB disconnect, device number 13 [ 794.404970][ T13] usb 2-1: USB disconnect, device number 12 [ 794.418285][T12759] loop8: detected capacity change from 0 to 64 [ 794.483251][T12759] MINIX-fs: mounting file system with errors, running fsck is recommended [ 794.742966][T12670] lo speed is unknown, defaulting to 1000 [ 795.216490][T12670] lo speed is unknown, defaulting to 1000 [ 795.749574][ T23] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 795.896507][T12670] lo speed is unknown, defaulting to 1000 [ 795.919913][T12806] loop7: detected capacity change from 0 to 4096 [ 795.929714][T12809] loop8: detected capacity change from 0 to 1024 [ 796.016566][T12814] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 796.059702][T12809] EXT4-fs (loop8): Ignoring removed bh option [ 796.152422][T12809] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobarrier,init_itable,jqfmt=vfsv1,nolazytime,grpjquota=,lazytime,errors=remount-ro,stripe=0x000000000000000b,bh,init_itable,. Quota mode: none. [ 796.209661][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 796.370694][T12670] lo speed is unknown, defaulting to 1000 [ 796.471139][ T23] usb 4-1: New USB device found, idVendor=0499, idProduct=7010, bcdDevice= 0.40 [ 796.508607][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.515072][T12834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2003'. [ 796.528780][ T4232] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 796.537805][ T23] usb 4-1: Product: syz [ 796.559107][ T23] usb 4-1: Manufacturer: syz [ 796.560685][T12834] device batadv0 entered promiscuous mode [ 796.572074][ T8161] EXT4-fs error (device loop8): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /222/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 796.589448][ T23] usb 4-1: SerialNumber: syz [ 796.608428][T12834] device macsec1 entered promiscuous mode [ 796.620623][ T8161] EXT4-fs (loop8): Remounting filesystem read-only [ 796.629932][T12834] device batadv0 left promiscuous mode [ 796.649156][ T8161] EXT4-fs error (device loop8): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /222/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 796.697275][ T8161] EXT4-fs (loop8): Remounting filesystem read-only [ 796.729302][ T8161] EXT4-fs error (device loop8): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 796.799533][ T4232] usb 8-1: Using ep0 maxpacket: 16 [ 796.842817][ T8161] EXT4-fs (loop8): Remounting filesystem read-only [ 796.869486][ T8161] EXT4-fs warning (device loop8): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 796.914849][ T8161] EXT4-fs error (device loop8): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /222/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 796.969616][ T4232] usb 8-1: unable to get BOS descriptor or descriptor too short [ 796.988477][ T8161] EXT4-fs (loop8): Remounting filesystem read-only [ 797.029110][ T8161] EXT4-fs error (device loop8): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /222/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 797.042944][ T23] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 797.069686][ T4232] usb 8-1: config 127 has an invalid interface number: 124 but max is 0 [ 797.088426][ T4232] usb 8-1: config 127 has no interface number 0 [ 797.096705][ T8528] udevd[8528]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 797.098627][ T4232] usb 8-1: config 127 interface 124 has no altsetting 0 [ 797.125049][ T23] usb 4-1: USB disconnect, device number 14 [ 797.141149][ T8161] EXT4-fs (loop8): Remounting filesystem read-only [ 797.147878][ T8161] EXT4-fs error (device loop8): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 797.273900][ T8161] EXT4-fs (loop8): Remounting filesystem read-only [ 797.306529][ T8161] EXT4-fs warning (device loop8): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 797.339734][ T4232] usb 8-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 797.350438][ T8161] EXT4-fs error (device loop8): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /222/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 797.359265][ T4232] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.414174][ T4232] usb 8-1: Product: syz [ 797.418382][ T4232] usb 8-1: Manufacturer: syz [ 797.429483][ T4232] usb 8-1: SerialNumber: syz [ 797.460336][ T8161] EXT4-fs (loop8): Remounting filesystem read-only [ 797.469110][ T8161] EXT4-fs error (device loop8): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /222/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 797.594487][ T8161] EXT4-fs (loop8): Remounting filesystem read-only [ 797.628688][ T8161] EXT4-fs error (device loop8): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 797.707139][ T8161] EXT4-fs (loop8): Remounting filesystem read-only [ 797.715325][ T8161] EXT4-fs warning (device loop8): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 797.730032][ T8161] EXT4-fs error (device loop8): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /222/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 797.769630][ T8161] EXT4-fs (loop8): Remounting filesystem read-only [ 797.797778][ T8161] EXT4-fs warning (device loop8): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 797.889582][ T8161] EXT4-fs warning (device loop8): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 797.969131][T12873] loop3: detected capacity change from 0 to 4096 [ 797.975626][ T8161] EXT4-fs warning (device loop8): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 798.011326][T12855] loop9: detected capacity change from 0 to 32768 [ 798.021644][ T8161] EXT4-fs warning (device loop8): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 798.150470][ T8161] EXT4-fs warning (device loop8): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 798.167993][T12855] XFS (loop9): Mounting V5 Filesystem [ 798.170276][ T8161] EXT4-fs warning (device loop8): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 798.216153][T12873] ntfs3: loop3: MFT: r=1b, expect seq=1 instead of 0! [ 798.234823][ T8161] EXT4-fs warning (device loop8): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 798.380576][T12855] XFS (loop9): Ending clean mount [ 798.417078][ T4232] usb 8-1: reset high-speed USB device number 12 using dummy_hcd [ 798.425831][T12896] loop1: detected capacity change from 0 to 256 [ 798.436707][T12855] XFS (loop9): Quotacheck needed: Please wait. [ 798.520189][T12896] FAT-fs (loop1): Directory bread(block 64) failed [ 798.542072][T12896] FAT-fs (loop1): Directory bread(block 65) failed [ 798.596298][T12896] FAT-fs (loop1): Directory bread(block 66) failed [ 798.614250][T12896] FAT-fs (loop1): Directory bread(block 67) failed [ 798.614295][T12855] XFS (loop9): Quotacheck: Done. [ 798.684260][T12896] FAT-fs (loop1): Directory bread(block 68) failed [ 798.711348][T12896] FAT-fs (loop1): Directory bread(block 69) failed [ 798.718450][T12896] FAT-fs (loop1): Directory bread(block 70) failed [ 798.733709][T12896] FAT-fs (loop1): Directory bread(block 71) failed [ 798.764116][T12896] FAT-fs (loop1): Directory bread(block 72) failed [ 798.771541][T12896] FAT-fs (loop1): Directory bread(block 73) failed [ 798.825250][ T4232] usb 8-1: unable to get BOS descriptor or descriptor too short [ 798.839439][ T26] audit: type=1800 audit(1785264172.824:4484): pid=12855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2009" name="bus" dev="loop9" ino=9291 res=0 errno=0 [ 798.969595][ T4232] usb 8-1: device firmware changed [ 798.982099][ T8755] XFS (loop9): Unmounting Filesystem [ 799.008908][ T4232] usb 8-1: USB disconnect, device number 12 [ 799.256844][ T155] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.332345][ T155] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.458723][T11845] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 799.469274][ T155] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.535431][ T155] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.729564][T11845] usb 2-1: Using ep0 maxpacket: 16 [ 799.866333][ T155] tipc: Left network mode [ 799.884379][T11845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 799.919938][T11845] usb 2-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 799.945160][T11845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.025484][T11845] usb 2-1: config 0 descriptor?? [ 800.035678][T12940] lo speed is unknown, defaulting to 1000 [ 800.620555][T11845] hid (null): invalid report_size 28520 [ 800.784858][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 800.797330][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 800.804851][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 800.811549][T12963] loop3: detected capacity change from 0 to 256 [ 800.812418][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 800.826350][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 800.833863][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 800.841643][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 800.849049][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 800.923360][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 800.942567][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 800.964637][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 800.989293][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.000850][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.008422][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.016638][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.025275][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.033233][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.041125][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.049699][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.057294][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.065836][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.073671][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.082600][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.090747][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.099081][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.107837][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.115723][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.123805][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.132464][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.140534][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.148471][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.156315][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.165037][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.172783][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.181584][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.190240][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.200354][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.207834][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.217184][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.225796][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.234200][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.242339][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.250949][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.258763][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.286376][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.300366][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.308308][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.316786][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.325257][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.333144][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.341451][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.348869][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.387440][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.400576][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.409193][T11845] hid-generic 0003:05AC:027D.000A: unknown main item tag 0x0 [ 801.420344][T11845] hid-generic 0003:05AC:027D.000A: invalid report_size 28520 [ 801.428304][T11845] hid-generic 0003:05AC:027D.000A: item 0 2 1 7 parsing failed [ 801.437791][T11845] hid-generic: probe of 0003:05AC:027D.000A failed with error -22 [ 801.466905][T11845] usb 2-1: USB disconnect, device number 13 [ 801.525477][T12968] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2017'. [ 801.568541][T12968] device batadv0 entered promiscuous mode [ 801.589515][T12968] device macsec1 entered promiscuous mode [ 801.600665][T12968] device batadv0 left promiscuous mode [ 801.758243][T12940] chnl_net:caif_netlink_parms(): no params data found [ 801.798572][T12979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2029'. [ 801.989586][ T9638] Bluetooth: hci0: command 0x0409 tx timeout [ 802.143624][ T155] device hsr_slave_0 left promiscuous mode [ 802.165411][ T155] device hsr_slave_1 left promiscuous mode [ 802.172913][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 802.180804][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.189245][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 802.197157][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.209564][ T155] device bridge_slave_1 left promiscuous mode [ 802.220716][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.233674][ T155] device bridge_slave_0 left promiscuous mode [ 802.240380][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.253879][ T155] device veth1_macvtap left promiscuous mode [ 802.261650][ T155] device veth0_macvtap left promiscuous mode [ 802.267871][ T155] device veth1_vlan left promiscuous mode [ 802.884821][ T155] team0 (unregistering): Port device team_slave_1 removed [ 802.918036][ T155] team0 (unregistering): Port device team_slave_0 removed [ 802.962804][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.003648][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.219685][T13013] loop7: detected capacity change from 0 to 32768 [ 803.230373][ T155] bond0 (unregistering): Released all slaves [ 803.265329][T13013] JBD2: Ignoring recovery information on journal [ 803.310457][T13013] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 803.583279][T12940] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.604456][T12940] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.651180][T12940] device bridge_slave_0 entered promiscuous mode [ 803.686064][ T26] audit: type=1800 audit(1785264177.694:4485): pid=13013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2037" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 803.717190][T12940] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.757293][T12940] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.799694][ T7675] ocfs2: Unmounting device (7,7) on (node local) [ 803.807496][T12940] device bridge_slave_1 entered promiscuous mode [ 803.923319][T12940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.958331][T12940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.110941][T12940] team0: Port device team_slave_0 added [ 804.126438][ T9638] Bluetooth: hci0: command 0x041b tx timeout [ 804.151288][T12940] team0: Port device team_slave_1 added [ 804.224674][T12940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.252216][T12940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.372545][T12940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.562566][T13039] loop3: detected capacity change from 0 to 32768 [ 804.675635][T12940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.691487][T13039] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 804.691487][T13039] [ 804.729562][T12940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.753163][T13039] ERROR: (device loop3): remounting filesystem as read-only [ 804.797039][T13039] read_mapping_page failed! [ 804.818246][T13039] ERROR: (device loop3): txCommit: [ 804.818246][T13039] [ 804.831691][T12940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.019115][T13061] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2048'. [ 805.042899][T12940] device hsr_slave_0 entered promiscuous mode [ 805.104879][T12940] device hsr_slave_1 entered promiscuous mode [ 805.120333][T12940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 805.127944][T12940] Cannot create hsr debugfs directory [ 805.421841][T13068] loop3: detected capacity change from 0 to 64 [ 805.508318][T13068] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=1b0000ce) [ 805.522054][T13057] loop7: detected capacity change from 0 to 32768 [ 805.611887][T12940] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.795382][T12940] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.046688][T12940] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.149638][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 806.247980][T12940] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.559641][T12940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 806.599275][T12940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 806.650265][T12940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 806.684815][T12940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 806.741669][T13068] loop3: detected capacity change from 0 to 32768 [ 806.808524][T13068] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2047 (13068) [ 806.898808][T13068] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 806.948321][T13068] BTRFS info (device loop3): using free space tree [ 806.989837][T13068] BTRFS info (device loop3): has skinny extents [ 807.031753][T12940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.134756][T13090] loop7: detected capacity change from 0 to 32768 [ 807.137615][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 807.153232][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 807.210723][T12940] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.249248][T13090] JBD2: Ignoring recovery information on journal [ 807.270050][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 807.318950][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 807.371098][T13090] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 807.380419][T13068] BTRFS info (device loop3): enabling ssd optimizations [ 807.426016][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.433190][ T7597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.518790][ T7675] ocfs2: Unmounting device (7,7) on (node local) [ 807.550649][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 807.562093][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 807.610716][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 807.677005][ T7597] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.684177][ T7597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.753140][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 807.822601][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 808.229612][ T4426] Bluetooth: hci0: command 0x0419 tx timeout [ 808.456590][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 808.543967][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 808.600324][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 808.640335][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 808.674457][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 808.702223][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 808.716002][T12940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 808.727489][T13133] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 808.739265][T12940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 808.748492][T13133] netdevsim netdevsim1 netdevsim0: Failed to get key data for SA table [ 808.765824][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 808.791478][T13154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2061'. [ 808.792868][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 808.812431][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 808.971387][ T4426] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 809.209459][T13174] binder: 13173:13174 ioctl c0306201 0 returned -14 [ 809.364645][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 809.372747][ T4426] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.393056][ T4426] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.414432][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 809.464505][ T4426] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 809.479966][T12940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.527589][ T4426] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.580369][ T4426] usb 8-1: config 0 descriptor?? [ 809.591905][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 809.611602][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 809.694691][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 809.761848][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 809.796741][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 809.826837][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 809.858425][T12940] device veth0_vlan entered promiscuous mode [ 809.887504][T12940] device veth1_vlan entered promiscuous mode [ 809.991756][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 810.039014][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 810.058107][T12940] device veth0_macvtap entered promiscuous mode [ 810.072813][ T4426] playstation 0003:054C:0DF2.000B: unknown main item tag 0x4 [ 810.085807][ T4426] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 810.096136][ T4426] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.7-1/input0 [ 810.116522][T12940] device veth1_macvtap entered promiscuous mode [ 810.189869][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.281386][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.294636][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.300621][ T4426] playstation 0003:054C:0DF2.000B: Failed to retrieve feature with reportID 9: -71 [ 810.335516][ T4426] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense pairing info: -71 [ 810.355063][ T4426] playstation 0003:054C:0DF2.000B: Failed to get MAC address from DualSense [ 810.375655][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.385788][ T4426] playstation 0003:054C:0DF2.000B: Failed to create dualsense. [ 810.398223][ T4426] playstation: probe of 0003:054C:0DF2.000B failed with error -71 [ 810.408150][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.445589][ T4426] usb 8-1: USB disconnect, device number 13 [ 810.464488][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.488658][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.488930][T13217] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 810.534421][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.584204][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.623471][T13218] fido_id[13218]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 810.639713][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.665635][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.700071][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.723667][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.744717][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.765118][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.789493][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.810411][T12940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.836939][T13220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2080'. [ 810.837918][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 810.875029][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 810.900761][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 810.919896][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 810.944263][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.978487][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.018999][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 811.066210][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.114054][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 811.150437][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.160704][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 811.178203][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.189247][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 811.221254][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.324134][T12940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 811.581726][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 811.597846][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 811.671465][T12940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.739551][T12940] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.765283][T12940] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.774395][T12940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.067036][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.093740][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.144518][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 812.209344][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.225153][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.269587][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 812.282465][T13268] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2096'. [ 812.711457][T13288] zero sized request [ 813.282567][T13314] loop1: detected capacity change from 0 to 64 [ 813.363053][T13314] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 813.476669][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2114'. [ 813.526792][T13329] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2114'. [ 813.601126][T13334] loop9: detected capacity change from 0 to 1024 [ 813.679523][T12380] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 813.684746][T13334] EXT4-fs (loop9): Ignoring removed bh option [ 813.706562][T13334] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 813.769877][T13334] EXT4-fs error (device loop9): ext4_protect_reserved_inode:182: inode #3: comm syz.9.2117: blocks 1-2 from inode overlap system zone [ 813.827287][T13334] EXT4-fs (loop9): failed to initialize system zone (-117) [ 813.862216][T13334] EXT4-fs (loop9): mount failed [ 814.558524][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2125'. [ 814.582160][T12380] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 814.608296][T12380] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 814.633999][T12380] usb 2-1: Product: syz [ 814.642955][T12380] usb 2-1: Manufacturer: syz [ 814.657314][T12380] usb 2-1: SerialNumber: syz [ 814.678346][T12380] usb 2-1: config 0 descriptor?? [ 814.992563][ T9046] usb 2-1: USB disconnect, device number 14 [ 815.781532][T13383] loop9: detected capacity change from 0 to 32768 [ 815.821205][T13383] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop9 scanned by syz.9.2129 (13383) [ 815.869687][T13383] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 815.878444][T13383] BTRFS info (device loop9): using free space tree [ 815.939323][T13383] BTRFS info (device loop9): has skinny extents [ 816.450971][T13383] BTRFS info (device loop9): enabling ssd optimizations [ 816.493319][ T26] audit: type=1800 audit(1785264190.494:4486): pid=13383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2129" name="file3" dev="loop9" ino=261 res=0 errno=0 [ 816.499546][ T151] FAULT_INJECTION: forcing a failure. [ 816.499546][ T151] name failslab, interval 1, probability 10, space 0, times 1 [ 816.528002][ T151] CPU: 1 PID: 151 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 816.535490][ T151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 816.539796][ T3548] FAULT_INJECTION: forcing a failure. [ 816.539796][ T3548] name failslab, interval 1, probability 10, space 0, times 1 [ 816.545554][ T151] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 816.558495][ C0] FAULT_INJECTION: forcing a failure. [ 816.558495][ C0] name failslab, interval 1, probability 10, space 0, times 1 [ 816.566043][ T151] Call Trace: [ 816.582053][ T151] [ 816.585113][ T151] dump_stack_lvl+0x188/0x250 [ 816.589894][ T151] ? show_regs_print_info+0x20/0x20 [ 816.595085][ T151] ? load_image+0x410/0x410 [ 816.599737][ T151] should_fail+0x383/0x4b0 [ 816.604211][ T151] should_failslab+0x5/0x20 [ 816.608775][ T151] slab_pre_alloc_hook+0x51/0xc0 [ 816.613893][ T151] __kmalloc+0x6b/0x340 [ 816.618080][ T151] ? batadv_tvlv_container_register+0x3b/0x360 [ 816.624353][ T151] batadv_tvlv_container_register+0x3b/0x360 [ 816.630332][ T151] batadv_tt_tvlv_container_update+0x50a/0x600 [ 816.636505][ T151] batadv_tt_local_commit_changes_nolock+0xc18/0xd40 [ 816.643265][ T151] ? do_raw_spin_lock+0x128/0x2f0 [ 816.648377][ T151] ? batadv_tt_local_commit_changes+0x30/0x30 [ 816.654464][ T151] ? batadv_iv_ogm_queue_add+0xdb0/0xdb0 [ 816.660089][ T151] ? batadv_tt_local_commit_changes+0x1a/0x30 [ 816.666152][ T151] batadv_tt_local_commit_changes+0x22/0x30 [ 816.672038][ T151] batadv_iv_ogm_schedule+0x264/0x1000 [ 816.677530][ T151] ? pskb_expand_head+0xb45/0x1100 [ 816.682740][ T151] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 816.689934][ T151] ? batadv_send_skb_packet+0x36e/0x580 [ 816.695561][ T151] batadv_iv_send_outstanding_bat_ogm_packet+0x6e9/0x800 [ 816.702595][ T151] process_one_work+0x867/0xff0 [ 816.707600][ T151] ? worker_detach_from_pool+0x240/0x240 [ 816.713232][ T151] ? lockdep_hardirqs_off+0x70/0x100 [ 816.718530][ T151] ? _raw_spin_lock_irq+0xb7/0xf0 [ 816.723616][ T151] ? _raw_spin_lock_irqsave+0x100/0x100 [ 816.729153][ T151] ? wq_worker_running+0x97/0x170 [ 816.734192][ T151] worker_thread+0xad7/0x12a0 [ 816.738888][ T151] kthread+0x42e/0x520 [ 816.743037][ T151] ? rcu_lock_release+0x20/0x20 [ 816.747876][ T151] ? kthread_blkcg+0xd0/0xd0 [ 816.752472][ T151] ret_from_fork+0x1f/0x30 [ 816.756922][ T151] [ 816.759998][ C0] CPU: 0 PID: 3548 Comm: klogd Not tainted syzkaller #0 [ 816.766943][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 816.777011][ C0] Call Trace: [ 816.780304][ C0] [ 816.783160][ C0] dump_stack_lvl+0x188/0x250 [ 816.788058][ C0] ? show_regs_print_info+0x20/0x20 [ 816.793373][ C0] ? load_image+0x410/0x410 [ 816.798200][ C0] ? __lock_acquire+0x1305/0x7b50 [ 816.803333][ C0] ? prandom_u32+0x217/0x250 [ 816.808045][ C0] should_fail+0x383/0x4b0 [ 816.812484][ C0] should_failslab+0x5/0x20 [ 816.817129][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 816.822533][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 816.827851][ C0] ? __alloc_skb+0xf4/0x750 [ 816.832382][ C0] __alloc_skb+0xf4/0x750 [ 816.836755][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 816.841818][ C0] ? __alloc_skb+0x750/0x750 [ 816.846424][ C0] ? mark_lock+0x94/0x320 [ 816.850791][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 816.856380][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 816.861605][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 816.867718][ C0] ? verify_lock_unused+0x140/0x140 [ 816.873120][ C0] ? verify_lock_unused+0x140/0x140 [ 816.878414][ C0] ? ieee80211_get_buffered_bc+0x75e/0x860 [ 816.884498][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 816.890443][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 816.896031][ C0] __iterate_interfaces+0x225/0x4c0 [ 816.901259][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 816.907543][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 816.913822][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 816.920881][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 816.926111][ C0] ? hw_scan_work+0xef0/0xef0 [ 816.930908][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 816.936152][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 816.941312][ C0] hrtimer_run_softirq+0x176/0x240 [ 816.946462][ C0] handle_softirqs+0x336/0x830 [ 816.951632][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 816.956523][ C0] ? do_softirq+0x210/0x210 [ 816.960041][ T23] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 816.961046][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 816.973839][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 816.979241][ C0] __irq_exit_rcu+0x13b/0x230 [ 816.983941][ C0] ? irq_exit_rcu+0x20/0x20 [ 816.988476][ C0] irq_exit_rcu+0x5/0x20 [ 816.992784][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 816.998447][ C0] [ 817.001524][ C0] [ 817.004471][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 817.010489][ C0] RIP: 0010:console_unlock+0xc90/0x10f0 [ 817.016075][ C0] Code: 75 11 e8 e3 e3 18 00 4d 85 e4 75 16 e8 d9 e3 18 00 eb 15 e8 d2 e3 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 c3 e3 18 00 fb 31 ff <89> de e8 19 e7 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 a7 [ 817.035966][ C0] RSP: 0018:ffffc90002e2f420 EFLAGS: 00000246 [ 817.042140][ C0] RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: ffff88807dca3b80 [ 817.050133][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 817.058125][ C0] RBP: ffffc90002e2f690 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 817.066205][ C0] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000200 [ 817.074198][ C0] R13: 000000000000008e R14: 0000000000000000 R15: dffffc0000000000 [ 817.082300][ C0] ? console_unlock+0xc8d/0x10f0 [ 817.087274][ C0] ? console_trylock_spinning+0x370/0x370 [ 817.093026][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 817.098251][ C0] ? read_lock_is_recursive+0x10/0x10 [ 817.103662][ C0] ? console_trylock_spinning+0x2f9/0x370 [ 817.109406][ C0] ? vprintk_emit+0x150/0x150 [ 817.114151][ C0] ? do_syscall_64+0x4c/0xa0 [ 817.118774][ C0] vprintk_emit+0xc0/0x150 [ 817.123214][ C0] _printk+0xda/0x130 [ 817.127228][ C0] ? load_image+0x410/0x410 [ 817.131761][ C0] ? prandom_u32+0x217/0x250 [ 817.133891][T13425] loop1: detected capacity change from 0 to 32768 [ 817.136368][ C0] should_fail+0x364/0x4b0 [ 817.147177][ C0] should_failslab+0x5/0x20 [ 817.151704][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 817.157012][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 817.162232][ C0] ? __alloc_skb+0xf4/0x750 [ 817.166766][ C0] __alloc_skb+0xf4/0x750 [ 817.171558][ C0] alloc_skb_with_frags+0xa7/0x720 [ 817.176709][ C0] sock_alloc_send_pskb+0x87f/0x9a0 [ 817.182033][ C0] ? sock_kzfree_s+0x50/0x50 [ 817.184580][T13425] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.2141 (13425) [ 817.186733][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 817.186765][ C0] ? __rwlock_init+0x140/0x140 [ 817.186780][ C0] ? mark_lock+0x94/0x320 [ 817.186801][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 817.186820][ C0] unix_dgram_sendmsg+0x6f8/0x19c0 [ 817.222281][ C0] ? aa_sk_perm+0x7dc/0x910 [ 817.226924][ C0] ? aa_af_perm+0x340/0x340 [ 817.231455][ C0] ? unix_dgram_poll+0x680/0x680 [ 817.236457][ C0] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 817.242991][ C0] ? apparmor_socket_sendmsg+0x88/0x230 [ 817.248558][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 817.254118][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 817.259671][ C0] __sys_sendto+0x46d/0x620 [ 817.264408][ C0] ? __ia32_sys_getpeername+0x80/0x80 [ 817.270037][ C0] ? lock_chain_count+0x20/0x20 [ 817.274926][ C0] __x64_sys_sendto+0xda/0xf0 [ 817.279636][ C0] do_syscall_64+0x4c/0xa0 [ 817.284075][ C0] ? clear_bhb_loop+0x30/0x80 [ 817.288776][ C0] ? clear_bhb_loop+0x30/0x80 [ 817.293485][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 817.299407][ C0] RIP: 0033:0x7feaeb627407 [ 817.303872][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 817.314567][ T8504] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (8504) [ 817.323581][ C0] RSP: 002b:00007ffce09064e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 817.323607][ C0] RAX: ffffffffffffffda RBX: 00007feaeb4d7c80 RCX: 00007feaeb627407 [ 817.323618][ C0] RDX: 000000000000006d RSI: 00007ffce0906620 RDI: 0000000000000003 [ 817.323628][ C0] RBP: 00007ffce0906a50 R08: 0000000000000000 R09: 0000000000000000 [ 817.323638][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffce0906a68 [ 817.323649][ C0] R13: 00007ffce0906620 R14: 0000000000000052 R15: 00007ffce0906620 [ 817.323673][ C0] [ 817.362174][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 817.498661][ T3548] CPU: 0 PID: 3548 Comm: klogd Not tainted syzkaller #0 [ 817.505814][ T3548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 817.515877][ T3548] Call Trace: [ 817.519251][ T3548] [ 817.522193][ T3548] dump_stack_lvl+0x188/0x250 [ 817.527065][ T3548] ? show_regs_print_info+0x20/0x20 [ 817.532316][ T3548] ? load_image+0x410/0x410 [ 817.536841][ T3548] ? prandom_u32+0x217/0x250 [ 817.541455][ T3548] should_fail+0x383/0x4b0 [ 817.545891][ T3548] should_failslab+0x5/0x20 [ 817.550397][ T3548] slab_pre_alloc_hook+0x51/0xc0 [ 817.555343][ T3548] kmem_cache_alloc_node+0x47/0x2c0 [ 817.560556][ T3548] ? __alloc_skb+0xf4/0x750 [ 817.565074][ T3548] __alloc_skb+0xf4/0x750 [ 817.569401][ T3548] alloc_skb_with_frags+0xa7/0x720 [ 817.574503][ T3548] sock_alloc_send_pskb+0x87f/0x9a0 [ 817.579705][ T3548] ? sock_kzfree_s+0x50/0x50 [ 817.584276][ T3548] ? do_raw_spin_lock+0x128/0x2f0 [ 817.589288][ T3548] ? __rwlock_init+0x140/0x140 [ 817.594051][ T3548] ? mark_lock+0x94/0x320 [ 817.598371][ T3548] ? do_raw_spin_unlock+0x11d/0x230 [ 817.603556][ T3548] unix_dgram_sendmsg+0x6f8/0x19c0 [ 817.608746][ T3548] ? aa_sk_perm+0x7dc/0x910 [ 817.613236][ T3548] ? aa_af_perm+0x340/0x340 [ 817.617734][ T3548] ? unix_dgram_poll+0x680/0x680 [ 817.622653][ T3548] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 817.629055][ T3548] ? apparmor_socket_sendmsg+0x88/0x230 [ 817.634587][ T3548] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 817.639944][ T3548] ? security_socket_sendmsg+0x7c/0xa0 [ 817.645393][ T3548] __sys_sendto+0x46d/0x620 [ 817.649972][ T3548] ? __ia32_sys_getpeername+0x80/0x80 [ 817.655343][ T3548] ? lock_chain_count+0x20/0x20 [ 817.660185][ T3548] __x64_sys_sendto+0xda/0xf0 [ 817.664854][ T3548] do_syscall_64+0x4c/0xa0 [ 817.669353][ T3548] ? clear_bhb_loop+0x30/0x80 [ 817.674240][ T3548] ? clear_bhb_loop+0x30/0x80 [ 817.678904][ T3548] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 817.684916][ T3548] RIP: 0033:0x7feaeb627407 [ 817.689498][ T3548] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 817.709577][ T3548] RSP: 002b:00007ffce09064e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 817.719426][ T3548] RAX: ffffffffffffffda RBX: 00007feaeb4d7c80 RCX: 00007feaeb627407 [ 817.727493][ T3548] RDX: 000000000000006d RSI: 00007ffce0906620 RDI: 0000000000000003 [ 817.735457][ T3548] RBP: 00007ffce0906a50 R08: 0000000000000000 R09: 0000000000000000 [ 817.743418][ T3548] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffce0906a68 [ 817.751377][ T3548] R13: 00007ffce0906620 R14: 0000000000000052 R15: 00007ffce0906620 [ 817.759402][ T3548] [ 817.806679][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.930339][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.957542][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 818.034105][ T23] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 818.065859][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.109715][ T23] usb 4-1: config 0 descriptor?? [ 818.621338][ T23] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 818.632109][ T23] microsoft 0003:045E:07DA.000C: report is too long [ 818.644163][ T23] microsoft 0003:045E:07DA.000C: item 0 4 0 8 parsing failed [ 818.654389][ T23] microsoft 0003:045E:07DA.000C: parse failed [ 818.667092][ T23] microsoft: probe of 0003:045E:07DA.000C failed with error -22 [ 818.739610][T11844] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 818.747354][ T4234] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 818.861646][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.868123][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.905810][ T23] usb 4-1: USB disconnect, device number 15 [ 819.009639][ T4234] usb 2-1: Using ep0 maxpacket: 8 [ 819.016805][T11844] usb 1-1: Using ep0 maxpacket: 16 [ 819.186507][T11844] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.205411][T11844] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.223343][T11844] usb 1-1: config 0 interface 0 has no altsetting 0 [ 819.233281][ T4234] usb 2-1: unable to get BOS descriptor or descriptor too short [ 819.254371][T11844] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 819.264944][T11844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.277970][T13528] loop7: detected capacity change from 0 to 512 [ 819.285056][T11844] usb 1-1: config 0 descriptor?? [ 819.329987][ T4234] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 178, changing to 7 [ 819.357871][T13531] IPv6: addrconf: prefix option has invalid lifetime [ 819.458914][T13528] EXT4-fs (loop7): 1 orphan inode deleted [ 819.518015][T13528] EXT4-fs (loop7): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 819.535169][ T4234] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 819.555701][T13484] udc-core: couldn't find an available UDC or it's busy [ 819.559493][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.572825][T13484] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 819.591778][ T4234] usb 2-1: Product: syz [ 819.596068][ T4234] usb 2-1: Manufacturer: syz [ 819.601252][T13528] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 819.625631][ T4234] usb 2-1: SerialNumber: syz [ 819.921574][T13555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2172'. [ 820.098493][T11845] usb 1-1: USB disconnect, device number 7 [ 820.170059][ T4234] snd-usb-audio: probe of 2-1:1.0 failed with error -2 [ 820.389965][ T4234] snd-usb-audio: probe of 2-1:1.1 failed with error -2 [ 820.566524][T13585] block device autoloading is deprecated and will be removed. [ 820.609466][ T13] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 820.643156][ T4234] snd-usb-audio: probe of 2-1:1.2 failed with error -2 [ 820.679059][ T4234] usb 2-1: USB disconnect, device number 15 [ 820.744542][ T8528] udevd[8528]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 820.980017][ T13] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 820.994179][ T13] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 821.322939][ T13] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 821.332278][ T13] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.384851][T13619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2186'. [ 821.459736][ T13] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 821.489972][ T13] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 821.520610][ T13] usb 8-1: Product: syz [ 821.539804][ T13] usb 8-1: Manufacturer: syz [ 821.592349][ T13] cdc_wdm 8-1:1.0: skipping garbage [ 821.610102][ T13] cdc_wdm 8-1:1.0: skipping garbage [ 821.657887][ T13] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 821.684511][ T13] cdc_wdm 8-1:1.0: Unknown control protocol [ 821.916579][T11845] usb 8-1: USB disconnect, device number 14 [ 821.928720][T13648] loop9: detected capacity change from 0 to 512 [ 822.045702][T13648] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 822.162326][T13648] EXT4-fs (loop9): 1 truncate cleaned up [ 822.189952][T13648] EXT4-fs (loop9): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 822.279545][T13665] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 822.279545][T13665] The task syz.0.2198 (13665) triggered the difference, watch for misbehavior. [ 822.501711][T13677] overlayfs: workdir and upperdir must be separate subtrees [ 822.678123][ T26] audit: type=1800 audit(1785264196.674:4487): pid=13685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2205" name="b_vendor_code" dev="configfs" ino=62372 res=0 errno=0 [ 822.898379][T13696] tipc: Started in network mode [ 823.059763][T13696] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711 [ 823.072975][T13705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2208'. [ 823.119644][T13696] tipc: Enabling of bearer rejected, failed to enable media [ 823.784458][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2220'. [ 823.909228][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2220'. [ 823.948798][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2223'. [ 824.222551][T13756] [ 824.224939][T13756] ====================================================== [ 824.232090][T13756] WARNING: possible circular locking dependency detected [ 824.239198][T13756] syzkaller #0 Not tainted [ 824.243606][T13756] ------------------------------------------------------ [ 824.250640][T13756] syz.0.2224/13756 is trying to acquire lock: [ 824.256723][T13756] ffffffff8ceceff0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x638/0x980 [ 824.266617][T13756] [ 824.266617][T13756] but task is already holding lock: [ 824.273962][T13756] ffff888076e2c660 (&sb->s_type->i_mutex_key#28){++++}-{3:3}, at: vfs_rmdir+0xe1/0x410 [ 824.283642][T13756] [ 824.283642][T13756] which lock already depends on the new lock. [ 824.283642][T13756] [ 824.294029][T13756] [ 824.294029][T13756] the existing dependency chain (in reverse order) is: [ 824.303034][T13756] [ 824.303034][T13756] -> #2 (&sb->s_type->i_mutex_key#28){++++}-{3:3}: [ 824.311712][T13756] down_write+0x38/0x60 [ 824.316628][T13756] configfs_depend_item_unlocked+0x14f/0x430 [ 824.323121][T13756] usbg_make_tpg+0x1f3/0x580 [ 824.328274][T13756] target_fabric_make_tpg+0xa0/0x6d0 [ 824.334157][T13756] configfs_mkdir+0x511/0x9e0 [ 824.339434][T13756] vfs_mkdir+0x386/0x570 [ 824.344185][T13756] do_mkdirat+0x1dd/0x5c0 [ 824.349024][T13756] __x64_sys_mkdir+0x6a/0x80 [ 824.354211][T13756] do_syscall_64+0x4c/0xa0 [ 824.359144][T13756] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 824.365651][T13756] [ 824.365651][T13756] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 824.373286][T13756] __mutex_lock_common+0x1e5/0x2400 [ 824.379004][T13756] mutex_lock_nested+0x17/0x20 [ 824.384281][T13756] tcm_set_name+0x26/0x90 [ 824.389230][T13756] function_make+0x195/0x350 [ 824.394476][T13756] configfs_mkdir+0x511/0x9e0 [ 824.399662][T13756] vfs_mkdir+0x386/0x570 [ 824.404412][T13756] do_mkdirat+0x1dd/0x5c0 [ 824.409247][T13756] __x64_sys_mkdir+0x6a/0x80 [ 824.414340][T13756] do_syscall_64+0x4c/0xa0 [ 824.419268][T13756] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 824.425668][T13756] [ 824.425668][T13756] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 824.434168][T13756] __lock_acquire+0x2c66/0x7b50 [ 824.439537][T13756] lock_acquire+0x19e/0x400 [ 824.444646][T13756] __mutex_lock_common+0x1e5/0x2400 [ 824.450646][T13756] mutex_lock_nested+0x17/0x20 [ 824.455945][T13756] configfs_rmdir+0x638/0x980 [ 824.461139][T13756] vfs_rmdir+0x19d/0x410 [ 824.465893][T13756] do_rmdir+0x27f/0x710 [ 824.470555][T13756] __x64_sys_rmdir+0x45/0x50 [ 824.475656][T13756] do_syscall_64+0x4c/0xa0 [ 824.480748][T13756] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 824.487171][T13756] [ 824.487171][T13756] other info that might help us debug this: [ 824.487171][T13756] [ 824.497409][T13756] Chain exists of: [ 824.497409][T13756] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#28 [ 824.497409][T13756] [ 824.512092][T13756] Possible unsafe locking scenario: [ 824.512092][T13756] [ 824.519528][T13756] CPU0 CPU1 [ 824.524924][T13756] ---- ---- [ 824.530388][T13756] lock(&sb->s_type->i_mutex_key#28); [ 824.536030][T13756] lock(&opts->dep_lock); [ 824.542968][T13756] lock(&sb->s_type->i_mutex_key#28); [ 824.550953][T13756] lock(gadget_subsys.su_mutex); [ 824.555975][T13756] [ 824.555975][T13756] *** DEADLOCK *** [ 824.555975][T13756] [ 824.564237][T13756] 3 locks held by syz.0.2224/13756: [ 824.569423][T13756] #0: ffff88801e350460 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 824.578845][T13756] #1: ffff888060175aa0 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1b0/0x710 [ 824.589723][T13756] #2: ffff888076e2c660 (&sb->s_type->i_mutex_key#28){++++}-{3:3}, at: vfs_rmdir+0xe1/0x410 [ 824.599809][T13756] [ 824.599809][T13756] stack backtrace: [ 824.605779][T13756] CPU: 0 PID: 13756 Comm: syz.0.2224 Not tainted syzkaller #0 [ 824.613253][T13756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 824.623301][T13756] Call Trace: [ 824.626588][T13756] [ 824.629521][T13756] dump_stack_lvl+0x188/0x250 [ 824.634393][T13756] ? load_image+0x410/0x410 [ 824.639032][T13756] ? show_regs_print_info+0x20/0x20 [ 824.644245][T13756] ? print_circular_bug+0x12b/0x1a0 [ 824.649437][T13756] check_noncircular+0x296/0x330 [ 824.654370][T13756] ? add_chain_block+0x9b0/0x9b0 [ 824.659308][T13756] ? lockdep_lock+0xf1/0x1f0 [ 824.663912][T13756] ? __lock_acquire+0x2844/0x7b50 [ 824.669021][T13756] ? mark_lock+0x94/0x320 [ 824.673348][T13756] ? _find_first_zero_bit+0xd1/0xf0 [ 824.678607][T13756] __lock_acquire+0x2c66/0x7b50 [ 824.683542][T13756] ? __lock_acquire+0x13dc/0x7b50 [ 824.688834][T13756] ? verify_lock_unused+0x140/0x140 [ 824.694050][T13756] ? __lock_acquire+0x1305/0x7b50 [ 824.699073][T13756] lock_acquire+0x19e/0x400 [ 824.703568][T13756] ? configfs_rmdir+0x638/0x980 [ 824.708498][T13756] ? __might_sleep+0xf0/0xf0 [ 824.713214][T13756] ? read_lock_is_recursive+0x10/0x10 [ 824.718601][T13756] __mutex_lock_common+0x1e5/0x2400 [ 824.723800][T13756] ? configfs_rmdir+0x638/0x980 [ 824.728643][T13756] ? configfs_rmdir+0x638/0x980 [ 824.733746][T13756] ? __rwlock_init+0x140/0x140 [ 824.738519][T13756] ? rcu_lock_release+0x5/0x20 [ 824.743280][T13756] ? mutex_lock_io_nested+0x60/0x60 [ 824.748576][T13756] ? _raw_spin_unlock+0x24/0x40 [ 824.753436][T13756] mutex_lock_nested+0x17/0x20 [ 824.758281][T13756] configfs_rmdir+0x638/0x980 [ 824.762960][T13756] vfs_rmdir+0x19d/0x410 [ 824.767209][T13756] do_rmdir+0x27f/0x710 [ 824.771404][T13756] ? d_delete_notify+0x150/0x150 [ 824.776426][T13756] ? getname_flags+0x1f9/0x4f0 [ 824.781183][T13756] __x64_sys_rmdir+0x45/0x50 [ 824.785765][T13756] do_syscall_64+0x4c/0xa0 [ 824.790177][T13756] ? clear_bhb_loop+0x30/0x80 [ 824.794866][T13756] ? clear_bhb_loop+0x30/0x80 [ 824.799535][T13756] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 824.805416][T13756] RIP: 0033:0x7f56285e1e99 [ 824.809834][T13756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.829528][T13756] RSP: 002b:00007f5626819028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 824.838150][T13756] RAX: ffffffffffffffda RBX: 00007f562886a090 RCX: 00007f56285e1e99 [ 824.846132][T13756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 824.854121][T13756] RBP: 00007f5628677eaf R08: 0000000000000000 R09: 0000000000000000 [ 824.862100][T13756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.870291][T13756] R13: 00007f562886a128 R14: 00007f562886a090 R15: 00007ffc7829b938 [ 824.878288][T13756] [ 824.917015][T13723] caif:caif_disconnect_client(): nothing to disconnect [ 825.045589][T13756] printk: console [ttyGS0] disabled