last executing test programs: 1m34.50987479s ago: executing program 1 (id=705): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0x5, 0x1}, {0x4d, 0x2}, @cond=[{0x9, 0x528c, 0xc, 0x800, 0xf535, 0xf4a}, {0x4000, 0x805, 0x1, 0x7, 0x0, 0xffff}]}) write$char_usb(r1, 0x0, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000001300)=""/115) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="140800000000009465f381ab504f", 0x0, 0xffffff00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = io_uring_setup(0x2ea0, &(0x7f0000000280)={0x0, 0xb201, 0x5c108, 0x0, 0x335}) mmap$IORING_OFF_SQES(0x0, 0x8, 0x1, 0x40010, r3, 0x10000000) 1m33.094537868s ago: executing program 1 (id=710): dup(0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x3b, 0x100000000023e) 1m30.25843395s ago: executing program 0 (id=725): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) creat(0x0, 0x40) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x113, 0x2) 1m27.946194888s ago: executing program 0 (id=730): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902130001000000000904"], 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xaa941, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@s={0x5, @SEQ_MIDIPUTC=0x88, 0x1c, 0x80}) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000040)={&(0x7f0000000080)=[{0x6, 0x0, 0x4e, &(0x7f00000001c0)="9fbae97b18e54cffc6804433f329e43710ca0305e3546b0dd155c4c2a7beb59874cf7c6ab128aaf75bc3ca56914fc475a769600702e894f0406207cc244a662f17f9b6fb03c708df1d5455453e87"}], 0x1}) 1m26.055197971s ago: executing program 0 (id=732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000200)={0x1f, 0x5, 0x2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x293, 0x0, 0x6}]}) 1m25.06536151s ago: executing program 0 (id=736): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x17, 0x3, "4d5ac8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e20, @loopback}}) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e28, @remote}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea44000000000000000000000000000000000000000000000000010000000000000009000000000000000a0080ffffffffffffff000000000000010000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x38e4) r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_TUNER(r8, 0xc054561d, &(0x7f00000000c0)={0x6, "13f20afd86c17f9dfa507069d57c6684154bc7ec29052b9ec48e707a4f251dd9", 0x0, 0x100, 0x0, 0x3, 0x4}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r6, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r9, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x3}}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8, 0x3, 0x10000000}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1m24.609136163s ago: executing program 3 (id=738): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 1m23.395446444s ago: executing program 3 (id=739): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) read(r0, &(0x7f0000000100)=""/217, 0xd9) 1m21.816550717s ago: executing program 3 (id=742): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) writev(r1, &(0x7f00000006c0)=[{&(0x7f00000002c0)="a6b1", 0x2}], 0x1) 1m21.267905431s ago: executing program 1 (id=743): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902130001000000000904"], 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xaa941, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@s={0x5, @SEQ_MIDIPUTC=0x88, 0x1c, 0x80}) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000040)={&(0x7f0000000080)=[{0x6, 0x0, 0x4e, &(0x7f00000001c0)="9fbae97b18e54cffc6804433f329e43710ca0305e3546b0dd155c4c2a7beb59874cf7c6ab128aaf75bc3ca56914fc475a769600702e894f0406207cc244a662f17f9b6fb03c708df1d5455453e87"}], 0x1}) 1m21.133217535s ago: executing program 0 (id=744): r0 = fsopen(&(0x7f0000000380)='rpc_pipefs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f0000000300)={0x11, 0x4, 0x0, 0x1, 0x8, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x36, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = fsopen(&(0x7f0000000180)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800cac300001400010300000000000000001e000000c1"], 0x18}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m20.984703423s ago: executing program 4 (id=745): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbf9, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x6}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xfff3}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x8000) 1m19.983774437s ago: executing program 0 (id=748): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x1195, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x3c24, 0x32, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 1m19.602423505s ago: executing program 4 (id=751): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x1d58078d8c26741e}, 0x44000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4040021}, 0x30) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x3feb, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x10002, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1m19.467584908s ago: executing program 1 (id=752): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0x5, 0x1}, {0x4d, 0x2}, @cond=[{0x9, 0x528c, 0xc, 0x800, 0xf535, 0xf4a}, {0x4000, 0x805, 0x1, 0x7, 0x0, 0xffff}]}) write$char_usb(r1, &(0x7f0000000040), 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000001300)=""/115) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="140800000000009465f381ab504f", 0x0, 0xffffff00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = io_uring_setup(0x2ea0, &(0x7f0000000280)={0x0, 0xb201, 0x5c108, 0x0, 0x335}) mmap$IORING_OFF_SQES(0x0, 0x8, 0x1, 0x40010, r3, 0x10000000) 1m17.978089131s ago: executing program 4 (id=753): gettid() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x0, 0x0, 0x148, 0x160, 0x148, 0x358, 0x240, 0x240, 0x358, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010101, @empty, 0xffffff00, 0xffffffff, 'pim6reg0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x16, 0x1, 0x23}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x8, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x1a, 0x19, 0x22, 0x202c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x6, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/20, 0x14}, 0x7}], 0x4000000000000d4, 0x102, 0x0) 1m17.84395914s ago: executing program 1 (id=754): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa0, 0x0, &(0x7f0000001300)="b461802305624431ed33730100010446b20aed0200000000000000d5fe00c6fc6ef8eef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed60abbc5f6322cbfac4973cf2bef7c0b4452e43e69aa108690000093f656d8f630632395fd3377dc1ee6daeeae21d79df2cb07600dbf28eda3f94df97f6296b9bc0a0aa770b5588c5b3ca96e7e20df71b37ba8bb62cd98e8a769e328b576d95a7", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x200c2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x800) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100000009043efd1602020000052406000005240000000d240f010000000000000000000424020209058103400000000009058202000200000009050302"], 0x0) 1m17.748593682s ago: executing program 3 (id=755): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x53d1031b82bee840, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x500, 0x8000) memfd_create(&(0x7f0000000000)='{#\')!\x00', 0x20000006) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) 1m17.629418496s ago: executing program 4 (id=756): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1d58078d8c26741e}, 0x44000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4040021}, 0x30) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x3feb, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x10002, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1m16.742439294s ago: executing program 3 (id=758): r0 = fsopen(&(0x7f0000000380)='rpc_pipefs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f0000000300)={0x11, 0x4, 0x0, 0x1, 0x8, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x36, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = fsopen(&(0x7f0000000180)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800cac300001400010300000000000000001e000000c1"], 0x18}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m16.694541342s ago: executing program 4 (id=759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x24000000, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x100}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x4c, 0x3, "a2c1a7cbfb9e5520afcc0261ca345aae5da2dd8dc5764f1b076362b68671f6b90a1e740e18504254814dc7b05be9fb84ded9fc2a9b616eda0025ab00"/72}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'rateest\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x108}}, 0x0) 1m15.983991564s ago: executing program 4 (id=761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd28, 0x25dffbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0xc4) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x3, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', r3, &(0x7f0000000200)='./cgroup.net/cgroup.procs\x00') close(r2) syz_clone3(0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000001000)={0x4, 0x7, 0x2, 0x2, 0x6}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r5, 0x321, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x4000000) 1m15.41394029s ago: executing program 3 (id=763): r0 = socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="780000000101010400000000000000000200001208000740000000002400028014000180080001"], 0x78}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24040851}, 0x4041080) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x17, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40000060, 0x0, 0x0) 1m14.945812439s ago: executing program 1 (id=764): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)={0x7e, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x5, 0x800, 0x4}}]}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x70bd27, 0x200, {0x2, 0x0, 0x4, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b2404040209", @ANYBLOB="06c9"], 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ENDIAN(r7, 0x4008af13, &(0x7f00000002c0)={0x0, 0x6}) readlinkat(r6, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r8 = openat$cgroup_int(r2, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x20202, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000040), 0x3b) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB='0g'], 0x27) 1m4.760403479s ago: executing program 32 (id=748): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x1195, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x3c24, 0x32, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 1m0.806503221s ago: executing program 33 (id=761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd28, 0x25dffbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0xc4) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x3, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', r3, &(0x7f0000000200)='./cgroup.net/cgroup.procs\x00') close(r2) syz_clone3(0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000001000)={0x4, 0x7, 0x2, 0x2, 0x6}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r5, 0x321, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x4000000) 1m0.319309552s ago: executing program 34 (id=763): r0 = socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="780000000101010400000000000000000200001208000740000000002400028014000180080001"], 0x78}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24040851}, 0x4041080) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x17, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40000060, 0x0, 0x0) 59.791212792s ago: executing program 35 (id=764): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)={0x7e, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x5, 0x800, 0x4}}]}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x70bd27, 0x200, {0x2, 0x0, 0x4, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b2404040209", @ANYBLOB="06c9"], 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ENDIAN(r7, 0x4008af13, &(0x7f00000002c0)={0x0, 0x6}) readlinkat(r6, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r8 = openat$cgroup_int(r2, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x20202, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000040), 0x3b) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB='0g'], 0x27) 10.274353513s ago: executing program 7 (id=777): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="020026bd7000fbdbdf25040000002c000280060002004e2200000800090009000000080003000400000006000f00e15f000008000400097c000008000400080000003c00028006000b000a00000005000d000000000006000f00edff000006000b000a0000000800090007000000060002004e22000006000e004e24000008000600f8ffffff400003801400020073797a6b616c6c65723000000000000008000100020000000800030001000000060007004e23000008000500ac1e000108000300000000000800060004000000"], 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x4) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = userfaultfd(0x801) openat$iommufd(0xffffffffffffff9c, &(0x7f0000003340), 0x800, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 6.842744835s ago: executing program 5 (id=867): r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000010}) 6.496383544s ago: executing program 5 (id=869): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x326d}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 5.298904129s ago: executing program 7 (id=873): ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x0, @private}, 'syz_tun\x00'}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) close(r2) 5.253357011s ago: executing program 8 (id=874): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r1, 0xda8d) accept4$inet(r1, 0x0, 0x0, 0x800) 5.115994333s ago: executing program 5 (id=875): setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x2904a3b527f1005) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) 4.868460789s ago: executing program 5 (id=876): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x6}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xfff3}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x8000) 4.294804522s ago: executing program 8 (id=878): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)=0x2001) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) read(0xffffffffffffffff, &(0x7f0000000380)=""/66, 0x42) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$snddsp(0xffffffffffffffff, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 4.215045836s ago: executing program 6 (id=879): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 4.053168719s ago: executing program 8 (id=880): unshare(0x8000000) semctl$IPC_RMID(0x0, 0x0, 0x0) 4.049981103s ago: executing program 2 (id=881): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16=0x0, @ANYRES32], 0xfd, 0x6a5, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f000000b680)='.\x00', 0x2000, 0x1180, &(0x7f000000b6c0)) 4.035082973s ago: executing program 7 (id=882): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x4) 4.033937883s ago: executing program 5 (id=883): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000080)=[{0x6, 0x0, 0x4e, &(0x7f00000001c0)="9fbae97b18e54cffc6804433f329e43710ca0305e3546b0dd155c4c2a7beb59874cf7c6ab128aaf75bc3ca56914fc475a769600702e894f0406207cc244a662f17f9b6fb03c708df1d5455453e87"}], 0x1}) 3.941839325s ago: executing program 6 (id=884): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe0}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x6}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xfff3}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x8000) 3.859253344s ago: executing program 7 (id=885): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = getpid() syz_pidfd_open(r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_usb_connect(0x2, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="120100007f107240450c8062fcd5000000010902120001fc0000010904"], 0x0) 3.859069744s ago: executing program 8 (id=886): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) 3.544053701s ago: executing program 2 (id=887): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x2141, 0x59) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 3.050482879s ago: executing program 2 (id=888): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r1, 0xda8d) accept4$inet(r1, 0x0, 0x0, 0x800) 2.777228761s ago: executing program 6 (id=889): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000004100)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x6401011f}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="99", 0x1}, {&(0x7f0000000380)="89a5e7e2d5061ecbb22e42e6a1fa46c8761ede6d75a773dee8fea83182086096500c7183f8a09e2e116c5f4f7e4b9db73dc2e363432d2e50880571a92d7ee970a4b7276af9ead063b9c4dc9f72bb26fa060146354e2c49b09fafda6fe52c1af66c52ff3a96c1dc04b6ebcdb40853bbf356829c3b4a7ba5050ef7411716e157908fd1de7f6c37f6b55ca720561be02cb3942eb1b1528bfd9803aac17a5067c9faf11be77571807315e6341eddc8cc7286439df5668a4a1db696dd7657ec8190c8b2c538f46c4fb192c8234a8f1c9d259de517f0b27128d1a39a79f6d2e607e192cfaf9629b67362c820d35dadadc6517ccbb34331390e", 0xf6}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="a05b", 0x2}], 0x1}}], 0x2, 0x48000) socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000a00)={0x0, 0x80000001}, 0x8) 2.775705782s ago: executing program 8 (id=890): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x1d58078d8c26741e}, 0x44000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4040021}, 0x30) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x3feb, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(0x0) open(&(0x7f0000000080)='./file0\x00', 0x10002, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1.300297825s ago: executing program 7 (id=891): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0x5, 0x1}, {0x4d, 0x2}, @cond=[{0x9, 0x528c, 0xc, 0x800, 0xf535, 0xf4a}, {0x4000, 0x805, 0x1, 0x7, 0x0, 0xffff}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000001300)=""/115) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000240)="14080000000000", 0x0, 0xffffff00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = io_uring_setup(0x2ea0, &(0x7f0000000280)={0x0, 0xb201, 0x5c108, 0x0, 0x335}) mmap$IORING_OFF_SQES(0x0, 0x8, 0x1, 0x40010, r3, 0x10000000) 1.143153264s ago: executing program 2 (id=892): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)=0x2001) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) read(0xffffffffffffffff, &(0x7f0000000380)=""/66, 0x42) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$snddsp(0xffffffffffffffff, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 1.09351478s ago: executing program 8 (id=893): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x17, 0x3, "4d5ac8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e20, @loopback}}) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e28, @remote}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 950.447712ms ago: executing program 6 (id=894): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x123a03, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000180)) 890.706246ms ago: executing program 2 (id=895): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x4) 846.164109ms ago: executing program 7 (id=896): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_connect(0x4, 0x5c, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0xb4, 0x7f, 0x35, 0x20, 0x19d2, 0x13, 0x9c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x5, 0xa0, 0x0, "", [{{0x9, 0x4, 0x3f, 0x6a, 0x1, 0xff, 0xff, 0xff, 0x68, [@hid_hid={0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x781}}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0xb2, 0x9, 0x1002}]}], [{{0x9, 0x5, 0x4, 0x10, 0x20, 0x0, 0x9, 0xd, [@generic={0x1f, 0x21, "48de7b15217956c316940ec8e3820d520899c0032c0cd69fd0ec5709e1"}]}}]}}]}}]}}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000240)={0x1f, 0x1, 0x3, "00f80000000000000000000600000000000000000000000000000000a2ad8632", 0x50424752}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) bpf$PROG_LOAD(0x5, 0x0, 0x0) 755.347163ms ago: executing program 5 (id=897): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000210dc6431450a41d40f157e3512b4b99c026e738de5993f365a0c450b77103ed4a4ce9645d5bda31f3c7059d42c252f8bf6429ca73047cf2160668940f50a78e03514b4a241ac903d9d349a649eb2abefc56cd1ad4da51bca4e370cad9401e0899238a3ce2fbe0aab556b9ba4341a9906debdb2646298351fb5b7ae6dbf1698f4eb5cd65fab44cdf71", @ANYRES16, @ANYRES16=0x0, @ANYRES32], 0xfd, 0x6a5, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f000000b680)='.\x00', 0x2000, 0x1180, &(0x7f000000b6c0)) 555.612991ms ago: executing program 2 (id=898): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x2141, 0x59) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 444.21497ms ago: executing program 6 (id=899): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_emit_vhci(0x0, 0xd) syz_emit_vhci(0x0, 0xd) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02"], 0x9) 0s ago: executing program 6 (id=900): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) kernel console output (not intermixed with test programs): 02] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.754340][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.758685][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.758700][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.758721][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.799918][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.799933][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.799952][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.902550][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.902565][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.902585][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.230348][ T5605] hsr_slave_0: entered promiscuous mode [ 82.231682][ T5605] hsr_slave_1: entered promiscuous mode [ 82.248245][ T5604] hsr_slave_0: entered promiscuous mode [ 82.249470][ T5604] hsr_slave_1: entered promiscuous mode [ 82.250380][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 82.250458][ T5604] Cannot create hsr debugfs directory [ 82.261043][ T5602] hsr_slave_0: entered promiscuous mode [ 82.262858][ T5602] hsr_slave_1: entered promiscuous mode [ 82.264432][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 82.264453][ T5602] Cannot create hsr debugfs directory [ 82.275642][ T5603] hsr_slave_0: entered promiscuous mode [ 82.277367][ T5603] hsr_slave_1: entered promiscuous mode [ 82.278731][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 82.278751][ T5603] Cannot create hsr debugfs directory [ 82.394175][ T4919] Bluetooth: hci0: command tx timeout [ 82.394204][ T4919] Bluetooth: hci4: command tx timeout [ 82.474177][ T5615] Bluetooth: hci1: command tx timeout [ 82.554258][ T5615] Bluetooth: hci2: command tx timeout [ 82.554289][ T5615] Bluetooth: hci3: command tx timeout [ 82.563804][ T5601] hsr_slave_0: entered promiscuous mode [ 82.566385][ T5601] hsr_slave_1: entered promiscuous mode [ 82.567795][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 82.567816][ T5601] Cannot create hsr debugfs directory [ 83.327470][ T5605] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.382081][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.394817][ T5605] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.432578][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.446213][ T5605] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.482274][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.504970][ T5605] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.538459][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.668992][ T5602] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.701550][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.711568][ T5602] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.750107][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.763930][ T5602] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.809013][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.829350][ T5602] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.859251][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.977973][ T5603] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.037305][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.043727][ T5603] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.067488][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.073139][ T5603] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.112939][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.146295][ T5603] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.191222][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.349533][ T5604] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.379190][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.385173][ T5604] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.427196][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.440465][ T5604] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.474264][ T4919] Bluetooth: hci4: command tx timeout [ 84.474293][ T4919] Bluetooth: hci0: command tx timeout [ 84.479120][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.537864][ T5604] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.554510][ T5615] Bluetooth: hci1: command tx timeout [ 84.560138][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.634204][ T5615] Bluetooth: hci3: command tx timeout [ 84.634234][ T5615] Bluetooth: hci2: command tx timeout [ 84.648083][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.722190][ T5601] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.748221][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.764941][ T5601] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.817379][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.822267][ T5601] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.845892][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.862217][ T5601] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.898247][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.945301][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.995461][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.995630][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.031381][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.067288][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.067397][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.166193][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.217809][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.230642][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.230857][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.275946][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.276489][ T1192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.359578][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.447170][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.476241][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.476472][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.627006][ T215] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.627170][ T215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.725901][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.753470][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.812106][ T1192] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.812318][ T1192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.913176][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.922965][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.047416][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.170911][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.171437][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.235428][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.235612][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.302337][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.555509][ T4919] Bluetooth: hci0: command tx timeout [ 86.555538][ T4919] Bluetooth: hci4: command tx timeout [ 86.634676][ T5615] Bluetooth: hci1: command tx timeout [ 86.714262][ T4919] Bluetooth: hci3: command tx timeout [ 86.714306][ T5615] Bluetooth: hci2: command tx timeout [ 86.740972][ T5605] veth0_vlan: entered promiscuous mode [ 86.818369][ T5605] veth1_vlan: entered promiscuous mode [ 87.121045][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.220951][ T5605] veth0_macvtap: entered promiscuous mode [ 87.252008][ T5605] veth1_macvtap: entered promiscuous mode [ 87.308962][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.414965][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.533308][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.605195][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.651922][ T45] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.668334][ T5602] veth0_vlan: entered promiscuous mode [ 87.683178][ T45] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.692160][ T45] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.738545][ T45] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.967788][ T5602] veth1_vlan: entered promiscuous mode [ 88.061383][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.098298][ T5603] veth0_vlan: entered promiscuous mode [ 88.327234][ T5603] veth1_vlan: entered promiscuous mode [ 88.433101][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.433127][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.500842][ T5602] veth0_macvtap: entered promiscuous mode [ 88.588338][ T5602] veth1_macvtap: entered promiscuous mode [ 88.600921][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.600940][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.662626][ T5604] veth0_vlan: entered promiscuous mode [ 88.686112][ T5601] veth0_vlan: entered promiscuous mode [ 88.699705][ T5603] veth0_macvtap: entered promiscuous mode [ 88.759594][ T5603] veth1_macvtap: entered promiscuous mode [ 88.777938][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.779268][ T5604] veth1_vlan: entered promiscuous mode [ 88.809793][ T5601] veth1_vlan: entered promiscuous mode [ 88.833737][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.898054][ T1157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.913523][ T1157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.926210][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.928428][ T1157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.956122][ T1157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.003640][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.088030][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.215543][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.252056][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.291248][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.318363][ T5604] veth0_macvtap: entered promiscuous mode [ 89.504900][ T5601] veth0_macvtap: entered promiscuous mode [ 89.527409][ T5604] veth1_macvtap: entered promiscuous mode [ 89.688409][ T5601] veth1_macvtap: entered promiscuous mode [ 89.913742][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.913762][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.031238][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.096325][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.136851][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.170136][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.170156][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.209512][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.260510][ T215] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.276743][ T215] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.283436][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.283454][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.318786][ T215] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.342169][ T215] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.351526][ T215] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.388231][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.397537][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.407452][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.523839][ T5806] tipc: Can't bind to reserved service type 0 [ 90.619030][ T5808] loop1: detected capacity change from 0 to 2048 [ 90.961109][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.961127][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.991387][ T5808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.892140][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.240271][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.240291][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.086540][ T5828] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11'. [ 93.317016][ T5827] loop1: detected capacity change from 0 to 128 [ 93.342219][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.342238][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.568722][ T5827] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.587391][ T5827] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.922609][ T5835] Zero length message leads to an empty skb [ 94.017098][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.017116][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.085497][ T5605] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.153009][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.153028][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.934700][ T5336] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.023150][ T5865] netlink: 120 bytes leftover after parsing attributes in process `syz.2.22'. [ 99.046690][ T5863] loop0: detected capacity change from 0 to 512 [ 99.247035][ T5858] loop4: detected capacity change from 0 to 1024 [ 99.324881][ T5863] EXT4-fs: Ignoring removed orlov option [ 99.341333][ T5336] usb 2-1: Using ep0 maxpacket: 32 [ 99.351298][ T5336] usb 2-1: device descriptor read/all, error -71 [ 99.506682][ T5858] EXT4-fs: Ignoring removed nobh option [ 99.506731][ T5858] EXT4-fs: Ignoring removed i_version option [ 99.851775][ T5863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.851905][ T5863] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.981430][ T5858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.938910][ T38] audit: type=1800 audit(1782742957.151:2): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 101.938940][ T38] audit: type=1800 audit(1782742957.161:3): pid=5863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 102.241993][ T5601] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.363629][ T5892] loop2: detected capacity change from 0 to 512 [ 102.572255][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.637855][ T5892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.026588][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.161669][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34'. [ 103.162252][ T5901] loop4: detected capacity change from 0 to 1024 [ 103.163258][ T5901] EXT4-fs: Ignoring removed orlov option [ 103.217521][ T5904] wg1: entered promiscuous mode [ 103.217542][ T5904] wg1: entered allmulticast mode [ 103.239922][ T5901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.406934][ T5894] netlink: 40 bytes leftover after parsing attributes in process `syz.3.31'. [ 105.711179][ T5922] loop2: detected capacity change from 0 to 128 [ 105.716225][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.849508][ T5922] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.099349][ T5922] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 106.771251][ T5938] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.733310][ T1192] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 110.820099][ T5961] syz.1.48 uses obsolete (PF_INET,SOCK_PACKET) [ 111.011753][ T5967] loop4: detected capacity change from 0 to 1024 [ 111.012781][ T5967] EXT4-fs: Ignoring removed bh option [ 111.089509][ T5970] loop2: detected capacity change from 0 to 512 [ 111.227587][ T5967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.271653][ T5970] ======================================================= [ 111.271653][ T5970] WARNING: The mand mount option has been deprecated and [ 111.271653][ T5970] and is ignored by this kernel. Remove the mand [ 111.271653][ T5970] option from the mount to silence this warning. [ 111.271653][ T5970] ======================================================= [ 111.318087][ T5970] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 111.318107][ T5970] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.423151][ T5970] EXT4-fs (loop2): 1 truncate cleaned up [ 111.465409][ T5967] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.51: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 111.483445][ T5970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.514891][ T5967] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 111.592439][ T38] audit: type=1800 audit(1782742966.851:4): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.47" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 113.395588][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.641523][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.387040][ T38] audit: type=1326 audit(1782742972.681:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.0.60" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb4f0ce59 code=0x7ffc0000 [ 117.387087][ T38] audit: type=1326 audit(1782742972.691:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.0.60" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb4f0ce59 code=0x7ffc0000 [ 117.387123][ T38] audit: type=1326 audit(1782742972.691:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.0.60" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb4f0ce59 code=0x7ffc0000 [ 117.387154][ T38] audit: type=1326 audit(1782742972.691:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.0.60" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8fb4f0ce59 code=0x7ffc0000 [ 117.387186][ T38] audit: type=1326 audit(1782742972.691:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.0.60" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb4f0ce59 code=0x7ffc0000 [ 117.387225][ T38] audit: type=1326 audit(1782742972.691:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.0.60" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8fb4f0ce59 code=0x7ffc0000 [ 117.387261][ T38] audit: type=1326 audit(1782742972.691:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.0.60" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb4f0ce59 code=0x7ffc0000 [ 118.003496][ T38] audit: type=1326 audit(1782742973.301:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.0.60" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8fb4f0ce59 code=0x7ffc0000 [ 118.215548][ T6027] tipc: Enabling of bearer rejected, failed to enable media [ 118.691912][ T6046] loop4: detected capacity change from 0 to 256 [ 118.692947][ T6046] exfat: Bad value for 'gid' [ 118.692962][ T6046] exfat: Bad value for 'gid' [ 119.189626][ T6018] loop3: detected capacity change from 0 to 32768 [ 121.878722][ T5739] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 122.663896][ T5615] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 123.015381][ T6018] JBD2: journal reset failed [ 123.015395][ T6018] (syz.3.64,6018,0):ocfs2_journal_load:1163 ERROR: Failed to load journal! [ 123.015416][ T6018] (syz.3.64,6018,0):ocfs2_check_volume:2373 ERROR: ocfs2 journal load failed! -4 [ 123.019822][ T6074] 9p: Bad value for 'rfdno' [ 124.386497][ T6090] mmap: syz.0.86 (6090) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.917408][ T6105] loop3: detected capacity change from 0 to 256 [ 124.933280][ T6105] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 125.092096][ T6105] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 125.118259][ T6105] overlayfs: missing 'lowerdir' [ 125.943800][ T6113] No source specified [ 126.494223][ T5739] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 126.591842][ T6117] loop2: detected capacity change from 0 to 512 [ 126.593012][ T6117] EXT4-fs: Ignoring removed orlov option [ 126.593038][ T6117] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.705338][ T6117] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.95: corrupted in-inode xattr: e_value size too large [ 126.733026][ T6117] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 126.736599][ C0] EXT4-fs (loop2): initial error at time 1782742982: ext4_iget_extra_inode:5180: inode 15 [ 126.736650][ C0] EXT4-fs (loop2): last error at time 1782742982: ext4_iget_extra_inode:5180: inode 15 [ 126.755633][ T5739] usb 5-1: Using ep0 maxpacket: 8 [ 126.796593][ T6117] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.95: couldn't read orphan inode 15 (err -117) [ 126.799058][ T6117] loop2: lost filesystem error report for type 5 error -117 [ 126.817387][ T6117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.886038][ T5739] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 126.886064][ T5739] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 126.886080][ T5739] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 126.886114][ T5739] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 126.886133][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.983625][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.205517][ T6129] capability: warning: `syz.2.98' uses 32-bit capabilities (legacy support in use) [ 127.283517][ T5615] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 128.723672][ T6151] No source specified [ 129.674877][ T9] usb 5-1: USB disconnect, device number 2 [ 130.813092][ T6172] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 130.918176][ T6172] bond1 (unregistering): Released all slaves [ 131.229361][ T6189] No source specified [ 132.254109][ T5739] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 132.382272][ T6194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.126'. [ 132.424070][ T5739] usb 5-1: Using ep0 maxpacket: 8 [ 132.442580][ T5739] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 132.442607][ T5739] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 132.442620][ T5739] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 132.442649][ T5739] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.442667][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.526183][ T6194] veth1_to_team: entered promiscuous mode [ 132.538081][ T6194] gretap0: entered promiscuous mode [ 132.555922][ T6194] hsr1: entered promiscuous mode [ 133.411927][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.412046][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.462635][ T6205] bridge0: port 3(macsec1) entered blocking state [ 133.462999][ T6205] bridge0: port 3(macsec1) entered disabled state [ 133.463243][ T6205] macsec1: entered allmulticast mode [ 133.463256][ T6205] bridge0: entered allmulticast mode [ 133.490505][ T6205] bridge0: entered promiscuous mode [ 133.554096][ T6205] macsec1: left allmulticast mode [ 133.554114][ T6205] bridge0: left allmulticast mode [ 133.842107][ T32] bridge0: left promiscuous mode [ 134.169549][ T6234] loop0: detected capacity change from 0 to 736 [ 134.257471][ T6239] loop1: detected capacity change from 0 to 128 [ 134.258925][ T6239] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.261393][ T6239] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.730336][ T5946] usb 5-1: USB disconnect, device number 3 [ 136.036987][ T6272] loop3: detected capacity change from 0 to 256 [ 136.038025][ T6272] exfat: Bad value for 'gid' [ 136.038040][ T6272] exfat: Bad value for 'gid' [ 136.512329][ T6278] loop1: detected capacity change from 0 to 736 [ 136.598668][ T6285] loop0: detected capacity change from 0 to 512 [ 136.619924][ T6285] EXT4-fs (loop0): orphan cleanup on readonly fs [ 136.619944][ T6285] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 136.754061][ T5719] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 136.775222][ T6285] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.159: attempt to clear invalid blocks 2 len 1 [ 136.775253][ T6285] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 136.788348][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 136.788371][ C1] EXT4-fs (loop0): initial error at time 1782742992: ext4_clear_blocks:876: inode 13 [ 136.788395][ C1] EXT4-fs (loop0): last error at time 1782742992: ext4_clear_blocks:876: inode 13 [ 136.902573][ T6285] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 136.932170][ T5719] usb 5-1: Using ep0 maxpacket: 8 [ 136.956334][ T5719] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 136.956360][ T5719] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 136.956375][ T5719] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 136.956405][ T5719] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 136.956422][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.052144][ T6285] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.159: invalid indirect mapped block 1819239214 (level 0) [ 137.052182][ T6285] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 137.093493][ T6285] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.159: invalid indirect mapped block 1819239214 (level 1) [ 137.093528][ T6285] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 137.306526][ T5615] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 137.476278][ T6285] EXT4-fs (loop0): 1 truncate cleaned up [ 137.490268][ T6285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.538247][ T6299] netlink: 'syz.3.166': attribute type 8 has an invalid length. [ 137.538264][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 137.579056][ T6285] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 137.656475][ T6285] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 137.790059][ T5601] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.362079][ T6325] netlink: 'syz.3.177': attribute type 8 has an invalid length. [ 139.362097][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 139.412646][ T32] usb 5-1: USB disconnect, device number 4 [ 139.524869][ T5615] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 141.440661][ T6357] No source specified [ 148.050136][ T6376] loop4: detected capacity change from 0 to 512 [ 148.102612][ T6372] loop2: detected capacity change from 0 to 1024 [ 148.103645][ T6372] EXT4-fs: Ignoring removed bh option [ 148.285518][ T6376] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 148.340454][ T6372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.341616][ T6372] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm syz.2.193: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 149.500289][ T6390] loop0: detected capacity change from 0 to 512 [ 149.546650][ T6390] EXT4-fs: Ignoring removed orlov option [ 149.546681][ T6390] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.626196][ T6390] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.199: corrupted in-inode xattr: e_value size too large [ 149.626228][ T6390] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 149.634924][ T6390] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.199: couldn't read orphan inode 15 (err -117) [ 149.634955][ T6390] loop0: lost filesystem error report for type 5 error -117 [ 149.644017][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 149.644037][ C0] EXT4-fs (loop0): initial error at time 1782743004: ext4_iget_extra_inode:5180: inode 15 [ 149.644057][ C0] EXT4-fs (loop0): last error at time 1782743004: ext4_orphan_get:1404 [ 149.673104][ T6376] EXT4-fs (loop4): 1 truncate cleaned up [ 149.970424][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.060355][ T6376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.091519][ T6395] netlink: 40 bytes leftover after parsing attributes in process `syz.3.202'. [ 150.110760][ T6390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.558246][ T5601] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.838797][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.110746][ T6414] loop4: detected capacity change from 0 to 128 [ 152.112713][ T6414] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.170402][ T6414] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 153.583768][ T6425] loop1: detected capacity change from 0 to 256 [ 153.713542][ T6425] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.894433][ T6425] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 153.894464][ T6425] FAT-fs (loop1): Filesystem has been set read-only [ 153.894728][ T6425] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 153.894770][ T6425] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 153.898455][ T38] audit: type=1800 audit(1782743009.201:13): pid=6425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.213" name="file1" dev="loop1" ino=1048606 res=0 errno=0 [ 154.301991][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 156.132850][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 156.132875][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 156.381833][ T6461] syzkaller1: entered promiscuous mode [ 156.381857][ T6461] syzkaller1: entered allmulticast mode [ 159.899697][ T6509] loop1: detected capacity change from 0 to 1024 [ 159.900793][ T6509] EXT4-fs: Ignoring removed bh option [ 160.055827][ T6509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.211937][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.681204][ T6520] loop3: detected capacity change from 0 to 512 [ 160.895287][ T6520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.895401][ T6520] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.595425][ T5602] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.845128][ T6542] loop1: detected capacity change from 0 to 1024 [ 162.846213][ T6542] EXT4-fs: Ignoring removed bh option [ 163.009178][ T6542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.313808][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.684872][ T6566] loop2: detected capacity change from 0 to 256 [ 163.703610][ T6566] exfat: Bad value for 'gid' [ 163.703628][ T6566] exfat: Bad value for 'gid' [ 163.903475][ T6571] loop4: detected capacity change from 0 to 128 [ 163.912187][ T6571] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 163.936776][ T6571] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 164.168694][ T14] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 164.551881][ T6585] loop1: detected capacity change from 0 to 1024 [ 164.579218][ T6585] EXT4-fs: Ignoring removed bh option [ 164.773538][ T6585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.836956][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.352174][ T5615] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 166.063053][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 166.063073][ T6612] netlink: 24 bytes leftover after parsing attributes in process `syz.4.278'. [ 166.063466][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 166.063478][ T6612] netlink: 24 bytes leftover after parsing attributes in process `syz.4.278'. [ 167.121639][ T6610] No source specified [ 167.376214][ T6619] loop1: detected capacity change from 0 to 1024 [ 167.377384][ T6619] EXT4-fs: Ignoring removed bh option [ 167.582791][ T6619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.694157][ T5611] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 167.821170][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.854176][ T5611] usb 4-1: Using ep0 maxpacket: 8 [ 167.856620][ T5611] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 167.856643][ T5611] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 167.856660][ T5611] usb 4-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 167.856690][ T5611] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 167.856707][ T5611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.592289][ T5615] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 168.843665][ T6647] netlink: 56 bytes leftover after parsing attributes in process `syz.0.291'. [ 169.317369][ T6654] No source specified [ 169.983159][ T6655] loop0: detected capacity change from 0 to 1024 [ 169.993713][ T6655] EXT4-fs: Ignoring removed bh option [ 170.032524][ T6657] loop1: detected capacity change from 0 to 128 [ 170.063609][ T6657] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.093731][ T6657] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.152293][ T5739] usb 4-1: USB disconnect, device number 2 [ 170.201403][ T6655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.449688][ T5601] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.616734][ T5843] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.719761][ T6673] loop2: detected capacity change from 0 to 128 [ 170.852805][ T6673] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 170.890787][ T6673] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.163027][ T5603] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.790125][ T6702] No source specified [ 171.803947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 172.685230][ T6703] syzkaller0: entered promiscuous mode [ 172.685331][ T6703] syzkaller0: entered allmulticast mode [ 174.925602][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 174.982605][ T6728] No source specified [ 175.628836][ T6739] bond0: option min_links: invalid value (18446744073709551615) [ 175.628866][ T6739] bond0: option min_links: allowed values 0 - 2147483647 [ 175.853159][ T6748] loop0: detected capacity change from 0 to 128 [ 177.150052][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 177.260664][ T6775] No source specified [ 178.660045][ T6794] netlink: 'syz.4.342': attribute type 16 has an invalid length. [ 178.660065][ T6794] netlink: 'syz.4.342': attribute type 17 has an invalid length. [ 178.877765][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.214914][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.833951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 180.033950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 181.018934][ T6794] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.019099][ T6794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.022469][ T6794] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.022643][ T6794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.280212][ T6818] netlink: 68 bytes leftover after parsing attributes in process `syz.0.350'. [ 182.022195][ T6834] No source specified [ 182.148922][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 183.504280][ T6842] loop3: detected capacity change from 0 to 8192 [ 184.296491][ T6842] syz.3.360: attempt to access beyond end of device [ 184.296491][ T6842] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 184.296717][ T6842] Buffer I/O error on dev loop3, logical block 57847, async page read [ 184.316816][ T6858] loop1: detected capacity change from 0 to 512 [ 184.389709][ T6858] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.365: corrupted in-inode xattr: invalid ea_ino [ 184.389739][ T6858] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 184.394012][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 184.394033][ C0] EXT4-fs (loop1): initial error at time 1782743039: ext4_iget_extra_inode:5180: inode 15 [ 184.394057][ C0] EXT4-fs (loop1): last error at time 1782743039: ext4_iget_extra_inode:5180: inode 15 [ 184.446198][ T6858] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.365: couldn't read orphan inode 15 (err -117) [ 184.446228][ T6858] loop1: lost filesystem error report for type 5 error -117 [ 184.469207][ T6858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.512786][ T38] audit: type=1800 audit(1782743039.811:14): pid=6842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.360" name="file2" dev="loop3" ino=1048609 res=0 errno=0 [ 185.194078][ T6861] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 4: invalid block bitmap [ 185.426541][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.718391][ T6878] loop2: detected capacity change from 0 to 256 [ 185.719457][ T6878] exfat: Bad value for 'gid' [ 185.719471][ T6878] exfat: Bad value for 'gid' [ 185.863924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 186.103926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 186.263925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 186.835196][ T6879] No source specified [ 187.836179][ T38] audit: type=1326 audit(1782743043.131:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.376" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8401ce59 code=0x7ffc0000 [ 187.836224][ T38] audit: type=1326 audit(1782743043.131:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.376" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8401ce59 code=0x7ffc0000 [ 187.836258][ T38] audit: type=1326 audit(1782743043.131:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.376" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8401ce59 code=0x7ffc0000 [ 187.836291][ T38] audit: type=1326 audit(1782743043.141:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.376" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8401ce59 code=0x7ffc0000 [ 187.845397][ T38] audit: type=1326 audit(1782743043.141:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.376" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4b8401ce59 code=0x7ffc0000 [ 187.845448][ T38] audit: type=1326 audit(1782743043.141:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.376" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8401ce59 code=0x7ffc0000 [ 187.845478][ T38] audit: type=1326 audit(1782743043.141:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.376" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8401ce59 code=0x7ffc0000 [ 187.845509][ T38] audit: type=1326 audit(1782743043.141:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.376" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8401ce59 code=0x7ffc0000 [ 187.845560][ T38] audit: type=1326 audit(1782743043.141:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.376" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4b8401ce59 code=0x7ffc0000 [ 188.960657][ T6911] random: crng reseeded on system resumption [ 189.121620][ T6915] loop1: detected capacity change from 0 to 256 [ 189.122687][ T6915] exfat: Bad value for 'gid' [ 189.122701][ T6915] exfat: Bad value for 'gid' [ 191.717548][ T6939] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 191.721923][ T6936] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 193.157001][ T6975] loop1: detected capacity change from 0 to 256 [ 193.158073][ T6975] exfat: Bad value for 'gid' [ 193.158088][ T6975] exfat: Bad value for 'gid' [ 194.317674][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.317786][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.034274][ T6948] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 201.056033][ T6948] syzkaller0: entered promiscuous mode [ 201.056051][ T6948] syzkaller0: entered allmulticast mode [ 201.584679][ T7009] loop4: detected capacity change from 0 to 256 [ 201.585757][ T7009] exfat: Bad value for 'gid' [ 201.585771][ T7009] exfat: Bad value for 'gid' [ 201.607338][ T5614] Bluetooth: hci4: command 0x0406 tx timeout [ 201.674077][ T5614] Bluetooth: hci0: command 0x0406 tx timeout [ 201.674112][ T5614] Bluetooth: hci2: command 0x0406 tx timeout [ 201.674132][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 202.167359][ T7012] loop3: detected capacity change from 0 to 128 [ 202.185751][ T7012] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 202.241619][ T7012] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 202.971490][ T7034] syzkaller1: entered promiscuous mode [ 202.971511][ T7034] syzkaller1: entered allmulticast mode [ 203.229064][ T7042] loop0: detected capacity change from 0 to 256 [ 203.230104][ T7042] exfat: Bad value for 'gid' [ 203.230119][ T7042] exfat: Bad value for 'gid' [ 205.091629][ T7054] loop4: detected capacity change from 0 to 128 [ 205.100232][ T7054] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 205.101909][ T7054] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 208.112568][ T5615] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 208.187832][ T7090] loop1: detected capacity change from 0 to 128 [ 208.192830][ T7090] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 208.214324][ T7090] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 209.007784][ T7104] loop2: detected capacity change from 0 to 1024 [ 209.145758][ T7104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 209.145896][ T7104] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.472712][ T7112] netlink: 'syz.0.449': attribute type 8 has an invalid length. [ 209.472731][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'. [ 209.907998][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 211.744048][ T5946] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 212.434118][ T5946] usb 4-1: Using ep0 maxpacket: 32 [ 212.436066][ T5946] usb 4-1: config 8 has an invalid interface number: 37 but max is 0 [ 212.436091][ T5946] usb 4-1: config 8 has no interface number 0 [ 212.436121][ T5946] usb 4-1: config 8 interface 37 has no altsetting 0 [ 212.443535][ T5946] usb 4-1: New USB device found, idVendor=0b57, idProduct=89b6, bcdDevice=c8.fb [ 212.443562][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.443579][ T5946] usb 4-1: Product: syz [ 212.443592][ T5946] usb 4-1: Manufacturer: syz [ 212.443604][ T5946] usb 4-1: SerialNumber: syz [ 212.563468][ T7144] netlink: 16 bytes leftover after parsing attributes in process `syz.0.460'. [ 212.637524][ T7144] veth1_to_team: entered promiscuous mode [ 212.824307][ T7144] gretap0: entered promiscuous mode [ 212.858423][ T7144] debugfs: 'hsr1' already exists in 'hsr' [ 212.858448][ T7144] Cannot create hsr debugfs directory [ 212.858467][ T7144] hsr1: entered promiscuous mode [ 213.106938][ T5946] usbhid 4-1:8.37: couldn't find an input interrupt endpoint [ 214.606736][ T7157] loop0: detected capacity change from 0 to 256 [ 214.619121][ T7157] exfat: Bad value for 'gid' [ 214.619158][ T7157] exfat: Bad value for 'gid' [ 215.189113][ T5946] usb 4-1: USB disconnect, device number 3 [ 216.743722][ T7171] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.469'. [ 221.644106][ T5945] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 221.793998][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 221.796146][ T5945] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 221.798614][ T5945] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 221.798640][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 221.798656][ T5945] usb 3-1: Product: syz [ 221.798668][ T5945] usb 3-1: Manufacturer: syz [ 221.798680][ T5945] usb 3-1: SerialNumber: syz [ 221.834250][ T5739] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 221.902088][ T5945] usb 3-1: config 0 descriptor?? [ 221.912333][ T7235] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 221.926476][ T5942] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 222.014012][ T5739] usb 2-1: Using ep0 maxpacket: 32 [ 222.016276][ T5739] usb 2-1: config 8 has an invalid interface number: 37 but max is 0 [ 222.016298][ T5739] usb 2-1: config 8 has no interface number 0 [ 222.016323][ T5739] usb 2-1: config 8 interface 37 has no altsetting 0 [ 222.018289][ T5739] usb 2-1: New USB device found, idVendor=0b57, idProduct=89b6, bcdDevice=c8.fb [ 222.018312][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.018329][ T5739] usb 2-1: Product: syz [ 222.018341][ T5739] usb 2-1: Manufacturer: syz [ 222.018353][ T5739] usb 2-1: SerialNumber: syz [ 222.075764][ T5942] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 222.075791][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.332643][ T32] usb 3-1: USB disconnect, device number 3 [ 222.353628][ T5942] usb 5-1: config 0 descriptor?? [ 222.618363][ T5739] usbhid 2-1:8.37: couldn't find an input interrupt endpoint [ 222.655226][ T5739] usb 2-1: USB disconnect, device number 4 [ 222.767492][ T5942] usb 5-1: Cannot read MAC address [ 222.768165][ T5942] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 222.944424][ T5942] usb 5-1: USB disconnect, device number 5 [ 223.467574][ T5739] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 223.824003][ T5739] usb 2-1: Using ep0 maxpacket: 16 [ 223.826638][ T5739] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.826661][ T5739] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 223.826693][ T5739] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 223.826712][ T5739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.864442][ T5739] usb 2-1: config 0 descriptor?? [ 223.913084][ T7270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.506'. [ 223.958498][ T7270] veth1_to_team: entered promiscuous mode [ 223.986755][ T7270] gretap0: entered promiscuous mode [ 223.992805][ T7270] debugfs: 'hsr1' already exists in 'hsr' [ 223.992825][ T7270] Cannot create hsr debugfs directory [ 223.992840][ T7270] hsr1: entered promiscuous mode [ 224.196868][ T32] usb 2-1: USB disconnect, device number 5 [ 224.484857][ T5945] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 224.634146][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 224.636679][ T5945] usb 3-1: config 8 has an invalid interface number: 37 but max is 0 [ 224.636703][ T5945] usb 3-1: config 8 has no interface number 0 [ 224.636731][ T5945] usb 3-1: config 8 interface 37 has no altsetting 0 [ 224.640920][ T5945] usb 3-1: New USB device found, idVendor=0b57, idProduct=89b6, bcdDevice=c8.fb [ 224.640945][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.640961][ T5945] usb 3-1: Product: syz [ 224.640973][ T5945] usb 3-1: Manufacturer: syz [ 224.640985][ T5945] usb 3-1: SerialNumber: syz [ 224.958128][ T5945] usbhid 3-1:8.37: couldn't find an input interrupt endpoint [ 225.016034][ T5945] usb 3-1: USB disconnect, device number 4 [ 226.135227][ T5739] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 226.286656][ T5739] usb 4-1: device descriptor read/64, error -71 [ 226.641803][ T5739] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 226.824891][ T5739] usb 4-1: device descriptor read/64, error -71 [ 226.936928][ T5739] usb usb4-port1: attempt power cycle [ 227.398218][ T5739] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 227.416659][ T5739] usb 4-1: device descriptor read/8, error -71 [ 227.674025][ T5739] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 227.695986][ T5739] usb 4-1: device descriptor read/8, error -71 [ 227.828379][ T5739] usb usb4-port1: unable to enumerate USB device [ 227.904483][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 228.056058][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 228.070063][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.070093][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.070126][ T9] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 228.070144][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.265194][ T9] usb 3-1: config 0 descriptor?? [ 228.594425][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 228.594535][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 228.723849][ T9] usb 3-1: USB disconnect, device number 5 [ 232.664918][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 232.854120][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 232.894950][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 232.894977][ T9] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 232.894993][ T9] usb 1-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 232.895024][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 232.895043][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.481128][ T7422] No source specified [ 236.750355][ T5945] usb 1-1: USB disconnect, device number 2 [ 236.843914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 240.473931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 240.493927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 240.503927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 240.800733][ T7470] No source specified [ 243.888470][ T5739] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 244.975577][ T5739] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 244.975607][ T5739] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 244.975629][ T5739] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 244.975648][ T5739] usb 3-1: config 0 interface 0 has no altsetting 0 [ 244.980926][ T5739] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 244.980952][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 244.980968][ T5739] usb 3-1: Product: syz [ 244.980980][ T5739] usb 3-1: Manufacturer: syz [ 244.980990][ T5739] usb 3-1: SerialNumber: syz [ 245.004909][ T5739] usb 3-1: config 0 descriptor?? [ 245.055764][ T5739] usb 3-1: selecting invalid altsetting 0 [ 247.609110][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 247.609148][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 247.738673][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 248.320787][ T5739] usb 3-1: USB disconnect, device number 6 [ 249.130055][ T7556] netlink: 'syz.1.611': attribute type 16 has an invalid length. [ 249.130073][ T7556] netlink: 'syz.1.611': attribute type 17 has an invalid length. [ 250.388222][ T7030] udevd[7030]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.658036][ T7556] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.670456][ T7556] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.847019][ T7556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.864134][ T7556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.534035][ T5615] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 255.759963][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.760039][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.677841][ T1192] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.685980][ T1192] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.686018][ T1192] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.686042][ T1192] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.244006][ T5942] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 261.394054][ T5942] usb 5-1: Using ep0 maxpacket: 32 [ 261.396398][ T5942] usb 5-1: config index 0 descriptor too short (expected 19, got 18) [ 261.412973][ T5942] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 261.412998][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.413015][ T5942] usb 5-1: Product: syz [ 261.413027][ T5942] usb 5-1: Manufacturer: syz [ 261.413039][ T5942] usb 5-1: SerialNumber: syz [ 261.485094][ T5942] usb 5-1: config 0 descriptor?? [ 261.533077][ T5942] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 261.555342][ T5942] dvb-usb: bulk message failed: -22 (2/0) [ 261.735316][ T7671] cxusb: i2c wr: len=80 is too big! [ 261.735316][ T7671] [ 262.020399][ T5942] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 262.037827][ T5942] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 262.037923][ T5942] usb 5-1: media controller created [ 262.231074][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.606205][ T5942] usb 5-1: selecting invalid altsetting 7 [ 262.606224][ T5942] cxusb: set interface failed [ 262.606236][ T5942] dvb-usb: bulk message failed: -22 (1/0) [ 262.706971][ T5942] DVB: Unable to find symbol lgdt330x_attach() [ 262.707002][ T5942] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 264.135508][ T5942] rc_core: IR keymap rc-dvico-portable not found [ 264.135569][ T5942] Registered IR keymap rc-empty [ 264.688451][ T5942] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 264.986835][ T5942] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input5 [ 265.135568][ T5942] dvb-usb: schedule remote query interval to 100 msecs. [ 265.135590][ T5942] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 265.164468][ T5942] usb 5-1: USB disconnect, device number 6 [ 265.362404][ T7684] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.403312][ T7684] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.702898][ T7709] ALSA: mixer_oss: invalid OSS volume '' [ 265.775188][ T5942] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 266.626085][ T7684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.682380][ T7684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.604205][ T5945] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 267.861821][ T5945] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 267.861846][ T5945] usb 1-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 267.861861][ T5945] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 267.861877][ T5945] usb 1-1: config 150 has no interface number 0 [ 267.861903][ T5945] usb 1-1: config 150 interface 204 has no altsetting 0 [ 267.885831][ T5945] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 267.885869][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.885958][ T5945] usb 1-1: Product: syz [ 267.885969][ T5945] usb 1-1: Manufacturer: syz [ 267.885988][ T5945] usb 1-1: SerialNumber: syz [ 268.223261][ T7734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.273421][ T7734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.461310][ T7747] fuse: Bad value for 'fd' [ 269.041744][ T5945] xr_serial 1-1:150.204: skipping garbage [ 269.076518][ T5945] usb 1-1: USB disconnect, device number 3 [ 270.592551][ T7684] hsr1: left promiscuous mode [ 270.602185][ T5887] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.605345][ T5887] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.605443][ T5887] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.605474][ T5887] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.874374][ T5739] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 275.089940][ T5739] usb 1-1: Using ep0 maxpacket: 32 [ 275.093442][ T5739] usb 1-1: config index 0 descriptor too short (expected 19, got 18) [ 275.107705][ T5739] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 275.107722][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.107731][ T5739] usb 1-1: Product: syz [ 275.107738][ T5739] usb 1-1: Manufacturer: syz [ 275.107744][ T5739] usb 1-1: SerialNumber: syz [ 275.161392][ T5739] usb 1-1: config 0 descriptor?? [ 275.174723][ T5739] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 275.174769][ T5739] dvb-usb: bulk message failed: -22 (2/0) [ 275.211468][ T5739] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 275.212155][ T5739] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 275.212203][ T5739] usb 1-1: media controller created [ 275.265745][ T5739] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 275.314539][ T5739] usb 1-1: selecting invalid altsetting 7 [ 275.314556][ T5739] cxusb: set interface failed [ 275.314567][ T5739] dvb-usb: bulk message failed: -22 (1/0) [ 275.642463][ T5739] DVB: Unable to find symbol lgdt330x_attach() [ 275.642478][ T5739] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 275.753981][ T5739] rc_core: IR keymap rc-dvico-portable not found [ 275.754000][ T5739] Registered IR keymap rc-empty [ 275.756524][ T5739] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 275.790601][ T5739] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input6 [ 275.810108][ T5739] dvb-usb: schedule remote query interval to 100 msecs. [ 275.810130][ T5739] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 275.836350][ T5739] usb 1-1: USB disconnect, device number 4 [ 277.407609][ T5739] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 279.812858][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 279.964081][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 279.970647][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 279.970688][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 279.970707][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.030894][ T9] usb 4-1: config 0 descriptor?? [ 280.070419][ T9] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 280.184112][ T5946] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 280.350605][ T5739] usb 4-1: USB disconnect, device number 8 [ 280.453987][ T5946] usb 1-1: Using ep0 maxpacket: 32 [ 280.457532][ T5946] usb 1-1: config index 0 descriptor too short (expected 19, got 18) [ 280.467263][ T5946] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 280.467288][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.467304][ T5946] usb 1-1: Product: syz [ 280.467315][ T5946] usb 1-1: Manufacturer: syz [ 280.467327][ T5946] usb 1-1: SerialNumber: syz [ 280.633829][ T5946] usb 1-1: config 0 descriptor?? [ 281.053219][ T5946] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 281.053274][ T5946] dvb-usb: bulk message failed: -22 (2/0) [ 281.116920][ T5946] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 281.176867][ T5946] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 281.176903][ T5946] usb 1-1: media controller created [ 281.267963][ T5946] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 281.360348][ T5946] usb 1-1: selecting invalid altsetting 7 [ 281.360362][ T5946] cxusb: set interface failed [ 281.360369][ T5946] dvb-usb: bulk message failed: -22 (1/0) [ 281.588413][ T5946] DVB: Unable to find symbol lgdt330x_attach() [ 281.588428][ T5946] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 281.824626][ T5946] rc_core: IR keymap rc-dvico-portable not found [ 281.824646][ T5946] Registered IR keymap rc-empty [ 281.832650][ T5946] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 281.851960][ T5946] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input7 [ 281.928552][ T5946] dvb-usb: schedule remote query interval to 100 msecs. [ 281.928575][ T5946] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 282.037769][ T5945] dvb-usb: bulk message failed: -22 (1/0) [ 282.087310][ T5946] usb 1-1: USB disconnect, device number 5 [ 282.776598][ T5946] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 283.559165][ T5946] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 284.074419][ T5946] usb 1-1: Using ep0 maxpacket: 32 [ 284.158590][ T5946] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 284.158619][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 284.158640][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 284.158659][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 284.158680][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 284.162489][ T5946] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 284.162517][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.162533][ T5946] usb 1-1: Product: syz [ 284.162545][ T5946] usb 1-1: Manufacturer: syz [ 284.162557][ T5946] usb 1-1: SerialNumber: syz [ 284.334658][ T5946] usb 1-1: config 0 descriptor?? [ 284.548016][ T5946] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 284.969177][ T7913] netlink: 36 bytes leftover after parsing attributes in process `syz.0.736'. [ 285.636949][ T5946] iforce 1-1:0.0: usb_submit_urb failed: -110 [ 285.637426][ T5946] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 285.637856][ T5946] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 285.638268][ T5946] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 285.638673][ T5946] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 285.639080][ T5946] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 285.639515][ T5946] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 285.640254][ T5946] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 285.640689][ T5946] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 285.641127][ T5946] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 285.641561][ T5946] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 285.642000][ T5946] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 285.642406][ T5946] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 285.642807][ T5946] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 285.643217][ T5946] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 285.643619][ T5946] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 285.644054][ T5946] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 285.644457][ T5946] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 285.644506][ T5946] input input8: Timeout waiting for response from device. [ 286.085076][ T5336] usb 1-1: USB disconnect, device number 6 [ 286.284115][ T5942] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 286.443360][ T7832] syz.1.710 (7832): drop_caches: 1 [ 286.464005][ T5942] usb 4-1: Using ep0 maxpacket: 32 [ 286.466279][ T5942] usb 4-1: unable to get BOS descriptor or descriptor too short [ 286.482422][ T5942] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 286.482447][ T5942] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 286.482463][ T5942] usb 4-1: config 14 has no interface number 0 [ 286.482478][ T5942] usb 4-1: config 14 has no interface number 1 [ 286.482541][ T5942] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 286.482561][ T5942] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 286.482581][ T5942] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 286.482602][ T5942] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 286.482623][ T5942] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 286.482644][ T5942] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.482664][ T5942] usb 4-1: config 14 interface 57 has no altsetting 0 [ 286.482677][ T5942] usb 4-1: config 14 interface 228 has no altsetting 0 [ 286.497646][ T5942] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 286.497674][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.497690][ T5942] usb 4-1: Product: syz [ 286.497701][ T5942] usb 4-1: Manufacturer: syz [ 286.497713][ T5942] usb 4-1: SerialNumber: syz [ 286.807299][ T5739] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 286.972509][ T5942] legousbtower 4-1:14.57: interrupt endpoints not found [ 287.075005][ T5739] usb 2-1: Using ep0 maxpacket: 32 [ 287.102784][ T5739] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 287.174072][ T5739] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 287.174090][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.174099][ T5739] usb 2-1: Product: syz [ 287.174105][ T5739] usb 2-1: Manufacturer: syz [ 287.174112][ T5739] usb 2-1: SerialNumber: syz [ 287.474313][ T5739] usb 2-1: config 0 descriptor?? [ 287.509113][ T5942] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 287.537049][ T5739] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 287.537097][ T5739] dvb-usb: bulk message failed: -22 (2/0) [ 287.643303][ T5739] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 287.663372][ T5739] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 287.663418][ T5739] usb 2-1: media controller created [ 287.739896][ T5942] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 287.776974][ T5739] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.807974][ T5739] usb 2-1: selecting invalid altsetting 7 [ 287.807993][ T5739] cxusb: set interface failed [ 287.808004][ T5739] dvb-usb: bulk message failed: -22 (1/0) [ 288.118688][ T5942] usb 4-1: USB disconnect, device number 9 [ 288.119679][ C1] usb 4-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 288.190146][ T5942] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 289.808124][ T7937] syzkaller0: entered promiscuous mode [ 289.808151][ T7937] syzkaller0: entered allmulticast mode [ 289.868777][ T5739] DVB: Unable to find symbol lgdt330x_attach() [ 289.868788][ T5739] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 290.082260][ T7962] program syz.1.754 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.100465][ T5739] rc_core: IR keymap rc-dvico-portable not found [ 290.100484][ T5739] Registered IR keymap rc-empty [ 290.137521][ T5336] IPVS: starting estimator thread 0... [ 290.172685][ T5739] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 290.197660][ T5739] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input9 [ 290.199742][ T5739] dvb-usb: schedule remote query interval to 100 msecs. [ 290.199762][ T5739] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 290.225182][ T7964] IPVS: using max 9 ests per chain, 21600 per kthread [ 290.253408][ T5739] usb 2-1: USB disconnect, device number 6 [ 291.139064][ T5739] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 291.554051][ T5739] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 291.754372][ T5739] usb 2-1: Using ep0 maxpacket: 16 [ 291.762422][ T5739] usb 2-1: config 1 has an invalid interface number: 62 but max is 0 [ 291.762439][ T5739] usb 2-1: config 1 has no interface number 0 [ 291.762470][ T5739] usb 2-1: config 1 interface 62 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.762484][ T5739] usb 2-1: config 1 interface 62 altsetting 253 bulk endpoint 0x3 has invalid maxpacket 32 [ 291.762495][ T5739] usb 2-1: config 1 interface 62 altsetting 253 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 291.762507][ T5739] usb 2-1: config 1 interface 62 has no altsetting 0 [ 291.763680][ T5739] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.763703][ T5739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 291.763717][ T5739] usb 2-1: SerialNumber: syz [ 291.855992][ T7962] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 292.169634][ T5739] cdc_acm 2-1:1.62: ttyACM0: USB ACM device [ 292.178275][ T5739] usb 2-1: USB disconnect, device number 7 [ 292.438348][ T5942] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 292.571903][ T7991] netlink: 56 bytes leftover after parsing attributes in process `syz.3.763'. [ 292.571937][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.763'. [ 292.571944][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.763'. [ 292.594156][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 292.633003][ T5942] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 292.639797][ T5942] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 292.639820][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.639837][ T5942] usb 3-1: Product: syz [ 292.639847][ T5942] usb 3-1: Manufacturer: syz [ 292.639858][ T5942] usb 3-1: SerialNumber: syz [ 292.663030][ T5942] usb 3-1: config 0 descriptor?? [ 292.693049][ T5942] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 292.693097][ T5942] dvb-usb: bulk message failed: -22 (2/0) [ 292.761111][ T5942] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 292.764813][ T5942] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 292.764869][ T5942] usb 3-1: media controller created [ 292.840302][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 292.898412][ T5942] usb 3-1: selecting invalid altsetting 7 [ 292.898431][ T5942] cxusb: set interface failed [ 292.898442][ T5942] dvb-usb: bulk message failed: -22 (1/0) [ 292.899640][ T7987] cxusb: i2c wr: len=80 is too big! [ 292.899640][ T7987] [ 292.942844][ T5942] DVB: Unable to find symbol lgdt330x_attach() [ 292.942858][ T5942] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 293.094036][ T5942] rc_core: IR keymap rc-dvico-portable not found [ 293.094056][ T5942] Registered IR keymap rc-empty [ 293.124964][ T5942] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 293.127917][ T5942] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input10 [ 293.130113][ T5942] dvb-usb: schedule remote query interval to 100 msecs. [ 293.130132][ T5942] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 293.139080][ T5942] usb 3-1: USB disconnect, device number 7 [ 293.338325][ T5942] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 293.464194][ T5726] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 293.614073][ T5726] usb 2-1: Using ep0 maxpacket: 16 [ 293.658195][ T5726] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.658219][ T5726] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.660955][ T5726] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 293.660976][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.660985][ T5726] usb 2-1: Product: syz [ 293.660991][ T5726] usb 2-1: Manufacturer: syz [ 293.660998][ T5726] usb 2-1: SerialNumber: syz [ 293.712450][ T5726] usb 2-1: 0:2 : does not exist [ 293.712561][ T5726] usb 2-1: unit 9 not found! [ 294.175180][ T7011] udevd[7011]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.934049][ T5726] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 297.094015][ T5726] usb 3-1: Using ep0 maxpacket: 8 [ 297.095803][ T5726] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 297.095832][ T5726] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 297.095853][ T5726] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 297.095870][ T5726] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.095893][ T5726] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 297.095904][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.304129][ T5726] usb 3-1: GET_CAPABILITIES returned 0 [ 297.304172][ T5726] usbtmc 3-1:16.0: can't read capabilities [ 297.553832][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 297.637279][ T5336] usb 3-1: USB disconnect, device number 8 [ 298.356672][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.774'. [ 303.307809][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.333071][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.342958][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.388888][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.425262][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.434111][ T5615] Bluetooth: hci5: command tx timeout [ 307.188565][ T5608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 307.211815][ T5608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 307.213683][ T5608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 307.254122][ T5608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 307.255623][ T5608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 307.513993][ T5615] Bluetooth: hci5: command tx timeout [ 307.712321][ T5608] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 307.752536][ T5608] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 307.753821][ T5608] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 307.794633][ T5608] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 307.795621][ T5608] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 308.157562][ T5615] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 308.162846][ T5615] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 308.203284][ T5615] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 308.222368][ T5615] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 308.223004][ T5615] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 308.822664][ T7984] pimreg: entered allmulticast mode [ 309.067589][ T7984] pimreg: left allmulticast mode [ 309.436924][ T5608] Bluetooth: hci6: command tx timeout [ 309.594025][ T5608] Bluetooth: hci5: command tx timeout [ 309.927768][ T5608] Bluetooth: hci7: command tx timeout [ 310.394069][ T5608] Bluetooth: hci8: command tx timeout [ 310.496168][ T5945] usb 2-1: USB disconnect, device number 8 [ 311.531618][ T5608] Bluetooth: hci6: command tx timeout [ 311.674204][ T5608] Bluetooth: hci5: command tx timeout [ 312.004521][ T5608] Bluetooth: hci7: command tx timeout [ 312.477401][ T5608] Bluetooth: hci8: command tx timeout [ 312.754856][ T5942] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 312.909435][ T5942] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 312.909452][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.935218][ T5942] usb 3-1: config 0 descriptor?? [ 312.943445][ T5942] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 313.595902][ T5608] Bluetooth: hci6: command tx timeout [ 314.076574][ T5608] Bluetooth: hci7: command tx timeout [ 314.173438][ T5942] gspca_stv06xx: I2C: Read error writing address: -71 [ 314.222230][ T5942] usb 3-1: USB disconnect, device number 9 [ 314.564441][ T5608] Bluetooth: hci8: command tx timeout [ 314.823642][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.785'. [ 315.458439][ T14] bridge_slave_1: left allmulticast mode [ 315.458567][ T14] bridge_slave_1: left promiscuous mode [ 315.471905][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.600248][ T14] bridge_slave_0: left allmulticast mode [ 315.600271][ T14] bridge_slave_0: left promiscuous mode [ 315.600459][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.674116][ T5608] Bluetooth: hci6: command tx timeout [ 316.155117][ T5608] Bluetooth: hci7: command tx timeout [ 316.385063][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.451590][ T8133] netlink: 14 bytes leftover after parsing attributes in process `syz.2.789'. [ 316.465023][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.505480][ T14] bond0 (unregistering): Released all slaves [ 316.637538][ T5608] Bluetooth: hci8: command tx timeout [ 316.924800][ T8144] kAFS: No cell specified [ 317.248193][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.248296][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.445592][ T8057] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.445736][ T8057] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.445883][ T8057] bridge_slave_0: entered allmulticast mode [ 317.447625][ T8057] bridge_slave_0: entered promiscuous mode [ 317.656431][ T8046] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.656682][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.656944][ T8046] bridge_slave_0: entered allmulticast mode [ 317.662948][ T8046] bridge_slave_0: entered promiscuous mode [ 317.696414][ T8052] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.696556][ T8052] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.696771][ T8052] bridge_slave_0: entered allmulticast mode [ 317.698702][ T8052] bridge_slave_0: entered promiscuous mode [ 317.739670][ T8057] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.739922][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.740226][ T8057] bridge_slave_1: entered allmulticast mode [ 317.742098][ T8057] bridge_slave_1: entered promiscuous mode [ 317.743463][ T8046] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.743613][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.743760][ T8046] bridge_slave_1: entered allmulticast mode [ 317.767927][ T8046] bridge_slave_1: entered promiscuous mode [ 317.769584][ T8052] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.769821][ T8052] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.770050][ T8052] bridge_slave_1: entered allmulticast mode [ 317.773594][ T8052] bridge_slave_1: entered promiscuous mode [ 317.891062][ T8036] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.891284][ T8036] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.891531][ T8036] bridge_slave_0: entered allmulticast mode [ 317.893368][ T8036] bridge_slave_0: entered promiscuous mode [ 318.042237][ T8036] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.042468][ T8036] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.042719][ T8036] bridge_slave_1: entered allmulticast mode [ 318.065858][ T8036] bridge_slave_1: entered promiscuous mode [ 318.177472][ T8057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.182622][ T8046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.320373][ T8052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.346411][ T8057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.349579][ T8046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.426198][ T8052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.491346][ T8036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.602778][ T8036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.816873][ T8057] team0: Port device team_slave_0 added [ 318.820863][ T8046] team0: Port device team_slave_0 added [ 318.826942][ T8052] team0: Port device team_slave_0 added [ 319.430418][ T8057] team0: Port device team_slave_1 added [ 319.564077][ T14] hsr_slave_0: left promiscuous mode [ 319.605392][ T14] hsr_slave_1: left promiscuous mode [ 319.606244][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.645379][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.265428][ T14] team0 (unregistering): Port device team_slave_1 removed [ 320.306301][ T14] team0 (unregistering): Port device team_slave_0 removed [ 320.658419][ T8046] team0: Port device team_slave_1 added [ 320.672519][ T8052] team0: Port device team_slave_1 added [ 320.682959][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1 [ 320.700580][ T8036] team0: Port device team_slave_0 added [ 320.819555][ T8036] team0: Port device team_slave_1 added [ 320.896338][ T8178] netlink: 14 bytes leftover after parsing attributes in process `syz.2.796'. [ 320.972539][ T8057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.972554][ T8057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.972576][ T8057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.984157][ T8046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.984172][ T8046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.984192][ T8046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.025924][ T8052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.025938][ T8052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.025959][ T8052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.065296][ T8057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.065310][ T8057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.065330][ T8057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.067795][ T8046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.067807][ T8046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.067826][ T8046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.071264][ T8052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.071276][ T8052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.071296][ T8052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.100734][ T8036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.100749][ T8036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.100769][ T8036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.133639][ T8036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.133654][ T8036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.133674][ T8036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.480493][ T8057] hsr_slave_0: entered promiscuous mode [ 321.481952][ T8057] hsr_slave_1: entered promiscuous mode [ 321.572143][ T8046] hsr_slave_0: entered promiscuous mode [ 321.573329][ T8046] hsr_slave_1: entered promiscuous mode [ 321.586301][ T8046] debugfs: 'hsr0' already exists in 'hsr' [ 321.586319][ T8046] Cannot create hsr debugfs directory [ 321.646712][ T8052] hsr_slave_0: entered promiscuous mode [ 321.647892][ T8052] hsr_slave_1: entered promiscuous mode [ 321.648823][ T8052] debugfs: 'hsr0' already exists in 'hsr' [ 321.648844][ T8052] Cannot create hsr debugfs directory [ 321.694047][ T8036] hsr_slave_0: entered promiscuous mode [ 321.695969][ T8036] hsr_slave_1: entered promiscuous mode [ 321.697573][ T8036] debugfs: 'hsr0' already exists in 'hsr' [ 321.697596][ T8036] Cannot create hsr debugfs directory [ 322.277847][ T5265] 8021q: adding VLAN 0 to HW filter on device eth2 [ 323.579391][ T8057] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 323.688110][ T8057] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 323.695181][ T8057] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 323.804380][ T8057] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 324.015139][ T5945] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 324.072650][ T14] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.136249][ T8057] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 324.174426][ T5945] usb 3-1: Using ep0 maxpacket: 8 [ 324.176167][ T5945] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 324.176196][ T5945] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 324.176210][ T5945] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 324.176221][ T5945] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.176245][ T5945] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 324.176255][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.394941][ T8057] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 324.424791][ T5945] usb 3-1: GET_CAPABILITIES returned 0 [ 324.424836][ T5945] usbtmc 3-1:16.0: can't read capabilities [ 324.451687][ T5265] 8021q: adding VLAN 0 to HW filter on device eth3 [ 324.470104][ T8057] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 324.507378][ T8057] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 324.629344][ T5945] usb 3-1: USB disconnect, device number 10 [ 324.755707][ T14] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.091519][ T14] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.201786][ T8046] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 325.298940][ T8046] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 325.331631][ T8046] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 325.409337][ T8046] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 325.692155][ T14] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.746161][ T8046] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 325.802067][ T5942] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 325.802457][ T8046] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 325.917024][ T8046] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 325.969537][ T8046] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.004195][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.004226][ T5942] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 326.004237][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.037020][ T5942] usb 3-1: config 0 descriptor?? [ 326.190685][ T5265] 8021q: adding VLAN 0 to HW filter on device eth4 [ 326.296203][ T5942] usbhid 3-1:0.0: can't add hid device: -71 [ 326.296308][ T5942] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 326.322397][ T5942] usb 3-1: USB disconnect, device number 11 [ 326.837127][ T8036] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 326.844061][ T5942] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 326.878846][ T8036] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.915199][ T8036] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 326.956176][ T8036] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 327.006498][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.006534][ T5942] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 327.006544][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.032479][ T5942] usb 3-1: config 0 descriptor?? [ 327.124406][ T8036] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 327.178177][ T8036] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 327.232602][ T8036] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 327.269890][ T8036] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 327.753655][ T14] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.860310][ T8057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.326855][ T14] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.490443][ T8052] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 328.540440][ T8052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 328.554190][ T8052] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 328.600520][ T8052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 328.632963][ T8057] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.695208][ T5942] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 328.701279][ T5942] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11 [ 329.048923][ T14] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.160541][ T8052] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 329.229178][ T8052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 329.290928][ T8052] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 329.350570][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 329.358675][ T5942] usb 3-1: USB disconnect, device number 12 [ 329.398159][ T8052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 329.467214][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.471018][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.872150][ T14] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.037498][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.037657][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.059546][ T5265] 8021q: adding VLAN 0 to HW filter on device eth5 [ 330.216837][ T8046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.547106][ T8046] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.912775][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.922092][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.312302][ T8036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.314916][ T5265] 8021q: adding VLAN 0 to HW filter on device eth6 [ 331.338886][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.339397][ T5940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.715254][ T14] bridge_slave_1: left allmulticast mode [ 331.715277][ T14] bridge_slave_1: left promiscuous mode [ 331.742286][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.954881][ T14] bridge_slave_0: left allmulticast mode [ 331.954905][ T14] bridge_slave_0: left promiscuous mode [ 331.955082][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.304279][ T14] bridge_slave_1: left allmulticast mode [ 332.304304][ T14] bridge_slave_1: left promiscuous mode [ 332.304460][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.434846][ T14] bridge_slave_0: left allmulticast mode [ 332.434870][ T14] bridge_slave_0: left promiscuous mode [ 332.435037][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.694017][ T14] gretap0 (unregistering): left promiscuous mode [ 333.965459][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.024661][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.045955][ T14] bond0 (unregistering): Released all slaves [ 334.414052][ T14] gretap0 (unregistering): left promiscuous mode [ 334.664715][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.725825][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.746005][ T14] bond0 (unregistering): Released all slaves [ 335.009526][ T8036] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.148102][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.148278][ T5888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.252969][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.253148][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.350882][ T8052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.427540][ T8337] syzkaller0: entered promiscuous mode [ 335.427563][ T8337] syzkaller0: entered allmulticast mode [ 336.362428][ T5265] 8021q: adding VLAN 0 to HW filter on device eth7 [ 336.520116][ T8052] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.636666][ T8364] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 336.658010][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.658175][ T5940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.089059][ T8370] vlan2: entered promiscuous mode [ 337.199958][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.200120][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.349192][ T8057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.209925][ T5265] 8021q: adding VLAN 0 to HW filter on device eth8 [ 341.008323][ T8046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.149677][ T5265] 8021q: adding VLAN 0 to HW filter on device eth9 [ 341.483732][ T8057] veth0_vlan: entered promiscuous mode [ 341.598270][ T14] veth1_to_team: left promiscuous mode [ 341.774000][ T14] hsr_slave_0: left promiscuous mode [ 341.794058][ T14] hsr_slave_1: left promiscuous mode [ 341.795787][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.796039][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.845552][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.845578][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.914065][ T14] veth1_to_team: left promiscuous mode [ 342.033969][ T14] hsr_slave_0: left promiscuous mode [ 342.054109][ T14] hsr_slave_1: left promiscuous mode [ 342.055190][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.055214][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.098994][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.099023][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.228565][ T14] veth1_macvtap: left promiscuous mode [ 342.240379][ T14] veth0_macvtap: left promiscuous mode [ 342.240674][ T14] veth1_vlan: left promiscuous mode [ 342.241083][ T14] veth0_vlan: left promiscuous mode [ 342.439138][ T14] veth1_macvtap: left promiscuous mode [ 342.439197][ T14] veth0_macvtap: left promiscuous mode [ 342.439352][ T14] veth1_vlan: left promiscuous mode [ 342.439460][ T14] veth0_vlan: left promiscuous mode [ 343.314998][ T14] team0 (unregistering): Port device team_slave_1 removed [ 343.355424][ T14] team0 (unregistering): Port device team_slave_0 removed [ 344.019818][ T14] team0 (unregistering): Port device team_slave_1 removed [ 344.054593][ T14] team0 (unregistering): Port device team_slave_0 removed [ 344.270867][ T8446] vlan2: entered promiscuous mode [ 344.402750][ T8057] veth1_vlan: entered promiscuous mode [ 344.439991][ T8036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.730253][ T8057] veth0_macvtap: entered promiscuous mode [ 344.810917][ T8057] veth1_macvtap: entered promiscuous mode [ 344.892195][ T8046] veth0_vlan: entered promiscuous mode [ 344.938871][ T8046] veth1_vlan: entered promiscuous mode [ 345.000390][ T8057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.081592][ T8057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.266350][ T1192] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.270087][ T1192] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.271917][ T1192] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.332601][ T1192] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.837325][ T8046] veth0_macvtap: entered promiscuous mode [ 346.218075][ T5265] 8021q: adding VLAN 0 to HW filter on device eth10 [ 346.248995][ T8052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.264034][ T8046] veth1_macvtap: entered promiscuous mode [ 346.726662][ T5887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.726680][ T5887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.787711][ T8046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.933010][ T8046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.157597][ T5842] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.161383][ T5888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.161401][ T5888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.162790][ T8036] veth0_vlan: entered promiscuous mode [ 347.168695][ T5842] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.218900][ T5842] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.299775][ T5842] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.746196][ T8036] veth1_vlan: entered promiscuous mode [ 348.391298][ T8512] ALSA: mixer_oss: invalid OSS volume 'pq+\d?GNޒ%lQH@s' [ 348.391344][ T8512] ALSA: mixer_oss: invalid OSS volume 'GTjEg@(;YmSuX' [ 348.391414][ T8512] ALSA: mixer_oss: invalid OSS volume 'ʝn%ub%,+WƆcrack' [ 348.391468][ T8512] ALSA: mixer_oss: invalid OSS volume 'ɗ ݕKQ0P28' [ 348.391497][ T8512] ALSA: mixer_oss: invalid OSS volume 'v c2ԭVB)a' [ 348.391516][ T8512] ALSA: mixer_oss: invalid OSS volume '^y%(9I΅[[ ᇣ]' [ 348.391530][ T8512] ALSA: mixer_oss: invalid OSS volume '8Q5΁b':!bQ^h{e' [ 348.391561][ T8512] ALSA: mixer_oss: invalid OSS volume 'hNv.0hUnzg3n|' [ 348.391584][ T8512] ALSA: mixer_oss: invalid OSS volume 'h_F' [ 348.391598][ T8512] ALSA: mixer_oss: invalid OSS volume '&\A' [ 348.391619][ T8512] ALSA: mixer_oss: invalid OSS volume 'n_~$6' [ 348.391948][ T8512] ALSA: mixer_oss: invalid OSS volume 'v' [ 348.391988][ T8512] ALSA: mixer_oss: invalid OSS volume 'tcwd*0r(eֳ\N' [ 348.391999][ T8512] ALSA: mixer_oss: invalid OSS volume 'Ժf7e즊:L݌9pM' [ 348.392025][ T8512] ALSA: mixer_oss: invalid OSS volume 'V|\hl>Pu8uǯj' [ 348.392049][ T8512] ALSA: mixer_oss: invalid OSS volume '<6o7)F8ĐҖЫ' [ 348.392076][ T8512] ALSA: mixer_oss: invalid OSS volume ';'Q{P$ j!C@|' [ 348.392085][ T8512] ALSA: mixer_oss: invalid OSS volume '8c l>*H' [ 348.392102][ T8512] ALSA: mixer_oss: invalid OSS volume 'WʽC[D1A;͚(}",'M' [ 348.392112][ T8512] ALSA: mixer_oss: invalid OSS volume '!\vٳB]Kli 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 53 b5 fd fa eb 05 e8 4c b5 [ 368.034245][ T37] RSP: 0018:ffffc90000ac6c78 EFLAGS: 00010283 [ 368.034293][ T37] RAX: ffffffff86c76462 RBX: ffff88802a27d100 RCX: 0000000000100000 [ 368.034306][ T37] RDX: ffffc9001a7f6000 RSI: ffff88802a27d100 RDI: ffffffff8f996cd0 [ 368.034320][ T37] RBP: dffffc0000000000 R08: ffffffff8f8c95f7 R09: 1ffffffff1f192be [ 368.034333][ T37] R10: dffffc0000000000 R11: fffffbfff1f192bf R12: 1ffff11007ada60a [ 368.034346][ T37] R13: ffff88803d6d3048 R14: ffff88802a27d108 R15: 0000000000000cc0 [ 368.034360][ T37] FS: 0000000000000000(0000) GS:ffff888125fca000(0000) knlGS:0000000000000000 [ 368.034374][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.034386][ T37] CR2: 00007f7f51ad5d58 CR3: 000000003ebc4000 CR4: 00000000003526f0 [ 368.034402][ T37] Call Trace: [ 368.034440][ T37] [ 368.034504][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 368.034589][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 368.034641][ T37] ? mutex_lock_nested+0x152/0x1d0 [ 368.034717][ T37] ? cm109_input_open+0x97/0x460 [ 368.034828][ T37] cm109_input_open+0x1fb/0x460 [ 368.034859][ T37] input_open_device+0x1f9/0x3b0 [ 368.034916][ T37] kbd_connect+0xf6/0x150 [ 368.035022][ T37] input_register_device+0xd08/0x1150 [ 368.035080][ T37] cm109_usb_probe+0x11e4/0x16f0 [ 368.035137][ T37] usb_probe_interface+0x653/0xc60 [ 368.035200][ T37] ? __pfx_usb_probe_interface+0x10/0x10 [ 368.035222][ T37] really_probe+0x254/0xae0 [ 368.035337][ T37] __driver_probe_device+0x1e8/0x360 [ 368.035367][ T37] driver_probe_device+0x4f/0x240 [ 368.035396][ T37] __device_attach_driver+0x270/0x410 [ 368.035426][ T37] bus_for_each_drv+0x25b/0x2f0 [ 368.035447][ T37] ? __pfx___device_attach_driver+0x10/0x10 [ 368.035472][ T37] ? __pfx_bus_for_each_drv+0x10/0x10 [ 368.035492][ T37] ? rt_spin_unlock+0x163/0x200 [ 368.035526][ T37] __device_attach+0x2c7/0x450 [ 368.035547][ T37] ? rt_spin_unlock+0x157/0x200 [ 368.035574][ T37] ? __pfx___device_attach+0x10/0x10 [ 368.035608][ T37] device_initial_probe+0xa1/0xd0 [ 368.035635][ T37] bus_probe_device+0x12d/0x220 [ 368.035659][ T37] device_add+0x7d7/0xb80 [ 368.035685][ T37] usb_set_configuration+0x1ad8/0x2180 [ 368.035733][ T37] usb_generic_driver_probe+0x8d/0x150 [ 368.035795][ T37] usb_probe_device+0x1c3/0x3b0 [ 368.035819][ T37] ? __pfx_usb_probe_device+0x10/0x10 [ 368.035838][ T37] really_probe+0x254/0xae0 [ 368.035867][ T37] __driver_probe_device+0x1e8/0x360 [ 368.035895][ T37] driver_probe_device+0x4f/0x240 [ 368.035923][ T37] __device_attach_driver+0x270/0x410 [ 368.035953][ T37] bus_for_each_drv+0x25b/0x2f0 [ 368.035973][ T37] ? __pfx___device_attach_driver+0x10/0x10 [ 368.035998][ T37] ? __pfx_bus_for_each_drv+0x10/0x10 [ 368.036019][ T37] ? rt_spin_unlock+0x163/0x200 [ 368.036051][ T37] __device_attach+0x2c7/0x450 [ 368.036078][ T37] ? __pfx___device_attach+0x10/0x10 [ 368.036123][ T37] device_initial_probe+0xa1/0xd0 [ 368.036151][ T37] bus_probe_device+0x12d/0x220 [ 368.036176][ T37] device_add+0x7d7/0xb80 [ 368.036215][ T37] usb_new_device+0x98d/0x1610 [ 368.036240][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 368.036269][ T37] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 368.036295][ T37] ? __pfx_usb_new_device+0x10/0x10 [ 368.036332][ T37] hub_event+0x28cf/0x4cf0 [ 368.036409][ T37] ? __pfx_hub_event+0x10/0x10 [ 368.036428][ T37] ? process_one_work+0x8cd/0x12b0 [ 368.036453][ T37] ? process_one_work+0x8cd/0x12b0 [ 368.036470][ T37] ? rcu_is_watching+0x15/0xb0 [ 368.036620][ T37] ? process_one_work+0x8cd/0x12b0 [ 368.036640][ T37] ? process_one_work+0x8cd/0x12b0 [ 368.036658][ T37] process_one_work+0x93a/0x12b0 [ 368.036702][ T37] ? __pfx_process_one_work+0x10/0x10 [ 368.036720][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.036798][ T37] ? assign_work+0x3cf/0x5d0 [ 368.036824][ T37] worker_thread+0xb05/0x10d0 [ 368.036869][ T37] kthread+0x388/0x470 [ 368.036892][ T37] ? __pfx_worker_thread+0x10/0x10 [ 368.036910][ T37] ? __pfx_kthread+0x10/0x10 [ 368.036934][ T37] ret_from_fork+0x514/0xb70 [ 368.037027][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 368.037052][ T37] ? __switch_to+0xc89/0x1420 [ 368.037103][ T37] ? __pfx_kthread+0x10/0x10 [ 368.037128][ T37] ret_from_fork_asm+0x1a/0x30 [ 368.037180][ T37] [ 368.037199][ T37] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 368.037217][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 368.037239][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 368.037251][ T37] Workqueue: usb_hub_wq hub_event [ 368.037272][ T37] Call Trace: [ 368.037279][ T37] [ 368.037286][ T37] vpanic+0x56c/0xa60 [ 368.037321][ T37] ? __pfx__printk+0x10/0x10 [ 368.037341][ T37] ? __pfx_vpanic+0x10/0x10 [ 368.037362][ T37] ? is_bpf_text_address+0x292/0x2b0 [ 368.037449][ T37] ? is_bpf_text_address+0x26/0x2b0 [ 368.037476][ T37] panic+0xc5/0xd0 [ 368.037499][ T37] ? __pfx_panic+0x10/0x10 [ 368.037530][ T37] ? ret_from_fork_asm+0x1a/0x30 [ 368.037559][ T37] __warn+0x315/0x4c0 [ 368.037579][ T37] ? usb_submit_urb+0x79/0x18b0 [ 368.037612][ T37] ? usb_submit_urb+0x79/0x18b0 [ 368.037637][ T37] __report_bug+0x331/0x530 [ 368.037666][ T37] ? usb_submit_urb+0x79/0x18b0 [ 368.037692][ T37] ? __pfx___report_bug+0x10/0x10 [ 368.037733][ T37] report_bug_entry+0x19a/0x290 [ 368.037754][ T37] ? usb_submit_urb+0x7c/0x18b0 [ 368.037783][ T37] ? usb_submit_urb+0x81/0x18b0 [ 368.037807][ T37] handle_bug+0xce/0x200 [ 368.037828][ T37] exc_invalid_op+0x1a/0x50 [ 368.037848][ T37] asm_exc_invalid_op+0x1a/0x20 [ 368.037862][ T37] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 368.037883][ T37] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 99 85 69 fb 49 83 3e 00 74 40 e8 6e b5 fd fa 48 8d 3d 67 08 d2 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 53 b5 fd fa eb 05 e8 4c b5 [ 368.037898][ T37] RSP: 0018:ffffc90000ac6c78 EFLAGS: 00010283 [ 368.037912][ T37] RAX: ffffffff86c76462 RBX: ffff88802a27d100 RCX: 0000000000100000 [ 368.037922][ T37] RDX: ffffc9001a7f6000 RSI: ffff88802a27d100 RDI: ffffffff8f996cd0 [ 368.037933][ T37] RBP: dffffc0000000000 R08: ffffffff8f8c95f7 R09: 1ffffffff1f192be [ 368.037944][ T37] R10: dffffc0000000000 R11: fffffbfff1f192bf R12: 1ffff11007ada60a [ 368.037956][ T37] R13: ffff88803d6d3048 R14: ffff88802a27d108 R15: 0000000000000cc0 [ 368.037977][ T37] ? usb_submit_urb+0x72/0x18b0 [ 368.038007][ T37] ? usb_submit_urb+0x72/0x18b0 [ 368.038028][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 368.038045][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 368.038063][ T37] ? mutex_lock_nested+0x152/0x1d0 [ 368.038085][ T37] ? cm109_input_open+0x97/0x460 [ 368.038112][ T37] cm109_input_open+0x1fb/0x460 [ 368.038137][ T37] input_open_device+0x1f9/0x3b0 [ 368.038162][ T37] kbd_connect+0xf6/0x150 [ 368.038188][ T37] input_register_device+0xd08/0x1150 [ 368.038217][ T37] cm109_usb_probe+0x11e4/0x16f0 [ 368.038257][ T37] usb_probe_interface+0x653/0xc60 [ 368.038286][ T37] ? __pfx_usb_probe_interface+0x10/0x10 [ 368.038304][ T37] really_probe+0x254/0xae0 [ 368.038333][ T37] __driver_probe_device+0x1e8/0x360 [ 368.038357][ T37] driver_probe_device+0x4f/0x240 [ 368.038386][ T37] __device_attach_driver+0x270/0x410 [ 368.038414][ T37] bus_for_each_drv+0x25b/0x2f0 [ 368.038434][ T37] ? __pfx___device_attach_driver+0x10/0x10 [ 368.038458][ T37] ? __pfx_bus_for_each_drv+0x10/0x10 [ 368.038480][ T37] ? rt_spin_unlock+0x163/0x200 [ 368.038510][ T37] __device_attach+0x2c7/0x450 [ 368.038531][ T37] ? rt_spin_unlock+0x157/0x200 [ 368.038555][ T37] ? __pfx___device_attach+0x10/0x10 [ 368.038584][ T37] device_initial_probe+0xa1/0xd0 [ 368.038608][ T37] bus_probe_device+0x12d/0x220 [ 368.038628][ T37] device_add+0x7d7/0xb80 [ 368.038651][ T37] usb_set_configuration+0x1ad8/0x2180 [ 368.038695][ T37] usb_generic_driver_probe+0x8d/0x150 [ 368.038718][ T37] usb_probe_device+0x1c3/0x3b0 [ 368.038741][ T37] ? __pfx_usb_probe_device+0x10/0x10 [ 368.038760][ T37] really_probe+0x254/0xae0 [ 368.038798][ T37] __driver_probe_device+0x1e8/0x360 [ 368.038824][ T37] driver_probe_device+0x4f/0x240 [ 368.038849][ T37] __device_attach_driver+0x270/0x410 [ 368.038877][ T37] bus_for_each_drv+0x25b/0x2f0 [ 368.038897][ T37] ? __pfx___device_attach_driver+0x10/0x10 [ 368.038921][ T37] ? __pfx_bus_for_each_drv+0x10/0x10 [ 368.038941][ T37] ? rt_spin_unlock+0x163/0x200 [ 368.038969][ T37] __device_attach+0x2c7/0x450 [ 368.038992][ T37] ? __pfx___device_attach+0x10/0x10 [ 368.039022][ T37] device_initial_probe+0xa1/0xd0 [ 368.039044][ T37] bus_probe_device+0x12d/0x220 [ 368.039064][ T37] device_add+0x7d7/0xb80 [ 368.039086][ T37] usb_new_device+0x98d/0x1610 [ 368.039107][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 368.039131][ T37] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 368.039155][ T37] ? __pfx_usb_new_device+0x10/0x10 [ 368.039188][ T37] hub_event+0x28cf/0x4cf0 [ 368.039251][ T37] ? __pfx_hub_event+0x10/0x10 [ 368.039269][ T37] ? process_one_work+0x8cd/0x12b0 [ 368.039292][ T37] ? process_one_work+0x8cd/0x12b0 [ 368.039310][ T37] ? rcu_is_watching+0x15/0xb0 [ 368.039332][ T37] ? process_one_work+0x8cd/0x12b0 [ 368.039349][ T37] ? process_one_work+0x8cd/0x12b0 [ 368.039366][ T37] process_one_work+0x93a/0x12b0 [ 368.039399][ T37] ? __pfx_process_one_work+0x10/0x10 [ 368.039414][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.039441][ T37] ? assign_work+0x3cf/0x5d0 [ 368.039461][ T37] worker_thread+0xb05/0x10d0 [ 368.039498][ T37] kthread+0x388/0x470 [ 368.039519][ T37] ? __pfx_worker_thread+0x10/0x10 [ 368.039535][ T37] ? __pfx_kthread+0x10/0x10 [ 368.039558][ T37] ret_from_fork+0x514/0xb70 [ 368.039583][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 368.039605][ T37] ? __switch_to+0xc89/0x1420 [ 368.039628][ T37] ? __pfx_kthread+0x10/0x10 [ 368.039648][ T37] ret_from_fork_asm+0x1a/0x30 [ 368.039683][ T37] [ 368.040725][ T37] Kernel Offset: disabled