last executing test programs:

16m33.740651258s ago: executing program 2 (id=159):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000180)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)={0x1, 0x355, 0x509, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "23280a953e5d2d2f"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x51)

16m33.562817792s ago: executing program 2 (id=162):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x600, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000080)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000680)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$unix(0x1, 0x1, 0x0)
connect$packet(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x2, 0x7fff, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000008c0)={'syzkaller0\x00', <r9=>0x0})
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000900), 0x56)
sendmsg$kcm(r8, &(0x7f0000000940)={&(0x7f0000000980)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000a40)="27030200000214000e00002f74214b34586d47423cddcb0000008000008276000000000000006e81a357601e3876", 0x2e}], 0x1}, 0x5)

16m33.340929348s ago: executing program 2 (id=166):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000)
mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil)
mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000001000/0x3000)=nil)

16m33.075216544s ago: executing program 2 (id=168):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000900)={[{@noinit_itable}, {@jqfmt_vfsv1}]}, 0xc1, 0x7eb, &(0x7f0000001fc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x121)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write$cgroup_int(r1, &(0x7f00000000c0)=0x8, 0x12)
connect$pppoe(r1, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000140)='\"', 0x1, 0xe7c)

16m30.476932931s ago: executing program 2 (id=181):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})
syz_emit_ethernet(0x0, 0x0, 0x0)

16m29.179220835s ago: executing program 2 (id=189):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000a00)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000a40)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000a80)=0x5, 0x4)
sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24040855)

16m28.883069122s ago: executing program 32 (id=189):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000a00)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000a40)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000a80)=0x5, 0x4)
sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24040855)

2m32.341944572s ago: executing program 4 (id=3596):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000000000002f6ffffff09"], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r0 = openat$binderfs(0xffffff9c, &(0x7f0000000200)='./binderfs/custom0\x00', 0xc00, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000280)={r1})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000006c0), 0x10)
read(r3, &(0x7f0000000700)=""/135, 0x87)
sendmsg$can_bcm(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000880)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "1e"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/power/disk', 0x0, 0x4)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/power/disk', 0x129a02, 0x5)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r7)
sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d80)={0x14, r9, 0x422, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x24048880}, 0x20000850)
sendfile(r8, r7, &(0x7f0000000dc0)=0x1, 0x8)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)={0x38, 0x43, 0x107, 0x70bd2a, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x1c, 0x145, 0x0, 0x1, [@typed={0x4, 0x4}, @nested={0x14, 0x3, 0x0, 0x1, [@nested={0xd, 0x3e, 0x0, 0x1, [@typed={0x8, 0x101, 0x0, 0x0, @fd}, @generic="c4"]}]}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x141}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x2004c000)
pipe2(&(0x7f0000000100), 0x0)

2m32.062855199s ago: executing program 4 (id=3599):
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$tipc(0x1e, 0x4, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r0}, 0xc)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x41, 0x4, 0x3, 0x3}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
inotify_init1(0x81800)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x2000040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000540)='dummy_udc.0', 0xb)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000580)=0xa, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x4)
write(r4, &(0x7f00000005c0)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000640)='./dev\x00', &(0x7f0000000680)='devtmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./dev/ttyGS0\x00', 0x2, 0x0)
write(r5, &(0x7f0000000700)='t', 0x1)
close(r5)
r6 = landlock_create_ruleset(&(0x7f0000000740)={0xf4da, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)

2m31.613795641s ago: executing program 4 (id=3602):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r0, 0x80480911, 0x0)

2m31.532648413s ago: executing program 4 (id=3603):
syz_open_dev$mtd(&(0x7f00000004c0), 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
dup2(0xffffffffffffffff, r1)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0xc804)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x3e4, 0xffffffff, 0xe4, 0x0, 0x254, 0xfeffffff, 0xffffffff, 0x31c, 0x31c, 0x31c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'rose0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x130, 0x170, 0x0, {}, [@common=@srh1={{0x8c}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, @local, [0xff000000, 0xff000000, 0x0, 0x100], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x440)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000000201091405000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0)

2m31.385024486s ago: executing program 4 (id=3604):
r0 = syz_open_procfs(0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000019080)={0x0, 0x0, "2734fd0396f1820c0dad7f222ce140f5f2724f8a424a586f443cb62d01000080ff5a483676cb5edeb06c9500cfbf27b503fb56f886d7ddb0172c647d97d957e53885ba7394ccf32ea2024e726436025758fd796ad6f5971a64e69ef431ead7fbcb45eb4e8e0a442e0048e8d6eca35ee858e0a562078252f3ac1a820df4948845455ab082544c93f2d5173b1770080012f165fddaf20cd03f6c66fda6ef37e1a3df106e346a90e052c3cab743dbb1b604e69c6f7c8b504ea5eadb60695c296afc02a77b26ed66c954de07cccaf090fd14410100000031d05e0d33060d2e9595085c60fff54ae872d9360a4200", "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"})
socket$inet6(0xa, 0x80003, 0x6)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
io_uring_setup(0xe02, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x4000)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001cc0)=@filter={'filter\x00', 0x42, 0x4, 0x314, 0xffffffff, 0x0, 0x18c, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0xff000000, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x9c, 0xc0, 0x0, {0x100000000000000}, [@common=@unspec=@connmark={{0x2c}, {0x5}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0xa8, 0xcc, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x33, {0xd4e}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb4, 0xf4, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x370)
mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x2000413, &(0x7f0000019080)=ANY=[])
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

2m31.231823099s ago: executing program 4 (id=3606):
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300))
syz_open_dev$ublk_chdev(0x0, r5, 0x2)
r6 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r6}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

2m16.105606855s ago: executing program 33 (id=3606):
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300))
syz_open_dev$ublk_chdev(0x0, r5, 0x2)
r6 = getpid()
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r6}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)

11.463437036s ago: executing program 1 (id=4162):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x28100, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000003c0)="0f01cb0f2226baf80c66b895cd308666ef8340730cec0f8500000f01c366b9750100000f326767660f382570a5360fc76a8726f30f6fc3660f38807d00", 0x3d}], 0x1, 0x40, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, 0x0, 0x0)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000400)=0x1, 0x4)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, 0x0)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3d)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
creat(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
write(r7, &(0x7f00000005c0)='1', 0x1)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2082, 0x0)
write(r8, &(0x7f0000000640)='6', 0x1)
pipe(&(0x7f0000000680))
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00'})
ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000180)={0x5, 0x2, [{0x4, 0x0, 0xfffffffffffffffc}, {0x3, 0x0, 0x20000008001}, {0xb, 0x0, 0x1}, {0x6, 0x0, 0x2}, {0x80000000, 0x0, 0x7}, {0x5, 0x0, 0x9}, {0x9, 0x0, 0x100}, {0x81, 0x0, 0x8b}, {0x6, 0x0, 0x4}, {0x7b, 0x0, 0x2}, {0xffff0862}, {0x1000008, 0x0, 0xe}, {0x9, 0x0, 0x2009}, {0x5, 0x0, 0xd5b}, {0x2, 0x0, 0xb3}, {0xfffffff7, 0x0, 0x40}]})
io_setup(0x11, &(0x7f0000000540))
openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x42, 0x113)

9.110226884s ago: executing program 1 (id=4168):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000400)='task\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\a'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x40, 0x9, 0x1, "f9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000cc0)={0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="4031010d21e3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000020030a03000000000100000000020000000900010073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x48011}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0)

5.696789579s ago: executing program 1 (id=4198):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0)
restart_syscall()
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x410100, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000440)={0x3, 0x9, 0x1})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140)={0x0, <r4=>0x0})
prlimit64(r4, 0xe, &(0x7f0000000380)={0xfffffffa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x52, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x4008081)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000240)={0x2c, @local, 0x4e21, 0x7, 'wrr\x00', 0xf8024022adadd354, 0x79, 0x26}, 0x2c)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x94}, 0x1, 0x20, 0x0, 0x8040}, 0x0)
r8 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[], 0x1b4}}, 0x20000000)
socket$inet_tcp(0x2, 0x1, 0x0)
r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
write$cgroup_int(r10, &(0x7f00000001c0)=0x2, 0x12)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dummy0\x00'})

5.157751142s ago: executing program 1 (id=4201):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x84)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x4, 0x2}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x14, &(0x7f0000000880)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000a00)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x20004000)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000003c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000a80)={0xa, 0x4e23, 0xffff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffff0001}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=[@pktinfo={{0x20, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @remote}}}}], 0x20}}], 0x1, 0x4010)
write$nci(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="600602"], 0x8)
openat$make_it_fail(0xffffff9c, 0x0, 0x1, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3, 0x0, 0x8}, 0x30, 0x0)

4.679066544s ago: executing program 3 (id=4204):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
r0 = openat(0xffffffffffffffff, 0x0, 0x141000, 0x100)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{0x0}], 0x1)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x80, 0x0)
read$FUSE(r0, 0x0, 0x0)
prlimit64(0x0, 0x5, &(0x7f00000028c0)={0x7fff, 0x8}, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r0, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'veth1_macvtap\x00', 0x2000})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x184)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r5 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6)
write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x110009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0)
sendfile(r5, r5, &(0x7f0000000080), 0x7f03)

4.306220054s ago: executing program 3 (id=4205):
move_pages(0x0, 0x1efe, &(0x7f0000000000), 0x0, &(0x7f0000000040), 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='md0', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x2, 0x0)
ioctl(r1, 0x40480923, &(0x7f0000000340)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010")
ioctl(r1, 0x40140921, &(0x7f00000003c0)="0000000001")
ioctl(r1, 0x40140921, &(0x7f0000000400)="0100000001000000010000000100000006")
ioctl(r0, 0xfffff000, &(0x7f0000000440)="0200000001000500020000116a")
ioctl(r1, 0x400c0930, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x4a102)
writev(r2, &(0x7f0000000540)=[{&(0x7f0000000580)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtaction={0x54, 0x30, 0x4, 0x70bd29, 0x0, {}, [{0x40, 0x1, [@m_police={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x4}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x54}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb01002000"], 0x0, 0x5a}, 0x28)
syz_emit_vhci(0x0, 0x0)
socket$kcm(0x2, 0x7, 0x2)
socket(0x10, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000b40)={0x0, 0x0})
creat(0x0, 0x25)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b80)='net/igmp6\x00')
preadv(r3, &(0x7f0000000bc0)=[{&(0x7f00000006c0)=""/87, 0x57}], 0x1, 0xfffffffe, 0x5)
creat(&(0x7f0000000040)='./sys/module/md_mod/parameters/new_array\x00', 0x108)

3.927485123s ago: executing program 5 (id=4208):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x83, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0x7, 0x9, 0x0, 0x62e, 0xc, 0xfffffffe, 0x9}]})

3.791055866s ago: executing program 5 (id=4209):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0)
read(r1, &(0x7f0000000480)=""/13, 0xd)
read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020)

3.790814386s ago: executing program 5 (id=4210):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x1, 0x6, 0x10}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0xc, &(0x7f0000000400)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000640)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a50000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000024000480200001800700010063740000140002800800014000000013080002400000001014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044)
r3 = syz_usb_connect(0x0, 0x39, &(0x7f0000000540)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./dev\x00', 0x10)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
mount(0x0, &(0x7f00000006c0)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000740)='./dev/ttyUSB0\x00', 0x2, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001240)={0x1, &(0x7f0000001280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x0)
mount(&(0x7f0000000140)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000180)='./cifs\x00', &(0x7f00000001c0)='cifs\x00', 0x0, 0x0)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x140})

3.556819532s ago: executing program 0 (id=4211):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000400), 0x56)
sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000500)=[{0x0}], 0x1}, 0x0)

3.519243203s ago: executing program 3 (id=4212):
r0 = socket(0x1e, 0x1, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
connect$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000140), 0x2000011a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000001c0)={0x0, 0xa1, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r3, 0x0, 0x40000000, 0x0)
ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000900)={0x0})
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x200000, &(0x7f0000004dc0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
sendmsg$netlink(r0, &(0x7f0000009100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000009080)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x30, 0x20004104}, 0x90)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)

3.23090357s ago: executing program 0 (id=4213):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
r0 = openat(0xffffffffffffffff, 0x0, 0x141000, 0x100)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{0x0}], 0x1)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x80, 0x0)
read$FUSE(r0, 0x0, 0x0)
prlimit64(0x0, 0x5, &(0x7f00000028c0)={0x7fff, 0x8}, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r0, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'veth1_macvtap\x00', 0x2000})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x184)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r5 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6)
write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x110009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0)
sendfile(r5, r5, &(0x7f0000000080), 0x7f03)

3.002304586s ago: executing program 0 (id=4214):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0xca02})
r1 = socket$netlink(0x10, 0x3, 0x0)
preadv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/4, 0x2a5}], 0x3bc, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000b40)={'syzkaller0\x00', @link_local})
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'})
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000340), 0x56)
sendmsg$kcm(r2, 0x0, 0x0)

2.83927544s ago: executing program 0 (id=4215):
r0 = syz_open_procfs(0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000019080)={0x0, 0x0, "2734fd0396f1820c0dad7f222ce140f5f2724f8a424a586f443cb62d01000080ff5a483676cb5edeb06c9500cfbf27b503fb56f886d7ddb0172c647d97d957e53885ba7394ccf32ea2024e726436025758fd796ad6f5971a64e69ef431ead7fbcb45eb4e8e0a442e0048e8d6eca35ee858e0a562078252f3ac1a820df4948845455ab082544c93f2d5173b1770080012f165fddaf20cd03f6c66fda6ef37e1a3df106e346a90e052c3cab743dbb1b604e69c6f7c8b504ea5eadb60695c296afc02a77b26ed66c954de07cccaf090fd14410100000031d05e0d33060d2e9595085c60fff54ae872d9360a4200", "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"})
socket$inet6(0xa, 0x80003, 0x6)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
io_uring_setup(0xe02, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x4000)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001cc0)=@filter={'filter\x00', 0x42, 0x4, 0x314, 0xffffffff, 0x0, 0x18c, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0xff000000, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x9c, 0xc0, 0x0, {0x100000000000000}, [@common=@unspec=@connmark={{0x2c}, {0x5}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0xa8, 0xcc, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x33, {0xd4e}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb4, 0xf4, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x370)
mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x2000413, &(0x7f0000019080)=ANY=[])
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

2.02866432s ago: executing program 0 (id=4216):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000001ffc0)={0xc, 0xe, &(0x7f0000020080)=ANY=[@ANYBLOB="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"], &(0x7f00000202c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000020300), 0x0, 0x10, &(0x7f0000020340), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000020380)={r0, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000020400)="b90103600040f000009e0ff008001fffffe1000040", 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000020440)="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", &(0x7f0000020580)}, 0x50)

2.01107374s ago: executing program 1 (id=4217):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r0, 0x4004092b, &(0x7f0000000580))

1.972571171s ago: executing program 3 (id=4218):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x8}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x14d380, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x4, 0x9, 0xfffffffffffffffd, 0x40000000000, 0xfffe, 0x800000000000005, 0x65, 0x7ff, 0x5, 0x8, 0x400, 0x80, 0x89, 0x6, 0x4, 0x6], 0x100000, 0x240006})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_NMI(r3, 0xae9a)
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000280)='setgroups\x00')
close_range(r8, 0xffffffffffffffff, 0x0)
read$snddsp(r8, &(0x7f00000000c0)=""/69, 0x45)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c)

1.735266617s ago: executing program 1 (id=4219):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000400)='task\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\a'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x40, 0x9, 0x1, "f9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000cc0)={0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="4031010d21e3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000020030a03000000000100000000020000000900010073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x48011}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0)

1.735008607s ago: executing program 0 (id=4220):
move_pages(0x0, 0x1efe, &(0x7f0000000000), 0x0, &(0x7f0000000040), 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='md0', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x2, 0x0)
ioctl(r1, 0x40480923, &(0x7f0000000340)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010")
ioctl(r1, 0x40140921, &(0x7f00000003c0)="0000000001")
ioctl(r1, 0x40140921, &(0x7f0000000400)="0100000001000000010000000100000006")
ioctl(r0, 0xfffff000, &(0x7f0000000440)="0200000001000500020000116a")
ioctl(r1, 0x400c0930, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x4a102)
writev(r2, &(0x7f0000000540)=[{&(0x7f0000000580)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtaction={0x54, 0x30, 0x4, 0x70bd29, 0x0, {}, [{0x40, 0x1, [@m_police={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x4}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x54}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb01002000"], 0x0, 0x5a}, 0x28)
syz_emit_vhci(0x0, 0x0)
socket$kcm(0x2, 0x7, 0x2)
socket(0x10, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000b40)={0x0, 0x0})
creat(0x0, 0x25)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b80)='net/igmp6\x00')
preadv(r3, &(0x7f0000000bc0)=[{&(0x7f00000006c0)=""/87, 0x57}], 0x1, 0xfffffffe, 0x5)
creat(&(0x7f0000000040)='./sys/module/md_mod/parameters/new_array\x00', 0x108)

1.671928049s ago: executing program 5 (id=4221):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000400), 0x56)
sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000500)=[{0x0}], 0x1}, 0x0)

1.436041565s ago: executing program 5 (id=4222):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
r0 = openat(0xffffffffffffffff, 0x0, 0x141000, 0x100)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{0x0}], 0x1)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x80, 0x0)
read$FUSE(r0, 0x0, 0x0)
prlimit64(0x0, 0x5, &(0x7f00000028c0)={0x7fff, 0x8}, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r0, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'veth1_macvtap\x00', 0x2000})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x184)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r5 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6)
write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x110009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0)
sendfile(r5, r5, &(0x7f0000000080), 0x7f03)

323.227022ms ago: executing program 3 (id=4223):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0xca02})
r1 = socket$netlink(0x10, 0x3, 0x0)
preadv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/4, 0x2a5}], 0x3bc, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000b40)={'syzkaller0\x00', @link_local})
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'})
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000340), 0x56)
sendmsg$kcm(r2, 0x0, 0x0)

28.57064ms ago: executing program 5 (id=4224):
r0 = syz_open_procfs(0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000019080)={0x0, 0x0, "2734fd0396f1820c0dad7f222ce140f5f2724f8a424a586f443cb62d01000080ff5a483676cb5edeb06c9500cfbf27b503fb56f886d7ddb0172c647d97d957e53885ba7394ccf32ea2024e726436025758fd796ad6f5971a64e69ef431ead7fbcb45eb4e8e0a442e0048e8d6eca35ee858e0a562078252f3ac1a820df4948845455ab082544c93f2d5173b1770080012f165fddaf20cd03f6c66fda6ef37e1a3df106e346a90e052c3cab743dbb1b604e69c6f7c8b504ea5eadb60695c296afc02a77b26ed66c954de07cccaf090fd14410100000031d05e0d33060d2e9595085c60fff54ae872d9360a4200", "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"})
socket$inet6(0xa, 0x80003, 0x6)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
io_uring_setup(0xe02, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x4000)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001cc0)=@filter={'filter\x00', 0x42, 0x4, 0x314, 0xffffffff, 0x0, 0x18c, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0xff000000, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x9c, 0xc0, 0x0, {0x100000000000000}, [@common=@unspec=@connmark={{0x2c}, {0x5}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0xa8, 0xcc, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x33, {0xd4e}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb4, 0xf4, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x370)
mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x2000413, &(0x7f0000019080)=ANY=[])
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

0s ago: executing program 3 (id=4225):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000180), 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="33330000123400112233445586dd6000000000103b40fe8000000000000000000000000000bbff0e"], 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0)

kernel console output (not intermixed with test programs):

sb 5-1: unable to get BOS descriptor or descriptor too short
[  805.007170][T10824] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64
[  805.035163][T10824] usb 5-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40
[  805.061180][T10824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  805.075387][T10824] usb 5-1: Product: syz
[  805.083207][T10824] usb 5-1: Manufacturer: syz
[  805.088610][T10824] usb 5-1: SerialNumber: syz
[  805.364454][T10824] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[  806.401510][T10824] usb 5-1: MIDIStreaming interface descriptor not found
[  806.466128][T10824] usb 5-1: USB disconnect, device number 12
[  806.522518][T17294] md: array md0 already has disks!
[  806.568192][T17294] md: could not open device unknown-block(1,1).
[  806.595947][T17298] udevd[17298]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  806.612683][T17294] md: error, md_import_device() returned -16
[  806.706367][T17294] md/raid:md0: invalid chunk size -61440
[  806.794790][T17294] md: pers->run() failed ...
[  806.932507][T17307] syzkaller0: entered promiscuous mode
[  806.969287][T17307] syzkaller0: entered allmulticast mode
[  807.337931][T17311] tmpfs: Unknown parameter 'n'
[  807.569559][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  807.569570][   T28] audit: type=1326 audit(1791906603.136:4482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.1.3232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c679e2d9 code=0x7ffc0000
[  808.812685][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  808.841101][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  809.602840][   T28] audit: type=1326 audit(1791906603.136:4483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.1.3232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c679e2d9 code=0x7ffc0000
[  809.756834][   T28] audit: type=1326 audit(1791906603.176:4485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.1.3232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd0c679e2d9 code=0x7ffc0000
[  810.036252][   T28] audit: type=1326 audit(1791906603.176:4486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.1.3232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c679e2d9 code=0x7ffc0000
[  811.207795][T10824] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  811.295696][   T28] audit: type=1326 audit(1791906603.176:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.1.3232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c679e2d9 code=0x7ffc0000
[  811.392773][   T28] audit: type=1326 audit(1791906603.136:4484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.1.3232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c679e2d9 code=0x7ffc0000
[  811.447837][T10824] usb 4-1: Using ep0 maxpacket: 16
[  811.470095][T10824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  811.504342][   T28] audit: type=1326 audit(1791906603.176:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.1.3232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c679e2d9 code=0x7ffc0000
[  811.592928][T10824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  811.640406][T10824] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  811.691584][   T28] audit: type=1326 audit(1791906603.176:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.1.3232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c679e2d9 code=0x7ffc0000
[  811.726511][T10824] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  811.767187][T10824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  811.792513][T17339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  811.816252][T10824] usb 4-1: config 0 descriptor??
[  811.832541][T17339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  811.860863][   T28] audit: type=1326 audit(1791906603.176:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.1.3232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fd0c679e2d9 code=0x7ffc0000
[  811.966415][   T28] audit: type=1326 audit(1791906603.176:4491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.1.3232" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c679e2d9 code=0x7ffc0000
[  812.129699][T17341] syzkaller0: entered promiscuous mode
[  812.145440][T17341] syzkaller0: entered allmulticast mode
[  812.153278][ T5017] IPVS: stopping backup sync thread 14371 ...
[  812.280389][T17344] tmpfs: Unknown parameter 'n'
[  812.297626][T17325] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3234'.
[  812.356337][T10824] usbhid 4-1:0.0: can't add hid device: -71
[  812.372268][T10824] usbhid: probe of 4-1:0.0 failed with error -71
[  812.404967][T10824] usb 4-1: USB disconnect, device number 33
[  812.481062][ T5017] hsr_slave_0: left promiscuous mode
[  812.503257][ T5017] hsr_slave_1: left promiscuous mode
[  812.520529][ T5017] bridge_slave_1: left allmulticast mode
[  812.542179][ T5017] bridge_slave_1: left promiscuous mode
[  812.565857][ T5017] bridge0: port 2(bridge_slave_1) entered disabled state
[  812.591368][T17348] md: array md0 already has disks!
[  812.599996][ T5017] bridge_slave_0: left allmulticast mode
[  812.620057][T17348] md: could not open device unknown-block(1,1).
[  812.626371][ T5017] bridge_slave_0: left promiscuous mode
[  812.641538][ T5017] bridge0: port 1(bridge_slave_0) entered disabled state
[  812.659442][T17348] md: error, md_import_device() returned -16
[  812.721937][ T5017] veth1_macvtap: left promiscuous mode
[  812.747205][ T5017] veth0_macvtap: left promiscuous mode
[  812.782466][T17352] md/raid:md0: invalid chunk size -61440
[  812.793495][ T5017] veth1_vlan: left promiscuous mode
[  812.812277][ T5017] veth0_vlan: left promiscuous mode
[  812.823041][T17352] md: pers->run() failed ...
[  814.995171][T17385] tmpfs: Unknown parameter 'n'
[  815.076707][ T5017] team_slave_1 (unregistering): left allmulticast mode
[  815.091351][ T5017] team0 (unregistering): Port device team_slave_1 removed
[  815.164692][ T5017] team_slave_0 (unregistering): left allmulticast mode
[  815.191622][ T5017] team0 (unregistering): Port device team_slave_0 removed
[  815.757331][T17383] syzkaller0: entered promiscuous mode
[  815.770121][T17383] syzkaller0: entered allmulticast mode
[  815.789601][   T28] kauditd_printk_skb: 59 callbacks suppressed
[  815.789609][   T28] audit: type=1326 audit(1791906611.366:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17392 comm="syz.3.3251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e979e2d9 code=0x7ffc0000
[  815.933929][   T28] audit: type=1326 audit(1791906611.396:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17392 comm="syz.3.3251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e979e2d9 code=0x7ffc0000
[  816.032161][   T28] audit: type=1326 audit(1791906611.396:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17392 comm="syz.3.3251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e979e2d9 code=0x7ffc0000
[  816.103651][   T28] audit: type=1326 audit(1791906611.396:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17392 comm="syz.3.3251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e979e2d9 code=0x7ffc0000
[  816.175100][   T28] audit: type=1326 audit(1791906611.396:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17392 comm="syz.3.3251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe6e979e2d9 code=0x7ffc0000
[  816.247228][   T28] audit: type=1326 audit(1791906611.396:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17392 comm="syz.3.3251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e979e2d9 code=0x7ffc0000
[  816.272943][T17404] md: array md0 already has disks!
[  816.289527][T17404] md: could not open device unknown-block(1,1).
[  816.305449][T17404] md: error, md_import_device() returned -16
[  816.323393][   T28] audit: type=1326 audit(1791906611.396:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17392 comm="syz.3.3251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e979e2d9 code=0x7ffc0000
[  816.433981][   T28] audit: type=1326 audit(1791906611.396:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17392 comm="syz.3.3251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e979e2d9 code=0x7ffc0000
[  816.472751][T17404] md/raid:md0: invalid chunk size -61440
[  816.511429][T17404] md: pers->run() failed ...
[  816.679100][   T28] audit: type=1326 audit(1791906611.396:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17392 comm="syz.3.3251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e979e2d9 code=0x7ffc0000
[  817.786104][   T28] audit: type=1326 audit(1791906611.396:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17392 comm="syz.3.3251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fe6e979e2d9 code=0x7ffc0000
[  818.668215][T10824] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  818.903487][T10824] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  818.912864][T10824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  818.931418][T10824] usb 5-1: Product: syz
[  818.943318][T10824] usb 5-1: Manufacturer: syz
[  818.949345][T10824] usb 5-1: SerialNumber: syz
[  818.966323][T10824] usb 5-1: config 0 descriptor??
[  820.040977][T10824] usb 5-1: f81604_read: reg: 100f failed: -EPROTO
[  820.100061][T10824] usb 5-1: f81604_read: reg: 200f failed: -EPROTO
[  820.143222][T10824] usb 5-1: USB disconnect, device number 13
[  820.190649][ T5435] usb 5-1: f81604_read: reg: 100f failed: -ENODEV
[  820.232658][ T5435] usb 5-1: f81604_read: reg: 200f failed: -ENODEV
[  820.246205][T10824] usb 5-1: f81604_read: reg: 100f failed: -ENODEV
[  820.264808][T17433] tmpfs: Unknown parameter 'n'
[  820.280364][ T5435] usb 5-1: f81604_read: reg: 200f failed: -ENODEV
[  820.323528][T10824] usb 5-1: f81604_read: reg: 200f failed: -ENODEV
[  821.744780][T17448] md: array md0 already has disks!
[  821.771432][T17448] md: could not open device unknown-block(1,1).
[  821.805805][T17448] md: error, md_import_device() returned -16
[  821.911886][T17448] md/raid:md0: invalid chunk size -61440
[  821.948554][T17448] md: pers->run() failed ...
[  822.233317][T17471] syzkaller0: entered promiscuous mode
[  822.269673][T17471] syzkaller0: entered allmulticast mode
[  822.596710][T17492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  822.628895][T17490] tmpfs: Unknown parameter 'n'
[  822.645673][T17492] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  824.207800][T15910] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  824.410951][T15910] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  824.439410][T15910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  824.470553][T15910] usb 4-1: Product: syz
[  824.518505][T15910] usb 4-1: Manufacturer: syz
[  824.731211][T17527] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001
[  824.754305][T15910] usb 4-1: SerialNumber: syz
[  824.778289][T15910] usb 4-1: config 0 descriptor??
[  824.931631][T17534] syzkaller0: entered promiscuous mode
[  824.951276][T17534] syzkaller0: entered allmulticast mode
[  825.153820][T17540] md: array md0 already has disks!
[  825.163740][T17540] md: could not open device unknown-block(1,1).
[  825.171309][T17540] md: error, md_import_device() returned -16
[  825.225134][T17540] md/raid:md0: invalid chunk size -61440
[  825.236396][T17540] md: pers->run() failed ...
[  825.397799][    T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  825.587916][    T9] usb 5-1: Using ep0 maxpacket: 16
[  825.611026][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  825.640625][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  825.665350][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  825.691455][    T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  825.703426][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  825.720845][    T9] usb 5-1: config 0 descriptor??
[  825.824977][T15910] usb 4-1: f81604_read: reg: 100f failed: -EPROTO
[  825.856697][T15910] usb 4-1: f81604_read: reg: 200f failed: -EPROTO
[  825.904531][T15910] usb 4-1: USB disconnect, device number 34
[  825.955896][T15910] usb 4-1: f81604_read: reg: 100f failed: -ENODEV
[  826.002307][ T5435] usb 4-1: f81604_read: reg: 200f failed: -ENODEV
[  826.030074][T15910] usb 4-1: f81604_read: reg: 200f failed: -ENODEV
[  826.169259][T17539] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3284'.
[  827.436636][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  827.463003][    T9] usbhid: probe of 5-1:0.0 failed with error -71
[  827.510799][    T9] usb 5-1: USB disconnect, device number 14
[  827.703853][T17567] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001
[  827.969464][T17576] syzkaller0: entered promiscuous mode
[  828.851730][T17576] syzkaller0: entered allmulticast mode
[  829.900921][   T28] kauditd_printk_skb: 13 callbacks suppressed
[  829.900931][   T28] audit: type=1326 audit(1791906625.466:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.1.3296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c679e2d9 code=0x7ffc0000
[  830.067782][   T28] audit: type=1326 audit(1791906625.476:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.1.3296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c679e2d9 code=0x7ffc0000
[  830.507093][T17595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3297'.
[  831.831448][T17595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3297'.
[  831.841938][   T28] audit: type=1326 audit(1791906625.476:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.1.3296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c679e2d9 code=0x7ffc0000
[  831.936895][T17595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3297'.
[  832.747357][   T28] audit: type=1326 audit(1791906625.476:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.1.3296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd0c679e2d9 code=0x7ffc0000
[  832.894300][T17607] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001
[  833.111347][   T28] audit: type=1326 audit(1791906625.476:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.1.3296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c679e2d9 code=0x7ffc0000
[  833.307731][   T28] audit: type=1326 audit(1791906625.476:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.1.3296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c679e2d9 code=0x7ffc0000
[  833.443854][   T28] audit: type=1326 audit(1791906625.476:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.1.3296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c679e2d9 code=0x7ffc0000
[  833.468393][T15910] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  833.561403][T17624] syzkaller0: entered promiscuous mode
[  833.585203][T17624] syzkaller0: entered allmulticast mode
[  833.597785][   T28] audit: type=1326 audit(1791906625.506:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.1.3296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd0c679e2d9 code=0x7ffc0000
[  833.678336][T15910] usb 4-1: Using ep0 maxpacket: 16
[  833.687108][T15910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  833.721760][   T28] audit: type=1326 audit(1791906625.526:4582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.1.3296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c679e2d9 code=0x7ffc0000
[  833.770544][T15910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  834.672206][T15910] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  835.735279][   T28] audit: type=1326 audit(1791906625.526:4583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.1.3296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c679e2d9 code=0x7ffc0000
[  835.768687][T17629] ALSA: mixer_oss: invalid OSS volume 'OGAI'
[  835.774789][T17629] ALSA: mixer_oss: invalid OSS volume 'Šä:&ÇBŠG¤`TÝoÄD^z¿‡F?!k''
[  835.783237][T17629] ALSA: mixer_oss: invalid OSS volume ''
[  835.789952][T17629] ALSA: mixer_oss: invalid OSS volume ''
[  835.812648][T15910] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  835.857728][T15910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  835.909592][T15910] usb 4-1: config 0 descriptor??
[  835.937809][   T28] audit: type=1326 audit(1791906625.526:4584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.1.3296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd0c679e2d9 code=0x7ffc0000
[  836.080462][T15910] usbhid 4-1:0.0: can't add hid device: -71
[  836.127277][T15910] usbhid: probe of 4-1:0.0 failed with error -71
[  836.139290][   T28] audit: type=1326 audit(1791906625.526:4585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.1.3296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd0c675eb0e code=0x7ffc0000
[  836.186478][T15910] usb 4-1: USB disconnect, device number 35
[  836.405031][   T28] audit: type=1326 audit(1791906625.626:4586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.1.3296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd0c675eb0e code=0x7ffc0000
[  837.540338][   T28] audit: type=1326 audit(1791906625.726:4587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.1.3296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd0c675eb0e code=0x7ffc0000
[  837.655516][   T28] audit: type=1326 audit(1791906625.826:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.1.3296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd0c675eb0e code=0x7ffc0000
[  838.438685][   T28] audit: type=1326 audit(1791906625.926:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.1.3296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd0c675eb0e code=0x7ffc0000
[  838.679773][   T28] audit: type=1326 audit(1791906626.026:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.1.3296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd0c679e2d9 code=0x7ffc0000
[  838.852740][   T28] audit: type=1326 audit(1791906631.856:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17640 comm="syz.4.3308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededb9e2d9 code=0x7ffc0000
[  838.965470][T17669] syzkaller0: entered promiscuous mode
[  838.972609][   T28] audit: type=1326 audit(1791906631.856:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17640 comm="syz.4.3308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededb9e2d9 code=0x7ffc0000
[  839.028089][T17669] syzkaller0: entered allmulticast mode
[  839.614749][T15910] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  840.429033][T15910] usb 2-1: Using ep0 maxpacket: 16
[  840.552876][T15910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  840.584147][T15910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  841.626028][T15910] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  841.665625][T15910] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  841.697725][T15910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  841.724933][T15910] usb 2-1: config 0 descriptor??
[  841.771086][T17697] syzkaller0: entered promiscuous mode
[  841.781172][T17697] syzkaller0: entered allmulticast mode
[  842.171471][T17674] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3317'.
[  842.214353][T15910] usbhid 2-1:0.0: can't add hid device: -71
[  842.240494][T15910] usbhid: probe of 2-1:0.0 failed with error -71
[  842.282732][T15910] usb 2-1: USB disconnect, device number 38
[  842.349500][T17709] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3332'.
[  842.534674][T17716] syzkaller0: entered promiscuous mode
[  842.549303][T17716] syzkaller0: entered allmulticast mode
[  844.084969][T17737] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3342'.
[  844.472361][T17751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3348'.
[  844.646185][T17758] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  844.665767][T17760] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3352'.
[  846.209693][T17774] syzkaller0: entered promiscuous mode
[  846.225345][T17774] syzkaller0: entered allmulticast mode
[  846.338173][T17781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3359'.
[  846.650648][T17793] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3364'.
[  846.991229][T17808] syzkaller0: entered promiscuous mode
[  847.011540][T17808] syzkaller0: entered allmulticast mode
[  852.087475][T17821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3372'.
[  852.186631][T17829] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3375'.
[  854.653082][T17839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3378'.
[  855.570598][T17839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3378'.
[  855.626615][T17839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3378'.
[  855.827851][    T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  859.090533][T17849] syzkaller0: entered promiscuous mode
[  859.126592][T17849] syzkaller0: entered allmulticast mode
[  859.251186][T17856] tmpfs: Unknown parameter 'n'
[  859.447454][T17866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3385'.
[  859.469260][T17868] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3386'.
[  861.492006][T17882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3391'.
[  864.527253][T17882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3391'.
[  864.613755][T17882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3391'.
[  864.847776][T10824] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  868.102438][T17897] syzkaller0: entered promiscuous mode
[  868.147904][T17897] syzkaller0: entered allmulticast mode
[  868.222803][T17907] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3398'.
[  868.246984][T17906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3397'.
[  868.307738][T10824] usb 2-1: device not accepting address 39, error -71
[  868.389399][T17909] tmpfs: Unknown parameter 'n'
[  870.268664][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  870.275011][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  871.252192][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3404'.
[  873.399993][T17926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3404'.
[  873.484840][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3404'.
[  873.766051][    T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  874.989454][T17932] netlink: 'syz.3.3406': attribute type 1 has an invalid length.
[  874.997368][T17932] netlink: 'syz.3.3406': attribute type 2 has an invalid length.
[  877.281506][T17946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3409'.
[  877.507046][T17948] syzkaller0: entered promiscuous mode
[  880.854430][T17948] syzkaller0: entered allmulticast mode
[  882.727134][T17975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3416'.
[  885.810302][T17975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3416'.
[  885.918041][T17975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3416'.
[  886.299108][    T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  886.491901][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  886.521296][    T9] usb 5-1: config 12 has an invalid interface number: 99 but max is 0
[  886.529812][    T9] usb 5-1: config 12 has no interface number 0
[  886.536090][    T9] usb 5-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64
[  886.547268][    T9] usb 5-1: config 12 interface 99 has no altsetting 0
[  886.580879][    T9] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6
[  886.597250][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  886.620471][    T9] usb 5-1: Product: syz
[  886.624696][    T9] usb 5-1: Manufacturer: syz
[  886.637831][    T9] usb 5-1: SerialNumber: syz
[  887.260804][    T9] usb 5-1: no audio or video endpoints found
[  887.292007][    T9] usb 5-1: USB disconnect, device number 16
[  888.081667][T17987] Bluetooth: MGMT ver 1.22
[  888.279400][T17992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3421'.
[  888.552914][T17994] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001
[  888.591060][T17970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3415'.
[  890.033855][T18006] md: array md0 already has disks!
[  890.044926][T18006] md: could not open device unknown-block(1,1).
[  890.059016][T18006] md: error, md_import_device() returned -16
[  890.114856][T18001] md/raid:md0: invalid chunk size -61440
[  890.134592][T18001] md: pers->run() failed ...
[  890.464690][T18017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3430'.
[  893.460928][T18021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3432'.
[  893.470024][T18021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3432'.
[  893.479103][T18021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3432'.
[  893.785599][T18030] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001
[  894.067004][T18031] syz.3.3434: attempt to access beyond end of device
[  894.067004][T18031] loop7: rw=0, sector=0, nr_sectors = 1 limit=0
[  895.281166][T18031] FAT-fs (loop7): unable to read boot sector
[  895.483798][T18047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3440'.
[  895.720460][T18050] syzkaller0: entered promiscuous mode
[  895.749574][T18050] syzkaller0: entered allmulticast mode
[  895.772435][T18051] md: array md0 already has disks!
[  895.799777][T18051] md: could not open device unknown-block(1,1).
[  895.806056][T18051] md: error, md_import_device() returned -16
[  895.901901][T18051] md/raid:md0: invalid chunk size -61440
[  895.923363][T18051] md: pers->run() failed ...
[  899.443635][T18057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3444'.
[  899.453025][T18057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3444'.
[  899.462105][T18057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3444'.
[  899.659018][T18067] FAULT_INJECTION: forcing a failure.
[  899.659018][T18067] name failslab, interval 1, probability 0, space 0, times 0
[  899.672126][T18067] CPU: 0 PID: 18067 Comm: syz.0.3448 Not tainted syzkaller #0
[  899.679585][T18067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  899.689663][T18067] Call Trace:
[  899.692953][T18067]  <TASK>
[  899.695892][T18067]  dump_stack_lvl+0x18c/0x250
[  899.700564][T18067]  ? verify_lock_unused+0x140/0x140
[  899.705750][T18067]  ? show_regs_print_info+0x20/0x20
[  899.710945][T18067]  ? load_image+0x420/0x420
[  899.715470][T18067]  should_fail_ex+0x394/0x4c0
[  899.720141][T18067]  should_failslab+0x9/0x20
[  899.724629][T18067]  slab_pre_alloc_hook+0x59/0x300
[  899.729639][T18067]  ? l2cap_chan_create+0x50/0x760
[  899.734648][T18067]  __kmem_cache_alloc_node+0x53/0x250
[  899.740020][T18067]  ? l2cap_chan_create+0x50/0x760
[  899.745047][T18067]  kmalloc_trace+0x2a/0xe0
[  899.749466][T18067]  l2cap_chan_create+0x50/0x760
[  899.754321][T18067]  l2cap_sock_create+0x131/0x2d0
[  899.759263][T18067]  bt_sock_create+0x159/0x230
[  899.763944][T18067]  __sock_create+0x49e/0x940
[  899.768543][T18067]  __sys_socket+0xd7/0x1b0
[  899.772961][T18067]  __x64_sys_socket+0x7a/0x90
[  899.777646][T18067]  do_syscall_64+0x55/0xb0
[  899.782059][T18067]  ? clear_bhb_loop+0x40/0x90
[  899.786728][T18067]  ? clear_bhb_loop+0x40/0x90
[  899.791402][T18067]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  899.797319][T18067] RIP: 0033:0x7f180219e2d9
[  899.801748][T18067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  899.821365][T18067] RSP: 002b:00007f18030ccfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  899.829782][T18067] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f180219e2d9
[  899.837749][T18067] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001f
[  899.845717][T18067] RBP: 00007f1802235888 R08: 0000000000000000 R09: 0000000000000000
[  899.853684][T18067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  899.861648][T18067] R13: 00007f1802426038 R14: 00007f1802425fa0 R15: 00007ffe48a9ce38
[  899.869632][T18067]  </TASK>
[  899.958547][T18069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3449'.
[  900.004377][T18073] syzkaller0: entered promiscuous mode
[  900.024334][T18073] syzkaller0: entered allmulticast mode
[  900.175812][T18075] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12
[  900.648433][    C0] TCP: MD5 Hash failed for (172.20.20.170, 20001)->(172.20.20.170, 20001) L3 index 0
[  900.877841][    C0] TCP: MD5 Hash failed for (172.20.20.170, 20001)->(172.20.20.170, 20001) L3 index 0
[  901.298225][    C0] TCP: MD5 Hash failed for (172.20.20.170, 20001)->(172.20.20.170, 20001) L3 index 0
[  901.504029][T18079] 9pnet_virtio: no channels available for device syz
[  902.168101][    C0] TCP: MD5 Hash failed for (172.20.20.170, 20001)->(172.20.20.170, 20001) L3 index 0
[  902.523010][T18084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3455'.
[  903.864830][T18082] md: could not open device unknown-block(1,1).
[  903.928357][    C0] TCP: MD5 Hash failed for (172.20.20.170, 20001)->(172.20.20.170, 20001) L3 index 0
[  904.918683][T18084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3455'.
[  904.932131][T18082] md: error, md_import_device() returned -16
[  904.949493][T18084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3455'.
[  905.325891][T18086] md/raid:md0: invalid chunk size -61440
[  907.368214][    C0] TCP: MD5 Hash failed for (172.20.20.170, 20001)->(172.20.20.170, 20001) L3 index 0
[  907.459285][T18086] md: pers->run() failed ...
[  907.661439][T18097] md: array md0 already has disks!
[  907.677393][T18097] md: could not open device unknown-block(1,1).
[  907.690329][T18097] md: error, md_import_device() returned -16
[  907.745913][T18097] md/raid:md0: invalid chunk size -61440
[  907.768177][T18097] md: pers->run() failed ...
[  907.939485][T18113] syz.3.3460: attempt to access beyond end of device
[  907.939485][T18113] loop7: rw=0, sector=0, nr_sectors = 1 limit=0
[  907.966114][T18112] syzkaller0: entered promiscuous mode
[  907.975367][T18112] syzkaller0: entered allmulticast mode
[  908.015585][T18113] FAT-fs (loop7): unable to read boot sector
[  911.517063][T18130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3467'.
[  913.202428][T18130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3467'.
[  913.266611][T18130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3467'.
[  913.326052][T18133] md: array md0 already has disks!
[  913.351180][T18133] md: could not open device unknown-block(1,1).
[  913.384024][T18133] md: error, md_import_device() returned -16
[  913.447472][T18135] md/raid:md0: invalid chunk size -61440
[  913.471509][T18135] md: pers->run() failed ...
[  913.548255][    T8] libceph: connect (1)[c::]:6789 error -101
[  913.581553][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  913.655799][T18140] ceph: No mds server is up or the cluster is laggy
[  913.736010][T18154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3472'.
[  913.877764][    T8] usb 5-1: new low-speed USB device number 17 using dummy_hcd
[  913.925003][   T28] kauditd_printk_skb: 13 callbacks suppressed
[  913.925016][   T28] audit: type=1800 audit(1791906709.496:4606): pid=18161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3473" name="file0" dev="overlay" ino=1302 res=0 errno=0
[  913.999413][T18159] md: array md0 already has disks!
[  914.034910][T18159] md: could not open device unknown-block(1,1).
[  914.055225][T18159] md: error, md_import_device() returned -16
[  914.104328][    T8] usb 5-1: unable to get BOS descriptor or descriptor too short
[  914.125591][    T8] usb 5-1: config 142 has an invalid interface number: 251 but max is 0
[  914.134938][T18159] md/raid:md0: invalid chunk size -61440
[  914.149352][T18159] md: pers->run() failed ...
[  914.154027][    T8] usb 5-1: config 142 has no interface number 0
[  914.177984][    T8] usb 5-1: config 142 interface 251 altsetting 11 has an invalid endpoint with address 0x9F, skipping
[  914.358174][    T8] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt
[  914.369588][    T8] usb 5-1: config 142 interface 251 has no altsetting 0
[  914.380337][    T8] usb 5-1: string descriptor 0 read error: -22
[  914.386565][    T8] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80
[  914.408565][    C0] TCP: MD5 Hash failed for (172.20.20.170, 20001)->(172.20.20.170, 20001) L3 index 0
[  915.574388][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  915.585069][T18150] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  915.598046][T18150] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  915.607440][    T8] cypress_m8 5-1:142.251: HID->COM RS232 Adapter converter detected
[  915.616592][    T8] cyphidcom ttyUSB0: required endpoint is missing
[  917.011684][T18181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3478'.
[  919.460324][T18181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3478'.
[  919.473468][    T8] usb 5-1: USB disconnect, device number 17
[  919.490365][    T8] cypress_m8 5-1:142.251: device disconnected
[  919.522956][T18181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3478'.
[  919.673409][T18190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3482'.
[  919.697109][T18189] md: array md0 already has disks!
[  919.718870][T18189] md: could not open device unknown-block(1,1).
[  919.744043][T18189] md: error, md_import_device() returned -16
[  919.809827][T18195] md/raid:md0: invalid chunk size -61440
[  919.844384][T18195] md: pers->run() failed ...
[  920.183649][T18204] syz.3.3484: attempt to access beyond end of device
[  920.183649][T18204] loop7: rw=0, sector=0, nr_sectors = 1 limit=0
[  921.435923][T18204] FAT-fs (loop7): unable to read boot sector
[  922.565637][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3492'.
[  922.574689][T18231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3492'.
[  922.583757][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3492'.
[  922.895535][T18241] syzkaller0: entered promiscuous mode
[  922.917904][T18241] syzkaller0: entered allmulticast mode
[  922.963906][T18239] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  923.017843][T18239] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  923.066080][T18239] 9pnet_virtio: no channels available for device syz
[  923.687193][T10824] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  926.720953][T18259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3504'.
[  926.729974][T18259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3504'.
[  926.739045][T18259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3504'.
[  926.966071][T18272] md: array md0 already has disks!
[  926.990404][T18272] md: could not open device unknown-block(1,1).
[  927.014065][T18272] md: error, md_import_device() returned -16
[  927.042645][T18275] syzkaller0: entered promiscuous mode
[  927.048855][T10824] usb 2-1: device not accepting address 41, error -71
[  927.070706][T18275] syzkaller0: entered allmulticast mode
[  927.088360][T18272] md/raid:md0: invalid chunk size -61440
[  927.115519][T18272] md: pers->run() failed ...
[  928.488400][    C0] TCP: MD5 Hash failed for (172.20.20.170, 20001)->(172.20.20.170, 20001) L3 index 0
[  931.692344][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  931.700478][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  932.942341][T18301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3515'.
[  935.199469][T18301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3515'.
[  935.291904][T18301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3515'.
[  935.329410][T18305] syzkaller0: entered promiscuous mode
[  935.334984][T18305] syzkaller0: entered allmulticast mode
[  935.650927][T18318] jffs2: notice: (18318) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  936.189968][T18333] syz.3.3523: attempt to access beyond end of device
[  936.189968][T18333] loop7: rw=0, sector=0, nr_sectors = 1 limit=0
[  936.219063][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3528'.
[  936.258545][T18339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3528'.
[  936.291340][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3528'.
[  936.314361][T18333] FAT-fs (loop7): unable to read boot sector
[  936.748455][T18357] syzkaller0: entered promiscuous mode
[  936.762341][T18357] syzkaller0: entered allmulticast mode
[  937.213064][T18359] FAULT_INJECTION: forcing a failure.
[  937.213064][T18359] name failslab, interval 1, probability 0, space 0, times 0
[  937.226235][T18359] CPU: 0 PID: 18359 Comm: syz.1.3533 Not tainted syzkaller #0
[  937.233724][T18359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  937.243777][T18359] Call Trace:
[  937.247059][T18359]  <TASK>
[  937.249989][T18359]  dump_stack_lvl+0x18c/0x250
[  937.254679][T18359]  ? __lock_acquire+0x7eb0/0x7eb0
[  937.259709][T18359]  ? show_regs_print_info+0x20/0x20
[  937.264902][T18359]  ? load_image+0x420/0x420
[  937.269415][T18359]  should_fail_ex+0x394/0x4c0
[  937.274101][T18359]  should_failslab+0x9/0x20
[  937.278605][T18359]  slab_pre_alloc_hook+0x59/0x300
[  937.283629][T18359]  ? hash_ipport4_add+0x178a/0x20d0
[  937.288827][T18359]  ? hash_ipport4_add+0x178a/0x20d0
[  937.294029][T18359]  __kmem_cache_alloc_node+0x53/0x250
[  937.299407][T18359]  ? hash_ipport4_add+0x178a/0x20d0
[  937.304603][T18359]  __kmalloc+0xa7/0x240
[  937.308757][T18359]  ? hash_ipport4_add+0x6ae/0x20d0
[  937.313871][T18359]  hash_ipport4_add+0x178a/0x20d0
[  937.318919][T18359]  hash_ipport4_uadt+0xa67/0xdd0
[  937.323866][T18359]  ? hash_ipport4_uadt+0xdd0/0xdd0
[  937.328982][T18359]  ? hash_ipport4_kadt+0x550/0x550
[  937.334091][T18359]  ? __local_bh_enable_ip+0x13a/0x1c0
[  937.339475][T18359]  call_ad+0x354/0xb30
[  937.343551][T18359]  ? ip_set_ad+0x9c0/0x9c0
[  937.347979][T18359]  ? __nla_parse+0x40/0x50
[  937.352394][T18359]  ip_set_ad+0x81a/0x9c0
[  937.356644][T18359]  ? ip_set_dump_done+0x320/0x320
[  937.361665][T18359]  ? rcu_is_watching+0x15/0xb0
[  937.366455][T18359]  nfnetlink_rcv_msg+0xcaf/0x1290
[  937.371481][T18359]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  937.377554][T18359]  ? nfnetlink_rcv_msg+0x228/0x1290
[  937.382769][T18359]  ? nfnetlink_unbind+0x160/0x160
[  937.387813][T18359]  ? __dev_queue_xmit+0x1be8/0x37e0
[  937.393027][T18359]  ? __netlink_deliver_tap+0x579/0x7f0
[  937.398482][T18359]  ? netlink_deliver_tap+0x19c/0x1b0
[  937.403760][T18359]  ? netlink_unicast+0x77b/0x930
[  937.408691][T18359]  ? netlink_sendmsg+0x8d0/0xbf0
[  937.413622][T18359]  ? ____sys_sendmsg+0x61b/0x980
[  937.418558][T18359]  ? ___sys_sendmsg+0x2a6/0x360
[  937.423403][T18359]  ? __se_sys_sendmsg+0x1d0/0x2c0
[  937.428423][T18359]  ? do_syscall_64+0x55/0xb0
[  937.433022][T18359]  netlink_rcv_skb+0x235/0x4c0
[  937.437789][T18359]  ? nfnetlink_unbind+0x160/0x160
[  937.442811][T18359]  ? netlink_ack+0x1160/0x1160
[  937.447588][T18359]  ? apparmor_capable+0x137/0x1a0
[  937.452618][T18359]  ? bpf_lsm_capable+0x9/0x10
[  937.457290][T18359]  ? security_capable+0x89/0xb0
[  937.462146][T18359]  nfnetlink_rcv+0x2c9/0x2490
[  937.466827][T18359]  ? __local_bh_enable_ip+0x13a/0x1c0
[  937.472200][T18359]  ? lockdep_hardirqs_on+0x98/0x150
[  937.477398][T18359]  ? __local_bh_enable_ip+0x13a/0x1c0
[  937.482766][T18359]  ? _local_bh_enable+0xa0/0xa0
[  937.487622][T18359]  ? __dev_queue_xmit+0x272/0x37e0
[  937.492740][T18359]  ? __dev_queue_xmit+0x1329/0x37e0
[  937.497933][T18359]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[  937.503479][T18359]  ? __dev_queue_xmit+0x272/0x37e0
[  937.508601][T18359]  ? ref_tracker_free+0x686/0x830
[  937.513626][T18359]  ? refcount_inc+0x70/0x70
[  937.518124][T18359]  ? __asan_memcpy+0x40/0x70
[  937.522714][T18359]  ? __skb_clone+0x5c/0x6c0
[  937.527218][T18359]  ? __skb_clone+0x446/0x6c0
[  937.531818][T18359]  ? netlink_deliver_tap+0x2e/0x1b0
[  937.537021][T18359]  ? __lock_acquire+0x7eb0/0x7eb0
[  937.542048][T18359]  ? netlink_deliver_tap+0x2e/0x1b0
[  937.547245][T18359]  netlink_unicast+0x7b1/0x930
[  937.552015][T18359]  netlink_sendmsg+0x8d0/0xbf0
[  937.556783][T18359]  ? netlink_getsockopt+0x590/0x590
[  937.561983][T18359]  ? apparmor_socket_sendmsg+0x8e/0x330
[  937.567527][T18359]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  937.572815][T18359]  ? security_socket_sendmsg+0x80/0xa0
[  937.578276][T18359]  ? netlink_getsockopt+0x590/0x590
[  937.583478][T18359]  ____sys_sendmsg+0x61b/0x980
[  937.588261][T18359]  ? __asan_memset+0x22/0x40
[  937.592854][T18359]  ? __sys_sendmsg_sock+0x30/0x30
[  937.597875][T18359]  ? __import_iovec+0x5f2/0x850
[  937.602737][T18359]  ? import_iovec+0x73/0xa0
[  937.607245][T18359]  ___sys_sendmsg+0x2a6/0x360
[  937.611929][T18359]  ? __sys_sendmsg+0x2b0/0x2b0
[  937.616730][T18359]  __se_sys_sendmsg+0x1d0/0x2c0
[  937.621582][T18359]  ? __x64_sys_sendmsg+0x80/0x80
[  937.626533][T18359]  ? lockdep_hardirqs_on+0x98/0x150
[  937.631734][T18359]  do_syscall_64+0x55/0xb0
[  937.636144][T18359]  ? clear_bhb_loop+0x40/0x90
[  937.640819][T18359]  ? clear_bhb_loop+0x40/0x90
[  937.645497][T18359]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  937.651393][T18359] RIP: 0033:0x7fd0c679e2d9
[  937.655806][T18359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  937.675415][T18359] RSP: 002b:00007fd0c763c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  937.683834][T18359] RAX: ffffffffffffffda RBX: 00007fd0c6a25fa0 RCX: 00007fd0c679e2d9
[  937.691808][T18359] RDX: 0000000000000090 RSI: 0000200000000380 RDI: 0000000000000007
[  937.699781][T18359] RBP: 00007fd0c6835888 R08: 0000000000000000 R09: 0000000000000000
[  937.707745][T18359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  937.715707][T18359] R13: 00007fd0c6a26038 R14: 00007fd0c6a25fa0 R15: 00007fffcd590628
[  937.723687][T18359]  </TASK>
[  938.139281][T18371] md: array md0 already has disks!
[  938.144851][T18371] md: could not open device unknown-block(1,1).
[  938.151400][T18371] md: error, md_import_device() returned -16
[  938.295269][T18371] md/raid:md0: invalid chunk size -61440
[  938.306141][T18371] md: pers->run() failed ...
[  938.370858][T18380] bond1 (unregistering): Released all slaves
[  938.489532][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3538'.
[  938.527864][T18388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3538'.
[  938.553147][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3538'.
[  938.897318][T18393] syzkaller0: entered promiscuous mode
[  938.906843][T18393] syzkaller0: entered allmulticast mode
[  939.402759][T18413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3550'.
[  939.557723][T18413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3550'.
[  939.622367][T18413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3550'.
[  939.715073][T18417] md: array md0 already has disks!
[  939.745652][T18417] md: could not open device unknown-block(1,1).
[  939.769671][T18417] md: error, md_import_device() returned -16
[  939.913240][T18417] md/raid:md0: invalid chunk size -61440
[  939.943089][T18417] md: pers->run() failed ...
[  940.649999][T18453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3562'.
[  940.687794][T18453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3562'.
[  940.728696][T18453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3562'.
[  941.041621][T18465] syzkaller0: entered promiscuous mode
[  941.047122][T18465] syzkaller0: entered allmulticast mode
[  941.231128][T18472] md: array md0 already has disks!
[  941.256070][T18474] md: array md0 already has disks!
[  941.267891][T18472] md: could not open device unknown-block(1,1).
[  941.283753][T18472] md: error, md_import_device() returned -16
[  941.293762][T18474] md: could not open device unknown-block(1,1).
[  941.313503][T18474] md: error, md_import_device() returned -16
[  941.428243][T18472] md/raid:md0: invalid chunk size -61440
[  941.445329][T18472] md: pers->run() failed ...
[  941.588945][ T5771] Bluetooth: hci0: unexpected event 0x2f length: 1017 > 260
[  941.624151][T18494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3574'.
[  941.650826][T18474] md/raid:md0: invalid chunk size -61440
[  941.656470][T18474] md: pers->run() failed ...
[  942.275994][T18508] syzkaller0: entered promiscuous mode
[  942.287489][T18508] syzkaller0: entered allmulticast mode
[  943.519733][T18554] __nla_validate_parse: 5 callbacks suppressed
[  943.519745][T18554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3590'.
[  943.805406][T18568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3594'.
[  943.815008][T18568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3594'.
[  943.824438][T18568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3594'.
[  944.021471][   T28] audit: type=1326 audit(1791906739.596:4607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18575 comm="syz.0.3597" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180219e2d9 code=0x7ffc0000
[  944.052094][   T28] audit: type=1326 audit(1791906739.596:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18575 comm="syz.0.3597" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180219e2d9 code=0x7ffc0000
[  944.082464][   T28] audit: type=1326 audit(1791906739.596:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18575 comm="syz.0.3597" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f180219e2d9 code=0x7ffc0000
[  944.113446][   T28] audit: type=1326 audit(1791906739.596:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18577 comm="syz.3.3598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e979e2d9 code=0x7ffc0000
[  944.143288][   T28] audit: type=1326 audit(1791906739.596:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18577 comm="syz.3.3598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e979e2d9 code=0x7ffc0000
[  944.174994][   T28] audit: type=1326 audit(1791906739.626:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18577 comm="syz.3.3598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe6e979e2d9 code=0x7ffc0000
[  944.204752][   T28] audit: type=1326 audit(1791906739.626:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18577 comm="syz.3.3598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e979e2d9 code=0x7ffc0000
[  944.233711][   T28] audit: type=1326 audit(1791906739.626:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18577 comm="syz.3.3598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e979e2d9 code=0x7ffc0000
[  944.265237][T18581] md: array md0 already has disks!
[  944.270859][   T28] audit: type=1326 audit(1791906739.626:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18577 comm="syz.3.3598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe6e979e2d9 code=0x7ffc0000
[  944.299272][   T28] audit: type=1326 audit(1791906739.626:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18577 comm="syz.3.3598" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e979e2d9 code=0x7ffc0000
[  944.333974][T18581] md: could not open device unknown-block(1,1).
[  944.356047][T18581] md: error, md_import_device() returned -16
[  944.425908][T18581] md/raid:md0: invalid chunk size -61440
[  944.443803][T18581] md: pers->run() failed ...
[  944.798594][T18604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3603'.
[  944.928178][T18606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3604'.
[  944.937088][T18606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3604'.
[  944.946090][T18606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3604'.
[  945.028576][T18608] syzkaller0: entered promiscuous mode
[  945.045057][T18608] syzkaller0: entered allmulticast mode
[  945.502389][T18627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3612'.
[  945.601190][T18633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3614'.
[  945.736283][T18637] md: array md0 already has disks!
[  945.751603][T18637] md: could not open device unknown-block(1,1).
[  945.766701][T18637] md: error, md_import_device() returned -16
[  945.836148][T18637] md/raid:md0: invalid chunk size -61440
[  945.853998][T18637] md: pers->run() failed ...
[  946.614291][T18660] syz.3.3621: attempt to access beyond end of device
[  946.614291][T18660] loop7: rw=0, sector=0, nr_sectors = 1 limit=0
[  946.682750][T18660] FAT-fs (loop7): unable to read boot sector
[  947.088471][T18675] syzkaller0: entered promiscuous mode
[  947.107413][T18675] syzkaller0: entered allmulticast mode
[  948.017863][    T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  948.138144][T18706] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001
[  948.210809][    T9] usb 2-1: Using ep0 maxpacket: 16
[  948.232743][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  948.253151][    T9] usb 2-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config
[  948.284043][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7
[  948.317213][    T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[  948.331794][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  948.346785][    T9] usb 2-1: Product: syz
[  948.347425][T18712] syzkaller0: entered promiscuous mode
[  948.357583][    T9] usb 2-1: Manufacturer: syz
[  948.362692][    T9] usb 2-1: SerialNumber: syz
[  948.369297][T18712] syzkaller0: entered allmulticast mode
[  948.601400][T18719] __nla_validate_parse: 7 callbacks suppressed
[  948.601412][T18719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3640'.
[  948.781967][    T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  948.799305][    T9] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  948.811834][T18725] md: array md0 already has disks!
[  948.830788][T18725] md: could not open device unknown-block(1,1).
[  948.848466][T18725] md: error, md_import_device() returned -16
[  948.864728][    T9] usb 2-1: USB disconnect, device number 43
[  948.906362][T18696] udevd[18696]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  948.994997][T18725] md/raid:md0: invalid chunk size -61440
[  949.026130][T18725] md: pers->run() failed ...
[  949.094073][T18735] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001
[  949.253780][T18744] Illegal XDP return value 4294967274 on prog  (id 199) dev N/A, expect packet loss!
[  949.421125][T18746] syzkaller0: entered promiscuous mode
[  949.431109][T18746] syzkaller0: entered allmulticast mode
[  949.512838][T18751] overlayfs: failed to clone upperpath
[  950.373455][T18789] overlayfs: failed to clone upperpath
[  950.426887][T18788] md: array md0 already has disks!
[  950.441489][T18788] md: could not open device unknown-block(1,1).
[  950.457986][T18788] md: error, md_import_device() returned -16
[  950.525759][T18788] md/raid:md0: invalid chunk size -61440
[  950.547167][T18788] md: pers->run() failed ...
[  950.597762][    T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  950.797765][    T9] usb 4-1: Using ep0 maxpacket: 16
[  950.809839][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  950.823351][    T9] usb 4-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config
[  950.845291][    T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7
[  950.868883][    T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[  950.886649][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  950.898480][    T9] usb 4-1: Product: syz
[  950.902675][    T9] usb 4-1: Manufacturer: syz
[  950.917496][    T9] usb 4-1: SerialNumber: syz
[  950.970943][T18810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3667'.
[  951.312032][T18824] overlayfs: failed to clone upperpath
[  951.388687][    T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  951.416162][    T9] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  951.469421][    T9] usb 4-1: USB disconnect, device number 37
[  951.535678][T18731] udevd[18731]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  952.032715][T18850] syzkaller0: entered promiscuous mode
[  952.042942][T18850] syzkaller0: entered allmulticast mode
[  952.256300][T18857] md: array md0 already has disks!
[  952.277473][T18857] md: could not open device unknown-block(1,1).
[  952.297992][T18857] md: error, md_import_device() returned -16
[  952.352743][T18857] md/raid:md0: invalid chunk size -61440
[  952.371788][T18857] md: pers->run() failed ...
[  953.365166][T18897] syzkaller0: entered promiscuous mode
[  953.374146][T18897] syzkaller0: entered allmulticast mode
[  953.451434][T18900] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3690'.
[  953.658617][T18905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3692'.
[  953.802142][T18913] md: array md0 already has disks!
[  953.813919][T18913] md: could not open device unknown-block(1,1).
[  953.828980][T18913] md: error, md_import_device() returned -16
[  953.893352][T18913] md/raid:md0: invalid chunk size -61440
[  953.918758][T18913] md: pers->run() failed ...
[  954.322558][T18937] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3700'.
[  954.503679][T18946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3703'.
[  954.512657][T18946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3703'.
[  954.521666][T18946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3703'.
[  954.558066][    T8] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  954.747709][    T8] usb 2-1: Using ep0 maxpacket: 16
[  954.758287][    T8] usb 2-1: unable to get BOS descriptor or descriptor too short
[  954.770473][    T8] usb 2-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config
[  954.790027][    T8] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7
[  954.829188][    T8] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[  954.847941][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.855981][    T8] usb 2-1: Product: syz
[  954.867682][    T8] usb 2-1: Manufacturer: syz
[  954.877285][    T8] usb 2-1: SerialNumber: syz
[  954.998973][T18965] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3709'.
[  955.289965][T18976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3713'.
[  955.299079][T18976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3713'.
[  955.308137][T18976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3713'.
[  955.362539][    T8] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  955.380380][    T8] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  955.419737][    T8] usb 2-1: USB disconnect, device number 44
[  956.008280][    C0] TCP: MD5 Hash failed for (172.20.20.170, 20001)->(172.20.20.170, 20001) L3 index 0
[  956.047875][T18996] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3719'.
[  956.120272][T18998] syzkaller0: entered promiscuous mode
[  956.137762][T18998] syzkaller0: entered allmulticast mode
[  956.290469][T19009] autofs4:pid:19009:autofs_fill_super: called with bogus options
[  956.847724][    T8] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  957.047889][    T8] usb 2-1: Using ep0 maxpacket: 16
[  957.059925][    T8] usb 2-1: unable to get BOS descriptor or descriptor too short
[  957.074322][    T8] usb 2-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config
[  957.084820][    T8] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7
[  957.110090][    T8] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[  957.129572][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  957.148120][    T8] usb 2-1: Product: syz
[  957.167720][    T8] usb 2-1: Manufacturer: syz
[  957.172338][    T8] usb 2-1: SerialNumber: syz
[  957.192737][T19038] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead?
[  957.506392][    T8] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  957.519861][    T8] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  957.568922][    T8] usb 2-1: USB disconnect, device number 45
[  957.594544][T18731] udevd[18731]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  957.613240][T19047] FAULT_INJECTION: forcing a failure.
[  957.613240][T19047] name fail_futex, interval 1, probability 0, space 0, times 0
[  957.634070][T19047] CPU: 0 PID: 19047 Comm: syz.3.3736 Not tainted syzkaller #0
[  957.641563][T19047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  957.651638][T19047] Call Trace:
[  957.654923][T19047]  <TASK>
[  957.657843][T19047]  dump_stack_lvl+0x18c/0x250
[  957.662510][T19047]  ? show_regs_print_info+0x20/0x20
[  957.667695][T19047]  ? load_image+0x420/0x420
[  957.672183][T19047]  ? ____sys_sendmsg+0x779/0x980
[  957.677112][T19047]  ? __asan_memset+0x22/0x40
[  957.681707][T19047]  ? __sys_sendmsg_sock+0x30/0x30
[  957.686751][T19047]  should_fail_ex+0x394/0x4c0
[  957.691456][T19047]  get_futex_key+0x136/0x1030
[  957.696131][T19047]  ? rcu_is_watching+0x15/0xb0
[  957.700896][T19047]  ? ___sys_sendmsg+0x2b6/0x360
[  957.705747][T19047]  ? kfree+0x31/0x1a0
[  957.709729][T19047]  ? ___sys_sendmsg+0x2b6/0x360
[  957.714578][T19047]  ? futex_setup_timer+0xc0/0xc0
[  957.719508][T19047]  ? __sys_sendmsg+0x2b0/0x2b0
[  957.724274][T19047]  futex_wake+0x127/0x4f0
[  957.728613][T19047]  ? futex_wake_mark+0x150/0x150
[  957.733563][T19047]  do_futex+0x35d/0x3e0
[  957.737716][T19047]  ? __ia32_sys_get_robust_list+0x110/0x110
[  957.743601][T19047]  ? fput+0x154/0x1a0
[  957.747580][T19047]  __se_sys_futex+0x3a9/0x440
[  957.752259][T19047]  ? __x64_sys_futex+0xf0/0xf0
[  957.757023][T19047]  ? __x64_sys_futex+0x21/0xf0
[  957.761782][T19047]  do_syscall_64+0x55/0xb0
[  957.766198][T19047]  ? clear_bhb_loop+0x40/0x90
[  957.770871][T19047]  ? clear_bhb_loop+0x40/0x90
[  957.775541][T19047]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  957.781437][T19047] RIP: 0033:0x7fe6e979e2d9
[  957.785849][T19047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  957.805452][T19047] RSP: 002b:00007fe6ea6d00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  957.813872][T19047] RAX: ffffffffffffffda RBX: 00007fe6e9a25fa8 RCX: 00007fe6e979e2d9
[  957.821839][T19047] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe6e9a25fac
[  957.829808][T19047] RBP: 00007fe6e9a25fa0 R08: 0000000000745b08 R09: 0000000000000000
[  957.837773][T19047] R10: 0000000000000098 R11: 0000000000000246 R12: 0000000000000000
[  957.845740][T19047] R13: 00007fe6e9a26038 R14: 00007ffdb7be5f90 R15: 00007ffdb7be6078
[  957.853718][T19047]  </TASK>
[  958.627845][    T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  958.807747][    T9] usb 2-1: Using ep0 maxpacket: 16
[  958.819598][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  958.840782][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  958.865884][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  958.918138][    T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  958.946463][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  958.969580][    T9] usb 2-1: config 0 descriptor??
[  959.191212][T19068] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead?
[  959.250123][    T8] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  959.405043][T19068] __nla_validate_parse: 4 callbacks suppressed
[  959.405074][T19068] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3745'.
[  959.427231][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  959.434807][    T9] usbhid: probe of 2-1:0.0 failed with error -71
[  959.443618][    T9] usb 2-1: USB disconnect, device number 46
[  959.449698][    T8] usb 4-1: Using ep0 maxpacket: 16
[  959.456923][    T8] usb 4-1: unable to get BOS descriptor or descriptor too short
[  959.471661][    T8] usb 4-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config
[  959.483264][    T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7
[  959.497399][    T8] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[  959.507885][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  959.515961][    T8] usb 4-1: Product: syz
[  959.520524][    T8] usb 4-1: Manufacturer: syz
[  959.537711][    T8] usb 4-1: SerialNumber: syz
[  959.657575][T19096] batman_adv: batadv0: Adding interface: virt_wifi0
[  959.664509][T19096] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  959.691813][T19096] batman_adv: batadv0: Interface activated: virt_wifi0
[  959.743153][T19098] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3758'.
[  959.900593][    T8] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  959.913350][    T8] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  959.989169][    T8] usb 4-1: USB disconnect, device number 38
[  960.299127][T19109] syz.1.3761: attempt to access beyond end of device
[  960.299127][T19109] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[  960.363790][T19109] FAT-fs (loop3): unable to read boot sector
[  960.588356][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  960.599093][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  960.609261][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  960.618100][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  960.625694][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  960.633034][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  960.693516][T19114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3763'.
[  960.703217][T19114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3763'.
[  960.712243][T19114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3763'.
[  960.942454][T19111] chnl_net:caif_netlink_parms(): no params data found
[  961.059305][T19125] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3767'.
[  961.138909][T19111] bridge0: port 1(bridge_slave_0) entered blocking state
[  961.146140][T19111] bridge0: port 1(bridge_slave_0) entered disabled state
[  961.157886][T19111] bridge_slave_0: entered allmulticast mode
[  961.167276][T19111] bridge_slave_0: entered promiscuous mode
[  961.179629][T19111] bridge0: port 2(bridge_slave_1) entered blocking state
[  961.186773][T19111] bridge0: port 2(bridge_slave_1) entered disabled state
[  961.200135][T19111] bridge_slave_1: entered allmulticast mode
[  961.207523][T19111] bridge_slave_1: entered promiscuous mode
[  961.226886][T19130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3768'.
[  961.250534][T19111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  961.262697][T19111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  961.268332][T19132] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead?
[  961.306077][T19111] team0: Port device team_slave_0 added
[  961.315117][T19111] team0: Port device team_slave_1 added
[  961.332076][T19132] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3769'.
[  961.360443][T19111] batman_adv: batadv0: Adding interface: batadv_slave_0
[  961.367428][T19111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  961.407652][T19111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  961.438489][T19111] batman_adv: batadv0: Adding interface: batadv_slave_1
[  961.445479][T19111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  961.482301][T19111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  961.546227][T19111] hsr_slave_0: entered promiscuous mode
[  961.563445][T19111] hsr_slave_1: entered promiscuous mode
[  961.570255][T19111] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  961.588111][T19111] Cannot create hsr debugfs directory
[  961.824701][T19139] md: array md0 already has disks!
[  961.836856][T19139] md: could not open device unknown-block(1,1).
[  961.844878][T19139] md: error, md_import_device() returned -16
[  961.869490][T19111] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  961.882038][T19111] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  961.897784][    T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  961.911731][T19111] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  961.935481][T19139] md/raid:md0: invalid chunk size -61440
[  961.957863][T19139] md: pers->run() failed ...
[  961.977818][T19111] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  962.064548][T19147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3772'.
[  962.073541][T19147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3772'.
[  962.108007][    T9] usb 4-1: Using ep0 maxpacket: 16
[  962.127107][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  962.158091][    T9] usb 4-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config
[  962.177729][    T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7
[  962.201621][    T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[  962.205737][T19111] 8021q: adding VLAN 0 to HW filter on device bond0
[  962.215546][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  962.236048][    T9] usb 4-1: Product: syz
[  962.246183][    T9] usb 4-1: Manufacturer: syz
[  962.247533][T19111] 8021q: adding VLAN 0 to HW filter on device team0
[  962.256312][    T9] usb 4-1: SerialNumber: syz
[  962.278142][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state
[  962.285283][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state
[  962.321534][ T2991] bridge0: port 2(bridge_slave_1) entered blocking state
[  962.328740][ T2991] bridge0: port 2(bridge_slave_1) entered forwarding state
[  962.683451][T19111] 8021q: adding VLAN 0 to HW filter on device batadv0
[  962.728047][ T5771] Bluetooth: hci3: command tx timeout
[  962.778547][    T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  962.802894][    T9] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  962.899108][    T9] usb 4-1: USB disconnect, device number 39
[  962.980163][T18731] udevd[18731]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  963.033332][T19111] veth0_vlan: entered promiscuous mode
[  963.051651][T19111] veth1_vlan: entered promiscuous mode
[  963.085092][T19173] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead?
[  963.109711][T19111] veth0_macvtap: entered promiscuous mode
[  963.126128][T19111] veth1_macvtap: entered promiscuous mode
[  963.168338][T19111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  963.179248][T19111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  963.190521][T19111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  963.201255][T19111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  963.211788][T19111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  963.222386][T19111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  963.232237][T19111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  963.242748][T19111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  963.255298][T19111] batman_adv: batadv0: Interface activated: batadv_slave_0
[  963.266620][T19111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  963.277161][T19111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  963.287294][T19111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  963.308118][T19111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  963.323312][T19111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  963.334035][T19111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  963.348021][T19111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  963.363448][T19111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  963.389152][T19111] batman_adv: batadv0: Interface activated: batadv_slave_1
[  963.457325][T19111] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  963.475011][T19111] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  963.498716][T19111] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  963.507445][T19111] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  963.722835][T19186] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  963.733845][T10784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  963.758065][T10784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  963.805686][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  963.816875][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  964.411656][T19214] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead?
[  964.432579][T19214] __nla_validate_parse: 10 callbacks suppressed
[  964.432596][T19214] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3793'.
[  964.474688][T19218] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3795'.
[  964.527827][T10824] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  964.713562][T10824] usb 2-1: Using ep0 maxpacket: 16
[  964.727422][T10824] usb 2-1: unable to get BOS descriptor or descriptor too short
[  964.748497][T10824] usb 2-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config
[  964.777806][T10824] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7
[  964.807947][ T5771] Bluetooth: hci3: command tx timeout
[  964.821243][T10824] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[  964.842410][T10824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  964.869862][T10824] usb 2-1: Product: syz
[  964.885307][T10824] usb 2-1: Manufacturer: syz
[  964.894300][T10824] usb 2-1: SerialNumber: syz
[  964.955595][T19232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3800'.
[  964.964632][T19232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3800'.
[  964.973632][T19232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3800'.
[  965.337111][T19240] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3804'.
[  965.368867][T10824] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  965.393111][T10824] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  965.417803][  T969] usb 6-1: new low-speed USB device number 2 using dummy_hcd
[  965.458340][T10824] usb 2-1: USB disconnect, device number 47
[  965.606365][  T969] usb 6-1: unable to get BOS descriptor or descriptor too short
[  965.619144][  T969] usb 6-1: config 142 has an invalid interface number: 251 but max is 0
[  965.633712][  T969] usb 6-1: config 142 has no interface number 0
[  965.641434][  T969] usb 6-1: config 142 interface 251 altsetting 11 has an invalid endpoint with address 0x9F, skipping
[  965.661537][  T969] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt
[  965.666681][T19245] md: array md0 already has disks!
[  965.674460][  T969] usb 6-1: config 142 interface 251 has no altsetting 0
[  965.697548][  T969] usb 6-1: string descriptor 0 read error: -22
[  965.704129][T19245] md: could not open device unknown-block(1,1).
[  965.711578][  T969] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80
[  965.720655][T19245] md: error, md_import_device() returned -16
[  965.730721][  T969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  965.743935][T19236] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  965.759615][T19236] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  965.782022][  T969] cypress_m8 6-1:142.251: HID->COM RS232 Adapter converter detected
[  965.810993][  T969] cyphidcom ttyUSB0: required endpoint is missing
[  965.826865][T19245] md/raid:md0: invalid chunk size -61440
[  965.842186][T19245] md: pers->run() failed ...
[  966.035518][T19259] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead?
[  966.067581][T19259] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3809'.
[  966.114276][T19261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3810'.
[  966.123326][T19261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3810'.
[  966.132349][T19261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3810'.
[  966.769284][T19275] syz.3.3814: attempt to access beyond end of device
[  966.769284][T19275] loop7: rw=0, sector=0, nr_sectors = 1 limit=0
[  966.858726][T19275] FAT-fs (loop7): unable to read boot sector
[  966.888005][ T5771] Bluetooth: hci3: command tx timeout
[  967.357719][    T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  967.547728][    T9] usb 2-1: Using ep0 maxpacket: 16
[  967.561080][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  967.579748][    T9] usb 2-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config
[  967.597729][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7
[  967.630062][    T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[  967.647702][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  967.665953][    T9] usb 2-1: Product: syz
[  967.670196][    T9] usb 2-1: Manufacturer: syz
[  967.674791][    T9] usb 2-1: SerialNumber: syz
[  968.034589][    T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  968.057896][    T9] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  968.117949][    T9] usb 2-1: USB disconnect, device number 48
[  968.142745][T18612] udevd[18612]: setting mode of /dev/mixer5 to 020660 failed: No such file or directory
[  968.174395][T19303] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead?
[  968.188137][T18612] udevd[18612]: setting owner of /dev/mixer5 to uid=0, gid=29 failed: No such file or directory
[  968.197576][T10824] usb 6-1: USB disconnect, device number 2
[  968.225523][T10824] cypress_m8 6-1:142.251: device disconnected
[  968.800473][T19326] md: array md0 already has disks!
[  968.830504][T19326] md: could not open device unknown-block(1,1).
[  968.836782][T19326] md: error, md_import_device() returned -16
[  968.971495][ T5771] Bluetooth: hci3: command tx timeout
[  970.661301][T19326] md/raid:md0: invalid chunk size -61440
[  970.666962][T19326] md: pers->run() failed ...
[  970.678250][T19339] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001
[  971.174512][T19347] __nla_validate_parse: 7 callbacks suppressed
[  971.174523][T19347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3837'.
[  971.189691][T19347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3837'.
[  971.198651][T19347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3837'.
[  971.699180][T19320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  971.887760][ T5807] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  972.077747][ T5807] usb 6-1: Using ep0 maxpacket: 16
[  972.089626][ T5807] usb 6-1: unable to get BOS descriptor or descriptor too short
[  972.105365][ T5807] usb 6-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config
[  972.115911][ T5807] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7
[  972.135388][ T5807] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[  972.147291][ T5807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  972.155724][ T5807] usb 6-1: Product: syz
[  972.160448][ T5807] usb 6-1: Manufacturer: syz
[  972.165060][ T5807] usb 6-1: SerialNumber: syz
[  972.551787][ T5807] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  972.567989][ T5807] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  972.607226][ T5807] usb 6-1: USB disconnect, device number 3
[  972.680475][T18731] udevd[18731]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  973.576446][    T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  973.807728][    T9] usb 4-1: device descriptor read/64, error -71
[  973.831409][T19382] md: array md0 already has disks!
[  973.850158][T19382] md: could not open device unknown-block(1,1).
[  973.856443][T19382] md: error, md_import_device() returned -16
[  973.915117][T19382] md/raid:md0: invalid chunk size -61440
[  973.936412][T19382] md: pers->run() failed ...
[  973.984744][T19391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3850'.
[  973.993936][T19391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3850'.
[  974.002961][T19391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3850'.
[  974.077770][    T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  974.248213][    T9] usb 4-1: device descriptor read/64, error -71
[  974.367943][    T9] usb usb4-port1: attempt power cycle
[  974.585405][T19408] syz.1.3854: attempt to access beyond end of device
[  974.585405][T19408] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[  974.616473][T19408] FAT-fs (loop3): unable to read boot sector
[  975.793141][    T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  975.839969][    T9] usb 4-1: device descriptor read/8, error -71
[  976.158234][T19429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3859'.
[  976.167167][T19429] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3859'.
[  976.176244][T19429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3859'.
[  976.770144][T19448] md: array md0 already has disks!
[  976.859774][T19448] md/raid:md0: invalid chunk size -61440
[  976.865657][T19448] md: pers->run() failed ...
[  976.912228][T19454] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead?
[  976.981600][T19455] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3865'.
[  977.685493][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3869'.
[  977.694524][T19464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3869'.
[  977.703563][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3869'.
[  979.355232][T19436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  982.317919][  T969] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  982.528116][  T969] usb 6-1: device descriptor read/64, error -71
[  982.544683][T19478] vxcan1: tx drop: invalid sa for name 0xfffffffffffffff7
[  982.819863][  T969] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  983.027864][  T969] usb 6-1: device descriptor read/64, error -71
[  983.158620][  T969] usb usb6-port1: attempt power cycle
[  983.420700][T19489] syzkaller0: entered promiscuous mode
[  983.426191][T19489] syzkaller0: entered allmulticast mode
[  983.578193][  T969] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  983.628392][  T969] usb 6-1: device descriptor read/8, error -71
[  983.857195][T19501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3879'.
[  983.867410][T19501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3879'.
[  983.876435][T19501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3879'.
[  983.916466][ T5771] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  983.923543][  T969] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  983.968865][  T969] usb 6-1: device descriptor read/8, error -71
[  984.084925][T19510] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead?
[  984.098847][T19510] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3882'.
[  984.103393][  T969] usb usb6-port1: unable to enumerate USB device
[  984.614618][T19520] tmpfs: Unknown parameter 'n'
[  984.685286][T19524] vxcan1: tx drop: invalid sa for name 0xfffffffffffffff7
[  985.932620][T19530] md: array md0 already has disks!
[  985.965543][T19530] md: could not open device unknown-block(1,1).
[  985.994636][T19530] md: error, md_import_device() returned -16
[  989.631421][T19550] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead?
[  989.673805][T19550] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3895'.
[  989.744460][T19554] tmpfs: Unknown parameter 'n'
[  989.811521][T19560] syz.1.3893: attempt to access beyond end of device
[  989.811521][T19560] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[  989.856197][T19560] FAT-fs (loop3): unable to read boot sector
[  989.901097][T19562] syz.5.3897: attempt to access beyond end of device
[  989.901097][T19562] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  990.027102][T19564] md: array md0 already has disks!
[  990.039346][T19564] md: could not open device unknown-block(1,1).
[  990.053992][T19564] md: error, md_import_device() returned -16
[  990.124875][T19564] md/raid:md0: invalid chunk size -61440
[  990.146925][T19564] md: pers->run() failed ...
[  992.919868][T19621] syz.1.3913: attempt to access beyond end of device
[  992.919868][T19621] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[  992.932912][ T5810] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  992.963259][T19621] FAT-fs (loop3): unable to read boot sector
[  993.107728][ T5810] usb 4-1: device descriptor read/64, error -71
[  993.132872][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  993.143734][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  993.389521][ T5810] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  993.567779][ T5810] usb 4-1: device descriptor read/64, error -71
[  993.699362][ T5810] usb usb4-port1: attempt power cycle
[  994.157909][ T5810] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  994.188578][ T5810] usb 4-1: device descriptor read/8, error -71
[  994.317567][T19646] md: array md0 already has disks!
[  994.325201][T19646] md: could not open device unknown-block(1,1).
[  994.333331][T19646] md: error, md_import_device() returned -16
[  994.391616][T19646] md/raid:md0: invalid chunk size -61440
[  994.397395][T19646] md: pers->run() failed ...
[  994.477780][ T5810] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  994.528516][ T5810] usb 4-1: device descriptor read/8, error -71
[  994.653041][ T5810] usb usb4-port1: unable to enumerate USB device
[  995.122525][T19668] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  995.133929][T19668] batman_adv: batadv0: Removing interface: virt_wifi0
[  995.381034][T19672] syz.1.3930: attempt to access beyond end of device
[  995.381034][T19672] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[  995.447788][T19672] FAT-fs (loop3): unable to read boot sector
[  995.707886][ T5807] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  995.907070][ T5807] usb 6-1: no configurations
[  995.912431][ T5807] usb 6-1: can't read configurations, error -22
[  996.085946][ T5807] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  996.304876][ T5807] usb 6-1: no configurations
[  996.310864][ T5807] usb 6-1: can't read configurations, error -22
[  996.332052][ T5807] usb usb6-port1: attempt power cycle
[  996.339657][T19537] net_ratelimit: 25 callbacks suppressed
[  996.777841][ T5807] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  996.835420][ T5807] usb 6-1: no configurations
[  996.859215][ T5807] usb 6-1: can't read configurations, error -22
[  997.048232][ T5807] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  997.123802][ T5807] usb 6-1: no configurations
[  997.144935][ T5807] usb 6-1: can't read configurations, error -22
[  997.152557][ T5807] usb usb6-port1: unable to enumerate USB device
[  999.158275][ T5807] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  999.367963][ T5807] usb 6-1: device descriptor read/64, error -71
[  999.668224][ T5807] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  999.917918][ T5807] usb 6-1: device descriptor read/64, error -71
[ 1000.075802][ T5807] usb usb6-port1: attempt power cycle
[ 1000.517874][ T5807] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1000.559573][ T5807] usb 6-1: device descriptor read/8, error -71
[ 1000.596629][T19726] md: array md0 already has disks!
[ 1000.602269][T19726] md: could not open device unknown-block(1,1).
[ 1000.608941][T19726] md: error, md_import_device() returned -16
[ 1000.680340][T19726] md/raid:md0: invalid chunk size -61440
[ 1000.696432][T19726] md: pers->run() failed ...
[ 1000.837787][ T5807] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1000.878464][ T5807] usb 6-1: device descriptor read/8, error -71
[ 1000.998430][ T5807] usb usb6-port1: unable to enumerate USB device
[ 1001.115031][T19746] syz.1.3951: attempt to access beyond end of device
[ 1001.115031][T19746] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1001.144534][T19746] FAT-fs (loop3): unable to read boot sector
[ 1001.454686][ T5017] net_ratelimit: 29 callbacks suppressed
[ 1001.997683][T15910] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1002.187758][T15910] usb 4-1: Using ep0 maxpacket: 16
[ 1004.476163][T15910] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1005.694059][T15910] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1005.728300][T15910] usb 4-1: can't read configurations, error -71
[ 1006.568025][ T5017] net_ratelimit: 20 callbacks suppressed
[ 1009.468595][   T28] kauditd_printk_skb: 491 callbacks suppressed
[ 1009.468609][   T28] audit: type=1800 audit(1791906805.046:5108): pid=19774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3961" name="file0" dev="overlay" ino=2387 res=0 errno=0
[ 1009.567263][T19782] md: array md0 already has disks!
[ 1009.588337][T19782] md: could not open device unknown-block(1,1).
[ 1009.607311][T19782] md: error, md_import_device() returned -16
[ 1009.935373][   T28] audit: type=1800 audit(1791906805.466:5109): pid=19797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3971" name="file0" dev="overlay" ino=251 res=0 errno=0
[ 1011.620308][T10784] net_ratelimit: 41 callbacks suppressed
[ 1011.803231][T19782] md/raid:md0: invalid chunk size -61440
[ 1012.718617][T19782] md: pers->run() failed ...
[ 1013.067808][T19185] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 1013.277698][T19185] usb 6-1: Using ep0 maxpacket: 16
[ 1013.313988][T19185] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1013.354179][T19185] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1013.391121][T19185] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1013.427940][T19185] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1013.511642][T19185] usb 6-1: config 0 descriptor??
[ 1013.777134][T19805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead?
[ 1014.250567][T19811] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3966'.
[ 1016.722534][  T969] usb 6-1: USB disconnect, device number 16
[ 1016.808402][    C1] net_ratelimit: 29 callbacks suppressed
[ 1017.397763][  T969] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1017.589801][  T969] usb 6-1: Using ep0 maxpacket: 16
[ 1017.599645][  T969] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1017.610064][  T969] usb 6-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config
[ 1017.626052][  T969] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7
[ 1017.644211][  T969] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[ 1017.661769][  T969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1017.675081][  T969] usb 6-1: Product: syz
[ 1017.682442][  T969] usb 6-1: Manufacturer: syz
[ 1017.687140][  T969] usb 6-1: SerialNumber: syz
[ 1018.089972][  T969] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1018.113063][  T969] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1018.198190][  T969] usb 6-1: USB disconnect, device number 17
[ 1018.285769][T19821] udevd[19821]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 1018.665404][T15910] usb 4-1: new low-speed USB device number 50 using dummy_hcd
[ 1018.959925][T15910] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1018.973005][T15910] usb 4-1: config 0 has no interface number 0
[ 1018.987693][T15910] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1019.012956][T15910] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1019.034065][T15910] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1019.077719][T15910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1019.099856][T15910] usb 4-1: config 0 descriptor??
[ 1019.106550][T19823] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1022.054398][ T1081] net_ratelimit: 26 callbacks suppressed
[ 1022.228798][T15910] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1023.734634][T10824] usb 4-1: USB disconnect, device number 50
[ 1024.022445][T19872] syzkaller0: entered promiscuous mode
[ 1024.038590][T19872] syzkaller0: entered allmulticast mode
[ 1024.044937][ T5771] Bluetooth: hci4: ISO packet too small
[ 1024.181391][T19876] kvm: kvm [19874]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0xff03000002b2
[ 1025.323455][   T28] audit: type=1800 audit(1791906820.896:5110): pid=19897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3992" name="file0" dev="overlay" ino=312 res=0 errno=0
[ 1026.334605][T19906] md0: using deprecated bitmap file support
[ 1026.361710][T19906] md0: error: failed to get bitmap file
[ 1026.572832][T19915] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001
[ 1026.878318][T19912] syzkaller0: entered promiscuous mode
[ 1026.896126][T19912] syzkaller0: entered allmulticast mode
[ 1027.138988][T15033] net_ratelimit: 28 callbacks suppressed
[ 1027.439405][T19941] overlayfs: failed to clone upperpath
[ 1027.695862][T19948] FAULT_INJECTION: forcing a failure.
[ 1027.695862][T19948] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1027.731579][T19948] CPU: 1 PID: 19948 Comm: syz.5.4007 Not tainted syzkaller #0
[ 1027.739084][T19948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1027.749158][T19948] Call Trace:
[ 1027.752455][T19948]  <TASK>
[ 1027.755407][T19948]  dump_stack_lvl+0x18c/0x250
[ 1027.760101][T19948]  ? lockdep_hardirqs_on+0x98/0x150
[ 1027.765292][T19948]  ? show_regs_print_info+0x20/0x20
[ 1027.770486][T19948]  ? load_image+0x420/0x420
[ 1027.774987][T19948]  should_fail_ex+0x394/0x4c0
[ 1027.779678][T19948]  get_futex_key+0x136/0x1030
[ 1027.784342][T19948]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1027.789370][T19948]  ? xa_load+0x2b7/0x2e0
[ 1027.793625][T19948]  ? futex_setup_timer+0xc0/0xc0
[ 1027.798554][T19948]  ? do_raw_spin_unlock+0x121/0x230
[ 1027.803744][T19948]  futex_wait_setup+0xbc/0x270
[ 1027.808498][T19948]  ? futex_wait_multiple+0x920/0x920
[ 1027.813776][T19948]  ? __might_fault+0xaa/0x120
[ 1027.818445][T19948]  futex_wait+0x1bc/0x5c0
[ 1027.822759][T19948]  ? futex_setup_timer+0xc0/0xc0
[ 1027.827685][T19948]  ? futex_wait_setup+0x270/0x270
[ 1027.832698][T19948]  ? ucma_write+0x25f/0x2f0
[ 1027.837197][T19948]  ? file_end_write+0xdb/0x250
[ 1027.841958][T19948]  ? vfs_write+0x5de/0x9a0
[ 1027.846364][T19948]  do_futex+0x2ff/0x3e0
[ 1027.850509][T19948]  ? file_end_write+0x250/0x250
[ 1027.855364][T19948]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 1027.861251][T19948]  __se_sys_futex+0x3a9/0x440
[ 1027.865938][T19948]  ? __x64_sys_futex+0xf0/0xf0
[ 1027.865979][T19948]  ? __x64_sys_futex+0x21/0xf0
[ 1027.866004][T19948]  do_syscall_64+0x55/0xb0
[ 1027.875803][T19948]  ? clear_bhb_loop+0x40/0x90
[ 1027.875829][T19948]  ? clear_bhb_loop+0x40/0x90
[ 1027.875851][T19948]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1027.875878][T19948] RIP: 0033:0x7ff116f9e2d9
[ 1027.880489][T19948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1027.880509][T19948] RSP: 002b:00007ff117f200e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1027.880532][T19948] RAX: ffffffffffffffda RBX: 00007ff117225fa8 RCX: 00007ff116f9e2d9
[ 1027.889975][T19948] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff117225fa8
[ 1027.889992][T19948] RBP: 00007ff117225fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1027.890005][T19948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1027.890018][T19948] R13: 00007ff117226038 R14: 00007ffec70e1d30 R15: 00007ffec70e1e18
[ 1027.900289][T19948]  </TASK>
[ 1028.128694][T19952] syzkaller0: entered promiscuous mode
[ 1028.138506][T19952] syzkaller0: entered allmulticast mode
[ 1030.021769][   T28] audit: type=1800 audit(1791906825.596:5111): pid=19966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4014" name="file0" dev="overlay" ino=363 res=0 errno=0
[ 1032.172206][    C1] net_ratelimit: 44 callbacks suppressed
[ 1033.503533][T19983] syzkaller0: entered promiscuous mode
[ 1033.521159][T19983] syzkaller0: entered allmulticast mode
[ 1036.209337][   T28] audit: type=1800 audit(1791906831.786:5112): pid=20006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4023" name="file0" dev="overlay" ino=393 res=0 errno=0
[ 1036.371363][T20011] binder: 20010:20011 ioctl 4018620d 0 returned -22
[ 1036.388994][T20011] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4026'.
[ 1037.287661][    C0] net_ratelimit: 22 callbacks suppressed
[ 1037.871271][   T28] audit: type=1800 audit(1791906833.436:5113): pid=20047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4034" name="file0" dev="overlay" ino=418 res=0 errno=0
[ 1038.175283][T20056] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4036'.
[ 1038.218571][T20056] binder: BINDER_SET_CONTEXT_MGR already set
[ 1038.234255][T20056] binder: 20055:20056 ioctl 4018620d 2000000006c0 returned -16
[ 1040.390859][   T28] audit: type=1800 audit(1791906835.956:5114): pid=20077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4045" name="file0" dev="overlay" ino=449 res=0 errno=0
[ 1040.997870][    T8] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1041.378763][    T8] usb 2-1: Using ep0 maxpacket: 16
[ 1041.476664][    T8] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1041.602553][    T8] usb 2-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config
[ 1041.720972][    T8] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7
[ 1041.860768][    T8] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[ 1041.888878][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1041.914488][    T8] usb 2-1: Product: syz
[ 1041.923034][    T8] usb 2-1: Manufacturer: syz
[ 1041.940220][ T5771] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10
[ 1041.957998][    T8] usb 2-1: SerialNumber: syz
[ 1042.327718][    C0] net_ratelimit: 33 callbacks suppressed
[ 1042.901294][    T8] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1042.928802][    T8] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1043.023584][    T8] usb 2-1: USB disconnect, device number 49
[ 1043.876416][T20143] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4059'.
[ 1043.885561][T20143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4059'.
[ 1043.894696][T20143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4059'.
[ 1044.017979][ T5771] Bluetooth: hci4: command 0x0406 tx timeout
[ 1044.937762][   T28] audit: type=1800 audit(1791906840.496:5115): pid=20144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4057" name="file0" dev="overlay" ino=1980 res=0 errno=0
[ 1045.987742][ T5813] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 1046.340129][ T5771] Bluetooth: hci4: command 0x0406 tx timeout
[ 1046.450332][ T5813] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1046.460609][ T5813] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 1046.475183][ T5813] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[ 1046.487730][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1046.497747][T15910] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1046.508922][ T5813] spcp8x5 6-1:1.0: SPCP8x5 converter detected
[ 1046.536527][ T5813] usb 6-1: SPCP8x5 converter now attached to ttyUSB0
[ 1046.632634][T20178] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4068'.
[ 1046.641660][T20178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4068'.
[ 1046.650616][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4068'.
[ 1046.733376][T15910] usb 2-1: Using ep0 maxpacket: 16
[ 1046.759284][T15910] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1046.788317][T15910] usb 2-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config
[ 1046.828520][T15910] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7
[ 1046.863652][T15910] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[ 1046.907854][T15910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1046.937763][T15910] usb 2-1: Product: syz
[ 1046.952415][T15910] usb 2-1: Manufacturer: syz
[ 1046.957045][T15910] usb 2-1: SerialNumber: syz
[ 1047.442620][T20186] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -110)
[ 1047.463477][T20186] SPCP8x5 ttyUSB0: failed to set control lines: -32
[ 1047.495740][T15910] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1047.518219][T15910] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1047.538409][ T5017] net_ratelimit: 41 callbacks suppressed
[ 1047.553701][T20165] CIFS: Attempting to mount //127.0.0.1/share
[ 1047.576608][T20165] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1047.587814][T20165] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1047.626587][T15910] usb 2-1: USB disconnect, device number 50
[ 1047.705567][T20129] udevd[20129]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 1047.741786][T20165] SPCP8x5 ttyUSB0: failed to set control lines: -32
[ 1047.770071][T19185] usb 6-1: USB disconnect, device number 18
[ 1047.833956][T19185] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[ 1047.885896][T19185] spcp8x5 6-1:1.0: device disconnected
[ 1048.417966][ T5771] Bluetooth: hci4: command 0x0406 tx timeout
[ 1048.458734][   T28] audit: type=1800 audit(1791906844.036:5116): pid=20192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4071" name="file0" dev="overlay" ino=2530 res=0 errno=0
[ 1051.295827][T20235] xt_nfacct: accounting object `syz0' does not exist
[ 1052.648777][ T2991] net_ratelimit: 101 callbacks suppressed
[ 1053.367781][T20229] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[ 1053.367891][T20231] Bluetooth: hci4: command 0x0406 tx timeout
[ 1053.926426][   T28] audit: type=1800 audit(1791906849.496:5117): pid=20251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4085" name="file0" dev="overlay" ino=529 res=0 errno=0
[ 1054.170469][T20229] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1054.235940][T20229] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1054.402937][T20260] vxcan1: tx drop: invalid sa for name 0xfffffffffffffff7
[ 1054.572411][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.578883][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.457948][T20231] Bluetooth: hci4: command 0x0406 tx timeout
[ 1057.292234][T20229] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1057.350974][T20229] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1057.377751][T20229] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1057.407913][T20229] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1057.440655][T20229] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1057.446891][T20229] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1057.528113][T20231] Bluetooth: hci4: command 0x0406 tx timeout
[ 1057.536472][T20229] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1057.630672][T20229] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1057.637415][T20229] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1057.688841][   T12] net_ratelimit: 43 callbacks suppressed
[ 1057.792238][T20229] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1058.040010][T20267] kvm_msr_ignored_check: 68 callbacks suppressed
[ 1058.974961][T15910] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1059.047019][T20296] overlayfs: failed to clone upperpath
[ 1059.208077][T15910] usb 4-1: Using ep0 maxpacket: 16
[ 1059.230002][T15910] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1059.244426][T15910] usb 4-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config
[ 1059.260512][T15910] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7
[ 1059.285224][T15910] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[ 1059.298064][T15910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1059.346793][T15910] usb 4-1: Product: syz
[ 1059.351071][T15910] usb 4-1: Manufacturer: syz
[ 1059.355674][T15910] usb 4-1: SerialNumber: syz
[ 1059.361537][T20303] vxcan1: tx drop: invalid sa for name 0xfffffffffffffff7
[ 1059.377793][T20231] Bluetooth: hci1: command 0x0406 tx timeout
[ 1059.448043][T20231] Bluetooth: hci0: command 0x0406 tx timeout
[ 1059.467877][T19185] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 1059.527777][T20231] Bluetooth: hci2: command 0x0406 tx timeout
[ 1059.608540][T20231] Bluetooth: hci4: command 0x0406 tx timeout
[ 1059.657647][T19185] usb 6-1: Using ep0 maxpacket: 16
[ 1059.666779][T19185] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1059.682795][T19185] usb 6-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config
[ 1059.693623][T20231] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1059.701727][T19185] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7
[ 1059.717815][T19185] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[ 1059.727745][T19185] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1059.735804][T19185] usb 6-1: Product: syz
[ 1059.740331][T19185] usb 6-1: Manufacturer: syz
[ 1059.744980][T19185] usb 6-1: SerialNumber: syz
[ 1060.186814][T19185] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1060.203654][T19185] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1060.270607][T19185] usb 6-1: USB disconnect, device number 19
[ 1060.363445][T20317] udevd[20317]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 1061.042310][   T28] audit: type=1800 audit(1791906856.616:5118): pid=20341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4105" name="file0" dev="overlay" ino=559 res=0 errno=0
[ 1061.406677][T20347] vxcan1: tx drop: invalid sa for name 0xfffffffffffffff7
[ 1061.528405][T20231] Bluetooth: hci0: command 0x0406 tx timeout
[ 1061.625890][T20231] Bluetooth: hci2: command 0x0406 tx timeout
[ 1061.778098][T20231] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1062.731575][T15910] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1062.898153][T15910] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1062.901273][   T49] net_ratelimit: 60 callbacks suppressed
[ 1063.523046][T15910] usb 4-1: USB disconnect, device number 51
[ 1063.698050][T20231] Bluetooth: hci2: command 0x0406 tx timeout
[ 1063.859995][T20231] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1064.307254][T20317] udevd[20317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 1066.417785][    T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 1066.494295][   T28] audit: type=1800 audit(1791906862.066:5119): pid=20387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4116" name="file0" dev="overlay" ino=2572 res=0 errno=0
[ 1066.627960][    T9] usb 2-1: Using ep0 maxpacket: 16
[ 1066.640055][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1066.670986][    T9] usb 2-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config
[ 1066.691780][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7
[ 1066.741051][    T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[ 1066.760187][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.790249][    T9] usb 2-1: Product: syz
[ 1066.809856][    T9] usb 2-1: Manufacturer: syz
[ 1066.826133][    T9] usb 2-1: SerialNumber: syz
[ 1066.857851][  T969] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 1067.104955][  T969] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[ 1067.142758][  T969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1067.175787][  T969] usb 6-1: Product: syz
[ 1067.189604][  T969] usb 6-1: Manufacturer: syz
[ 1067.194472][  T969] usb 6-1: SerialNumber: syz
[ 1067.263810][  T969] usb 6-1: config 0 descriptor??
[ 1067.588045][  T969] usb 6-1: f81604_read: reg: 105 failed: -EREMOTEIO
[ 1067.615953][  T969] f81604 6-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO
[ 1067.646322][  T969] f81604: probe of 6-1:0.0 failed with error -121
[ 1067.927655][    C0] net_ratelimit: 25 callbacks suppressed
[ 1070.258686][  T969] usb 6-1: USB disconnect, device number 20
[ 1070.790682][T20393] syz.3.4119: attempt to access beyond end of device
[ 1070.790682][T20393] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 1070.804853][T20393] gfs2: error 10 reading superblock
[ 1070.903660][    T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1070.955169][    T9] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1071.006899][T20403] syzkaller0: entered promiscuous mode
[ 1071.050491][    T9] usb 2-1: USB disconnect, device number 51
[ 1071.060593][T20403] syzkaller0: entered allmulticast mode
[ 1071.175788][T20317] udevd[20317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 1073.127698][    C0] net_ratelimit: 33 callbacks suppressed
[ 1073.652304][   T28] audit: type=1800 audit(1791906869.206:5120): pid=20430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4127" name="file0" dev="overlay" ino=604 res=0 errno=0
[ 1074.377861][ T5807] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 1074.408037][    T8] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 1074.544849][T20474] vxcan1: tx drop: invalid sa for name 0xfffffffffffffff7
[ 1074.591978][ T5807] usb 6-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00
[ 1074.603028][ T5807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1074.611119][ T5807] usb 6-1: Product: syz
[ 1074.611449][    T8] usb 2-1: Using ep0 maxpacket: 16
[ 1074.620385][ T5807] usb 6-1: Manufacturer: syz
[ 1074.627386][    T8] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1074.645537][    T8] usb 2-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config
[ 1074.656260][    T8] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7
[ 1074.672903][    T8] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[ 1074.682123][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1074.691027][    T8] usb 2-1: Product: syz
[ 1074.695305][    T8] usb 2-1: Manufacturer: syz
[ 1074.705422][    T8] usb 2-1: SerialNumber: syz
[ 1075.401857][ T5807] scsi host1: uas
[ 1075.553102][    C1] usb 6-1: stat urb: no pending cmd for uas-tag 0
[ 1076.608585][    C1] usb 6-1: cmd cmplt err -71
[ 1076.633067][ T5807] usb 6-1: USB disconnect, device number 21
[ 1076.806969][ T5807] scsi 1:0:0:0: tag#4 uas_zap_pending 0 uas-tag 1 inflight: CMD 
[ 1076.815684][ T5807] scsi 1:0:0:0: tag#4 CDB: Inquiry 12 00 00 00 24 00
[ 1078.255554][   T28] audit: type=1800 audit(1791906873.826:5121): pid=20487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4141" name="file0" dev="overlay" ino=628 res=0 errno=0
[ 1078.807750][    C0] net_ratelimit: 24 callbacks suppressed
[ 1079.393351][    T8] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1079.415950][    T8] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1079.530372][    T8] usb 2-1: USB disconnect, device number 52
[ 1081.675822][T20317] udevd[20317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 1081.713378][T20500] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001
[ 1082.237836][T20231] Bluetooth: hci1: ACL packet for unknown connection handle 201
[ 1082.351132][T20522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4150'.
[ 1082.456370][T20528] overlayfs: failed to clone upperpath
[ 1083.196766][T20539] Bluetooth: MGMT ver 1.22
[ 1084.065218][    C1] net_ratelimit: 26 callbacks suppressed
[ 1084.150171][T20543] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001
[ 1084.443953][T20231] Bluetooth: hci3: Unable to find connection with handle 0x00c9
[ 1084.487974][    T8] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 1084.584746][T20552] syzkaller0: entered promiscuous mode
[ 1084.597743][T20552] syzkaller0: entered allmulticast mode
[ 1084.697007][T20557] overlayfs: failed to clone upperpath
[ 1084.703911][    T8] usb 4-1: Using ep0 maxpacket: 16
[ 1084.729158][    T8] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1084.748492][    T8] usb 4-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config
[ 1084.779296][    T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7
[ 1084.826632][    T8] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[ 1084.847493][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1084.873285][    T8] usb 4-1: Product: syz
[ 1084.878025][    T8] usb 4-1: Manufacturer: syz
[ 1084.895457][    T8] usb 4-1: SerialNumber: syz
[ 1086.762212][T20572] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001
[ 1086.795281][    T8] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1086.864232][    T8] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1087.134630][    T8] usb 4-1: USB disconnect, device number 52
[ 1087.245228][T20317] udevd[20317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 1087.417457][T20580] syzkaller0: entered promiscuous mode
[ 1087.431961][T20580] syzkaller0: entered allmulticast mode
[ 1087.576498][   T28] audit: type=1800 audit(1791906883.126:5122): pid=20585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4171" name="file0" dev="overlay" ino=2647 res=0 errno=0
[ 1087.577712][ T5810] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 1087.777762][T20590] md: array md0 already has disks!
[ 1087.792041][T20590] md: could not open device unknown-block(1,1).
[ 1087.800440][T20590] md: error, md_import_device() returned -16
[ 1087.824719][ T5810] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[ 1087.838689][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1087.846826][ T5810] usb 2-1: Product: syz
[ 1087.851566][ T5810] usb 2-1: Manufacturer: syz
[ 1087.856243][ T5810] usb 2-1: SerialNumber: syz
[ 1087.864147][T20590] md/raid:md0: invalid chunk size -61440
[ 1087.882647][T20590] md: pers->run() failed ...
[ 1087.892402][ T5810] usb 2-1: config 0 descriptor??
[ 1088.116801][ T5810] usb 2-1: f81604_read: reg: 105 failed: -EREMOTEIO
[ 1088.147714][ T5810] f81604 2-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO
[ 1088.163504][ T5810] f81604: probe of 2-1:0.0 failed with error -121
[ 1088.363651][T20588] syz.5.4172 (20588) used greatest stack depth: 17176 bytes left
[ 1088.375642][T20593] syz.5.4172 (20593) used greatest stack depth: 16744 bytes left
[ 1088.566382][T20610] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001
[ 1088.883963][   T28] audit: type=1800 audit(1791906884.456:5123): pid=20626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4181" name="file0" dev="overlay" ino=2668 res=0 errno=0
[ 1089.128646][T10784] net_ratelimit: 27 callbacks suppressed
[ 1089.417948][ T5810] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1089.622139][ T5810] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1089.632246][ T5810] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 1089.644230][ T5810] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[ 1089.653526][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1089.673037][ T5810] spcp8x5 4-1:1.0: SPCP8x5 converter detected
[ 1089.692764][ T5810] usb 4-1: SPCP8x5 converter now attached to ttyUSB0
[ 1089.889557][T20655] syzkaller0: entered promiscuous mode
[ 1089.895190][T20655] syzkaller0: entered allmulticast mode
[ 1090.203014][   T28] audit: type=1800 audit(1791906885.776:5124): pid=20662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4193" name="file0" dev="overlay" ino=742 res=0 errno=0
[ 1090.388046][T20665] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -110)
[ 1090.406066][T20665] SPCP8x5 ttyUSB0: failed to set control lines: -32
[ 1090.490720][T20635] CIFS: Attempting to mount //127.0.0.1/share
[ 1090.513788][T20635] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1090.532762][ T5810] usb 2-1: USB disconnect, device number 53
[ 1090.561724][T20635] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1090.698489][T20634] SPCP8x5 ttyUSB0: failed to set control lines: -32
[ 1090.737279][T20682] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001
[ 1090.772468][    T8] usb 4-1: USB disconnect, device number 53
[ 1090.815598][    T8] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[ 1090.914365][    T8] spcp8x5 4-1:1.0: device disconnected
[ 1090.997755][ T5813] usb 6-1: new low-speed USB device number 22 using dummy_hcd
[ 1091.205928][ T5813] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1091.215190][ T5813] usb 6-1: config 0 has no interface number 0
[ 1091.221835][ T5813] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1091.233467][ T5813] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1091.244450][ T5813] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1091.253635][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1091.266205][ T5813] usb 6-1: config 0 descriptor??
[ 1091.278347][T20681] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1091.298288][ T5813] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1091.665487][    C1] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1
[ 1091.682100][    T8] usb 6-1: USB disconnect, device number 22
[ 1091.710348][   T28] audit: type=1800 audit(1791906887.276:5125): pid=20711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4204" name="file0" dev="overlay" ino=2694 res=0 errno=0
[ 1092.000435][T20714] md: array md0 already has disks!
[ 1092.006216][T20714] md: could not open device unknown-block(1,1).
[ 1092.012966][T20714] md: error, md_import_device() returned -16
[ 1092.109160][T20714] md/raid:md0: invalid chunk size -61440
[ 1092.114885][T20714] md: pers->run() failed ...
[ 1092.717790][    T8] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 1092.923781][    T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1092.950560][    T8] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 1092.987712][    T8] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[ 1093.021785][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1093.057100][    T8] spcp8x5 6-1:1.0: SPCP8x5 converter detected
[ 1093.073841][T10784] tipc: Subscription rejected, illegal request
[ 1093.084311][    T8] usb 6-1: SPCP8x5 converter now attached to ttyUSB0
[ 1093.099857][T20748] overlayfs: failed to clone upperpath
[ 1093.414512][T20758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4215'.
[ 1093.423495][T20758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4215'.
[ 1093.432884][T20758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4215'.
[ 1093.768087][T20760] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -110)
[ 1093.777472][T20760] SPCP8x5 ttyUSB0: failed to set control lines: -32
[ 1093.871086][T20730] CIFS: Attempting to mount //127.0.0.1/share
[ 1093.880583][T20730] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1093.888114][T20730] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1093.998680][T20729] SPCP8x5 ttyUSB0: failed to set control lines: -32
[ 1094.006839][    T8] usb 6-1: USB disconnect, device number 23
[ 1094.034296][    T8] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[ 1094.049588][    T8] spcp8x5 6-1:1.0: device disconnected
[ 1094.120615][T20689] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1094.248172][   T12] net_ratelimit: 30 callbacks suppressed
[ 1094.657030][T20774] syzkaller0: entered promiscuous mode
[ 1094.668616][T20774] syzkaller0: entered allmulticast mode
[ 1095.867833][    T9] IPVS: starting estimator thread 0...
[ 1095.968392][   T28] audit: type=1800 audit(1791906891.536:5126): pid=20783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4222" name="file0" dev="overlay" ino=795 res=0 errno=0
[ 1096.007918][T20778] IPVS: using max 19 ests per chain, 45600 per kthread
[ 1096.175741][ T5810] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 1096.316944][T20791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4224'.
[ 1096.326038][T20791] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4224'.
[ 1096.335167][T20791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4224'.
[ 1096.949179][ T5810] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[ 1098.728823][   T29] INFO: task syz.4.3606:18610 blocked for more than 143 seconds.
[ 1098.747009][T10784] nf_nat: Already setup manip DST for ct ffff888026e7ca80 (status bits 0x188)
[ 1098.756719][T10784] nf_nat: Already setup manip SRC for ct ffff888026e7ca80 (status bits 0x188)
[ 1098.768664][T20359] nf_nat: Already setup manip DST for ct ffff888026e7de00 (status bits 0x188)
[ 1098.772866][    C0] virtqueue callback for ffff88801ee66c00 (ffffffff84a0d580)
[ 1098.778220][T20359] nf_nat: Already setup manip SRC for ct ffff888026e7de00 (status bits 0x188)
[ 1098.785717][    C0] virtqueue interrupt with no work for ffff88801ee66a00
[ 1098.794958][T20354] nf_nat: Already setup manip DST for ct ffff888026e7d800 (status bits 0x188)
[ 1098.801403][    C0] virtqueue interrupt with no work for ffff88801ee66800
[ 1098.801839][    C0] virtqueue callback for ffff888146248600 (ffffffff85c809b0)
[ 1098.810749][T20354] nf_nat: Already setup manip SRC for ct ffff888026e7d800 (status bits 0x188)
[ 1098.817983][    T8] Added buffer head 0 to ffff88801ee66c00
[ 1098.825305][    C0] No more buffers in queue
[ 1098.825323][    C0] Receiving skb proto 0x0800 len 52 type 0
[ 1098.825347][    C0] No more buffers in queue
[ 1098.825431][   T29]       Not tainted syzkaller #0
[ 1098.825444][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1098.825453][   T29] task:syz.4.3606      state:D stack:27176 pid:18610 ppid:14809  flags:0x00004000
[ 1098.867815][    C0] No more buffers in queue
[ 1098.883086][    C0] eth0: xmit ffff888046bcb000 42:01:0a:80:00:01
[ 1098.889435][    C0] Added buffer head 3 to ffff888146248800
[ 1098.895192][    C0] virtqueue callback for ffff888146248800 (ffffffff85c80aa0)
[ 1098.902898][    C0] Sent skb ffff888046bcb000
[ 1098.907470][    C0] No more buffers in queue
[ 1098.913222][   T12] nf_nat: Already setup manip DST for ct ffff888026e7db00 (status bits 0x188)
[ 1098.922875][   T12] nf_nat: Already setup manip SRC for ct ffff888026e7db00 (status bits 0x188)
[ 1099.235104][T20791] kcov: kcov_task_exit: t = ffff88802529bc00, kcov->t = ffff88802529bc00
[ 1099.235439][T20790] kcov: kcov_task_exit: t = ffff888029730000, kcov->t = ffff888029730000
[ 1099.270594][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1099.270670][    C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq
[ 1099.274774][   T29] Call Trace:
[ 1099.279030][    C0] kcov: kcov_start: t = ffff88807eb71e00, size = 262144, area = ffffc900022e2000
[ 1099.279059][    C0] kcov: kcov_start: t = ffff88807eb71e00, size = 1048576, area = ffffc90017728000
[ 1099.279080][    C0] kcov: kcov_move_area: ffffc90016471000 1048576 <= ffffc900022e2000 3
[ 1099.279319][ T5810] usb 2-1: Product: syz
[ 1099.279337][ T5810] usb 2-1: Manufacturer: syz
[ 1099.279353][ T5810] usb 2-1: SerialNumber: syz
[ 1099.279392][ T5810] device: '2-1': device_add
[ 1099.279410][ T5810] kobject: '2-1' (ffff88802f8a00a8): kobject_add_internal: parent: 'usb2', set: 'devices'
[ 1099.279499][ T5810] usb 2-1: ACPI companion not found
[ 1099.292994][    C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq
[ 1099.293019][    C0] kcov: kcov_start: t = ffff88807eb71e00, size = 262144, area = ffffc900022e2000
[ 1099.293045][    C0] kcov: kcov_start: t = ffff88807eb71e00, size = 1048576, area = ffffc90017728000
[ 1099.293067][    C0] kcov: kcov_move_area: ffffc90016471000 1048576 <= ffffc900022e2000 3
[ 1099.296790][   T29]  <TASK>
[ 1099.302442][    C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq
[ 1099.302461][    C0] kcov: kcov_start: t = ffff88807eb71e00, size = 262144, area = ffffc900022e2000
[ 1099.302486][    C0] kcov: kcov_start: t = ffff88807eb71e00, size = 1048576, area = ffffc90017728000
[ 1099.302508][    C0] kcov: kcov_move_area: ffffc90016471000 1048576 <= ffffc900022e2000 3
[ 1099.303075][    C1] wireguard: wg2: Handshake for peer 35 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 6)
[ 1099.330155][    C0] net_ratelimit: 26 callbacks suppressed
[ 1099.330171][    C0] wireguard: wg1: Receiving keepalive packet from peer 57 (127.0.0.1:20001)
[ 1099.333967][T15035] wireguard: wg2: Sending handshake initiation to peer 35 ([::1]:20001/0%0)
[ 1099.335062][    C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq
[ 1099.469187][    C0] kcov: kcov_start: t = ffff88801ce75a00, size = 262144, area = ffffc900022e2000
[ 1099.478922][    C0] kcov: kcov_move_area: ffffc90016471000 1048576 <= ffffc900022e2000 3
[ 1099.488085][T15035] nf_nat: Already setup manip DST for ct ffff888026e7d680 (status bits 0x188)
[ 1099.490836][    C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq
[ 1099.497225][T15035] nf_nat: Already setup manip SRC for ct ffff888026e7d680 (status bits 0x188)
[ 1099.505310][    C0] kcov: kcov_start: t = ffff888026468000, size = 262144, area = ffffc900022e2000
[ 1099.505335][    C0] kcov: kcov_move_area: ffffc90016471000 1048576 <= ffffc900022e2000 3
[ 1099.534138][T20769] bus: 'gadget': remove driver raw-gadget.0
[ 1099.536119][   T29]  __schedule+0x15ae/0x4660
[ 1099.540224][    C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq
[ 1099.540246][    C0] kcov: kcov_start: t = ffff888026468000, size = 262144, area = ffffc900022e2000
[ 1099.540272][    C0] kcov: kcov_move_area: ffffc90016471000 1048576 <= ffffc900022e2000 3
[ 1099.540969][T20793] kcov: kcov_start: t = ffff888079d85a00, size = 524288, area = ffffc900190b9000
[ 1099.545032][   T29]  ? is_bpf_text_address+0x28f/0x2a0
[ 1099.553742][    C0] wireguard: wg1: Receiving keepalive packet from peer 45 (127.0.0.1:20001)
[ 1099.568030][   T29]  ? verify_lock_unused+0x140/0x140
[ 1099.570933][    C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq
[ 1099.580609][   T29]  ? asan.module_dtor+0x20/0x20
[ 1099.585096][    C0] kcov: kcov_start: t = ffff88801b64da00, size = 262144, area = ffffc900022e2000
[ 1099.585124][    C0] kcov: kcov_move_area: ffffc90016471000 1048576 <= ffffc900022e2000 3
[ 1099.586402][T20769] kernfs bind: removing
[ 1099.607866][   T29]  ? __stack_depot_save+0x1f/0x660
[ 1099.608539][ T5810] usb 2-1: No ACPI support
[ 1099.613283][   T29]  schedule+0xbd/0x170
[ 1099.623700][T20794] kcov: kcov_start: t = ffff88802c4a8000, size = 524288, area = ffffc90019db1000
[ 1099.657959][T20769] kernfs unbind: removing
[ 1099.663742][T20769] kernfs uevent: removing
[ 1099.668452][T20769] kernfs gadget.1: removing
[ 1099.674376][T20769] kernfs driver: removing
[ 1099.678974][T20769] udc dummy_udc.1: unbinding gadget driver [USB Raw Gadget]
[ 1099.685328][   T29]  schedule_timeout+0xc1/0x2d0
[ 1099.689429][T20769] dummy_hcd dummy_hcd.1: port status 0x00010100 has changes
[ 1099.696639][   T29]  ? console_conditional_schedule+0x40/0x40
[ 1099.699261][T20793] IPv6-nf: next header is none
[ 1099.704855][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1099.704886][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1099.710124][T20793] nf_conntrack: can't find proto in pkt
[ 1099.716724][   T29]  ? lock_chain_count+0x20/0x20
[ 1099.721422][T20769] kobject: 'dummy_udc.1' (ffff888026373018): kobject_uevent_env
[ 1099.726938][    C0] kcov: kcov_remote_start: handle = 100000000000002, context: softirq
[ 1099.726959][    C0] kcov: kcov_start: t = ffff888026468000, size = 262144, area = ffffc900022e2000
[ 1099.726989][    C0] kcov: kcov_move_area: ffffc9001c9bc000 1048576 <= ffffc900022e2000 26
[ 1099.732978][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 1099.740390][ T5810] bus: 'usb': add device 2-1
[ 1099.775347][    C0] virtqueue callback for ffff88801ee66c00 (ffffffff84a0d580)
[ 1099.775396][   T29]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1099.775410][    C0] virtqueue interrupt with no work for ffff88801ee66a00
[ 1099.775425][    C0] virtqueue interrupt with no work for ffff88801ee66800
[ 1099.775432][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1099.775455][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[ 1099.775479][   T29]  ? wait_for_completion+0x273/0x5a0
[ 1099.783554][T15910] Added buffer head 0 to ffff88801ee66c00
[ 1099.795215][   T29]  wait_for_completion+0x2c6/0x5a0
[ 1099.796904][T20795] kcov: kcov_start: t = ffff88802c4a9e00, size = 524288, area = ffffc9001a1b2000
[ 1099.803146][   T29]  ? io_schedule+0xd0/0xd0
[ 1099.808137][T20769] kobject: 'dummy_udc.1' (ffff888026373018): fill_kobj_path: path = '/devices/platform/dummy_udc.1/udc/dummy_udc.1'
[ 1099.818584][   T29]  io_wq_put_and_exit+0x493/0x820
[ 1099.824559][T20769] kobject: 'gadget.1' (ffff888025ba0cd8): kobject_uevent_env
[ 1099.849040][   T29]  ? io_wq_put_and_exit+0x15b/0x820
[ 1099.856009][ T5810] PM: Adding info for usb:2-1
[ 1099.872071][   T29]  io_uring_clean_tctx+0x12f/0x1b0
[ 1099.877726][T20769] kobject: 'gadget.1' (ffff888025ba0cd8): fill_kobj_path: path = '/devices/platform/dummy_udc.1/gadget.1'
[ 1099.878501][T20769] kernfs module: removing
[ 1099.895148][   T29]  ? io_uring_del_tctx_node+0x280/0x280
[ 1099.910687][   T29]  ? io_uring_drop_tctx_refs+0x111/0x1a0
[ 1099.911211][T20794] kcov: kcov_task_exit: t = ffff88802c4a8000, kcov->t = ffff88802c4a8000
[ 1099.916454][   T29]  io_uring_cancel_generic+0x610/0x6c0
[ 1099.925012][T20793] kcov: kcov_task_exit: t = ffff888079d85a00, kcov->t = ffff888079d85a00
[ 1099.935712][   T29]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 1099.939301][ T5810] kobject: '2-1' (ffff88802f8a00a8): kobject_uevent_env
[ 1099.944772][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1099.951556][T20769] kernfs gadget:raw-gadget.0: removing
[ 1099.963167][ T5810] kobject: '2-1' (ffff88802f8a00a8): fill_kobj_path: path = '/devices/platform/dummy_hcd.1/usb2/2-1'
[ 1099.963395][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1099.974260][T20769] kobject: 'raw-gadget.0' (ffff88801c2be400): kobject_cleanup, parent ffff888146657b50
[ 1099.984908][   T29]  ? wake_bit_function+0x200/0x200
[ 1099.991292][ T5810] bus: 'usb': __driver_probe_device: matched device 2-1 with driver usb
[ 1100.000077][   T29]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1100.003513][T20795] kcov: kcov_task_exit: t = ffff88802c4a9e00, kcov->t = ffff88802c4a9e00
[ 1100.012750][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1100.017067][T20769] kobject: 'raw-gadget.0' (ffff88801c2be400): auto cleanup kobject_del
[ 1100.021844][    C1] wireguard: wg1: Handshake for peer 33 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 10)
[ 1100.030318][ T5810] bus: 'usb': really_probe: probing driver usb with device 2-1
[ 1100.041876][    C1] wireguard: wg1: Sending keepalive packet to peer 58 (127.0.0.1:20003)
[ 1100.057777][T20769] kobject: 'raw-gadget.0' (ffff88801c2be400): auto cleanup 'remove' event
[ 1100.066384][T19537] wireguard: wg1: Sending handshake initiation to peer 33 ([::1]:20001/0%0)
[ 1100.075613][    C1] wireguard: wg2: Receiving keepalive packet from peer 60 (127.0.0.1:20002)
[ 1100.086058][ T5810] usb 2-1: usb_probe_device
[ 1100.090084][   T29]  ? io_uring_unreg_ringfd+0x52b/0x540
[ 1100.095262][ T5810] usb 2-1: configuration #0 chosen from 1 choice
[ 1100.096192][   T29]  do_exit+0x5f4/0x2530
[ 1100.107179][T20769] kobject: 'raw-gadget.0' (ffff88801c2be400): kobject_uevent_env
[ 1100.119248][ T5810] usb 2-1: config 0 descriptor??
[ 1100.119977][T19537] nf_nat: Already setup manip DST for ct ffff888026e7c300 (status bits 0x188)
[ 1100.124370][T20769] kobject: 'raw-gadget.0' (ffff88801c2be400): fill_kobj_path: path = '/bus/gadget/drivers/raw-gadget.0'
[ 1100.133584][T19537] nf_nat: Already setup manip SRC for ct ffff888026e7c300 (status bits 0x188)
[ 1100.133705][   T29]  ? put_task_struct+0xc0/0xc0
[ 1100.145711][    C0] dummy_hcd dummy_hcd.1: no ep configured for urb ffff88802c309600
[ 1100.158809][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1100.158909][    C0] kcov: kcov_remote_start: handle = 100000000000002, context: softirq
[ 1100.166744][   T29]  ? get_signal+0x100e/0x1390
[ 1100.172776][    C0] kcov: kcov_start: t = ffff888026468000, size = 262144, area = ffffc900022e2000
[ 1100.172822][    C0] kcov: kcov_move_area: ffffc9001c9bc000 1048576 <= ffffc900022e2000 16
[ 1100.173175][ T5810] kobject: '2-1:0.0' (ffff888069de6078): kobject_cleanup, parent 0000000000000000
[ 1100.188962][   T29]  ? lock_chain_count+0x20/0x20
[ 1100.196370][ T5810] kobject: '2-1:0.0' (ffff888069de6078): calling ktype release
[ 1100.224792][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 1100.226761][ T5810] kobject: '2-1:0.0': free name
[ 1100.236909][ T5810] usb 2-1: can't set config #0, error -71
[ 1100.238766][   T29]  do_group_exit+0x22d/0x2f0
[ 1100.250722][T20769] kernfs raw-gadget.0: removing
[ 1100.255677][ T5810] driver: 'usb': driver_bound: bound to device '2-1'
[ 1100.258112][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[ 1100.262521][T20769] kobject: 'raw-gadget.0' (ffff88801c2be400): calling ktype release
[ 1100.269530][   T29]  get_signal+0x12a6/0x1390
[ 1100.280537][   T29]  arch_do_signal_or_restart+0xc2/0x7b0
[ 1100.280679][T20769] driver: 'raw-gadget.0': driver_release
[ 1100.286180][   T29]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 1100.292633][ T5810] kobject: '2-1' (ffff88802f8a00a8): kobject_uevent_env
[ 1100.298386][   T29]  ? get_sigframe_size+0x20/0x20
[ 1100.310159][T20769] kobject: 'raw-gadget.0': free name
[ 1100.310231][   T29]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1100.315530][ T5810] kobject: '2-1' (ffff88802f8a00a8): fill_kobj_path: path = '/devices/platform/dummy_hcd.1/usb2/2-1'
[ 1100.323504][   T29]  exit_to_user_mode_loop+0x70/0x110
[ 1100.332177][    C1] wireguard: wg0: Sending keepalive packet to peer 55 (127.0.0.1:20002)
[ 1100.350108][    C1] wireguard: wg1: Receiving keepalive packet from peer 57 (127.0.0.1:20001)
[ 1100.360942][ T5810] bus: 'usb': really_probe: bound device 2-1 to driver usb
[ 1100.368788][ T5810] device: 'ep_00': device_add
[ 1100.373503][ T5810] kobject: 'ep_00' (ffff88807e92b010): kobject_add_internal: parent: '2-1', set: 'devices'
[ 1100.375836][   T29]  exit_to_user_mode_prepare+0xee/0x180
[ 1100.393627][ T5810]  ep_00: No ACPI support
[ 1100.395210][   T29]  syscall_exit_to_user_mode+0x1a/0x50
[ 1100.398619][ T5810] PM: Adding info for No Bus:ep_00
[ 1100.403643][   T29]  do_syscall_64+0x61/0xb0
[ 1100.408676][    C0] wireguard: wg0: Sending keepalive packet to peer 43 (127.0.0.1:20002)
[ 1100.409084][ T5810] kobject: 'ep_00' (ffff88807e92b010): kobject_uevent_env
[ 1100.418445][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1100.421895][ T5810] kobject: 'ep_00' (ffff88807e92b010): kobject_uevent_env: filter function caused the event to drop!
[ 1100.428779][    C1] wireguard: wg1: Receiving keepalive packet from peer 45 (127.0.0.1:20001)
[ 1100.433539][ T5810] kcov: kcov_move_area: ffffc9001c9bc000 1048576 <= ffffc90017728000 1048575
[ 1100.449412][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1100.455285][ T5810] kcov: kcov_remote_start: handle = 100000000000002, context: task
[ 1100.467976][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1100.474842][ T5810] kcov: kcov_start: t = ffff88807eb71e00, size = 1048576, area = ffffc90017728000
[ 1100.480760][   T29] RIP: 0033:0x7fededb9e2d9
[ 1100.495130][   T29] RSP: 002b:00007fedee9960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1100.496086][ T5810] hub 2-0:1.0: state 7 ports 1 chg 0000 evt 0002
[ 1100.511391][   T29] RAX: 0000000000000001 RBX: 00007fedede25fa8 RCX: 00007fededb9e2d9
[ 1100.512095][ T5810] dummy_hcd dummy_hcd.1: port status 0x00010100 has changes
[ 1100.519531][   T29] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fedede25fac
[ 1100.527585][    C0] kcov: kcov_remote_start: handle = 100000000000002, context: softirq
[ 1100.540385][   T29] RBP: 00007fedede25fa0 R08: 0000000000745b08 R09: 0000000000000000
[ 1100.543208][    C0] kcov: kcov_start: t = ffff88807eb71e00, size = 262144, area = ffffc900022e2000
[ 1100.551210][   T29] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[ 1100.560374][    C0] kcov: kcov_start: t = ffff88807eb71e00, size = 1048576, area = ffffc90017728000
[ 1100.574149][   T29] R13: 00007fedede26038 R14: 00007ffda28eb2e0 R15: 00007ffda28eb3c8
[ 1100.577418][    C0] kcov: kcov_move_area: ffffc9001c9bc000 1048576 <= ffffc900022e2000 657
[ 1100.585422][   T29]  </TASK>
[ 1100.594570][    C0] kcov: kcov_remote_start: handle = 100000000000002, context: softirq
[ 1100.597285][   T29] 
[ 1100.597285][   T29] Showing all locks held in the system:
[ 1100.604949][    C0] kcov: kcov_start: t = ffff88801ce75a00, size = 262144, area = ffffc900022e2000
[ 1100.605022][    C0] kcov: kcov_move_area: ffffc9001c9bc000 1048576 <= ffffc900022e2000 2
[ 1100.606039][    C0] kcov: kcov_remote_start: handle = 100000000000002, context: softirq
[ 1100.638893][    C0] kcov: kcov_start: t = ffff88801ce75a00, size = 262144, area = ffffc900022e2000
[ 1100.648072][    C0] kcov: kcov_move_area: ffffc9001c9bc000 1048576 <= ffffc900022e2000 2
[ 1100.655926][   T29] 6 locks held by ksoftirqd/0/16:
[ 1100.659882][ T5810] usb usb2-port1: status 0100, change 0001, 12 Mb/s
[ 1100.668725][   T29] 1 lock held by khungtaskd/29:
[ 1100.673626][   T29]  #0: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[ 1100.674252][ T5810] usb 2-1: USB disconnect, device number 54
[ 1100.690667][ T5810] usb 2-1: unregistering device
[ 1100.695724][   T29] 2 locks held by getty/5527:
[ 1100.701225][ T5810] usb 2-1: usb_disable_device nuking all URBs
[ 1100.703123][   T29]  #0: ffff88803319a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1100.707393][ T5810] kernfs port: removing
[ 1100.717456][   T29]  #1: 
[ 1100.722070][ T5810] kernfs device: removing
[ 1100.727245][   T29] ffffc9000327e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[ 1100.729333][ T5810] device: 'ep_00': device_unregister
[ 1100.739364][   T29] 8 locks held by kworker/0:4/5810:
[ 1100.744413][ T5810] kernfs runtime_status: removing
[ 1100.754786][ T5810] kernfs control: removing
[ 1100.755181][   T29] 
[ 1100.762453][   T29] =============================================
[ 1100.762453][   T29] 
[ 1100.763191][ T5810] kernfs runtime_suspended_time: removing
[ 1100.776693][    C0] virtqueue callback for ffff88801ee66c00 (ffffffff84a0d580)
[ 1100.776763][    C0] virtqueue interrupt with no work for ffff88801ee66a00
[ 1100.776776][    C0] virtqueue interrupt with no work for ffff88801ee66800
[ 1100.778352][   T29] NMI backtrace for cpu 1
[ 1100.784434][    T8] Added buffer head 0 to ffff88801ee66c00
[ 1100.791107][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 1100.791126][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1100.791138][   T29] Call Trace:
[ 1100.791145][   T29]  <TASK>
[ 1100.791154][   T29]  dump_stack_lvl+0x18c/0x250
[ 1100.791174][   T29]  ? __wake_up_klogd+0xd9/0x100
[ 1100.791198][   T29]  ? show_regs_print_info+0x20/0x20
[ 1100.791217][   T29]  ? load_image+0x420/0x420
[ 1100.798368][ T5810] kernfs runtime_active_time: removing
[ 1100.802465][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[ 1100.802493][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[ 1100.802523][   T29]  ? load_image+0x420/0x420
[ 1100.802544][   T29]  ? wq_watchdog_touch+0xef/0x170
[ 1100.802568][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 1100.802596][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[ 1100.802618][   T29]  watchdog+0xf59/0xfa0
[ 1100.802643][   T29]  ? watchdog+0x1e1/0xfa0
[ 1100.802672][   T29]  kthread+0x2fa/0x390
[ 1100.802689][   T29]  ? hungtask_pm_notify+0x50/0x50
[ 1100.802712][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1100.802731][   T29]  ret_from_fork+0x48/0x80
[ 1100.802751][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1100.802771][   T29]  ret_from_fork_asm+0x11/0x20
[ 1100.802806][   T29]  </TASK>
[ 1100.803052][   T29] Sending NMI from CPU 1 to CPUs 0:
[ 1100.803078][    C0] NMI backtrace for cpu 0
[ 1100.803086][    C0] CPU: 0 PID: 5810 Comm: kworker/0:4 Not tainted syzkaller #0
[ 1100.803102][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1100.803112][    C0] Workqueue: usb_hub_wq hub_event
[ 1100.803132][    C0] RIP: 0010:sched_clock+0x12/0x60
[ 1100.803151][    C0] Code: 3d 20 e8 92 8a 0f 94 c0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 f3 0f 1e fa 55 53 e8 c5 4b 56 00 65 ff 05 16 73 d2 7e <e8> 29 a4 61 09 48 89 c3 31 f6 65 ff 0d 05 73 d2 7e 40 0f 94 c5 40
[ 1100.803164][    C0] RSP: 0018:ffffc90000007cc8 EFLAGS: 00000006
[ 1100.803176][    C0] RAX: ffffffff813144eb RBX: 0000000000000006 RCX: ffff88807eb71e00
[ 1100.803191][    C0] RDX: 0000000000000100 RSI: ffff8880b8c3c258 RDI: ffff88807eb729d8
[ 1100.803202][    C0] RBP: ffffc90000007dc0 R08: 0000000000000003 R09: 0000000000000004
[ 1100.803212][    C0] R10: dffffc0000000000 R11: fffff52000000fa4 R12: ffff88807eb729d8
[ 1100.803224][    C0] R13: 1ffff1100fd6e51c R14: ffff88807eb728e0 R15: ffff88807eb729fc
[ 1100.803242][    C0] FS:  0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[ 1100.803256][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1100.803267][    C0] CR2: 000055ee1b3b0040 CR3: 0000000076529000 CR4: 00000000003506f0
[ 1100.803281][    C0] Call Trace:
[ 1100.803286][    C0]  <IRQ>
[ 1100.803293][    C0]  lock_pin_lock+0x211/0x3c0
[ 1100.803312][    C0]  ? lock_sync+0x290/0x290
[ 1100.803331][    C0]  ? raw_spin_rq_lock_nested+0x29/0x130
[ 1100.803354][    C0]  try_to_wake_up+0x5e1/0x10e0
[ 1100.803372][    C0]  handle_softirqs+0x605/0x820
[ 1100.803388][    C0]  ? read_tsc+0x9/0x20
[ 1100.803402][    C0]  ? ktime_get+0x24b/0x280
[ 1100.803421][    C0]  ? __irq_exit_rcu+0xd3/0x190
[ 1100.803437][    C0]  ? do_softirq+0x1a0/0x1a0
[ 1100.803454][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[ 1100.803474][    C0]  __irq_exit_rcu+0xd3/0x190
[ 1100.803489][    C0]  ? irq_exit_rcu+0x20/0x20
[ 1100.803507][    C0]  irq_exit_rcu+0x9/0x20
[ 1100.803520][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1100.803538][    C0]  </IRQ>
[ 1100.803543][    C0]  <TASK>
[ 1100.803548][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1100.803564][    C0] RIP: 0010:vprintk_emit+0x46f/0x610
[ 1100.803583][    C0] Code: 85 3f 01 00 00 e8 61 aa 1b 00 45 89 f7 48 85 db 48 8b 1c 24 75 07 e8 50 aa 1b 00 eb 06 e8 49 aa 1b 00 fb 48 c7 c7 c0 64 f2 8d <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 89 b2
[ 1100.803595][    C0] RSP: 0018:ffffc90004a0f280 EFLAGS: 00000246
[ 1100.803607][    C0] RAX: ffffffff816be667 RBX: ffffffff816be50b RCX: 0000000000100000
[ 1100.803618][    C0] RDX: ffffc90017728000 RSI: 00000000000fffff RDI: ffffffff8df264c0
[ 1100.803629][    C0] RBP: ffffc90004a0f370 R08: ffffffff91ff150f R09: 1ffffffff23fe2a1
[ 1100.803641][    C0] R10: dffffc0000000000 R11: fffffbfff23fe2a2 R12: dffffc0000000000
[ 1100.803652][    C0] R13: 1ffff92000941e54 R14: 0000000000000024 R15: 0000000000000024
[ 1100.803663][    C0]  ? vprintk_emit+0x30b/0x610
[ 1100.803681][    C0]  ? vprintk_emit+0x467/0x610
[ 1100.803700][    C0]  ? vprintk_emit+0x30b/0x610
[ 1100.803718][    C0]  ? printk_sprint+0x460/0x460
[ 1100.803735][    C0]  ? kernfs_remove_by_name_ns+0xe4/0x150
[ 1100.803751][    C0]  ? worker_thread+0xa5e/0xfe0
[ 1100.803772][    C0]  _printk+0xde/0x130
[ 1100.803790][    C0]  ? verify_lock_unused+0x140/0x140
[ 1100.803808][    C0]  ? load_image+0x420/0x420
[ 1100.803826][    C0]  ? mark_lock+0x94/0x320
[ 1100.803846][    C0]  __dynamic_pr_debug+0x1a3/0x260
[ 1100.803869][    C0]  ? param_get_dyndbg_classes+0x170/0x170
[ 1100.803892][    C0]  ? __might_sleep+0xe0/0xe0
[ 1100.803919][    C0]  __kernfs_remove+0x827/0x830
[ 1100.803941][    C0]  kernfs_remove_by_name_ns+0xdc/0x150
[ 1100.803957][    C0]  sysfs_unmerge_group+0xd3/0x130
[ 1100.803975][    C0]  dpm_sysfs_remove+0x76/0xc0
[ 1100.803994][    C0]  device_del+0x251/0x910
[ 1100.804022][    C0]  ? kill_device+0x160/0x160
[ 1100.804041][    C0]  ? up_write+0x1be/0x410
[ 1100.804056][    C0]  device_unregister+0x20/0xc0
[ 1100.804074][    C0]  usb_remove_ep_devs+0x50/0x80
[ 1100.804095][    C0]  usb_disconnect+0x557/0x8a0
[ 1100.804115][    C0]  hub_event+0x1d69/0x4a80
[ 1100.804152][    C0]  ? hub_post_resume+0x120/0x120
[ 1100.804169][    C0]  ? read_lock_is_recursive+0x20/0x20
[ 1100.804188][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1100.804207][    C0]  ? process_scheduled_works+0x975/0x1600
[ 1100.804226][    C0]  ? process_scheduled_works+0x975/0x1600
[ 1100.804245][    C0]  process_scheduled_works+0xa60/0x1600
[ 1100.804274][    C0]  ? worker_attach_to_pool+0x370/0x370
[ 1100.804295][    C0]  ? assign_work+0x3cc/0x5d0
[ 1100.804314][    C0]  worker_thread+0xa5e/0xfe0
[ 1100.804342][    C0]  kthread+0x2fa/0x390
[ 1100.804356][    C0]  ? pr_cont_work+0x550/0x550
[ 1100.804374][    C0]  ? kthread_blkcg+0xd0/0xd0
[ 1100.804389][    C0]  ret_from_fork+0x48/0x80
[ 1100.804405][    C0]  ? kthread_blkcg+0xd0/0xd0
[ 1100.804420][    C0]  ret_from_fork_asm+0x11/0x20
[ 1100.804445][    C0]  </TASK>
[ 1100.849115][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[ 1100.849132][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 1100.849153][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1100.849164][   T29] Call Trace:
[ 1100.849172][   T29]  <TASK>
[ 1100.849182][   T29]  dump_stack_lvl+0x18c/0x250
[ 1100.849208][   T29]  ? show_regs_print_info+0x20/0x20
[ 1100.849228][   T29]  ? load_image+0x420/0x420
[ 1100.849261][   T29]  panic+0x2ca/0x720
[ 1100.849287][   T29]  ? bpf_jit_dump+0xd0/0xd0
[ 1100.849307][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[ 1100.849329][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[ 1100.849353][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[ 1100.849379][   T29]  watchdog+0xf98/0xfa0
[ 1100.849402][   T29]  ? watchdog+0x1e1/0xfa0
[ 1100.849429][   T29]  kthread+0x2fa/0x390
[ 1100.849446][   T29]  ? hungtask_pm_notify+0x50/0x50
[ 1100.849468][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1100.849486][   T29]  ret_from_fork+0x48/0x80
[ 1100.849505][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1100.849531][   T29]  ret_from_fork_asm+0x11/0x20
[ 1100.849563][   T29]  </TASK>
[ 1100.853799][   T29] Kernel Offset: disabled