last executing test programs: 22m13.975921121s ago: executing program 1 (id=347): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x13, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000200)=""/185, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x73) 22m13.684625436s ago: executing program 1 (id=348): r0 = socket$inet6(0xa, 0x3, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, &(0x7f0000003140)) 22m12.73362417s ago: executing program 1 (id=355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0x5, 0x100}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 22m12.568305614s ago: executing program 1 (id=357): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x200810, &(0x7f00000002c0)={[{@dmode={'dmode', 0x3d, 0x6}}, {@check_strict}, {@check_strict}, {@utf8}, {@check_strict}, {@map_acorn}, {@map_off}, {@mode={'mode', 0x3d, 0x2}}]}, 0xff, 0x55a, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x200000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 22m12.108544624s ago: executing program 1 (id=359): socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x3e9, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x1, 0x1, 0x0, 0xd, 0x80, 0x2, 0x80000000, 0x0, 0x7, 0x9}}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f00001b9000/0x1000)=nil, 0x1000, 0x4, 0x8010, r2, 0x91502000) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 22m10.007534488s ago: executing program 1 (id=364): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="05002dbd7000fcdbdf251b0000000400cc0008009a00010003"], 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x20000080) 22m9.691961146s ago: executing program 32 (id=364): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="05002dbd7000fcdbdf251b0000000400cc0008009a00010003"], 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x20000080) 20m21.140482319s ago: executing program 4 (id=781): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080)=0x2100, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000002) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1, 0x21d, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6ee, &(0x7f0000000d80)="$eJzs3cFvHGfdB/DvrNeON2+V12kTGqEgTCIVpIjEiZVCuGAQQjlUqCqHnq3Eaaw4SZW4KK0QuIDghMShf0BB8o0DQuIeFC5cyq1XHyshcYk4RL0smtlZe3e9tteJs07h86km8zzzPPPMb3/zzIx3XWsD/M+6ei7Nhyly9dwbD8r6xvr8ysb6/JG6eSVJWW4kzc4qxZ2keJQslO1Fz5Ke9TYfLV9569PHG591as16qfpP7LbfEEP6rtVLZuvxZofuOTnqIdbq8PJSkmv1ut/UqGP1dSyTdrZew6Fr92ukvVa3jDTB93PdAi+Y7lVedJ6b28wkR5NM1z8HpL47NMYX4YH6WrewdrhxAAAAwFh8cvewIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAvnur7/1ub1UZnUzKbovv9/1PdbXX5BbQwcs+HzzUOAAAAAAAAABiPrz7JkzzIsW69XVS/8z9TVU7k83byf3kv97OUezmfB1nMalZzLxeTzPQMNPVgcXX13sXNPUvD97w0dM9L43rFAAAAAAAAAPBf6Rdpbf3+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXgRFMtFZVcuJep2ZNJrZasta8o8kU4cd7z4UwzY+HH8cAAAA8Eymn2Kf/3+SJ3mQY916u6je83+per88nfdyJ6tZzmpWspTr9Xvo8l1/Y2N9fmVjff52uZT1/nG/9699hTFVjzBR1YYd+VTVo5UbWa62nM+1KpjraXSOfTY51Y2nJ64eH5YxFd+tjRhZs05rebDf7fQpwoHo/yiisUvP1lZwyWZG5urYyj2PdzJQVB/UJIOZGDw72w7W7KvNVF0mN490MY3NT35OHGzOq0iO1pXy9fz6ueZ8FL252MxEI1UmLnVnX3nN7J6J5Ot/+ePbN1fu3Lp54/65w31J+zCxw/bBOTHfk4lXv9CZaO6z/1yViZOb9av5YX6cc5nNm7mX5fwki1nNUtp1+2I9n8t/Z3bP1EJf7c29Ipmqz0vnnI0S02x+UJUWc6ba91iWU+Rurmcpr1f/XcrFfCuXczlXes7wyR3jrl5bddU3Bq/67pn+69Dgz36jLpR3t99s3eUWdnvFO83Og9K595d5Pd6T186sf7zZ63jPdTDXk6WXu9mZHDr40zyPml+uC+UxfrnHc2K8ZupMlBdQ9ynRje6VTiaa1bNo+zz/fbvcLyt32u2bi+/uMP7aQP21el1Oq/Wv7NW7a/ipOFjlfHk50/WdpH92lG2vbN5letraW3O509b/xC33O1m1FUX3Sv1R7lYTYPuVOlX/DLd9pEtV26sDbafre3jZdqqnre/nrdzNSq6PIX8API2/v71ZnMnRqdY/W5+0Pm79qnWz9cb09498+8jpqUz+bfI7zbmJ1xqniz/n4/xs6/0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw9O6//8GtxZWVpXvDC42dm/oKrQxu2WvkgUJRf6HPsD636m8p2NeAh1yYTtK3pfqeo7GH0RoMY1uh/fNk7Pnpfong8D6/LQvNkU73Qt+WP20f8MO945nIwDwc4bp4joVGxnvQiQyfAId1RwLG5cLq7Xcv3H//g28u3158Z+mdpTuTly9fmbty+fX5CzeWV5bmOv8edpTA87D10D/sSAAAAAAAAAAAAIBRDfvDgDMv7fVHI9sKjSSDf+Ph/ywEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsTVc2k+TJGLc+fnyvrG+vxKuXTLWz2bSRqNpPhpUjxKFtJZMtMzXJE/PEp7yHE+Wr7y1qePNz7bGqvZ6Z806vXOdm9NslYvmU0yUa+fQd9413YerzHacMW/u6+hTNjn7XZ74dnig4PxnwAAAP//RNftbQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x200004) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 20m19.673652817s ago: executing program 4 (id=787): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x3e9, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x1, 0x1, 0x0, 0xd, 0x80, 0x2, 0x80000000, 0x0, 0x7, 0x9}}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f00001b9000/0x1000)=nil, 0x1000, 0x4, 0x8010, r2, 0x91502000) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 20m17.323908752s ago: executing program 4 (id=790): r0 = inotify_init() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$eJzs3c1rHGUYAPBnNps0bapJoRT1IIUerNRuvvyoILQeRYsFvdcl2YaQTbdkN6WJBduDvXgrgogF8Sp491j8B/wrClooUoIeRIjMZjZN0t3NR5Numv39YJL33ZnZd56ded59Z2aXDaBrnUz/5CJejehPi4Nr5uUjm3lyZbmlxzcn0imJ5eXP/koiyR5rLJ9k/weyyisR8dvXEWdyT7dbXVicKZbLpbmsPlybvTZcXVg8Oz1bnCpNla6OjY+fe2d87P333t21WN+89M/3n97/6Nw3p5a+++XhsbtJXIij2by1cTyDW2srJ4v/ZaXeuLBhwdFdaGw/STq9AexIT5bnvZH2AYPRk2U9cPB9FRHLQJdK5D90qcY4oHFuv0vnwS+MRx+unADVY+9bG39+5dpI9NfPjY4sJevOjNLz3aFdaD9t49c/791Np2h/HeLwJnWAbbl1OyJG8vmn+/8k6/92bqR+8bi9jW102/sPdNL9dPzzVrPxX251/BNNxj8DTXJ3JzbP/9zDXWimpXT890HT8e9q1zXUk9Veqo/5epMrA+XSSES8HBGnI+LKdLk02r9yDb2Zc0sPllu1v3b8l05p+42xYLYdD/OH1q8zWawVI6LvWWNPPbod8Vq+WfzJ6v5Pmuz/9PW4tMU2TpTuvd5q3ubx763lnyLeaLr/n9zRStrfnxxO9//Iyt+mbfx958TvrdrvdPzp/j/SPv6hZO392ur22/ix/99Sq3kt41892Jof/33J5/VyIwluFGu1udGIvuSTpx8fe7Juo95YPo3/9Kn2/V+z4z89+fpii/HfOX6n5aL7Yf9Pbmv/byykr0SLWVnhwcdf/tCq/a31f2/XS6ezR7L+r7nsWGmzOesKz/r6AQAAAAAAwH6Si4ijkeQKq+VcrlBY+XzH8TiSK1eqtTNXKvNXJ6P+Xdmh6M017nQPNj4PMV0ujWafh23UxzbUxyPiWER823O4Xi9MVMqTnQ4eAAAAAAAAAAAAAAAAAAAA9omBFt//T/3R0+mtA/Zc/YcNDnV6K4BO2PQn/3fjl56AfWnT/AcOrHX5n3RuO4Dnz/s/dC/5D91L/kP3kv/QveQ/dK+t5P+F57AdAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEBcungxnZaXHt+cSOuT1xfmZyrXz06WqjOF2fmJwkRl7lphqlKZKpcKE5XZiBhs93zlSuXa6FjM3xiulaq14erC4uXZyvzV2uXp2eJU6XKp97lFBgAAAAAAAAAAAAAAAAAAAC+O6sLiTLFcLs0diMLP+b145vPR6bj2uHA+4lZ6MOxo9fx+iUKhReF2luvbW6uz/RIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArPV/AAAA///HtTBf") openat(r0, 0x0, 0x42, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) open(0x0, 0x145142, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x1, 0x4) 20m15.583561115s ago: executing program 4 (id=798): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='barrier,nls=ascii,uid=', @ANYRESHEX=0x0, @ANYBLOB=',force,umask=00000000000000000002\x00\x000,part=0x0000000000000002,session=0xfffffffffffffff9,nodecompose,\x00'], 0x1, 0x6e0, &(0x7f0000000580)="$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") ioctl$KDSETLED(0xffffffffffffffff, 0x4008af04, 0xffffffffffffff38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) creat(&(0x7f0000000e40)='./file1\x00', 0x18) 20m13.510239637s ago: executing program 4 (id=805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) execve(&(0x7f0000000100)='./file2\x00', 0x0, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x193, &(0x7f0000000240)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x40, 0x1) syz_genetlink_get_family_id$ethtool(0x0, r1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x2c020400) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 20m11.068570971s ago: executing program 4 (id=810): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@init_itable_val={'init_itable', 0x3d, 0x400}}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}], [{@seclabel}]}, 0x3, 0x439, &(0x7f0000002380)="$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") chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 20m10.223009614s ago: executing program 33 (id=810): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@init_itable_val={'init_itable', 0x3d, 0x400}}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}], [{@seclabel}]}, 0x3, 0x439, &(0x7f0000002380)="$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") chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 11.821385726s ago: executing program 0 (id=3963): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x420, 0x238, 0x0, 0xffffffff, 0x2e0, 0x238, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @multicast1, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'team_slave_0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xffffff00, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x0, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x300d2140, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000785700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x0, 0x3, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) 11.079546781s ago: executing program 5 (id=3964): sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000051}, 0x4850) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r0, r0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f0000000340)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='affs\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r3}, 0xc) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) getsockopt$llc_int(r5, 0x10c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x4) r6 = inotify_init() inotify_add_watch(r6, 0x0, 0xa000032a) tee(r4, r4, 0x9, 0xc) readv(r6, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f00000006c0)=ANY=[], 0xff2e) 10.881632289s ago: executing program 0 (id=3967): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x808}, 0x4040800) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40186f40, &(0x7f0000000080)={0x1, 0x0, 0xfffffffd, 0x0, 'syz1\x00', 0x5}) 10.031823924s ago: executing program 3 (id=3968): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) request_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], 0x50) flock(0xffffffffffffffff, 0x5) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x106f) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan1\x00'}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000240)=0x8000000a, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) 9.772715796s ago: executing program 0 (id=3969): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000100)='-1\x00', 0x2) io_uring_enter(0xffffffffffffffff, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x13) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff0f, r1, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r5, 0xc01c64ad, &(0x7f0000000080)={r4}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3020, 0x1000004, 0x13, r5, 0x100000000) dup(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 8.93985976s ago: executing program 0 (id=3971): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000006940)=ANY=[@ANYBLOB="e0000000130001002b", @ANYBLOB, @ANYRES32=r0, @ANYBLOB="04000b0004000180bcb493de0bb58fd75bdc5e7c53ed39d06fd043db86af6933d71e30cab89da1cd72deb5178a8576e69b2ff911b2fc9aec9a3e2c48ddc884448fd51602af338a3185dcc3b9743391b1e5"], 0xe0}], 0x1, 0x0, 0x0, 0x20008020}, 0x8880) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) sendmsg$NFT_BATCH(r2, 0x0, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000780)=0x101, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, 0x0, &(0x7f0000000100)=r4}, 0x20) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) socket(0x2, 0x80805, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$packet(0x11, 0x3, 0x300) 8.877443046s ago: executing program 2 (id=3972): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x91073ffe, 0x8, 0x8, 0xb, 0xe6, 0x3d, 0xfa, 0x0, 0x1, 0x5}, {0x5000, 0x1000, 0xb, 0x6, 0x42, 0x5, 0x75, 0x6, 0x36, 0x4, 0x2, 0x87}, {0xb000, 0x0, 0xe, 0x5, 0x3, 0x7, 0x0, 0x6, 0x4, 0xa4, 0x5, 0x5}, {0x1, 0x10000, 0x9, 0x7, 0x5, 0x42, 0x3, 0x0, 0x8, 0x7, 0xe}, {0xffffffff, 0x200000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x19, 0x9, 0xf7, 0x3}, {0x8080000, 0x100000, 0xe, 0xa0, 0xb1, 0x4, 0x1, 0xa0, 0x82, 0x32, 0x9, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x6, 0x9d, 0x81, 0x8, 0x70}, {0x8000000, 0x4000, 0x8, 0x5, 0xcd, 0x7, 0x1, 0x7, 0x0, 0xf9, 0xaf, 0x81}, {0xeeee0000, 0x30}, {0x200000, 0x9}, 0x10000, 0x0, 0x41000, 0x2024, 0x8, 0x1400, 0x100c00, [0x6800000000000000, 0x80000000004, 0x3, 0x8]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0xdddd1000, 0xe41, 0x3, 0x10020f5b, 0x0, [{0x0, 0x9}, {}, {}, {0x0, 0x35}, {0x1d, 0x3}, {0x0, 0x0, 0x6}, {0x0, 0x5}, {0x2, 0x6}, {0x0, 0x81, 0x9}, {0x73, 0x6, 0x2, '\x00', 0x8}, {0x0, 0xfd, 0xfe}, {0x4}, {}, {0x0, 0x2, 0x0, '\x00', 0xfe}, {0x27, 0x2, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0x0, 0xf7, '\x00', 0x6}, {0x0, 0xfc, 0x0, '\x00', 0xfe}, {0xfd, 0x0, 0x3, '\x00', 0x4}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5}, {0x0, 0x0, 0x10}]}}) 8.25938272s ago: executing program 0 (id=3973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast1, @loopback}, "00186371"}}}}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000003040601a7000000000000000020090500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x50}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x59, 0xe0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r8, 0x7d243a6ea807936d, 0x70bd2c, 0x25dfdbfa, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x40100) 8.069685927s ago: executing program 2 (id=3974): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x188, 0x188, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cluster={{0x30}, {0x2}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x1, 0x1, 0x4, 0x4, 0x4, 0x6], 0x2}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xffffff00, 0xff], 0x4e20, 0x4e21, 0x4e20, 0x4e21, 0xfff, 0x81, 0x81, 0x3ff, 0x99d2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="010000000000000000000f0000000c0007800800020000000000"], 0x20}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB="000825bd7000fbdbdf251300000014000980080002000400000008000100040000000c000980080002000a00000008000680040002000c0002800800020003000000280007800c00030005000000000000000c00040000000000000800000c0003000500000000000000980001800c000280f9ff00001c0000002c0004001400010002004e21ac1e000100000000000000001400020002004e22ac1414aa000000000000000044000400200001000a004e240000000900000000000000000000fffffffffffff8ffffff200002000a004e230000000400000000000000000000000000000001060000000800030004000000080003000700000008000300050000002000028014000380080002007000000008000100ffffffff08000200050000001c000380080001000000000008000300494500000800010004000000", @ANYRESDEC], 0x144}, 0x1, 0x0, 0x0, 0x4040}, 0x4004800) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="010000000000000400001a000000180001801400020064756d6d793000000000000000000000341d4ef0f970136361e66b3e99feefe39eeaea8e795923af73b237924445e18f71d2fd0f2b7392f0921de3cb7bed17d73a2e8bab63caf970104249f33acd4a"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) r3 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x230, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x65010102, @multicast2, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@udp={{0x30}, {[0x4e20, 0x4e20], [0x4e21, 0x4e22]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xc405, 0x10100, 0xfffffffd}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r4, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x2}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800}, 0x38) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) ioctl$TIOCL_SETVESABLANK(r9, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r9, 0x541c, &(0x7f0000000040)) 6.200115322s ago: executing program 5 (id=3975): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x2}}, @TCA_FW_MASK={0x8, 0x5, 0xb08}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 5.801592178s ago: executing program 2 (id=3976): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000006940)=ANY=[@ANYBLOB="e0000000130001002b", @ANYBLOB, @ANYRES32=r0, @ANYBLOB="04000b0004000180bcb493de0bb58fd75bdc5e7c53ed39d06fd043db86af6933d71e30cab89da1cd72deb5178a8576e69b2ff911b2fc9aec9a3e2c48ddc884448fd51602af338a3185dcc3b9743391b1e5"], 0xe0}], 0x1, 0x0, 0x0, 0x20008020}, 0x8880) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) sendmsg$NFT_BATCH(r2, 0x0, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000780)=0x101, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, 0x0, &(0x7f0000000100)=r4}, 0x20) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) socket(0x2, 0x80805, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$packet(0x11, 0x3, 0x300) 5.337946168s ago: executing program 5 (id=3977): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x808}, 0x4040800) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40186f40, &(0x7f0000000080)={0x1, 0x0, 0xfffffffd, 0x0, 'syz1\x00', 0x5}) 5.221070639s ago: executing program 0 (id=3978): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502", @ANYRES8], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000840)=""/188, 0xbc) syz_usb_connect$cdc_ncm(0x2, 0x7f, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x2, 0x1, 0x3, 0x10, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xb, 0x9, 0x6}, {0x6, 0x24, 0x1a, 0x4, 0x5f462b7b4532df5b}, [@obex={0x5, 0x24, 0x15, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x101, 0xa, 0x4, 0x1, 0x40}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7f, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0xfc, 0xb7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x4, 0x40}}}}}}}]}}, 0x0) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) read$char_usb(r0, &(0x7f0000000100)=""/67, 0x43) 5.177539293s ago: executing program 2 (id=3979): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000100)='-1\x00', 0x2) io_uring_enter(0xffffffffffffffff, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x13) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff0f, r1, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r5, 0xc01c64ad, &(0x7f0000000080)={r4}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3020, 0x1000004, 0x13, r5, 0x100000000) dup(0xffffffffffffffff) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 4.609844463s ago: executing program 3 (id=3980): capset(&(0x7f0000000400)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x8000000, 0x0, 0x0, 0x1003}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='quota,grpquota_block_har']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.435906268s ago: executing program 3 (id=3981): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000006940)=ANY=[@ANYBLOB="e0000000130001002b", @ANYBLOB, @ANYRES32=r0, @ANYBLOB="04000b0004000180bcb493de0bb58fd75bdc5e7c53ed39d06fd043db86af6933d71e30cab89da1cd72deb5178a8576e69b2ff911b2fc9aec9a3e2c48ddc884448fd51602af338a3185dcc3b9743391b1e5"], 0xe0}], 0x1, 0x0, 0x0, 0x20008020}, 0x8880) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) sendmsg$NFT_BATCH(r2, 0x0, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000780)=0x101, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, 0x0, &(0x7f0000000100)=r4}, 0x20) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) socket(0x2, 0x80805, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) 4.144379234s ago: executing program 5 (id=3982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x91073ffe, 0x8, 0x8, 0xb, 0xe6, 0x3d, 0xfa, 0x0, 0x1, 0x5}, {0x5000, 0x1000, 0xb, 0x6, 0x42, 0x5, 0x75, 0x6, 0x36, 0x4, 0x2, 0x87}, {0xb000, 0x0, 0xe, 0x5, 0x3, 0x7, 0x0, 0x6, 0x4, 0xa4, 0x5, 0x5}, {0x1, 0x10000, 0x9, 0x7, 0x5, 0x42, 0x3, 0x0, 0x8, 0x7, 0xe}, {0xffffffff, 0x200000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x19, 0x9, 0xf7, 0x3}, {0x8080000, 0x100000, 0xe, 0xa0, 0xb1, 0x4, 0x1, 0xa0, 0x82, 0x32, 0x9, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x6, 0x9d, 0x81, 0x8, 0x70}, {0x8000000, 0x4000, 0x8, 0x5, 0xcd, 0x7, 0x1, 0x7, 0x0, 0xf9, 0xaf, 0x81}, {0xeeee0000, 0x30}, {0x200000, 0x9}, 0x10000, 0x0, 0x41000, 0x2024, 0x8, 0x1400, 0x100c00, [0x6800000000000000, 0x80000000004, 0x3, 0x8]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0xdddd1000, 0xe41, 0x3, 0x10020f5b, 0x0, [{0x0, 0x9}, {}, {}, {0x0, 0x35}, {0x1d, 0x3}, {0x0, 0x0, 0x6}, {0x0, 0x5}, {0x2, 0x6}, {0x0, 0x81, 0x9}, {0x73, 0x6, 0x2, '\x00', 0x8}, {0x0, 0xfd, 0xfe}, {0x4}, {}, {0x0, 0x2, 0x0, '\x00', 0xfe}, {0x27, 0x2, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0x0, 0xf7, '\x00', 0x6}, {0x0, 0xfc, 0x0, '\x00', 0xfe}, {0xfd, 0x0, 0x3, '\x00', 0x4}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5}, {0x0, 0x0, 0x10}]}}) 3.711995523s ago: executing program 3 (id=3983): sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000051}, 0x4850) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r0, r0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f0000000340)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='affs\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r3}, 0xc) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) getsockopt$llc_int(r5, 0x10c, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x4) r6 = inotify_init() inotify_add_watch(r6, 0x0, 0xa000032a) tee(r4, r4, 0x9, 0xc) readv(r6, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f00000006c0)=ANY=[], 0xff2e) 3.653053697s ago: executing program 2 (id=3984): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x188, 0x188, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cluster={{0x30}, {0x2}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x1, 0x1, 0x4, 0x4, 0x4, 0x6], 0x2}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x8}, [0xff000000, 0xffffff00, 0xffffff00, 0xff], 0x4e20, 0x4e21, 0x4e20, 0x4e21, 0xfff, 0x81, 0x81, 0x3ff, 0x99d2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="010000000000000000000f0000000c0007800800020000000000"], 0x20}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB="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", @ANYRESDEC], 0x144}, 0x1, 0x0, 0x0, 0x4040}, 0x4004800) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="010000000000000400001a000000180001801400020064756d6d793000000000000000000000341d4ef0f970136361e66b3e99feefe39eeaea8e795923af73b237924445e18f71d2fd0f2b7392f0921de3cb7bed17d73a2e8bab63caf970104249f33acd4a"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) r3 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x230, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x65010102, @multicast2, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@udp={{0x30}, {[0x4e20, 0x4e20], [0x4e21, 0x4e22]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xc405, 0x10100, 0xfffffffd}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r4, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x2}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800}, 0x38) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) ioctl$TIOCL_SETVESABLANK(r9, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r9, 0x541c, &(0x7f0000000040)) 2.49585728s ago: executing program 3 (id=3985): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0xfe) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x4004743c, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) userfaultfd(0x80001) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000000c0)=0x37) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2.37891697s ago: executing program 5 (id=3986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast1, @loopback}, "00186371"}}}}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000003040601a70000000000000000200905000100070400"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x50}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x59, 0xe0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r8, 0x7d243a6ea807936d, 0x70bd2c, 0x25dfdbfa, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x40100) 1.336181952s ago: executing program 2 (id=3987): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000006940)=ANY=[@ANYBLOB="e0000000130001002b", @ANYBLOB, @ANYRES32=r0, @ANYBLOB="04000b0004000180bcb493de0bb58fd75bdc5e7c53ed39d06fd043db86af6933d71e30cab89da1cd72deb5178a8576e69b2ff911b2fc9aec9a3e2c48ddc884448fd51602af338a3185dcc3b9743391b1e5"], 0xe0}], 0x1, 0x0, 0x0, 0x20008020}, 0x8880) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) sendmsg$NFT_BATCH(r2, 0x0, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000780)=0x101, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, 0x0, &(0x7f0000000100)=r4}, 0x20) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) socket(0x2, 0x80805, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) 1.313378824s ago: executing program 3 (id=3988): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) request_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], 0x50) flock(0xffffffffffffffff, 0x5) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x106f) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan1\x00'}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000240)=0x8000000a, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) 0s ago: executing program 5 (id=3989): capset(&(0x7f0000000400)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x8000000, 0x0, 0x0, 0x1003}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='quota,grpquota_block_har']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): 5805] usb 1-1: Product: syz [ 949.254212][ T5805] usb 1-1: Manufacturer: syz [ 949.264414][ T5805] usb 1-1: SerialNumber: syz [ 950.437233][ T5805] usb 1-1: Found UVC 0.00 device syz (8086:0b07) [ 950.456821][ T5805] usb 1-1: No valid video chain found. [ 950.474362][ T5805] usb 1-1: USB disconnect, device number 22 [ 950.815329][T15126] IPVS: starting estimator thread 0... [ 950.965291][T15929] IPVS: using max 22 ests per chain, 52800 per kthread [ 951.269911][T15890] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.292327][T15890] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.304316][T15890] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.318367][T15890] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.369197][ T5805] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 952.314833][ T5805] usb 1-1: Using ep0 maxpacket: 8 [ 952.342089][ T5805] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 952.381552][ T5805] usb 1-1: config 179 has no interface number 0 [ 952.408012][ T5805] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 952.425434][ T5805] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 952.443707][ T5805] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 952.456720][ T5805] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 952.467627][ T5805] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 952.481595][ T5805] usb 1-1: config 179 interface 65 has no altsetting 0 [ 952.488996][ T5805] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 952.498799][ T5805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.725053][T15131] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 952.981533][T15131] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 953.141030][T15131] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 953.229747][ T5805] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input79 [ 953.317620][T15131] usb 4-1: Product: syz [ 953.322611][T15131] usb 4-1: Manufacturer: syz [ 953.331472][T15131] usb 4-1: SerialNumber: syz [ 953.340724][T15131] usb 4-1: config 0 descriptor?? [ 953.348178][T15131] ch341 4-1:0.0: ch341-uart converter detected [ 953.375860][ T5805] usb 1-1: USB disconnect, device number 23 [ 953.381942][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 953.436463][ T5805] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 953.995930][ T5805] IPVS: starting estimator thread 0... [ 954.184684][T15128] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 954.202620][T15962] IPVS: using max 24 ests per chain, 57600 per kthread [ 954.373146][T15131] ch341-uart ttyUSB0: failed to read break control: -71 [ 955.236285][T15131] ch341-uart: probe of ttyUSB0 failed with error -71 [ 955.251985][T15128] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 955.263428][T15131] usb 4-1: USB disconnect, device number 27 [ 955.269500][T15128] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 955.279889][T15131] ch341 4-1:0.0: device disconnected [ 955.294238][T15128] usb 1-1: config 220 interface 0 has no altsetting 0 [ 955.585950][T15128] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 955.622830][T15128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.664989][T15128] usb 1-1: Product: syz [ 955.696987][T15128] usb 1-1: Manufacturer: syz [ 955.723038][T15128] usb 1-1: SerialNumber: syz [ 956.261598][T15128] usb 1-1: Found UVC 0.00 device syz (8086:0b07) [ 956.274862][T15128] usb 1-1: No valid video chain found. [ 956.298557][T15128] usb 1-1: USB disconnect, device number 24 [ 959.157190][T16015] overlayfs: missing 'lowerdir' [ 960.079468][T16004] delete_channel: no stack [ 964.169634][T16048] overlayfs: missing 'lowerdir' [ 965.052441][T16065] affs: No valid root block on device nullb0 [ 966.558194][T16076] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 966.558194][T16076] The task syz.0.2817 (16076) triggered the difference, watch for misbehavior. [ 967.155429][T16064] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.163336][T16064] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.606133][T16064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 967.650921][T16064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 968.215763][T16064] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.225177][T16064] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.234187][T16064] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.267386][T16064] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.033308][T16102] overlayfs: missing 'lowerdir' [ 970.340750][T16108] affs: No valid root block on device nullb0 [ 974.164213][T16146] affs: No valid root block on device nullb0 [ 977.223776][T16154] overlayfs: missing 'lowerdir' [ 978.514680][ T788] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 978.716355][ T788] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 978.734802][ T788] usb 1-1: config 0 has no interface number 0 [ 978.751495][ T788] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 978.775015][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.783189][ T788] usb 1-1: Product: syz [ 978.795590][ T788] usb 1-1: Manufacturer: syz [ 978.806351][ T788] usb 1-1: SerialNumber: syz [ 978.826138][ T788] usb 1-1: config 0 descriptor?? [ 979.491221][ T788] asix 1-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 979.588418][ T788] asix: probe of 1-1:0.251 failed with error -524 [ 979.700983][ T788] usb 1-1: USB disconnect, device number 25 [ 981.888388][T16200] overlayfs: missing 'lowerdir' [ 984.609939][T16218] orangefs_mount: mount request failed with -4 [ 987.534010][T16239] overlayfs: missing 'lowerdir' [ 990.235906][T16265] loop0: detected capacity change from 0 to 512 [ 991.401174][T16265] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 991.545192][T16265] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.2863: iget: bad i_size value: 360287970189639680 [ 991.566005][T16265] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.2863: couldn't read orphan inode 15 (err -117) [ 991.593208][T16265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 992.997547][T13219] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.225396][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.254422][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.318475][T15907] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 993.369475][T16286] overlayfs: failed to resolve './file0': -2 [ 994.314944][T15907] usb 3-1: device descriptor read/64, error -71 [ 994.584785][T15907] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 994.849637][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 994.849651][ T27] audit: type=1326 audit(1771642866.146:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.5.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e3b9c629 code=0x7ffc0000 [ 994.986811][ T27] audit: type=1326 audit(1771642866.196:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.5.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3e3b9c629 code=0x7ffc0000 [ 995.016143][ T27] audit: type=1326 audit(1771642866.196:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.5.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e3b9c629 code=0x7ffc0000 [ 995.084817][T15907] usb 3-1: device descriptor read/64, error -71 [ 995.084952][T16290] syz_tun: entered allmulticast mode [ 995.118915][ T27] audit: type=1326 audit(1771642866.196:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.5.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3e3b9c629 code=0x7ffc0000 [ 995.154927][ T27] audit: type=1326 audit(1771642866.196:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.5.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e3b9c629 code=0x7ffc0000 [ 995.205026][T15907] usb usb3-port1: attempt power cycle [ 995.246736][ T27] audit: type=1326 audit(1771642866.196:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.5.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fb3e3b9c629 code=0x7ffc0000 [ 995.409331][ T27] audit: type=1326 audit(1771642866.196:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.5.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e3b9c629 code=0x7ffc0000 [ 995.937204][ T27] audit: type=1326 audit(1771642866.196:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.5.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fb3e3b9c629 code=0x7ffc0000 [ 996.128052][ T27] audit: type=1326 audit(1771642866.196:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.5.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e3b9c629 code=0x7ffc0000 [ 996.154658][ T27] audit: type=1326 audit(1771642866.196:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16279 comm="syz.5.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3e3b9c629 code=0x7ffc0000 [ 999.828964][T16317] overlayfs: failed to resolve './file0': -2 [ 999.943377][T16318] befs: (loop0): No write support. Marking filesystem read-only [ 999.952027][T16318] syz.0.2885: attempt to access beyond end of device [ 999.952027][T16318] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 999.965107][T16318] befs: (loop0): unable to read superblock [ 1000.685194][ T5825] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1000.886473][ T5825] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.898709][ T5825] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1000.911615][ T5825] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1000.930535][ T5825] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1001.074720][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.082944][ T5825] usb 1-1: Product: syz [ 1001.091467][ T5825] usb 1-1: Manufacturer: syz [ 1001.101780][ T5825] usb 1-1: SerialNumber: syz [ 1001.241311][T14402] Bluetooth: hci0: Unknown advertising packet type: 0x77 [ 1001.241358][T14402] Bluetooth: hci0: adv larger than maximum supported [ 1001.248707][T14402] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1001.363766][ T5825] usb 1-1: Found UVC 0.00 device syz (8086:0b07) [ 1001.390578][ T5825] usb 1-1: No valid video chain found. [ 1001.485658][ T5825] usb 1-1: USB disconnect, device number 26 [ 1003.072893][T16346] overlayfs: failed to resolve './file0': -2 [ 1003.943397][T16349] loop0: detected capacity change from 0 to 512 [ 1004.498969][T16349] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 1004.916367][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 1004.916379][ T27] audit: type=1326 audit(1771642876.226:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16352 comm="syz.5.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e3b9c629 code=0x7ffc0000 [ 1005.014687][ T27] audit: type=1326 audit(1771642876.256:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16352 comm="syz.5.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e3b9c629 code=0x7ffc0000 [ 1005.119370][ T27] audit: type=1326 audit(1771642876.256:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16352 comm="syz.5.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3e3b9c629 code=0x7ffc0000 [ 1005.167844][ T27] audit: type=1326 audit(1771642876.256:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16352 comm="syz.5.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e3b9c629 code=0x7ffc0000 [ 1005.247379][T16360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2899'. [ 1005.292744][ T27] audit: type=1326 audit(1771642876.256:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16352 comm="syz.5.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3e3b9c629 code=0x7ffc0000 [ 1005.315630][T15131] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1005.377823][ T27] audit: type=1326 audit(1771642876.256:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16352 comm="syz.5.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e3b9c629 code=0x7ffc0000 [ 1005.400640][ T27] audit: type=1326 audit(1771642876.266:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16352 comm="syz.5.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fb3e3b9c629 code=0x7ffc0000 [ 1005.444076][ T27] audit: type=1326 audit(1771642876.266:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16352 comm="syz.5.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e3b9c629 code=0x7ffc0000 [ 1005.470769][ T27] audit: type=1326 audit(1771642876.266:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16352 comm="syz.5.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fb3e3b9c629 code=0x7ffc0000 [ 1005.496593][ T27] audit: type=1326 audit(1771642876.266:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16352 comm="syz.5.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e3b9c629 code=0x7ffc0000 [ 1005.525007][T15131] usb 1-1: device descriptor read/64, error -71 [ 1005.824730][T15131] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1006.094795][T15131] usb 1-1: device descriptor read/64, error -71 [ 1006.215492][T15131] usb usb1-port1: attempt power cycle [ 1007.255643][T15131] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1007.346462][T15131] usb 1-1: device descriptor read/8, error -71 [ 1007.634892][T15131] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1007.695438][T15131] usb 1-1: device descriptor read/8, error -71 [ 1007.825902][T15131] usb usb1-port1: unable to enumerate USB device [ 1008.330743][T16385] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1008.339756][T16385] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1008.348526][T16385] overlayfs: missing 'lowerdir' [ 1009.329196][T16387] loop3: detected capacity change from 0 to 512 [ 1009.879992][T16387] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 1009.980871][ T5760] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1011.845171][T16393] syz.0.2908 (16393): drop_caches: 2 [ 1013.304039][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 1013.304055][ T27] audit: type=1326 audit(1771642884.606:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16402 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b679c629 code=0x7ffc0000 [ 1013.416296][ T27] audit: type=1326 audit(1771642884.606:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16402 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b679c629 code=0x7ffc0000 [ 1013.463327][ T27] audit: type=1326 audit(1771642884.646:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16402 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1b679c629 code=0x7ffc0000 [ 1013.511951][ T27] audit: type=1326 audit(1771642884.646:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16402 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b679c629 code=0x7ffc0000 [ 1013.684789][T15907] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1013.703009][ T27] audit: type=1326 audit(1771642884.646:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16402 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1b679c629 code=0x7ffc0000 [ 1013.732478][ T27] audit: type=1326 audit(1771642884.646:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16402 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b679c629 code=0x7ffc0000 [ 1013.760351][ T27] audit: type=1326 audit(1771642884.656:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16402 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ff1b679c629 code=0x7ffc0000 [ 1013.790404][T16416] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1013.799390][T16416] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1013.807839][T16416] overlayfs: missing 'lowerdir' [ 1014.554338][ T27] audit: type=1326 audit(1771642884.656:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16402 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b679c629 code=0x7ffc0000 [ 1014.605562][ T27] audit: type=1326 audit(1771642884.656:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16402 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7ff1b679c629 code=0x7ffc0000 [ 1014.659634][ T27] audit: type=1326 audit(1771642884.656:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16402 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b679c629 code=0x7ffc0000 [ 1014.721946][T15907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1014.824785][T15907] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1014.834063][T15907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.848687][T15907] usb 1-1: Product: syz [ 1014.853532][T15907] usb 1-1: Manufacturer: syz [ 1014.859442][T15907] usb 1-1: SerialNumber: syz [ 1015.623571][T14402] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1015.632408][T15907] usb 1-1: config 0 descriptor?? [ 1015.643887][T15907] hub 1-1:0.0: bad descriptor, ignoring hub [ 1015.650046][T15907] hub: probe of 1-1:0.0 failed with error -5 [ 1015.665763][T15907] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input80 [ 1018.225198][T15907] usb 1-1: USB disconnect, device number 31 [ 1018.329649][T16439] loop2: detected capacity change from 0 to 512 [ 1018.358861][T16439] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1018.435708][T16439] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.2920: iget: bad i_size value: 360287970189639680 [ 1018.479899][T16439] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.2920: couldn't read orphan inode 15 (err -117) [ 1018.603413][T16439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1018.748540][T16444] befs: (loop6): No write support. Marking filesystem read-only [ 1018.757140][T16444] syz.3.2924: attempt to access beyond end of device [ 1018.757140][T16444] loop6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1018.770207][T16444] befs: (loop6): unable to read superblock [ 1020.951710][T16454] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1020.960506][T16454] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1020.968854][T16454] overlayfs: missing 'lowerdir' [ 1022.441906][T14402] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1023.914126][T15277] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.154722][T15904] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1024.273231][T16475] befs: (loop4): No write support. Marking filesystem read-only [ 1024.281312][T16475] syz.2.2934: attempt to access beyond end of device [ 1024.281312][T16475] loop4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1024.294187][T16475] befs: (loop4): unable to read superblock [ 1024.893042][T15904] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.176749][T15904] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1025.195085][T15904] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1025.207852][T15904] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1025.221089][T15904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.245086][T15904] usb 4-1: Product: syz [ 1025.249372][T15904] usb 4-1: Manufacturer: syz [ 1025.254075][T15904] usb 4-1: SerialNumber: syz [ 1025.868293][T15904] usb 4-1: Found UVC 0.00 device syz (8086:0b07) [ 1025.889691][T15904] usb 4-1: No valid video chain found. [ 1025.912935][T15904] usb 4-1: USB disconnect, device number 28 [ 1026.316895][T16498] overlayfs: failed to resolve './file0': -2 [ 1028.811626][T16517] loop3: detected capacity change from 0 to 512 [ 1029.785527][T16517] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1029.868887][T16517] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.2942: iget: bad i_size value: 360287970189639680 [ 1029.882612][T16517] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.2942: couldn't read orphan inode 15 (err -117) [ 1029.896806][T16517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1030.175785][T15904] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1030.342781][T13666] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.392849][T15904] usb 1-1: Using ep0 maxpacket: 32 [ 1030.432466][T15904] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.453488][T15904] usb 1-1: config 0 has no interfaces? [ 1030.463619][T15904] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1030.483004][T15904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.514593][T15904] usb 1-1: config 0 descriptor?? [ 1030.582569][T14429] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 1030.705576][T16533] overlayfs: failed to resolve './file0': -2 [ 1030.852793][T14429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1031.032038][T14429] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1031.149242][T14429] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.232247][T14429] usb 3-1: Product: syz [ 1031.319439][T14429] usb 3-1: Manufacturer: syz [ 1031.324266][T14429] usb 3-1: SerialNumber: syz [ 1031.355837][T14429] usb 3-1: config 0 descriptor?? [ 1031.389465][T14429] hub 3-1:0.0: bad descriptor, ignoring hub [ 1031.410255][T14429] hub: probe of 3-1:0.0 failed with error -5 [ 1031.497044][T14429] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input81 [ 1034.399737][T14429] usb 3-1: USB disconnect, device number 49 [ 1034.487748][ T788] usb 1-1: USB disconnect, device number 32 [ 1035.814725][T16565] syz.2.2955 (16565): drop_caches: 2 [ 1038.126647][T16573] overlayfs: failed to resolve './file0': -2 [ 1038.303253][T16574] loop3: detected capacity change from 0 to 512 [ 1038.547852][T16574] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1038.606278][T16574] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.2957: iget: bad i_size value: 360287970189639680 [ 1038.636380][T16574] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.2957: couldn't read orphan inode 15 (err -117) [ 1038.650644][T16574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1038.899712][T13666] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.156198][T16580] befs: (loop0): No write support. Marking filesystem read-only [ 1039.164204][T16580] syz.0.2959: attempt to access beyond end of device [ 1039.164204][T16580] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1039.177387][T16580] befs: (loop0): unable to read superblock [ 1040.288795][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 1040.288809][ T27] audit: type=1326 audit(1771642911.576:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16584 comm="syz.3.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b679c629 code=0x7ffc0000 [ 1040.906977][ T27] audit: type=1326 audit(1771642911.576:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16584 comm="syz.3.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b679c629 code=0x7ffc0000 [ 1041.260395][T16586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2961'. [ 1041.282596][ T27] audit: type=1326 audit(1771642912.006:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16584 comm="syz.3.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff1b679c629 code=0x7ffc0000 [ 1041.364859][ T27] audit: type=1326 audit(1771642912.006:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16584 comm="syz.3.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b679c629 code=0x7ffc0000 [ 1041.389976][ T27] audit: type=1326 audit(1771642912.006:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16584 comm="syz.3.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1b679c629 code=0x7ffc0000 [ 1041.426757][ T27] audit: type=1326 audit(1771642912.586:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16584 comm="syz.3.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b679c629 code=0x7ffc0000 [ 1041.490672][ T27] audit: type=1326 audit(1771642912.586:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16584 comm="syz.3.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b679c629 code=0x7ffc0000 [ 1041.541523][ T27] audit: type=1326 audit(1771642912.676:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16584 comm="syz.3.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff1b679c629 code=0x7ffc0000 [ 1041.584480][ T27] audit: type=1326 audit(1771642912.676:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16584 comm="syz.3.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b679c629 code=0x7ffc0000 [ 1041.616223][ T27] audit: type=1326 audit(1771642912.736:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16584 comm="syz.3.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1b679c629 code=0x7ffc0000 [ 1041.935194][ T788] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 1042.233526][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1042.468041][ T788] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1042.477419][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.534758][ T788] usb 3-1: Product: syz [ 1042.539053][ T788] usb 3-1: Manufacturer: syz [ 1042.569366][ T788] usb 3-1: SerialNumber: syz [ 1042.595981][ T788] usb 3-1: config 0 descriptor?? [ 1042.611281][ T788] hub 3-1:0.0: bad descriptor, ignoring hub [ 1042.621626][ T788] hub: probe of 3-1:0.0 failed with error -5 [ 1042.634075][ T788] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input82 [ 1046.392086][T16624] befs: (loop6): No write support. Marking filesystem read-only [ 1046.400002][T16624] syz.3.2969: attempt to access beyond end of device [ 1046.400002][T16624] loop6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1046.412899][T16624] befs: (loop6): unable to read superblock [ 1046.730262][T16627] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1050.136085][T16660] overlayfs: failed to clone lowerpath [ 1050.255732][T16661] overlayfs: failed to clone lowerpath [ 1051.118551][T15907] usb 3-1: USB disconnect, device number 50 [ 1051.428564][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2983'. [ 1051.485873][T15907] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1051.497928][T14429] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 1051.714958][T14429] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1051.746884][T14429] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1051.756339][T14429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.764386][T14429] usb 1-1: Product: syz [ 1051.794859][T14429] usb 1-1: Manufacturer: syz [ 1051.809722][T14429] usb 1-1: SerialNumber: syz [ 1051.820164][T14429] usb 1-1: config 0 descriptor?? [ 1051.836834][T14429] hub 1-1:0.0: bad descriptor, ignoring hub [ 1051.854686][T14429] hub: probe of 1-1:0.0 failed with error -5 [ 1051.863845][T14429] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input83 [ 1054.647558][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.653983][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.815012][T15131] usb 1-1: USB disconnect, device number 33 [ 1055.015060][T14429] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1055.084702][T16716] trusted_key: encrypted_key: insufficient parameters specified [ 1055.180534][T16716] netlink: 'syz.3.2995': attribute type 10 has an invalid length. [ 1055.190796][T16716] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2995'. [ 1055.225401][T16716] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1055.227112][T14429] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1055.315440][T14429] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.382786][T14429] usb 3-1: config 0 descriptor?? [ 1055.516458][T14429] cp210x 3-1:0.0: cp210x converter detected [ 1055.941817][T14429] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1056.034880][T15131] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 1056.218890][T14429] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 1056.263451][T14429] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 1056.294086][T15131] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1056.465239][T14429] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1056.504412][T15131] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1056.648336][T15131] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.706586][T14429] usb 3-1: USB disconnect, device number 52 [ 1056.796737][T15131] usb 4-1: Product: syz [ 1056.800960][T15131] usb 4-1: Manufacturer: syz [ 1056.829168][T14429] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1056.850778][T15131] usb 4-1: SerialNumber: syz [ 1056.865279][T14429] cp210x 3-1:0.0: device disconnected [ 1056.895637][T15131] usb 4-1: config 0 descriptor?? [ 1056.937602][T15131] hub 4-1:0.0: bad descriptor, ignoring hub [ 1056.943564][T15131] hub: probe of 4-1:0.0 failed with error -5 [ 1056.981943][T15131] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input84 [ 1059.619885][T14429] usb 4-1: USB disconnect, device number 29 [ 1062.775803][T16782] Cannot find set identified by id 65535 to match [ 1067.264748][T14429] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1068.227362][T14429] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1068.254367][T14429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.316307][T14429] usb 1-1: config 0 descriptor?? [ 1068.325926][T14429] cp210x 1-1:0.0: cp210x converter detected [ 1068.780958][T16833] (null): rxe_set_mtu: Set mtu to 256 [ 1069.124994][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 1069.125033][ T27] audit: type=1326 audit(1771642940.136:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.2.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c3d9c629 code=0x7ffc0000 [ 1069.203745][ T27] audit: type=1326 audit(1771642940.136:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.2.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c3d9c629 code=0x7ffc0000 [ 1069.298071][T14429] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1069.381642][T14429] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 1069.402991][T14429] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 1069.413205][T16833] vxcan1 speed is unknown, defaulting to 1000 [ 1069.426214][T14429] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1069.428595][T16833] vxcan1 speed is unknown, defaulting to 1000 [ 1069.442983][T16833] vxcan1 speed is unknown, defaulting to 1000 [ 1069.448761][ T27] audit: type=1326 audit(1771642940.136:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.2.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f32c3d9c629 code=0x7ffc0000 [ 1069.503843][ T27] audit: type=1326 audit(1771642940.136:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.2.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c3d9c629 code=0x7ffc0000 [ 1069.530000][ T27] audit: type=1326 audit(1771642940.136:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.2.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c3d9c629 code=0x7ffc0000 [ 1069.553191][ T27] audit: type=1326 audit(1771642940.136:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.2.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f32c3d9c629 code=0x7ffc0000 [ 1069.576447][ T27] audit: type=1326 audit(1771642940.136:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.2.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c3d9c629 code=0x7ffc0000 [ 1069.626333][T14429] usb 1-1: USB disconnect, device number 34 [ 1069.671920][T16833] infiniband syz2: set down [ 1069.676841][T16833] infiniband syz2: added vxcan1 [ 1069.683869][T16833] syz2: rxe_create_cq: returned err = -12 [ 1069.690302][T16833] infiniband syz2: Couldn't create ib_mad CQ [ 1069.696502][T16833] infiniband syz2: Couldn't open port 1 [ 1069.715904][ T27] audit: type=1326 audit(1771642940.136:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.2.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c3d9c629 code=0x7ffc0000 [ 1070.483039][T14429] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1070.506279][T16833] RDS/IB: syz2: added [ 1070.510820][T16833] smc: adding ib device syz2 with port count 1 [ 1070.515347][T14429] cp210x 1-1:0.0: device disconnected [ 1070.517556][T16833] smc: ib device syz2 port 1 has pnetid [ 1070.544935][ T788] vxcan1 speed is unknown, defaulting to 1000 [ 1070.555368][T15907] vxcan1 speed is unknown, defaulting to 1000 [ 1070.590069][T16833] vxcan1 speed is unknown, defaulting to 1000 [ 1070.744148][T16833] vxcan1 speed is unknown, defaulting to 1000 [ 1070.848084][T16833] vxcan1 speed is unknown, defaulting to 1000 [ 1070.894710][ T5825] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1070.955371][T16833] vxcan1 speed is unknown, defaulting to 1000 [ 1071.088984][T16833] vxcan1 speed is unknown, defaulting to 1000 [ 1071.091287][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1071.139734][ T5825] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1071.171519][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.394695][ T5825] usb 4-1: Product: syz [ 1071.399306][ T5825] usb 4-1: Manufacturer: syz [ 1071.404000][ T5825] usb 4-1: SerialNumber: syz [ 1071.413157][ T5825] usb 4-1: config 0 descriptor?? [ 1071.439457][ T5825] hub 4-1:0.0: bad descriptor, ignoring hub [ 1071.454632][ T5825] hub: probe of 4-1:0.0 failed with error -5 [ 1071.466922][T16856] befs: (loop0): No write support. Marking filesystem read-only [ 1071.483443][ T5825] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input85 [ 1071.486755][T16856] syz.0.3036: attempt to access beyond end of device [ 1071.486755][T16856] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1071.542721][T16857] vxcan1 speed is unknown, defaulting to 1000 [ 1072.566993][T16856] befs: (loop0): unable to read superblock [ 1072.626685][ T5825] usb 4-1: USB disconnect, device number 30 [ 1073.374687][ T788] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1073.623537][ T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.673833][ T788] usb 4-1: config 0 has no interfaces? [ 1073.718568][ T788] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1073.758903][ T788] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1073.773615][ T788] usb 4-1: Product: syz [ 1073.780184][ T788] usb 4-1: Manufacturer: syz [ 1073.789365][ T788] usb 4-1: SerialNumber: syz [ 1073.801272][ T788] usb 4-1: config 0 descriptor?? [ 1075.708280][T16901] befs: (loop0): No write support. Marking filesystem read-only [ 1075.716186][T16901] syz.0.3049: attempt to access beyond end of device [ 1075.716186][T16901] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1075.747066][T16901] befs: (loop0): unable to read superblock [ 1075.848824][T16905] vxcan1 speed is unknown, defaulting to 1000 [ 1076.833745][ T5825] usb 4-1: USB disconnect, device number 31 [ 1078.034301][T16922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3055'. [ 1079.564701][T14429] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 1079.734895][ T5825] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1079.762804][T14429] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1079.772558][T14429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.780945][T14429] usb 1-1: Product: syz [ 1079.784780][T15907] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1079.785473][T14429] usb 1-1: Manufacturer: syz [ 1079.806174][T14429] usb 1-1: SerialNumber: syz [ 1079.812852][T14429] usb 1-1: config 0 descriptor?? [ 1079.928348][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.941380][ T5825] usb 4-1: config 0 has no interfaces? [ 1079.954382][ T5825] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1079.969252][ T5825] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1079.977886][ T5825] usb 4-1: Product: syz [ 1079.982218][ T5825] usb 4-1: Manufacturer: syz [ 1079.987146][ T5825] usb 4-1: SerialNumber: syz [ 1080.000162][ T5825] usb 4-1: config 0 descriptor?? [ 1080.044904][T14429] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1080.162329][T15907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1080.183662][T15907] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1080.192950][T15907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.201253][T15907] usb 3-1: Product: syz [ 1080.205573][T15907] usb 3-1: Manufacturer: syz [ 1080.210239][T15907] usb 3-1: SerialNumber: syz [ 1080.219305][T15907] usb 3-1: config 0 descriptor?? [ 1080.922591][T15907] hub 3-1:0.0: bad descriptor, ignoring hub [ 1080.928735][T15907] hub: probe of 3-1:0.0 failed with error -5 [ 1080.943170][T15907] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input86 [ 1081.290080][T14429] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1081.309787][T14429] usb 1-1: USB disconnect, device number 35 [ 1082.340422][T16987] loop2: detected capacity change from 0 to 512 [ 1082.380876][T16987] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1082.490772][T14402] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1082.513690][T14429] usb 4-1: USB disconnect, device number 32 [ 1083.297623][T15904] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 1083.519283][T15904] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1083.529674][T15904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.550560][T15904] usb 1-1: Product: syz [ 1083.561939][T15904] usb 1-1: Manufacturer: syz [ 1083.572465][T15904] usb 1-1: SerialNumber: syz [ 1083.588701][T15904] usb 1-1: config 0 descriptor?? [ 1083.812343][T15904] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1084.624674][T14429] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1084.827092][T14429] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.837428][T14429] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1084.850090][T14429] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1084.859582][T14429] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1084.868683][T14429] usb 4-1: Product: syz [ 1084.872934][T14429] usb 4-1: Manufacturer: syz [ 1084.877985][T14429] usb 4-1: SerialNumber: syz [ 1084.894154][T14429] usb 4-1: config 0 descriptor?? [ 1085.029275][T15904] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1085.047289][T15904] usb 1-1: USB disconnect, device number 36 [ 1085.193285][T17030] syz_tun: entered allmulticast mode [ 1086.113418][T17045] loop0: detected capacity change from 0 to 512 [ 1086.134915][ T788] usb 3-1: USB disconnect, device number 53 [ 1086.145918][T17045] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 1087.557882][T15904] usb 4-1: USB disconnect, device number 33 [ 1087.592830][T17061] syz_tun: entered allmulticast mode [ 1087.944881][T14429] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 1088.112260][T17075] loop2: detected capacity change from 0 to 512 [ 1088.144282][T17075] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1088.157849][T14429] usb 1-1: too many configurations: 109, using maximum allowed: 8 [ 1088.178102][T14429] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1088.194830][T15904] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1088.202712][T14429] usb 1-1: can't read configurations, error -61 [ 1088.357101][T14429] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 1088.395455][T15904] usb 4-1: Using ep0 maxpacket: 32 [ 1088.409353][T15904] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.428749][T15904] usb 4-1: config 0 has no interfaces? [ 1088.439564][T15904] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1088.458830][T15904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.469892][T15904] usb 4-1: config 0 descriptor?? [ 1088.595549][T14429] usb 1-1: too many configurations: 109, using maximum allowed: 8 [ 1088.606380][T14429] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1088.614154][T14429] usb 1-1: can't read configurations, error -61 [ 1088.628007][T14429] usb usb1-port1: attempt power cycle [ 1088.797622][T17079] overlayfs: failed to clone upperpath [ 1088.804434][T17079] overlayfs: failed to clone upperpath [ 1089.054846][T14429] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 1089.096167][T14429] usb 1-1: too many configurations: 109, using maximum allowed: 8 [ 1089.135695][T14429] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1089.143321][T14429] usb 1-1: can't read configurations, error -61 [ 1089.339087][T14429] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 1089.386043][T14429] usb 1-1: too many configurations: 109, using maximum allowed: 8 [ 1089.395877][T14429] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1089.403501][T14429] usb 1-1: can't read configurations, error -61 [ 1089.410395][T14429] usb usb1-port1: unable to enumerate USB device [ 1089.634795][ T5825] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1089.829801][ T5825] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.845794][ T5825] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1089.863070][ T5825] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1089.873745][ T5825] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1089.882774][ T5825] usb 3-1: Product: syz [ 1089.887056][ T5825] usb 3-1: Manufacturer: syz [ 1089.891658][ T5825] usb 3-1: SerialNumber: syz [ 1089.898836][ T5825] usb 3-1: config 0 descriptor?? [ 1090.765064][T15904] usb 4-1: USB disconnect, device number 34 [ 1093.183278][T15904] usb 3-1: USB disconnect, device number 54 [ 1093.222730][T17123] loop0: detected capacity change from 0 to 512 [ 1093.299350][T17123] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 1094.214718][ T5825] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1094.405475][ T5825] usb 4-1: too many configurations: 109, using maximum allowed: 8 [ 1094.416620][ T5825] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1094.424897][ T5825] usb 4-1: can't read configurations, error -61 [ 1094.584760][ T5825] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 1095.112832][ T5825] usb 4-1: too many configurations: 109, using maximum allowed: 8 [ 1095.199633][ T5825] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1095.274092][ T5825] usb 4-1: can't read configurations, error -61 [ 1095.350225][ T5825] usb usb4-port1: attempt power cycle [ 1096.942184][ T5825] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1096.985908][ T5825] usb 4-1: device descriptor read/8, error -71 [ 1097.465051][T17167] loop0: detected capacity change from 0 to 512 [ 1098.098339][T17167] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 1098.196348][ T5760] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1098.682053][T17179] Cannot find set identified by id 65535 to match [ 1100.426327][T17195] loop0: detected capacity change from 0 to 512 [ 1100.636350][T17195] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1100.686823][T17195] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.3140: iget: bad i_size value: 360287970189639680 [ 1100.701954][T17195] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.3140: couldn't read orphan inode 15 (err -117) [ 1100.721541][T17195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1100.985568][T13219] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.256239][T17206] dvmrp1: entered allmulticast mode [ 1102.050979][T15907] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 1102.704165][T15907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1102.757519][T17218] Cannot find set identified by id 65535 to match [ 1102.792729][T15907] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1102.875028][T15907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.965287][T15907] usb 1-1: Product: syz [ 1103.002516][T15907] usb 1-1: Manufacturer: syz [ 1103.552887][T15907] usb 1-1: SerialNumber: syz [ 1103.611354][T15907] usb 1-1: config 0 descriptor?? [ 1103.669654][T15907] hub 1-1:0.0: bad descriptor, ignoring hub [ 1103.680866][T15907] hub: probe of 1-1:0.0 failed with error -5 [ 1103.719700][T15907] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input87 [ 1107.740302][T17250] loop0: detected capacity change from 0 to 512 [ 1108.315836][T17250] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 1109.689926][T15907] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1109.852146][T17267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3162'. [ 1109.996585][T15907] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1110.015059][T15907] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1110.025537][T15907] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1110.039042][T15907] usb 3-1: Product: syz [ 1110.045125][T15907] usb 3-1: Manufacturer: syz [ 1110.049842][T15907] usb 3-1: SerialNumber: syz [ 1110.969945][T15907] usb 3-1: config 0 descriptor?? [ 1112.347033][ T788] usb 1-1: USB disconnect, device number 41 [ 1112.384090][ T5825] usb 3-1: USB disconnect, device number 55 [ 1113.935124][ T5825] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1114.497332][ T5825] usb 3-1: config 0 has no interfaces? [ 1114.502873][ T5825] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1114.516818][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.545510][ T5825] usb 3-1: config 0 descriptor?? [ 1114.766692][T17317] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3175'. [ 1114.804916][ T5825] usb 3-1: USB disconnect, device number 56 [ 1114.853657][T17317] syzkaller1: entered promiscuous mode [ 1114.883397][T17317] syzkaller1: entered allmulticast mode [ 1115.040987][T17305] syz.0.3172 (17305): drop_caches: 2 [ 1116.665214][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.671661][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.454652][ T788] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1119.438136][ T788] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1119.489921][ T788] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1119.504598][ T788] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1119.543743][ T788] usb 1-1: Product: syz [ 1119.560455][ T788] usb 1-1: Manufacturer: syz [ 1119.574812][ T788] usb 1-1: SerialNumber: syz [ 1119.605567][ T788] usb 1-1: config 0 descriptor?? [ 1120.974933][ T5825] usb 1-1: USB disconnect, device number 42 [ 1124.522574][T17360] syz.0.3187 (17360): drop_caches: 2 [ 1126.280719][T17375] input: syz1 as /devices/virtual/input/input88 [ 1127.016658][T17393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3195'. [ 1129.914935][T17412] overlay: Unknown parameter '/' [ 1132.298236][T17425] loop2: detected capacity change from 0 to 512 [ 1132.363665][T17425] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1134.567830][T17443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3205'. [ 1134.881718][T17447] fuse: Unknown parameter 'user_i00000000000000000000' [ 1140.076676][T17477] fuse: Unknown parameter 'user_id00000000000000000000' [ 1141.233757][T17493] loop0: detected capacity change from 0 to 512 [ 1142.375874][T17493] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1142.926999][T17493] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.3218: iget: bad i_size value: 360287970189639680 [ 1142.978908][T17493] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.3218: couldn't read orphan inode 15 (err -117) [ 1142.992067][T17493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1143.111688][T17505] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3222'. [ 1143.218416][T17498] loop2: detected capacity change from 0 to 512 [ 1143.681977][T13219] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.769257][T17498] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1147.796865][T17543] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3233'. [ 1148.266148][T17557] loop3: detected capacity change from 0 to 512 [ 1148.411368][T17557] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1148.779246][T17557] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.3232: iget: bad i_size value: 360287970189639680 [ 1148.799791][T17557] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.3232: couldn't read orphan inode 15 (err -117) [ 1148.814900][T17557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1149.118075][T13666] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1149.525483][T17575] ubi1: attaching mtd0 [ 1150.097056][T17580] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3243'. [ 1150.264341][T17582] befs: (loop6): No write support. Marking filesystem read-only [ 1150.272218][T17582] syz.3.3242: attempt to access beyond end of device [ 1150.272218][T17582] loop6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1150.285131][T17582] befs: (loop6): unable to read superblock [ 1150.724028][T17596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1150.756029][T17600] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1150.771563][T17600] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1151.016329][T17604] loop0: detected capacity change from 0 to 512 [ 1151.536929][T17604] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1151.564105][T17604] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.3248: iget: bad i_size value: 360287970189639680 [ 1151.580623][T17604] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.3248: couldn't read orphan inode 15 (err -117) [ 1151.597429][T17604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1151.815423][T17600] (null): rxe_set_mtu: Set mtu to 1024 [ 1151.917700][T17600] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:907a:d2ff:fe3c:2517 error=-28 [ 1152.569022][T13219] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.623602][T17617] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3252'. [ 1152.654978][T17617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3252'. [ 1152.853927][T17600] infiniband syz0: set down [ 1152.859481][T17600] infiniband syz0: added bond0 [ 1152.865366][T17600] syz0: rxe_create_cq: returned err = -12 [ 1152.871257][T17600] infiniband syz0: Couldn't create ib_mad CQ [ 1152.879689][T17600] infiniband syz0: Couldn't open port 1 [ 1152.911153][T17600] RDS/IB: syz0: added [ 1152.924669][T17600] smc: adding ib device syz0 with port count 1 [ 1152.931006][T17600] smc: ib device syz0 port 1 has pnetid [ 1153.014626][ T788] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1153.195022][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 1153.216395][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1153.234758][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1153.274666][ T788] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1153.379962][ T788] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1153.391866][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.407052][ T788] usb 1-1: config 0 descriptor?? [ 1153.894720][ T788] usbhid 1-1:0.0: can't add hid device: -71 [ 1153.900874][ T788] usbhid: probe of 1-1:0.0 failed with error -71 [ 1153.955309][ T788] usb 1-1: USB disconnect, device number 43 [ 1154.392482][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1154.408918][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1154.424757][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1154.432932][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1154.440998][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1154.469383][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1154.887478][T14429] libceph: connect (1)[c::]:6789 error -101 [ 1154.906749][T14429] libceph: mon0 (1)[c::]:6789 connect error [ 1155.229130][T14429] libceph: connect (1)[c::]:6789 error -101 [ 1155.840340][T14429] libceph: mon0 (1)[c::]:6789 connect error [ 1155.863877][T16081] syz_tun (unregistering): left allmulticast mode [ 1156.045644][T17633] vxcan1 speed is unknown, defaulting to 1000 [ 1156.147293][T17639] ceph: No mds server is up or the cluster is laggy [ 1156.169560][T14429] libceph: connect (1)[c::]:6789 error -101 [ 1156.208367][T14429] libceph: mon0 (1)[c::]:6789 connect error [ 1156.567023][ T5774] Bluetooth: hci3: command tx timeout [ 1156.819034][T14429] libceph: connect (1)[c::]:6789 error -101 [ 1156.854357][T14429] libceph: mon0 (1)[c::]:6789 connect error [ 1157.253337][T17670] fuse: Bad value for 'fd' [ 1157.314604][ T788] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1157.504851][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 1157.523649][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.562902][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.584638][ T788] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1157.613749][ T788] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1157.634640][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.663772][ T788] usb 3-1: config 0 descriptor?? [ 1157.703035][T17633] chnl_net:caif_netlink_parms(): no params data found [ 1157.910278][T17633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.920556][T17633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.949819][T17633] bridge_slave_0: entered allmulticast mode [ 1157.985337][T17633] bridge_slave_0: entered promiscuous mode [ 1158.006480][T17633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.032285][T17633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.071571][T17633] bridge_slave_1: entered allmulticast mode [ 1158.079483][T17633] bridge_slave_1: entered promiscuous mode [ 1158.102043][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1158.118011][ T788] usbhid 3-1:0.0: can't add hid device: -71 [ 1158.120397][T17633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1158.134366][ T788] usbhid: probe of 3-1:0.0 failed with error -71 [ 1158.136278][T17633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1158.175583][ T788] usb 3-1: USB disconnect, device number 57 [ 1158.201578][T17633] team0: Port device team_slave_0 added [ 1158.218898][T17633] team0: Port device team_slave_1 added [ 1158.250607][T17633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1158.260755][T17633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1158.292898][T17633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1158.306069][T17633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1158.313036][T17633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1158.340066][T17633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1158.518047][T17633] hsr_slave_0: entered promiscuous mode [ 1158.524353][T17633] hsr_slave_1: entered promiscuous mode [ 1158.530640][T17633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1158.538296][T17633] Cannot create hsr debugfs directory [ 1158.557410][T17690] befs: (loop0): No write support. Marking filesystem read-only [ 1158.565380][T17690] syz.0.3273: attempt to access beyond end of device [ 1158.565380][T17690] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1158.578356][T17690] befs: (loop0): unable to read superblock [ 1158.644701][ T5774] Bluetooth: hci3: command tx timeout [ 1159.150648][T17697] fuse: Unknown parameter '0x0000000000000003' [ 1159.442130][T17693] vxcan1 speed is unknown, defaulting to 1000 [ 1159.710260][T17633] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1159.740898][T17633] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1159.776082][T17633] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1159.838428][T17633] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1160.273852][T17633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1160.375936][T17633] 8021q: adding VLAN 0 to HW filter on device team0 [ 1160.414244][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.421428][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.489107][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.496249][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.724938][ T5774] Bluetooth: hci3: command tx timeout [ 1160.884802][ T788] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1161.164586][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 1161.196458][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1161.222242][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1161.235521][T17633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1161.246346][ T788] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1161.291148][ T788] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1161.340657][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.369003][ T788] usb 1-1: config 0 descriptor?? [ 1161.800580][T17633] veth0_vlan: entered promiscuous mode [ 1161.820514][ T788] usbhid 1-1:0.0: can't add hid device: -71 [ 1161.836355][T17633] veth1_vlan: entered promiscuous mode [ 1161.878577][T17730] fuse: Unknown parameter '0x0000000000000003' [ 1161.953723][ T788] usbhid: probe of 1-1:0.0 failed with error -71 [ 1161.987827][ T788] usb 1-1: USB disconnect, device number 44 [ 1162.081849][T17633] veth0_macvtap: entered promiscuous mode [ 1162.121422][T17633] veth1_macvtap: entered promiscuous mode [ 1162.150837][T17633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1162.173177][T17633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1162.192766][T17633] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.224579][T17633] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.234047][T17633] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.247441][T17633] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.426416][ T3426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.450064][ T3426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.477974][T17746] ubi1: attaching mtd0 [ 1162.595003][ T3453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.615514][ T3453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.804848][ T5774] Bluetooth: hci3: command tx timeout [ 1162.900928][T17752] fuse: Unknown parameter '0x0000000000000003' [ 1164.636743][T17775] loop3: detected capacity change from 0 to 512 [ 1165.383861][T17775] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 1166.327143][T17785] Cannot find set identified by id 65535 to match [ 1166.765026][ T5805] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1166.974966][ T5805] usb 1-1: Using ep0 maxpacket: 32 [ 1167.089061][ T5805] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.108954][ T5805] usb 1-1: config 0 has no interfaces? [ 1167.121528][ T5805] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1167.149811][ T5805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.209550][ T5805] usb 1-1: config 0 descriptor?? [ 1167.494626][T15131] usb 1-1: USB disconnect, device number 45 [ 1167.780198][T17810] loop3: detected capacity change from 0 to 512 [ 1168.631076][T17810] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 1169.373843][T17821] vxcan1 speed is unknown, defaulting to 1000 [ 1170.189762][T17836] (null): rxe_set_mtu: Set mtu to 1024 [ 1170.827736][T17836] rdma_rxe: rxe_newlink: failed to add bond0 [ 1171.546696][T15903] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1171.611393][T17852] befs: (loop10): No write support. Marking filesystem read-only [ 1171.619696][T17852] syz.5.3325: attempt to access beyond end of device [ 1171.619696][T17852] loop10: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1171.632717][T17852] befs: (loop10): unable to read superblock [ 1171.735030][T15903] usb 1-1: Using ep0 maxpacket: 32 [ 1171.741868][T15903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.752960][T15903] usb 1-1: config 0 has no interfaces? [ 1171.759628][T15903] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1171.769696][T15903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.779611][T15903] usb 1-1: config 0 descriptor?? [ 1172.059439][T15903] usb 1-1: USB disconnect, device number 46 [ 1176.005681][T17906] vxcan1 speed is unknown, defaulting to 1000 [ 1176.644762][T14429] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1176.863875][T14429] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1177.124197][T14429] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1177.153353][T14429] usb 1-1: Product: syz [ 1177.185890][T14429] usb 1-1: Manufacturer: syz [ 1177.221639][T14429] usb 1-1: SerialNumber: syz [ 1177.273940][T14429] usb 1-1: config 0 descriptor?? [ 1177.320030][T14429] ch341 1-1:0.0: ch341-uart converter detected [ 1177.511158][T14429] usb 1-1: failed to receive control message: -121 [ 1177.528394][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.528869][T14429] ch341-uart: probe of ttyUSB0 failed with error -121 [ 1177.534925][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.766892][T17939] syz0: rxe_newlink: already configured on bond0 [ 1178.817407][T14429] libceph: connect (1)[c::]:6789 error -101 [ 1178.825591][T14429] libceph: mon0 (1)[c::]:6789 connect error [ 1179.084976][T14429] libceph: connect (1)[c::]:6789 error -101 [ 1179.090990][T14429] libceph: mon0 (1)[c::]:6789 connect error [ 1179.139731][T17942] ceph: No mds server is up or the cluster is laggy [ 1179.353050][T14429] usb 1-1: USB disconnect, device number 47 [ 1179.362280][T14429] ch341 1-1:0.0: device disconnected [ 1180.356451][T17980] ubi1: attaching mtd0 [ 1181.996178][ T5825] libceph: connect (1)[c::]:6789 error -101 [ 1182.002226][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 1182.479550][ T5825] libceph: connect (1)[c::]:6789 error -101 [ 1182.486690][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 1182.850431][T17994] ceph: No mds server is up or the cluster is laggy [ 1183.791855][T15131] libceph: connect (1)[c::]:6789 error -101 [ 1183.797951][T15131] libceph: mon0 (1)[c::]:6789 connect error [ 1184.578610][T14429] libceph: connect (1)[c::]:6789 error -101 [ 1184.584895][T14429] libceph: mon0 (1)[c::]:6789 connect error [ 1184.734641][T14402] Bluetooth: hci1: command 0x0406 tx timeout [ 1184.854847][T15131] libceph: connect (1)[c::]:6789 error -101 [ 1184.946032][T15131] libceph: mon0 (1)[c::]:6789 connect error [ 1185.067028][T18024] ceph: No mds server is up or the cluster is laggy [ 1190.552923][T18077] ubi1: attaching mtd0 [ 1192.565640][T18086] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3390'. [ 1194.756121][T15131] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1194.967905][T15131] usb 6-1: Using ep0 maxpacket: 32 [ 1194.977812][T15131] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.006909][T15131] usb 6-1: config 0 has no interfaces? [ 1195.039129][T15131] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1195.039665][T18111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3397'. [ 1195.072858][T15131] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.143182][T15131] usb 6-1: config 0 descriptor?? [ 1195.392261][T15903] usb 6-1: USB disconnect, device number 37 [ 1199.674328][T18146] Cannot find set identified by id 65535 to match [ 1200.287768][T18153] tipc: Failed to obtain node identity [ 1200.293762][T18153] tipc: Enabling of bearer rejected, failed to enable media [ 1202.958031][T18182] ubi1: attaching mtd0 [ 1204.634603][T15903] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1205.339512][T15903] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1205.377759][T15903] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1205.852050][T15903] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1205.868796][T15903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.889100][T15903] usb 4-1: config 0 descriptor?? [ 1205.906455][T15903] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1209.939167][T15131] usb 4-1: USB disconnect, device number 39 [ 1228.251198][T18343] (null): rxe_set_mtu: Set mtu to 1024 [ 1229.507095][T18343] rdma_rxe: rxe_newlink: failed to add bond0 [ 1229.510654][T18333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1235.400739][T18363] ubi1: attaching mtd0 [ 1238.194704][T14429] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1238.385036][T14429] usb 3-1: Using ep0 maxpacket: 16 [ 1238.415999][T14429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.434726][T14429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1238.445824][T14429] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1238.459613][T14429] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1238.468783][T14429] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.499313][T14429] usb 3-1: config 0 descriptor?? [ 1238.942064][T14429] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1238.955909][T14429] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1238.969845][T14429] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1238.970373][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.979720][T14429] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1238.983551][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.011395][T14429] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1239.136543][T14429] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0020/input/input89 [ 1239.238311][T14429] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1239.279518][T14429] usb 3-1: USB disconnect, device number 58 [ 1239.379580][T18394] (null): rxe_set_mtu: Set mtu to 1024 [ 1239.395040][T18394] rdma_rxe: rxe_newlink: failed to add bond0 [ 1239.496111][T18391] fido_id[18391]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1244.553243][T18410] ubi1: attaching mtd0 [ 1246.837909][T18426] tipc: Started in network mode [ 1246.851684][T18426] tipc: Node identity 762f17b0bf13, cluster identity 4711 [ 1246.865970][T18426] tipc: Enabled bearer , priority 0 [ 1247.006373][T18426] syzkaller0: entered promiscuous mode [ 1247.050820][T18426] syzkaller0: entered allmulticast mode [ 1247.094326][T18430] befs: (loop0): No write support. Marking filesystem read-only [ 1247.102242][T18430] syz.0.3491: attempt to access beyond end of device [ 1247.102242][T18430] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1247.115132][T18430] befs: (loop0): unable to read superblock [ 1247.192076][T18426] tipc: Resetting bearer [ 1247.231609][T18424] tipc: Resetting bearer [ 1247.323479][T18424] tipc: Disabling bearer [ 1252.496641][T18439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1252.623346][T18443] (null): rxe_set_mtu: Set mtu to 1024 [ 1252.630971][T18448] ubi1: attaching mtd0 [ 1252.664627][T18443] rdma_rxe: rxe_newlink: failed to add bond0 [ 1252.947755][T18452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3495'. [ 1255.016412][T18470] netlink: 'syz.0.3501': attribute type 3 has an invalid length. [ 1255.274641][T15907] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1257.402986][T15907] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1259.648406][T15907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.661404][T15907] usb 4-1: Product: syz [ 1259.666444][T18481] ubi1: attaching mtd0 [ 1259.671254][T15907] usb 4-1: Manufacturer: syz [ 1259.675995][T15907] usb 4-1: SerialNumber: syz [ 1259.749042][T15907] usb 4-1: config 0 descriptor?? [ 1259.768282][T15907] usb 4-1: can't set config #0, error -71 [ 1259.910895][T15907] usb 4-1: USB disconnect, device number 40 [ 1260.254410][T18501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3507'. [ 1260.264041][T18501] smc: ib device syz2 ibport 1 applied user defined pnetid ßßßß [ 1261.878663][T18510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3511'. [ 1262.314782][ T5825] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1262.514825][ T5825] usb 1-1: Using ep0 maxpacket: 16 [ 1262.874276][ T5825] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.886010][ T5825] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.911474][ T5825] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1262.969081][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.181854][T18521] ubi1: attaching mtd0 [ 1263.433026][ T5825] mcp2221 0003:04D8:00DD.0021: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1263.926808][T15903] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 1264.123609][T18514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.146367][T18514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.169272][ T788] usb 1-1: USB disconnect, device number 48 [ 1264.271084][T15903] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1264.284409][T15903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.486932][T15903] usb 6-1: Product: syz [ 1264.500496][T15903] usb 6-1: Manufacturer: syz [ 1264.579706][T15903] usb 6-1: SerialNumber: syz [ 1264.609519][T15903] usb 6-1: config 0 descriptor?? [ 1264.711017][T18542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3521'. [ 1264.886273][T15903] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1265.888060][T18559] ubi1: attaching mtd0 [ 1266.266416][T18561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1266.333893][T15903] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 1266.350296][T15903] usb 6-1: USB disconnect, device number 38 [ 1266.355569][T18565] (null): rxe_set_mtu: Set mtu to 1024 [ 1266.362019][T18565] rdma_rxe: rxe_newlink: failed to add bond0 [ 1266.494649][ T5825] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1266.714896][ T5825] usb 4-1: Using ep0 maxpacket: 32 [ 1266.734572][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.745104][ T5825] usb 4-1: config 0 has no interfaces? [ 1266.774615][ T5825] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1266.786322][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.845714][ T5825] usb 4-1: config 0 descriptor?? [ 1267.169988][T15903] usb 4-1: USB disconnect, device number 41 [ 1267.556937][T18582] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3533'. [ 1267.919121][T18587] ubi1: attaching mtd0 [ 1268.042783][T18591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1268.055555][ T3453] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:907a:d2ff:fe3c:2517 error=-28 [ 1268.149861][T18599] syz0: rxe_newlink: already configured on bond0 [ 1269.811902][T18606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3539'. [ 1271.604065][T18627] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3548'. [ 1271.869990][T15903] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1272.287611][T15903] usb 3-1: Using ep0 maxpacket: 32 [ 1272.296451][T15903] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.307644][T15903] usb 3-1: config 0 has no interfaces? [ 1272.313329][T15903] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1272.325268][T15903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.361456][T15903] usb 3-1: config 0 descriptor?? [ 1272.605165][T15903] usb 3-1: USB disconnect, device number 59 [ 1272.734695][ T5825] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1273.089497][ T5825] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1273.098794][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.121918][ T5825] usb 6-1: Product: syz [ 1273.134438][ T5825] usb 6-1: Manufacturer: syz [ 1273.139213][ T5825] usb 6-1: SerialNumber: syz [ 1273.146420][ T5825] usb 6-1: config 0 descriptor?? [ 1273.446549][ T5825] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1274.092249][ T27] audit: type=1326 audit(1771643151.402:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18649 comm="syz.2.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c3d9c629 code=0x7ffc0000 [ 1274.170555][ T27] audit: type=1326 audit(1771643151.402:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18649 comm="syz.2.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c3d9c629 code=0x7ffc0000 [ 1274.402847][ T27] audit: type=1326 audit(1771643151.432:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18649 comm="syz.2.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32c3d9c629 code=0x7ffc0000 [ 1276.947997][ T5825] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -110 [ 1276.965776][T18663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3557'. [ 1277.139265][ T27] audit: type=1326 audit(1771643151.442:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18649 comm="syz.2.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c3d9c629 code=0x7ffc0000 [ 1277.144241][ T5805] usb 6-1: USB disconnect, device number 39 [ 1277.244138][ T27] audit: type=1326 audit(1771643151.442:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18649 comm="syz.2.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c3d9c629 code=0x7ffc0000 [ 1277.363789][ T27] audit: type=1326 audit(1771643151.442:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18649 comm="syz.2.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f32c3d9c629 code=0x7ffc0000 [ 1277.906795][ T27] audit: type=1326 audit(1771643151.442:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18649 comm="syz.2.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c3d9c629 code=0x7ffc0000 [ 1278.013652][ T27] audit: type=1326 audit(1771643151.442:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18649 comm="syz.2.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c3d9c629 code=0x7ffc0000 [ 1278.015050][T18672] ubi1: attaching mtd0 [ 1278.078582][ T27] audit: type=1326 audit(1771643151.442:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18649 comm="syz.2.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32c3d9c629 code=0x7ffc0000 [ 1278.204269][ T27] audit: type=1326 audit(1771643151.442:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18649 comm="syz.2.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c3d9c629 code=0x7ffc0000 [ 1279.504072][ T788] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1279.974599][ T788] usb 6-1: Using ep0 maxpacket: 32 [ 1279.995328][ T788] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.044845][ T788] usb 6-1: config 0 has no interfaces? [ 1280.060684][ T788] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1280.095242][ T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.119392][ T788] usb 6-1: config 0 descriptor?? [ 1280.383222][T15903] usb 6-1: USB disconnect, device number 40 [ 1280.435887][ T788] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1280.657715][ T788] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1280.707992][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.727762][ T788] usb 4-1: Product: syz [ 1280.739199][ T788] usb 4-1: Manufacturer: syz [ 1280.753828][ T788] usb 4-1: SerialNumber: syz [ 1280.771751][ T788] usb 4-1: config 0 descriptor?? [ 1281.032537][ T788] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1283.367093][ T788] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1283.376259][ T788] usb 4-1: USB disconnect, device number 42 [ 1283.618647][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 1283.618662][ T27] audit: type=1326 audit(1771643160.922:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18717 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50cf9c629 code=0x7ffc0000 [ 1283.668245][ T27] audit: type=1326 audit(1771643160.922:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18717 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50cf9c629 code=0x7ffc0000 [ 1283.709011][ T27] audit: type=1326 audit(1771643160.922:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18717 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd50cf9c629 code=0x7ffc0000 [ 1283.762355][ T27] audit: type=1326 audit(1771643160.922:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18717 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50cf9c629 code=0x7ffc0000 [ 1283.793154][ T27] audit: type=1326 audit(1771643160.932:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18717 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fd50cf9c629 code=0x7ffc0000 [ 1283.823594][ T27] audit: type=1326 audit(1771643160.932:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18717 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50cf9c629 code=0x7ffc0000 [ 1283.881996][ T27] audit: type=1326 audit(1771643160.932:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18717 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50cf9c629 code=0x7ffc0000 [ 1283.904900][ T27] audit: type=1326 audit(1771643160.932:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18717 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd50cf9c629 code=0x7ffc0000 [ 1283.927740][ T27] audit: type=1326 audit(1771643160.932:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18717 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50cf9c629 code=0x7ffc0000 [ 1283.950663][ T27] audit: type=1326 audit(1771643160.932:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18717 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50cf9c629 code=0x7ffc0000 [ 1283.994614][T15131] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1284.174690][T15131] usb 3-1: Using ep0 maxpacket: 16 [ 1284.183714][T15131] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1284.218725][T15131] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1284.230238][T15131] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1284.287180][T15131] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1284.296597][T15131] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1284.306264][T15131] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.495960][T15131] usb 3-1: Product: syz [ 1284.516840][T15131] usb 3-1: Manufacturer: syz [ 1284.533375][T15131] usb 3-1: SerialNumber: syz [ 1284.771254][T15131] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1284.989529][T15903] usb 3-1: USB disconnect, device number 60 [ 1284.999717][T15903] usblp0: removed [ 1285.534709][T15903] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1286.385808][T15903] usb 4-1: Using ep0 maxpacket: 32 [ 1286.406638][T15903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.419104][T15903] usb 4-1: config 0 has no interfaces? [ 1286.463791][T15903] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1286.860025][T15903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.875818][T15903] usb 4-1: config 0 descriptor?? [ 1287.108693][T15903] usb 4-1: USB disconnect, device number 43 [ 1287.932513][T15903] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1288.164603][T15903] usb 3-1: Using ep0 maxpacket: 32 [ 1288.172250][T15903] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1288.212144][T15903] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1288.239480][T15903] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1288.262530][T15903] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1288.279702][T15903] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1288.290353][T15903] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1288.299826][T15903] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1288.310328][T15903] usb 3-1: Product: syz [ 1288.316459][T15903] usb 3-1: Manufacturer: syz [ 1288.321485][T15903] usb 3-1: SerialNumber: syz [ 1289.127957][T15903] usb 3-1: config 0 descriptor?? [ 1289.185701][T15903] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1289.214981][T15903] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1290.429999][T18782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3597'. [ 1290.852616][T18786] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1293.756172][ T27] kauditd_printk_skb: 51 callbacks suppressed [ 1293.756187][ T27] audit: type=1326 audit(1771643171.072:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18807 comm="syz.5.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa526d9c629 code=0x7ffc0000 [ 1293.844873][ T27] audit: type=1326 audit(1771643171.072:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18807 comm="syz.5.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa526d9c629 code=0x7ffc0000 [ 1293.872245][ T27] audit: type=1326 audit(1771643171.102:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18807 comm="syz.5.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa526d9c629 code=0x7ffc0000 [ 1293.895152][ T27] audit: type=1326 audit(1771643171.102:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18807 comm="syz.5.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa526d9c629 code=0x7ffc0000 [ 1293.920459][ T27] audit: type=1326 audit(1771643171.102:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18807 comm="syz.5.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa526d9c629 code=0x7ffc0000 [ 1293.965785][ T27] audit: type=1326 audit(1771643171.102:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18807 comm="syz.5.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fa526d9c629 code=0x7ffc0000 [ 1294.001029][ T27] audit: type=1326 audit(1771643171.102:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18807 comm="syz.5.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa526d9c629 code=0x7ffc0000 [ 1294.034586][ T27] audit: type=1326 audit(1771643171.102:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18807 comm="syz.5.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa526d9c629 code=0x7ffc0000 [ 1294.065149][ T27] audit: type=1326 audit(1771643171.102:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18807 comm="syz.5.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa526d9c629 code=0x7ffc0000 [ 1294.089466][ T27] audit: type=1326 audit(1771643171.102:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18807 comm="syz.5.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa526d9c629 code=0x7ffc0000 [ 1294.184643][T15131] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1294.199376][T18817] Cannot find set identified by id 65535 to match [ 1294.364640][T15131] usb 4-1: Using ep0 maxpacket: 32 [ 1294.383669][T15131] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 1294.426464][T15131] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1294.453521][T15131] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1294.485768][T15131] usb 4-1: Product: syz [ 1294.502694][T15131] usb 4-1: Manufacturer: syz [ 1294.523414][T15131] usb 4-1: SerialNumber: syz [ 1294.585145][T15131] usb 4-1: config 0 descriptor?? [ 1294.602465][T18813] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1294.970988][T18821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.981274][T18821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.062754][T18822] affs: No valid root block on device nullb0 [ 1295.301265][T18759] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 1295.326758][ T788] usb 4-1: USB disconnect, device number 44 [ 1295.424043][ T5805] usb 3-1: USB disconnect, device number 61 [ 1295.485500][ T5805] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1297.240549][T18846] Cannot find set identified by id 65535 to match [ 1300.710532][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.990346][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.884892][ T788] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1302.233210][T18885] Cannot find set identified by id 65535 to match [ 1302.546009][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1302.596729][ T788] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1302.616839][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.731195][ T788] usb 3-1: Product: syz [ 1302.829616][ T788] usb 3-1: Manufacturer: syz [ 1302.834361][ T788] usb 3-1: SerialNumber: syz [ 1302.869613][ T788] usb 3-1: config 0 descriptor?? [ 1302.887821][ T788] hub 3-1:0.0: bad descriptor, ignoring hub [ 1302.893885][ T788] hub: probe of 3-1:0.0 failed with error -5 [ 1302.950397][ T788] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input90 [ 1306.899925][T14429] usb 3-1: USB disconnect, device number 62 [ 1308.870051][T18929] Cannot find set identified by id 65535 to match [ 1309.854580][ T5805] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1310.076241][ T5805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1310.781676][ T5805] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1310.794614][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.803577][ T5805] usb 4-1: Product: syz [ 1310.808024][ T5805] usb 4-1: Manufacturer: syz [ 1310.812659][ T5805] usb 4-1: SerialNumber: syz [ 1310.825133][ T5805] usb 4-1: config 0 descriptor?? [ 1310.831673][ T5805] hub 4-1:0.0: bad descriptor, ignoring hub [ 1310.838342][ T5805] hub: probe of 4-1:0.0 failed with error -5 [ 1310.847935][ T5805] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input91 [ 1313.405397][T18945] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1313.428637][ T3488] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:907a:d2ff:fe3c:2517 error=-28 [ 1313.456257][T18948] syz0: rxe_newlink: already configured on bond0 [ 1313.468297][T18945] bond1: (slave macvlan4): Enslaving as an active interface with an up link [ 1313.526584][T15903] usb 4-1: USB disconnect, device number 45 [ 1314.821359][T18963] loop2: detected capacity change from 0 to 512 [ 1314.855296][T18963] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1317.425621][T18978] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1317.464680][ T5805] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1317.496333][T18978] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 1317.570736][T15131] libceph: connect (1)[c::]:6789 error -101 [ 1317.584802][T15131] libceph: mon0 (1)[c::]:6789 connect error [ 1317.604327][T18981] ceph: No mds server is up or the cluster is laggy [ 1317.612047][T18979] (null): rxe_set_mtu: Set mtu to 1024 [ 1317.625843][T18979] rdma_rxe: rxe_newlink: failed to add bond0 [ 1317.723231][ T5805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1317.800535][ T5805] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1317.837341][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.871561][ T5805] usb 6-1: Product: syz [ 1317.881696][ T5805] usb 6-1: Manufacturer: syz [ 1317.889253][ T5805] usb 6-1: SerialNumber: syz [ 1317.914822][ T5805] usb 6-1: config 0 descriptor?? [ 1317.939359][ T5805] hub 6-1:0.0: bad descriptor, ignoring hub [ 1317.954843][ T5805] hub: probe of 6-1:0.0 failed with error -5 [ 1317.971437][ T5805] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input92 [ 1318.078018][T18993] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1322.988785][T19023] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1323.007611][T19023] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1323.058456][T19023] (null): rxe_set_mtu: Set mtu to 1024 [ 1323.064384][T19023] rdma_rxe: rxe_newlink: failed to add bond0 [ 1323.204683][T19026] loop5: detected capacity change from 0 to 512 [ 1323.344854][T19026] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 1325.171926][ T5125] usb 6-1: reset full-speed USB device number 41 using dummy_hcd [ 1325.844558][T14429] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1328.163590][T14429] usb 4-1: Using ep0 maxpacket: 16 [ 1328.170885][T14429] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.182371][T14429] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1328.283596][T14429] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1328.327355][T14429] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.246190][T14429] usb 4-1: can't set config #128, error -71 [ 1330.257869][T14429] usb 4-1: USB disconnect, device number 46 [ 1330.291422][T15904] usb 6-1: USB disconnect, device number 41 [ 1331.270894][T19087] loop5: detected capacity change from 0 to 512 [ 1331.429637][T19087] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 1343.051135][T19142] tipc: Started in network mode [ 1343.142175][T19142] tipc: Node identity ea3df7a5bf0a, cluster identity 4711 [ 1343.223956][T19142] tipc: Enabled bearer , priority 0 [ 1343.263272][T19143] syzkaller0: entered promiscuous mode [ 1343.310700][T19143] syzkaller0: entered allmulticast mode [ 1344.211203][T19149] tipc: Resetting bearer [ 1344.291029][ T5805] tipc: Node number set to 1429731237 [ 1344.322320][T19141] tipc: Resetting bearer [ 1345.741087][T19141] tipc: Disabling bearer [ 1346.769190][T19162] loop0: detected capacity change from 0 to 512 [ 1346.819294][T19162] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 1356.208578][T19215] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1356.215356][T19215] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1356.228997][T19215] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1356.235046][T19215] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1356.243385][T19215] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1356.249451][T19215] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1356.279493][T19215] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1356.286308][T19215] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1356.295731][T19215] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1357.011927][T19225] loop0: detected capacity change from 0 to 512 [ 1357.076078][T19225] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 1358.246640][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 1358.254546][ T5774] Bluetooth: hci4: command 0x206a tx timeout [ 1358.334803][T14402] Bluetooth: hci1: command 0x0406 tx timeout [ 1358.334805][ T5774] Bluetooth: hci3: command 0x0c1a tx timeout [ 1359.328863][T19239] tipc: Enabled bearer , priority 0 [ 1359.375342][T19239] syzkaller0: entered promiscuous mode [ 1359.429208][T19239] syzkaller0: entered allmulticast mode [ 1359.637933][T19239] tipc: Resetting bearer [ 1360.091912][T19238] tipc: Resetting bearer [ 1360.343851][ T5774] Bluetooth: hci4: command 0x206a tx timeout [ 1360.350018][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 1360.358185][T19238] tipc: Disabling bearer [ 1360.405188][T14402] Bluetooth: hci1: command 0x0406 tx timeout [ 1360.406042][ T5774] Bluetooth: hci3: command 0x0c1a tx timeout [ 1360.434548][T19249] bond0: (slave gre0): Error: Device type is different from other slaves [ 1361.348826][T19268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3731'. [ 1361.849959][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.856613][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.484759][T14402] Bluetooth: hci3: command 0x0c1a tx timeout [ 1367.061603][T19284] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1367.151857][T19283] loop0: detected capacity change from 0 to 512 [ 1367.432905][T19283] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 1368.553664][T19298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3740'. [ 1388.075613][T19453] loop3: detected capacity change from 0 to 512 [ 1388.761560][T19453] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1388.773269][T19453] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.3777: iget: bad i_size value: 360287970189639680 [ 1388.787029][T19453] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.3777: couldn't read orphan inode 15 (err -117) [ 1388.800106][T19453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1389.186240][T13666] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1389.588012][ T788] libceph: connect (1)[c::]:6789 error -101 [ 1389.594188][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 1389.669610][T19467] ceph: No mds server is up or the cluster is laggy [ 1390.004618][T19063] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1390.214840][T19063] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1390.226852][T19481] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3783'. [ 1390.244525][T19063] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1390.287383][T19063] usb 4-1: Product: syz [ 1390.309554][T19063] usb 4-1: Manufacturer: syz [ 1390.343246][T19063] usb 4-1: SerialNumber: syz [ 1390.371265][T19063] usb 4-1: config 0 descriptor?? [ 1390.386537][T19063] ch341 4-1:0.0: ch341-uart converter detected [ 1390.958501][T19493] loop2: detected capacity change from 0 to 512 [ 1390.967466][T19493] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1391.556401][T19493] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.3789: iget: bad i_size value: 360287970189639680 [ 1391.570369][T19493] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.3789: couldn't read orphan inode 15 (err -117) [ 1391.584095][T19493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1391.857047][T15277] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1391.980310][T19063] ch341-uart ttyUSB0: failed to read break control: -71 [ 1392.024604][T19063] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1392.066037][T19063] usb 4-1: USB disconnect, device number 47 [ 1392.125786][T19063] ch341 4-1:0.0: device disconnected [ 1392.434736][ T5805] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1392.626735][ T5805] usb 3-1: Using ep0 maxpacket: 16 [ 1392.671777][ T5805] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1392.701502][ T5805] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1392.701822][T19063] libceph: connect (1)[c::]:6789 error -101 [ 1392.718156][ T5805] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1392.735536][ T5805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.767873][T19063] libceph: mon0 (1)[c::]:6789 connect error [ 1392.802424][T19507] ceph: No mds server is up or the cluster is laggy [ 1393.172162][ T5805] usbhid 3-1:128.0: can't add hid device: -71 [ 1393.193536][ T5805] usbhid: probe of 3-1:128.0 failed with error -71 [ 1393.234181][ T5805] usb 3-1: USB disconnect, device number 63 [ 1394.784550][ T788] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1394.955393][ T788] usb 3-1: device descriptor read/64, error -71 [ 1395.234716][ T788] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1395.435355][ T788] usb 3-1: device descriptor read/64, error -71 [ 1395.764928][ T788] usb usb3-port1: attempt power cycle [ 1396.209949][T19535] loop0: detected capacity change from 0 to 512 [ 1396.374750][T19535] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1396.746650][ T788] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 1396.774883][T19535] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.3800: iget: bad i_size value: 360287970189639680 [ 1396.788721][ T788] usb 3-1: device descriptor read/8, error -71 [ 1396.798766][T19535] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.3800: couldn't read orphan inode 15 (err -117) [ 1396.823021][T19535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1397.016688][T13219] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1397.078585][ T788] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 1397.135168][ T788] usb 3-1: device descriptor read/8, error -71 [ 1397.270197][ T788] usb usb3-port1: unable to enumerate USB device [ 1397.551439][T19548] ceph: No mds server is up or the cluster is laggy [ 1397.944543][T19063] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1399.556210][T19063] usb 3-1: Using ep0 maxpacket: 16 [ 1402.511571][T19063] usb 3-1: unable to read config index 0 descriptor/all [ 1402.523642][T19063] usb 3-1: can't read configurations, error -71 [ 1403.584611][T15124] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1403.765058][T15124] usb 6-1: device descriptor read/64, error -71 [ 1404.065007][T15124] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1404.227558][T15124] usb 6-1: device descriptor read/64, error -71 [ 1404.284768][T19063] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1404.344710][T15124] usb usb6-port1: attempt power cycle [ 1408.827155][T19063] usb 1-1: Using ep0 maxpacket: 16 [ 1408.923920][T19063] usb 1-1: device descriptor read/all, error -71 [ 1409.638309][T19623] syzkaller0: entered promiscuous mode [ 1409.658986][T19623] syzkaller0: entered allmulticast mode [ 1411.122275][T19644] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 1411.130341][T15904] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 1411.227650][T19644] (null): rxe_set_mtu: Set mtu to 1024 [ 1411.253913][T19644] rdma_rxe: rxe_newlink: failed to add bond0 [ 1411.305835][T15904] usb 4-1: device descriptor read/64, error -71 [ 1411.884603][T15904] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 1412.694484][T15904] usb 4-1: device descriptor read/64, error -71 [ 1412.724665][T15124] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 1412.834800][T15904] usb usb4-port1: attempt power cycle [ 1412.874628][T15124] usb 1-1: device descriptor read/64, error -71 [ 1412.965766][T19664] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 1412.973476][T19664] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 1413.144471][T15124] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 1413.306359][T15124] usb 1-1: device descriptor read/64, error -71 [ 1413.306936][T15904] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 1413.421036][T15904] usb 4-1: device descriptor read/8, error -71 [ 1413.435875][T15124] usb usb1-port1: attempt power cycle [ 1413.754612][T15904] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1413.785227][T15904] usb 4-1: device descriptor read/8, error -71 [ 1413.884837][T15124] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 1413.905211][T15904] usb usb4-port1: unable to enumerate USB device [ 1413.935522][T15124] usb 1-1: device descriptor read/8, error -71 [ 1414.129818][T19675] bond1: (slave macvlan5): Error -98 calling set_mac_address [ 1414.215424][T15124] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1414.236971][T19675] syz0: rxe_newlink: already configured on bond0 [ 1414.266578][T15124] usb 1-1: device descriptor read/8, error -71 [ 1414.384815][T15124] usb usb1-port1: unable to enumerate USB device [ 1415.883900][T19696] syzkaller0: entered promiscuous mode [ 1415.890240][T19696] syzkaller0: entered allmulticast mode [ 1416.644820][ T5805] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 1416.745456][T19706] bond_slave_0: entered promiscuous mode [ 1416.751925][T19706] bond_slave_1: entered promiscuous mode [ 1416.778588][T19706] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1416.791970][T19706] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1416.814559][ T5805] usb 1-1: device descriptor read/64, error -71 [ 1416.851961][T19706] (null): rxe_set_mtu: Set mtu to 1024 [ 1416.871700][T19706] rdma_rxe: rxe_newlink: failed to add bond0 [ 1417.564682][ T5805] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 1417.738719][ T5805] usb 1-1: device descriptor read/64, error -71 [ 1418.051578][ T5805] usb usb1-port1: attempt power cycle [ 1419.726607][ T5805] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 1420.023530][ T5805] usb 1-1: device not accepting address 57, error -71 [ 1420.147507][T19736] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 1420.259677][T19739] (null): rxe_set_mtu: Set mtu to 1024 [ 1420.292677][T19739] rdma_rxe: rxe_newlink: failed to add bond0 [ 1421.603027][T19755] loop5: detected capacity change from 0 to 512 [ 1421.705570][T19755] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1421.735077][T19755] EXT4-fs error (device loop5): ext4_orphan_get:1398: inode #15: comm syz.5.3858: iget: bad i_size value: 360287970189639680 [ 1421.749659][T19755] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.3858: couldn't read orphan inode 15 (err -117) [ 1421.772855][T19755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1422.231929][T17633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1422.564661][ T5825] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1422.764973][ T5825] usb 4-1: device descriptor read/64, error -71 [ 1423.074645][ T5825] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1424.457365][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.463677][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.473178][ T5825] usb 4-1: device descriptor read/64, error -71 [ 1424.605380][ T5825] usb usb4-port1: attempt power cycle [ 1424.965090][T15124] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1425.034514][ T5825] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1425.075224][ T5825] usb 4-1: device descriptor read/8, error -71 [ 1425.157661][T15124] usb 6-1: Using ep0 maxpacket: 8 [ 1425.166893][T15124] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1425.179093][T15124] usb 6-1: config 140 has an invalid interface number: 182 but max is 1 [ 1425.190058][T15124] usb 6-1: config 140 has no interface number 1 [ 1425.202561][T15124] usb 6-1: config 140 interface 182 has no altsetting 0 [ 1425.214945][T15124] usb 6-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 1425.225943][T15124] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.234062][T15124] usb 6-1: Product: syz [ 1425.241588][T15124] usb 6-1: Manufacturer: syz [ 1425.249710][T15124] usb 6-1: SerialNumber: syz [ 1425.364717][ T5825] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1425.502723][T19776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.547018][T19783] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1425.564794][T19776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.588230][T15124] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 1425.764602][ T5825] usb 4-1: device not accepting address 55, error -71 [ 1425.777516][ T5825] usb usb4-port1: unable to enumerate USB device [ 1426.327906][T15124] usb 6-1: reset high-speed USB device number 45 using dummy_hcd [ 1426.529658][T19776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.574916][T19776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.632563][T19776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.662665][T19776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.726059][T15124] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1426.775670][T15124] usb 6-1: device firmware changed [ 1426.796958][T15124] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1426.809908][ T5825] usb 6-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 1426.819407][T15124] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 1426.827526][ T5825] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 1426.856891][T15124] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 1426.873257][T15124] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1426.882000][T15124] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 1426.935967][T15124] usb 6-1: USB disconnect, device number 45 [ 1426.967722][T15124] usb 6-1: [ueagle-atm] ADSL device removed [ 1427.094636][ T5805] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1427.504254][ T5805] usb 3-1: Using ep0 maxpacket: 32 [ 1427.622397][ T5774] Bluetooth: hci3: command 0x0c1a tx timeout [ 1427.755720][ T5805] usb 3-1: config 0 has an invalid interface number: 121 but max is 0 [ 1427.802747][ T5805] usb 3-1: config 0 has no interface number 0 [ 1427.890741][ T5805] usb 3-1: config 0 interface 121 altsetting 7 has an invalid endpoint with address 0x57, skipping [ 1427.914524][ T5805] usb 3-1: config 0 interface 121 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 1427.944606][ T5805] usb 3-1: config 0 interface 121 has no altsetting 0 [ 1427.962150][ T5805] usb 3-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=1d.dc [ 1427.971788][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.994477][ T5805] usb 3-1: Product: syz [ 1427.998761][ T5805] usb 3-1: Manufacturer: syz [ 1428.004358][ T5805] usb 3-1: SerialNumber: syz [ 1428.012895][ T5805] usb 3-1: config 0 descriptor?? [ 1428.025498][T19790] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1429.344210][ T788] usb 3-1: USB disconnect, device number 70 [ 1429.874685][T15124] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 1430.034799][T15124] usb 6-1: device descriptor read/64, error -71 [ 1430.306198][T15124] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 1430.751660][T15124] usb 6-1: device descriptor read/64, error -71 [ 1430.890039][T15124] usb usb6-port1: attempt power cycle [ 1431.125939][T19825] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3878'. [ 1431.186790][T19826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3878'. [ 1431.215305][T19826] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1431.225509][T19826] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1431.234478][T19826] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1431.243331][T19826] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1431.269278][T19826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3878'. [ 1431.374638][T15124] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1431.917685][T15124] usb 6-1: device descriptor read/8, error -71 [ 1432.204797][T15124] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 1432.247703][T15124] usb 6-1: device descriptor read/8, error -71 [ 1432.334651][T14402] Bluetooth: hci3: command 0x0c1a tx timeout [ 1432.375829][T15124] usb usb6-port1: unable to enumerate USB device [ 1438.866004][ T788] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1439.214488][ T788] usb 3-1: device descriptor read/64, error -71 [ 1440.703443][ T788] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1440.874780][ T788] usb 3-1: device descriptor read/64, error -71 [ 1440.965472][T19871] tipc: Started in network mode [ 1440.970484][T19871] tipc: Node identity 5af14a014c19, cluster identity 4711 [ 1440.985259][T19871] tipc: Enabled bearer , priority 0 [ 1441.002377][T19871] tipc: Resetting bearer [ 1441.025612][ T788] usb usb3-port1: attempt power cycle [ 1441.035562][T19870] tipc: Disabling bearer [ 1443.781574][T14402] Bluetooth: hci3: command 0x0c1a tx timeout [ 1447.984901][T15124] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 1448.459381][T15124] usb 6-1: device descriptor read/64, error -71 [ 1448.614507][ T5156] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1448.956919][T19933] tipc: Enabled bearer , priority 0 [ 1448.968282][T19933] tipc: Resetting bearer [ 1448.974930][ T5156] usb 3-1: Using ep0 maxpacket: 16 [ 1448.984028][ T5156] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1449.008847][ T5156] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1449.020046][T19932] tipc: Disabling bearer [ 1449.027648][ T5156] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1449.038720][ T5156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.049308][T19937] (null): rxe_set_mtu: Set mtu to 1024 [ 1449.061006][T19937] rdma_rxe: rxe_newlink: failed to add bond0 [ 1449.074704][T15124] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 1450.876435][T15124] usb 6-1: device descriptor read/64, error -71 [ 1451.034830][T15124] usb usb6-port1: attempt power cycle [ 1451.109200][ T5156] mcp2221 0003:04D8:00DD.0022: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1451.310907][ T5805] usb 3-1: USB disconnect, device number 74 [ 1453.564494][ T5805] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 1453.628474][T19971] bond1: (slave macvlan5): Error -98 calling set_mac_address [ 1454.890834][T19974] tipc: Enabled bearer , priority 0 [ 1454.922307][T19974] tipc: Resetting bearer [ 1454.959877][T19971] syz0: rxe_newlink: already configured on bond0 [ 1454.967509][T19972] tipc: Disabling bearer [ 1454.999123][ T5805] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1455.014556][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.024496][ T5805] usb 6-1: Product: syz [ 1455.028762][ T5805] usb 6-1: Manufacturer: syz [ 1455.033466][ T5805] usb 6-1: SerialNumber: syz [ 1455.069455][ T5805] usb 6-1: config 0 descriptor?? [ 1455.087646][ T5805] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1455.234634][T19984] Cannot find set identified by id 65535 to match [ 1455.775873][ T5805] gspca_stk1135: reg_w 0x2 err -110 [ 1455.832095][ T5805] gspca_stk1135: serial bus timeout: status=0x00 [ 1456.174545][ T5805] gspca_stk1135: Sensor write failed [ 1456.183433][ T5805] gspca_stk1135: serial bus timeout: status=0x00 [ 1456.194517][ T5805] gspca_stk1135: Sensor write failed [ 1456.200688][ T5805] gspca_stk1135: serial bus timeout: status=0x00 [ 1456.234418][ T5805] gspca_stk1135: Sensor read failed [ 1456.239823][ T5805] gspca_stk1135: serial bus timeout: status=0x00 [ 1456.260681][ T5805] gspca_stk1135: Sensor read failed [ 1456.270837][ T5805] gspca_stk1135: Detected sensor type unknown (0x0) [ 1456.297704][ T5805] gspca_stk1135: serial bus timeout: status=0x00 [ 1456.304199][ T5805] gspca_stk1135: Sensor read failed [ 1456.331709][ T5805] gspca_stk1135: serial bus timeout: status=0x00 [ 1456.351995][ T5805] gspca_stk1135: Sensor read failed [ 1456.384442][ T5805] gspca_stk1135: serial bus timeout: status=0x00 [ 1456.399154][ T5805] gspca_stk1135: Sensor write failed [ 1456.414105][ T5805] gspca_stk1135: serial bus timeout: status=0x00 [ 1456.424414][ T5805] gspca_stk1135: Sensor write failed [ 1456.429968][ T5805] stk1135: probe of 6-1:0.0 failed with error -110 [ 1456.666811][T19996] ubi1: attaching mtd0 [ 1457.854679][ T5805] usb 6-1: USB disconnect, device number 53 [ 1459.707379][ T788] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1460.070250][ T788] usb 1-1: no configurations [ 1460.074963][ T788] usb 1-1: can't read configurations, error -22 [ 1460.244621][ T788] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 1460.454967][T20018] tipc: Enabled bearer , priority 0 [ 1460.503714][T20018] tipc: Resetting bearer [ 1460.527899][ T788] usb 1-1: no configurations [ 1460.654533][ T788] usb 1-1: can't read configurations, error -22 [ 1460.697262][ T788] usb usb1-port1: attempt power cycle [ 1460.748433][T20017] tipc: Disabling bearer [ 1461.144513][ T788] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 1461.196078][ T788] usb 1-1: no configurations [ 1461.200783][ T788] usb 1-1: can't read configurations, error -22 [ 1461.374661][ T788] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1462.145070][ T788] usb 1-1: no configurations [ 1462.150275][ T788] usb 1-1: can't read configurations, error -22 [ 1462.194685][ T788] usb usb1-port1: unable to enumerate USB device [ 1462.900813][T20036] ubi1: attaching mtd0 [ 1465.554461][ T788] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1465.922876][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 1465.933234][ T788] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 1466.093309][ T788] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1466.214603][ T788] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1466.429826][ T788] usb 4-1: Product: syz [ 1466.475662][ T788] usb 4-1: Manufacturer: syz [ 1466.538343][ T788] usb 4-1: SerialNumber: syz [ 1466.586551][ T788] usb 4-1: config 0 descriptor?? [ 1466.627159][T20056] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1467.319158][T20056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.346442][T20056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.400115][ T5156] usb 4-1: USB disconnect, device number 56 [ 1468.632678][T20085] ubi1: attaching mtd0 [ 1469.875370][ T5774] Bluetooth: hci3: command 0x0c1a tx timeout [ 1471.419927][ T11] hsr_slave_0: left promiscuous mode [ 1471.456178][ T11] hsr_slave_1: left promiscuous mode [ 1471.465069][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1471.539179][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1471.741357][ T11] bridge_slave_0: left allmulticast mode [ 1471.796083][ T11] bridge_slave_0: left promiscuous mode [ 1471.859968][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.045057][T20104] tmpfs: Unknown parameter 'grpquota_b' [ 1473.134543][T15904] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1473.340393][T15904] usb 1-1: Using ep0 maxpacket: 32 [ 1473.349324][T15904] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 1473.363144][T15904] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1473.376683][T15904] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1473.394596][T15904] usb 1-1: Product: syz [ 1473.424487][T15904] usb 1-1: Manufacturer: syz [ 1473.439547][T15904] usb 1-1: SerialNumber: syz [ 1473.455726][T15904] usb 1-1: config 0 descriptor?? [ 1473.486099][T20110] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1473.718214][T20110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.780701][T20110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.954828][T15904] usb 1-1: USB disconnect, device number 63 [ 1475.482092][T20126] ubi1: attaching mtd0 [ 1477.838610][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1478.255413][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1478.393229][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1478.540822][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1478.578589][T20149] tmpfs: Unknown parameter 'grpquota_b' [ 1479.867667][ T11] bond0 (unregistering): Released all slaves [ 1480.524722][ T5805] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1481.044483][ T5805] usb 3-1: Using ep0 maxpacket: 32 [ 1481.056909][ T11] IPVS: stop unused estimator thread 0... [ 1481.066354][ T5805] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 1481.155452][ T5805] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1481.164906][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1481.173221][ T5805] usb 3-1: Product: syz [ 1481.232816][ T5805] usb 3-1: Manufacturer: syz [ 1481.244602][ T5805] usb 3-1: SerialNumber: syz [ 1481.265511][ T5805] usb 3-1: config 0 descriptor?? [ 1481.285365][T20158] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1481.540378][T20158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1481.554872][T20158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1481.636263][ T5805] usb 3-1: USB disconnect, device number 75 [ 1482.159738][T20178] tmpfs: Unknown parameter 'grpquota_b' [ 1483.129934][T20190] affs: No valid root block on device nullb0 [ 1484.737245][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.793970][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.093871][T20206] ubi1: attaching mtd0 [ 1486.534200][T20211] tmpfs: Unknown parameter 'grpquota_block_har' [ 1487.768286][T20227] affs: No valid root block on device nullb0 [ 1491.029056][ T5825] ------------[ cut here ]------------ [ 1491.035347][ T5825] sysfs group 'power' not found for kobject 'ueagle-atm!eagleI.fw' [ 1491.043294][T14429] usb 6-1: [UEAGLE-ATM] firmware is not available [ 1491.874985][ T5825] WARNING: CPU: 1 PID: 5825 at fs/sysfs/group.c:284 sysfs_remove_group+0x178/0x2a0 [ 1491.884683][ T5825] Modules linked in: [ 1491.888681][ T5825] CPU: 1 PID: 5825 Comm: kworker/1:6 Not tainted syzkaller #0 [ 1491.896207][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1491.906392][ T5825] Workqueue: events request_firmware_work_func [ 1491.912642][ T5825] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 1491.918545][ T5825] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 7a 21 c9 ff 49 8b 17 48 c7 c7 80 b6 da 8a 48 89 de e8 68 b3 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c2 f1 70 ff [ 1491.938760][ T5825] RSP: 0018:ffffc90004d4f800 EFLAGS: 00010246 [ 1491.945189][ T5825] RAX: cc066a62df71d000 RBX: ffffffff8b41ad40 RCX: ffff8880213b3c00 [ 1491.953187][ T5825] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1491.959972][T20244] tmpfs: Unknown parameter 'grpquota_block_har' [ 1491.961501][ T5825] RBP: dffffc0000000000 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 1491.975642][ T5825] R10: dffffc0000000000 R11: ffffed10171e5183 R12: 1ffffffff16835ac [ 1491.983640][ T5825] R13: 0000000000000001 R14: ffff8880656c0ba0 R15: ffff88801beb6008 [ 1491.991763][ T5825] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1492.000794][ T5825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1492.007445][ T5825] CR2: 00007ff1b75456b8 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 1492.015469][ T5825] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1492.023433][ T5825] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1492.031416][ T5825] Call Trace: [ 1492.034734][ T5825] [ 1492.037656][ T5825] ? sysfs_unmerge_group+0x10d/0x130 [ 1492.042944][ T5825] device_del+0x251/0x910 [ 1492.047370][ T5825] ? lockdep_hardirqs_on+0x98/0x150 [ 1492.052656][ T5825] ? kill_device+0x160/0x160 [ 1492.057310][ T5825] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1492.063276][ T5825] ? _raw_spin_unlock+0x40/0x40 [ 1492.068153][ T5825] ? complete_all+0xd0/0x1d0 [ 1492.072768][ T5825] firmware_fallback_sysfs+0x682/0x930 [ 1492.078281][ T5825] _request_firmware+0xf27/0x1510 [ 1492.083310][ T5825] ? request_firmware+0x50/0x50 [ 1492.088239][ T5825] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1492.094260][ T5825] ? read_lock_is_recursive+0x20/0x20 [ 1492.099742][ T5825] request_firmware_work_func+0xb0/0x1b0 [ 1492.105466][ T5825] ? process_scheduled_works+0x96f/0x15d0 [ 1492.111202][ T5825] process_scheduled_works+0xa5d/0x15d0 [ 1492.116799][ T5825] ? assign_work+0x430/0x430 [ 1492.121384][ T5825] ? assign_work+0x3d0/0x430 [ 1492.125999][ T5825] worker_thread+0xa55/0xfc0 [ 1492.130594][ T5825] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1492.136538][ T5825] ? _raw_spin_unlock+0x40/0x40 [ 1492.141388][ T5825] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1492.147314][ T5825] kthread+0x2fa/0x390 [ 1492.151382][ T5825] ? pr_cont_work+0x560/0x560 [ 1492.156127][ T5825] ? kthread_blkcg+0xd0/0xd0 [ 1492.160731][ T5825] ret_from_fork+0x48/0x80 [ 1492.165386][ T5825] ? kthread_blkcg+0xd0/0xd0 [ 1492.169969][ T5825] ret_from_fork_asm+0x11/0x20 [ 1492.174797][ T5825] [ 1492.177808][ T5825] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1492.185077][ T5825] CPU: 1 PID: 5825 Comm: kworker/1:6 Not tainted syzkaller #0 [ 1492.192517][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1492.202599][ T5825] Workqueue: events request_firmware_work_func [ 1492.208755][ T5825] Call Trace: [ 1492.212027][ T5825] [ 1492.214965][ T5825] dump_stack_lvl+0x18c/0x250 [ 1492.219663][ T5825] ? show_regs_print_info+0x20/0x20 [ 1492.224860][ T5825] ? load_image+0x400/0x400 [ 1492.229389][ T5825] panic+0x2dc/0x730 [ 1492.233274][ T5825] ? bpf_jit_dump+0xd0/0xd0 [ 1492.237779][ T5825] ? ret_from_fork_asm+0x11/0x20 [ 1492.242725][ T5825] __warn+0x2e0/0x470 [ 1492.246712][ T5825] ? sysfs_remove_group+0x178/0x2a0 [ 1492.251907][ T5825] ? sysfs_remove_group+0x178/0x2a0 [ 1492.257096][ T5825] report_bug+0x2be/0x4f0 [ 1492.261480][ T5825] ? sysfs_remove_group+0x178/0x2a0 [ 1492.266666][ T5825] ? sysfs_remove_group+0x178/0x2a0 [ 1492.271857][ T5825] ? sysfs_remove_group+0x17a/0x2a0 [ 1492.277053][ T5825] handle_bug+0xcf/0x120 [ 1492.281292][ T5825] exc_invalid_op+0x1a/0x50 [ 1492.285785][ T5825] asm_exc_invalid_op+0x1a/0x20 [ 1492.290698][ T5825] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 1492.296497][ T5825] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 7a 21 c9 ff 49 8b 17 48 c7 c7 80 b6 da 8a 48 89 de e8 68 b3 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c2 f1 70 ff [ 1492.316446][ T5825] RSP: 0018:ffffc90004d4f800 EFLAGS: 00010246 [ 1492.322506][ T5825] RAX: cc066a62df71d000 RBX: ffffffff8b41ad40 RCX: ffff8880213b3c00 [ 1492.330473][ T5825] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1492.338438][ T5825] RBP: dffffc0000000000 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 1492.346406][ T5825] R10: dffffc0000000000 R11: ffffed10171e5183 R12: 1ffffffff16835ac [ 1492.354376][ T5825] R13: 0000000000000001 R14: ffff8880656c0ba0 R15: ffff88801beb6008 [ 1492.362388][ T5825] ? sysfs_unmerge_group+0x10d/0x130 [ 1492.367688][ T5825] device_del+0x251/0x910 [ 1492.372019][ T5825] ? lockdep_hardirqs_on+0x98/0x150 [ 1492.377222][ T5825] ? kill_device+0x160/0x160 [ 1492.381802][ T5825] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1492.387685][ T5825] ? _raw_spin_unlock+0x40/0x40 [ 1492.392527][ T5825] ? complete_all+0xd0/0x1d0 [ 1492.397110][ T5825] firmware_fallback_sysfs+0x682/0x930 [ 1492.402573][ T5825] _request_firmware+0xf27/0x1510 [ 1492.407603][ T5825] ? request_firmware+0x50/0x50 [ 1492.412455][ T5825] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1492.418429][ T5825] ? read_lock_is_recursive+0x20/0x20 [ 1492.423795][ T5825] request_firmware_work_func+0xb0/0x1b0 [ 1492.429426][ T5825] ? process_scheduled_works+0x96f/0x15d0 [ 1492.435140][ T5825] process_scheduled_works+0xa5d/0x15d0 [ 1492.440865][ T5825] ? assign_work+0x430/0x430 [ 1492.445449][ T5825] ? assign_work+0x3d0/0x430 [ 1492.450044][ T5825] worker_thread+0xa55/0xfc0 [ 1492.454637][ T5825] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1492.460521][ T5825] ? _raw_spin_unlock+0x40/0x40 [ 1492.465362][ T5825] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1492.471253][ T5825] kthread+0x2fa/0x390 [ 1492.475308][ T5825] ? pr_cont_work+0x560/0x560 [ 1492.479979][ T5825] ? kthread_blkcg+0xd0/0xd0 [ 1492.484563][ T5825] ret_from_fork+0x48/0x80 [ 1492.488968][ T5825] ? kthread_blkcg+0xd0/0xd0 [ 1492.493540][ T5825] ret_from_fork_asm+0x11/0x20 [ 1492.498313][ T5825] [ 1492.501665][ T5825] Kernel Offset: disabled [ 1492.506074][ T5825] Rebooting in 86400 seconds..