last executing test programs: 3m15.650722593s ago: executing program 3 (id=2153): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) 3m15.579056539s ago: executing program 3 (id=2155): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) 3m15.431436343s ago: executing program 3 (id=2158): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x14, 0x32, 0x123, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x20048854) 3m15.350688084s ago: executing program 3 (id=2160): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 3m15.350504174s ago: executing program 3 (id=2163): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x800c6613, 0x0) 3m15.200409056s ago: executing program 3 (id=2165): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000440)=0x2, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 3m15.175213748s ago: executing program 32 (id=2165): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000440)=0x2, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 46.542033441s ago: executing program 1 (id=3430): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') readv(r0, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 46.466474899s ago: executing program 1 (id=3431): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) close(r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x2, 0xfffffffe}}, 0x2e) getsockopt(r3, 0x111, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x8, 0x18d1, 0x2d04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xc, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0xf0cec0b1beb5cba6, 0x30, 0x5b}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5e, 0x2, 0x0, {0xa, 0x25, 0x25, 0x9, 0xa7, 0x5e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x9, 0x9, {0xa, 0x25, 0x25, 0x3, 0x6, 0x4}}}}}}}}]}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c0000000000050007000000000005000a00000000000500080000000000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000046365608b40413868f95010203010902120001000000000904"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0xc0045103, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0xfffffffffffffffa, 0x88002) ioctl$EVIOCGSW(r6, 0x8040451b, &(0x7f0000000340)=""/159) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x2, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40080c0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, &(0x7f00000000c0)={{@hyper, 0xfffffffc}, 0x1, 0x1, 0x4}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r8, 0x7b1, &(0x7f0000000040)={&(0x7f0000000780)=[0x3, 0x0, 0xe, 0x40, 0x4, 0x7f, 0x6000, 0x5, 0x7, 0x493, 0x7, 0x8000, 0x101, 0x3, 0x6, 0x8, 0x9, 0x7fff, 0x7, 0x7, 0x40, 0xfffffffb, 0x7, 0x6584, 0xb, 0xfffff000, 0x401, 0x5506, 0x9, 0x9, 0x3795, 0x6, 0x101, 0x81, 0x81, 0x8, 0x9, 0x20009, 0x10, 0x3, 0x6, 0x9, 0x401, 0xfffffff9, 0x35, 0xc, 0x0, 0xb0b6, 0x4, 0x20000, 0x6f, 0x5, 0x5, 0x0, 0xe, 0x0, 0x401, 0xc, 0x10001, 0x10e, 0xd64, 0x6, 0x6, 0x1ff, 0x7fffffff, 0x10, 0x9, 0x8, 0x11, 0x6, 0x9, 0x9fcb, 0xfffffffc, 0x0, 0x596, 0xd, 0x3, 0x412c, 0x101, 0x6, 0x7, 0x6, 0xb, 0x4, 0x7fffffff, 0x154, 0x9, 0x6, 0x6, 0x8, 0xe, 0x9, 0x8, 0x38, 0x4, 0x5, 0x9, 0x100, 0x10001, 0x9, 0x28000, 0x3, 0xffffff3e, 0x2, 0x6, 0x8, 0x7, 0x8, 0x8, 0x7, 0x8, 0x10000, 0x2, 0xbc3, 0xfff, 0x4d57, 0xeffffffa, 0x2, 0x3ff, 0x4, 0x100, 0x5, 0x0, 0xd, 0xa843, 0x7, 0x2, 0x6f5, 0x7fffffff, 0x7, 0x1, 0x2, 0x10001, 0x0, 0xfffffffd, 0x9, 0xc, 0x7fff, 0x1, 0x8, 0x10, 0x5, 0x8, 0x8001, 0x7, 0x6, 0xdf1, 0xfffffff9, 0x8, 0x0, 0x6, 0xffffff80, 0x1, 0x7f, 0x4, 0x3, 0x6, 0x2, 0x30, 0x6, 0x0, 0x6, 0x80000001, 0x2, 0x5, 0x0, 0xffff0001, 0x57c, 0x3, 0x7, 0x5, 0x2, 0x3, 0x0, 0xcd, 0x2, 0x3472, 0xf23b, 0x7, 0xec33, 0x81, 0x3, 0x4, 0x7, 0x10000, 0x54af, 0x800, 0x8c25, 0x3, 0x1, 0xf7f, 0xffff, 0x1376, 0x3, 0x4, 0x9, 0x0, 0x180, 0x2, 0x3, 0x6, 0x0, 0x6, 0x3, 0xed, 0xffffffff, 0x5, 0x6, 0xbfb, 0x80000001, 0xa5b, 0x280, 0x5, 0x1, 0x0, 0x2022, 0xb, 0x80000000, 0x8, 0x7, 0x80000001, 0x8, 0x4, 0x1, 0x3, 0x4, 0x5, 0x7ff, 0x9, 0x2, 0x11d, 0x9, 0x8, 0x5, 0x0, 0x2, 0x180000, 0xfffffff3, 0xfffffff9, 0x789e, 0xf0000000, 0x4, 0x8, 0x1, 0xeef, 0x7, 0x0, 0x0, 0xaa1, 0xffa00000, 0x80000001, 0x6, 0x9, 0xe, 0x1, 0x4, 0xfffffff4, 0x10000, 0xfc, 0x6, 0x4, 0x9d4d, 0xada, 0x5, 0xcab, 0x8f5, 0x80, 0x2, 0x2, 0x3, 0x1c000, 0xe, 0x1, 0x2, 0x5, 0x8, 0x6, 0x5, 0xfffffff3, 0x2, 0x3, 0xa, 0x80000001, 0x35, 0x80000001, 0x4, 0x1, 0x1, 0xfffffffb, 0x7, 0x40, 0xf, 0x1, 0x3, 0xae, 0xc53, 0x3, 0x1, 0x0, 0x4, 0xffff, 0x10, 0x6, 0x5, 0x0, 0xb9e6, 0x1, 0x8, 0xffffffff, 0xc, 0x1, 0x9, 0x200e8bf, 0x80, 0x1, 0x5, 0x9, 0x5, 0xffffff81, 0xb, 0x5, 0x4a19, 0x9, 0x0, 0xe2, 0x7, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x1, 0xa0000, 0x7, 0x0, 0x6, 0x5, 0x7, 0x5, 0x65f, 0x6, 0x572, 0x200, 0xa2, 0x7fffffff, 0x0, 0x4, 0x2, 0x6, 0x7fffffff, 0xfffffff7, 0x2, 0x0, 0x8001, 0x9, 0x4, 0x0, 0x8000, 0x200, 0x3, 0x8000, 0x70, 0x1000, 0x4, 0x9, 0xfffffffa, 0x1, 0x0, 0x7fffffff, 0x5, 0xffffffff, 0xfffffffe, 0x401, 0x5e9b, 0x1, 0x8, 0x1, 0x800, 0xb2, 0x4, 0x5, 0x1000, 0x5d4, 0xe, 0x7, 0x6, 0x1ff, 0x400, 0x4, 0x7, 0x3, 0x5, 0x3, 0x4, 0x9, 0xdfe, 0x6, 0x9, 0x6, 0x3, 0x6, 0x97, 0x80, 0x40, 0x8, 0x4, 0x5, 0x6, 0x3, 0x9, 0x8bd5, 0x80, 0x10000, 0xa189, 0x10001, 0xad, 0x6, 0x401, 0x9, 0xfffffffe, 0x6, 0x5, 0xfffffff8, 0x1, 0x4ff80107, 0x25c3, 0x3, 0x3, 0x7fffffff, 0x5, 0x282c22c9, 0x1, 0x200, 0x6, 0x3, 0x1, 0xde, 0x7, 0x10001, 0x7, 0x10001, 0x6, 0x0, 0xb, 0x6, 0x3, 0x9, 0x11a2, 0x8001, 0x5, 0x5, 0x6, 0x5, 0x6, 0x6, 0xf, 0x80000000, 0x7, 0x7, 0xe, 0x4, 0x9, 0x0, 0x6, 0x500, 0x10001, 0x2, 0x8c, 0x3, 0x4, 0x720, 0x7, 0x8, 0x10000, 0x6, 0xfffffff8, 0x8, 0x9, 0x9, 0xff56, 0x1, 0x9, 0x0, 0x3, 0x0, 0x40, 0x8001, 0xffffffff, 0x1, 0xeb7d, 0x5, 0x6, 0x7, 0x5, 0x100f5ac1, 0xfff, 0x7fff, 0x0, 0x800, 0x8, 0xc34d, 0xf, 0x401, 0x0, 0x1, 0x7, 0x2b8, 0x1, 0x7f, 0x9, 0x310b0c73, 0x7fffffff, 0xb365, 0xfff, 0x929b, 0x7, 0x8, 0x8, 0x4, 0x8, 0x8001, 0x143, 0x7, 0x7f, 0x4, 0xf, 0x3, 0x31c, 0x1ff, 0x6, 0xfffffffa, 0x3ff, 0xbd60, 0x9, 0x7, 0x4, 0x80, 0x1002, 0x4, 0x4, 0x1, 0x7, 0x5, 0xe, 0x8, 0xfff, 0xfffffff8, 0x200, 0x5, 0xfe, 0x6, 0x2, 0x5, 0x800, 0x0, 0x10000, 0x8, 0x4, 0x2, 0x6, 0x7, 0xff, 0x1, 0x0, 0x9, 0x7fff, 0x4f, 0xc9e, 0xffff, 0x3, 0x9, 0x9, 0x0, 0x80, 0x0, 0x6, 0x8, 0xfff, 0x1000, 0x1, 0xc, 0x7e, 0x0, 0x5, 0x4, 0xe71, 0xffff8001, 0x81, 0x1, 0x5, 0x5, 0x4, 0xa07, 0x2, 0x1, 0x6, 0x3, 0x1, 0x2, 0x4, 0x6, 0x5, 0x5, 0x6, 0xf1, 0x80, 0x0, 0x1, 0x0, 0x9, 0x5, 0x3450, 0x7f, 0x2, 0x80, 0x0, 0x9, 0x7fffffff, 0x40, 0x8, 0xfff, 0x6, 0x7, 0x6, 0x2, 0x7, 0x1, 0x7ff, 0x3, 0x3ff, 0x23c3, 0x0, 0x6, 0x40, 0x6, 0x7, 0x7, 0x7, 0xed, 0x1, 0x3, 0x1ff, 0x80000000, 0x3, 0x3, 0x1, 0x10, 0xfffffffe, 0x0, 0xa7, 0xe, 0x80, 0x5, 0x2, 0x1, 0x8, 0x7a, 0x0, 0xc4b, 0x24, 0x63, 0x9, 0x800, 0x3, 0xfed40, 0x3, 0x11e, 0x7ff, 0x5, 0x32, 0x6, 0xffff, 0x3, 0xa4b, 0x1, 0x5, 0xb23, 0xfff, 0x1, 0x1, 0x9, 0x4, 0x8, 0x8, 0x7, 0x401, 0x9, 0x4, 0x6, 0x6, 0x70, 0x660, 0x3, 0xd5f, 0x8, 0x3, 0x200, 0x3, 0x0, 0x3, 0x3, 0x10001, 0xa5, 0x3, 0x80000000, 0x8, 0xffffffff, 0x5, 0x0, 0x1, 0x7f, 0x4cb3, 0x6, 0x1, 0x0, 0x6, 0x3a85, 0x7, 0xa, 0x1, 0x6, 0x9, 0xe, 0x5, 0x23, 0x5, 0x96, 0x0, 0x9e, 0x80000000, 0x4080000, 0x1000, 0x4, 0x0, 0x10, 0x7, 0x401, 0xf046, 0x19, 0x5, 0x2, 0x4, 0x9, 0xfffffff5, 0xfffffff1, 0xffffffff, 0x1, 0xab7fbaaf, 0x2, 0xb4, 0xffff, 0x80, 0x2, 0x3, 0x6, 0x20000000, 0x7, 0xa, 0xfffff2ea, 0x3800, 0x0, 0xf, 0x80, 0x2, 0x3, 0xfffffff7, 0x6, 0x4, 0x8000, 0x7fff, 0x8, 0x2, 0x0, 0x4, 0x1, 0x401, 0x7, 0x329, 0x4, 0xff, 0x4, 0x3, 0x6, 0x0, 0x1, 0xa, 0xfffffffd, 0x3, 0x6c99, 0x2, 0x3, 0x2, 0x89fd, 0x7, 0x68c109f7, 0x5, 0xfffffffa, 0x0, 0x39a703cd, 0x3, 0x0, 0x800, 0x4, 0x1, 0x0, 0x8, 0x7f, 0x4, 0xe, 0x7f53, 0x1ff, 0x5, 0xffffffff, 0xd, 0x8, 0x2c69e094, 0x800, 0xffff3ec3, 0x3, 0x3f9f, 0x0, 0xedb1, 0xb, 0x8, 0x0, 0x4, 0xb, 0x3, 0x8, 0x1ff, 0x1, 0x4, 0x8, 0xe, 0x10, 0xffffffff, 0x9, 0xe44, 0x2, 0xda, 0x5, 0x0, 0xfffffff7, 0x0, 0x0, 0xc9, 0x7, 0x10000, 0xd75, 0x80000001, 0x7, 0x400, 0x5e, 0x7fff, 0x4, 0x7, 0x800, 0x4, 0x3, 0x6, 0x1, 0x4, 0xfffffffa, 0xffffffff, 0x7c, 0x2, 0x9, 0x9, 0x9, 0x7, 0x1, 0x5c8b0e92, 0x3ff, 0x40, 0x9, 0x5, 0xfffffff9, 0x80, 0x7ff, 0x2d, 0x0, 0x8001, 0x7, 0x101, 0x1, 0x5, 0x6, 0x2, 0x5, 0xb72, 0xfff, 0x9, 0x80000000, 0x100, 0x6, 0x1, 0x15, 0x2, 0xff, 0xbb, 0xa55, 0x2, 0x4, 0x3, 0x2, 0x800, 0xf, 0x6, 0x7, 0xe4c1, 0x0, 0x1, 0x5, 0x7, 0x2210, 0x6, 0xda, 0xd, 0x958d, 0x8, 0x7, 0xffc, 0x2000000, 0x9, 0x3, 0x67a7bb72, 0x5, 0x9, 0xda800000, 0x9, 0xfffffff1, 0x3b1a, 0x2, 0x9, 0xb, 0xffff, 0x4, 0x1, 0x6, 0x2, 0x10000, 0x5, 0x4e3f, 0x9, 0x4, 0xa3, 0x7, 0xbe66, 0xfffffff9, 0xfa, 0x8, 0x5, 0x7, 0x0, 0x5, 0x8, 0x8, 0x3, 0x8, 0x80000000, 0x7fffffff, 0x7, 0x80000000, 0x6, 0x8ea, 0x101, 0x8, 0x1, 0x3, 0x4, 0x9, 0x80, 0x1, 0x4, 0x5, 0xbd5d, 0x0, 0x2, 0x2, 0x6, 0x80, 0x7fffffff, 0x9fe2, 0x4, 0x2, 0x3, 0x400, 0xfffffff9, 0x371c, 0x6, 0x3, 0x3e, 0x20, 0x8, 0x4, 0x100, 0x5, 0x3, 0x6, 0x4, 0x1, 0x3, 0x2, 0x1, 0x0, 0xc, 0x0, 0x8, 0x200, 0x2, 0x200, 0x0, 0x1, 0x4, 0x80000001, 0x0, 0x7, 0x5, 0x4, 0x7, 0x4d40, 0x4, 0x80000001], 0x6, 0x400}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 45.145969382s ago: executing program 1 (id=3436): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x22, 0x161d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) ioctl$TIOCSERGETLSR(r4, 0x5459, 0x0) dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) ptrace$peekuser(0x3, 0x0, 0x7) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x8) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) 44.159862271s ago: executing program 1 (id=3449): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 44.057320902s ago: executing program 1 (id=3450): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) 43.72030983s ago: executing program 1 (id=3456): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x20, 0x0, r1}, 0x20) 43.693235428s ago: executing program 33 (id=3456): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x20, 0x0, r1}, 0x20) 36.929132745s ago: executing program 0 (id=3515): r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000000)="40011de228ad1c16526243609df982b68efaef9fc55fc439a9fe4bd7a5af059e6f30624821abec6385708457f286ea9608abe36180eed07f120d1747cda120f43bc7d5059f7577f493e27b0931bda3c6b9a4fc702e45cfa1d4bcc3317ef3419d620dec3ed8a1ef76b01d26fb90da45bace82d04b501984ceb8dd601dbb0bad6d3aaddae3b4d6f09b8a7fe2023f3ede5e3a", 0x91, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000240)={r0, r0, r0}, 0x0, 0x0, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000180), 0x80000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x161c4000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000001c0)="e65387") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfsd/v4_end_grace\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='1', 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) clock_nanosleep(0x2, 0x0, &(0x7f0000000000), 0xfffffffffffffffe) sendto$inet(r3, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f000002a000/0xc00000)=nil, 0xc00000, 0x0, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6(0xa, 0x80001, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040d80402c00000000000010902220001010080320904000001030000000921110100012235000705810308000a"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0xcc, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40040}, 0x20004000) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022350000000600ff0901a10185110902150026ff0075089502810285210903150026ff0075089501810285910904150026ff0075089501"], 0x0}, 0x0) 36.269611758s ago: executing program 0 (id=3520): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000680)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x0, 0xfff1}, {0x7, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xe13c7cb5123b5c20, 0xfff1}}, @TCA_U32_SEL={0x24, 0x5, {0x5, 0x6, 0x6, 0x4, 0x101, 0x5, 0x100, 0x0, [{0x2, 0x8514, 0x7, 0x1ff}]}}]}}]}, 0x5c}}, 0x24040084) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000240)=""/187, 0xbb, 0x0, &(0x7f0000000440)=""/208, 0xd0}}, 0x10) r0 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) 36.190258927s ago: executing program 0 (id=3521): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0x7f, 0x108c2) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x100001) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f0000000680), 0x2}) 35.660500503s ago: executing program 0 (id=3527): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000540)={0x0, 'ip6gretap0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 34.880501762s ago: executing program 5 (id=3530): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, 0x0, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 34.88035602s ago: executing program 5 (id=3531): socket$inet(0xa, 0x801, 0x84) openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) 34.768293154s ago: executing program 0 (id=3532): syz_usb_connect(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206030000000000000000000700000705000100070000000900020073b57a31000000078008c9f54000200005080013400000000e0500050002000000050004000100000011"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc01c586a, &(0x7f0000000140)={r1, 0x0, 0x10000, 0x0, 0x33, &(0x7f0000000080), 0x0}) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xe61c1323c3c20c32) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000100)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140ffffffff"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close_range(r5, 0xffffffffffffffff, 0x0) 33.927537737s ago: executing program 0 (id=3542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) 33.823401908s ago: executing program 34 (id=3542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) 32.930795319s ago: executing program 5 (id=3546): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000040)=@assoc_value, &(0x7f0000000300)=0x8) 32.827519777s ago: executing program 5 (id=3547): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 32.82738511s ago: executing program 5 (id=3548): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) chdir(&(0x7f00000000c0)='./bus\x00') getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 32.509465931s ago: executing program 5 (id=3549): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r0, 0x70000008) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e22, @multicast2}, 0x10) 32.449040659s ago: executing program 35 (id=3549): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r0, 0x70000008) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e22, @multicast2}, 0x10) 5.590122237s ago: executing program 7 (id=3757): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x58}}, 0x4080) write$cgroup_int(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) write(r3, &(0x7f0000000600)='1', 0x1) 5.529898748s ago: executing program 7 (id=3758): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xffce, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1100, 0xffffffffffffffff}, @fd={0x66642a85, 0x0, r0}, @fd}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 5.45885102s ago: executing program 7 (id=3759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f056bbeee, 0x2010, 0xffffffffffffffff, 0x0) io_setup(0x4, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) poll(&(0x7f0000000500)=[{r1, 0x412}], 0x1, 0x81) signalfd4(r1, &(0x7f0000000000), 0x8, 0x800) 5.308170317s ago: executing program 7 (id=3762): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100040018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000012000000000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/24], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route(r1, 0x0, 0x42) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socket(0x400000000010, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', 0x0}) 5.190290185s ago: executing program 7 (id=3763): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='0000:00:02.0', 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/lpc_ich/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF ', 0x24) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1, 0x0) write(r1, &(0x7f0000000f00)='0000:00:03.0', 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @local}, {0x2, 0x20, @empty}, 0x142, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) 4.618700952s ago: executing program 7 (id=3766): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)="42f7a85b"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 3.499190598s ago: executing program 4 (id=3770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe64, 0x6, @empty, 0x2}, 0x1c) socket(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000080) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="4137a29b582bd471798f15f967e7f8118e1abf61ebd7d146a12a42f6ffd2340daaa8dcf6da818cc0efac75e8c35abbde7a18e0226b424f5557c71db5d327baccef203377178ddb12", 0x48}], 0x1}}], 0x1, 0x4000801) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.569764971s ago: executing program 4 (id=3779): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc17}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1', 0x1) 2.519923337s ago: executing program 4 (id=3780): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x8, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r5, 0x1, 0x0, 0x6, @remote}, 0x14) 2.274993993s ago: executing program 4 (id=3781): r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000000)="40011de228ad1c16526243609df982b68efaef9fc55fc439a9fe4bd7a5af059e6f30624821abec6385708457f286ea9608abe36180eed07f120d1747cda120f43bc7d5059f7577f493e27b0931bda3c6b9a4fc702e45cfa1d4bcc3317ef3419d620dec3ed8a1ef76b01d26fb90da45bace82d04b501984ceb8dd601dbb0bad6d3aaddae3b4d6f09b8a7fe2023f3ede5e3a140496a828020464b58359a86e916fe6ba5ce93f4197b9c8", 0xa9, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000240)={r0, r0, r0}, 0x0, 0x0, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000180), 0x80000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x161c4000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000001c0)="e65387") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfsd/v4_end_grace\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='1', 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) clock_nanosleep(0x2, 0x0, &(0x7f0000000000), 0xfffffffffffffffe) sendto$inet(r3, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f000002a000/0xc00000)=nil, 0xc00000, 0x0, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6(0xa, 0x80001, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040d80402c00000000000010902220001010080320904000001030000000921110100012235000705810308000a"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0xcc, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40040}, 0x20004000) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022350000000600ff0901a10185110902150026ff0075089502810285210903150026ff0075089501810285910904150026ff0075089501"], 0x0}, 0x0) 1.541098208s ago: executing program 2 (id=3784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x9, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000885) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x41814) 1.540024657s ago: executing program 6 (id=3785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4f6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000700)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb6ad67d196186e061f7092e2fe1ef9a0d699e9d080edab4bfdf0700000000000033b67507b05c35577587287c161a312d2351cf0f9c19d2f0d2b52ace0218941304c45c9b529492322ecf2cf8c68a126cb82558982cdcd02dba2f605704bcafe6da433b11d59d071d79e32748a1317a1d68c1be05f1f584dde4be8c1262a925fbabe0af8c00a5181f9c85b647ed0e5f", 0xb5}, {&(0x7f00000002c0)="8caed476f6bcc737902ee6863118a0f660978f27dfa8e77e65d30f0c994994af1fb65ee49983e655d3f7be317d2380b0ed8e916769d5f1b8dc7a927e6401a10223ad90d5dc45614dec7e4c2f19d2b70807aaef8fc9e45c7a65583d15a94480840f4e4fc9ee8e3b7f8fd1aaf800d9176af51346ea81ee48fdc01f072780ff849a4fe9197b8926a16412b4da7b627e43d71ec1b367bbd9454ab97566775449de0c9e1b429acb005171cfd0b37d5e807f54ece988ae6a50773488ded126b8fc9559f66619d6002a53923e4e93bf09354a28cdd2c6a0653731e3ff0fac", 0xdb}, {&(0x7f0000000440)="99dcbf373748a116444c10801b7c8f48ff3cc4222eaa9a8ecd976fe5c2b153b8012daa0155cbb1", 0x27}, {&(0x7f0000000480)="5dc2db6fa9b830b5bedc2a54b2d4091ce8c28ef121944d189544096016abb738c8d7cbee8455797c78611bc5b5633e30c7ee1093b90e3208ecb225f6d0d29465fa81ca56e738ef1e7c0480a7b780ec614330e809a1523dbfda40a01ee577449b2adcf3ac4a416128f9b100695ec34ba5c785caca8eaf21639695869be83d5597e7d5c5d74690449c0b1589212d14268d86d6e9df6605662594a579a01f6247f8789ee2753104a9ff6c977436258777b047c00743caeee11953c7ee9f75783afc3e3e6951ad94872aef0797363080994c6e7ff1645c", 0xd5}, {&(0x7f0000000b00)="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", 0xf9a}], 0x5}, 0x0) 1.359712846s ago: executing program 2 (id=3786): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xd9}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x97}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 1.046189308s ago: executing program 2 (id=3787): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000340)={'pcmmio\x00', [0x1100, 0x1f, 0x1, 0x202, 0x8, 0xfd, 0x3, 0x20000000, 0xa, 0x2000000e, 0x2, 0xb51, 0x1, 0x6, 0x10001, 0x2, 0x200, 0xa, 0x7, 0x402, 0x5, 0x3, 0x7, 0x2, 0x48, 0x9, 0x8, 0x423b, 0x2, 0x7, 0xa]}) 1.015127541s ago: executing program 6 (id=3788): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000009, 0x8013, r5, 0x180000000) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 801.146786ms ago: executing program 6 (id=3789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xc9, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9, 0x33d}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f00000000c0)) sendto$packet(r6, &(0x7f0000000440)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 620.19172ms ago: executing program 6 (id=3790): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000002, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x3, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0xffffffff, 0xb, 0x401, 0x3, 0x7, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x3, 0x6, 0x4, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x22, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x1ff, 0x1, 0x297, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x5, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xfffb, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x9, 0xe8b, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x0, 0x11, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x2005, 0x400001, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x2003, 0xa, 0x88, 0x2, 0xffff8b7f, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x8002, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15, 0x0, 0xfa000000}, 0xfe4f) 468.644542ms ago: executing program 6 (id=3791): r0 = mq_open(&(0x7f0000000080)='.\x00', 0x800, 0x10, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x10001, 0x15c}}, 'dir0/per_cpu/cpu0/trace\x00'}) getsockopt$inet6_int(r1, 0x29, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3000000, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x0) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0)={'nr0', 0x32, 0x36}, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace\x00', 0x800, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8923, &(0x7f0000000040)={'wlan1\x00', 0x12e}) read(r3, &(0x7f0000000b00), 0x64) 450.811605ms ago: executing program 6 (id=3792): r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000000)="40011de228ad1c16526243609df982b68efaef9fc55fc439a9fe4bd7a5af059e6f30624821abec6385708457f286ea9608abe36180eed07f120d1747cda120f43bc7d5059f7577f493e27b0931bda3c6b9a4fc702e45cfa1d4bcc3317ef3419d620dec3ed8a1ef76b01d26fb90da45bace82d04b501984ceb8dd601dbb0bad6d3aaddae3b4d6f09b8a7fe2023f3ede5e3a140496a828020464b58359a86e916fe6ba5ce93f4197b9c8c67c1fa53f97ec5a055b0fc259d0857f70570355088504", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000240)={r0, r0, r0}, 0x0, 0x0, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000180), 0x80000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x161c4000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000001c0)="e65387") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfsd/v4_end_grace\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='1', 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) clock_nanosleep(0x2, 0x0, &(0x7f0000000000), 0xfffffffffffffffe) sendto$inet(r3, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f000002a000/0xc00000)=nil, 0xc00000, 0x0, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6(0xa, 0x80001, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040d80402c00000000000010902220001010080320904000001030000000921110100012235000705810308000a"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0xcc, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40040}, 0x20004000) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022350000000600ff0901a10185110902150026ff0075089502810285210903150026ff0075089501810285910904150026ff0075089501"], 0x0}, 0x0) 286.852005ms ago: executing program 4 (id=3793): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xea}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 108.609846ms ago: executing program 2 (id=3794): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x2, 0x0, 0x0, 0xfa, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4}, {0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x1, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x20, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x1000000000080, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2eb, 0x2000000000002ff, 0x2, 0x0, 0x4c3], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 74.447877ms ago: executing program 4 (id=3795): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/baSourceID\x00', 0x1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000440)={0x11, 0x17, 0x1, {0x8, './config'}}, 0x11) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bbc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x20000041}}], 0x1, 0xc004) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) io_submit(0x0, 0x0, &(0x7f0000000980)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x9, 0x8, 0x7, 0x183b, 0x3ff}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) syz_open_dev$sndmidi(&(0x7f00000004c0), 0xfffffffe, 0x141102) 71.027878ms ago: executing program 2 (id=3796): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x278, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) r1 = io_uring_setup(0x5d06, &(0x7f0000000100)={0x0, 0x5043, 0x10000, 0x3, 0x402c4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000100)='$e', 0x2, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) readv(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/210, 0xd2}], 0x1) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000140)=0x6, 0x4) recvfrom(r2, &(0x7f0000000300)=""/102, 0xfffffffffffffe30, 0x736, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wg0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x4004, &(0x7f0000000500)={0x11, 0xf7, r3}, 0x14) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000380)=[r2], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=3797): r0 = syz_ublk_setup_io_uring(0x354a, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) pipe(&(0x7f00000001c0)) pipe(&(0x7f0000000380)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_open_dev$sg(0x0, 0xba7, 0x589042) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000000, &(0x7f0000000500)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}], [{@seclabel}]}}) unshare(0x2a060400) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x0, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) kernel console output (not intermixed with test programs): , different from the descriptor's value: 1 [ 459.874649][ T35] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 459.874661][ T35] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 459.883338][ T35] usb 6-1: string descriptor 0 read error: -22 [ 459.883394][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.889446][ T1032] usb 9-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 459.897895][ T1032] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 459.901603][ T1032] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 459.907248][ T1032] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.907282][ T1032] usb 9-1: Product: syz [ 459.907357][ T1032] usb 9-1: Manufacturer: syz [ 459.907379][ T1032] usb 9-1: SerialNumber: syz [ 460.093455][T16112] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3256'. [ 460.140494][T16114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.143351][T16114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.143585][T16114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.248958][ T1032] usb 9-1: Unsupported UAC3 BADD profile [ 460.289574][ T1032] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 460.307127][ T1032] usb 9-1: USB disconnect, device number 32 [ 460.343464][T14428] udevd[14428]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 460.569200][ T10] usb 6-1: USB disconnect, device number 82 [ 460.841553][T16138] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3261'. [ 461.747327][T16141] syz.2.3260: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 461.747516][T16141] CPU: 0 UID: 0 PID: 16141 Comm: syz.2.3260 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.747546][T16141] Tainted: [L]=SOFTLOCKUP [ 461.747552][T16141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 461.747559][T16141] Call Trace: [ 461.747563][T16141] [ 461.747568][T16141] dump_stack_lvl+0x100/0x190 [ 461.747639][T16141] warn_alloc.cold+0x9e/0xb2 [ 461.747652][T16141] ? __pfx_warn_alloc+0x10/0x10 [ 461.747695][T16141] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 461.747730][T16141] ? __pfx_get_page_from_freelist+0x10/0x10 [ 461.747752][T16141] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 461.747776][T16141] ? debug_check_no_obj_freed+0x310/0x630 [ 461.747794][T16141] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 461.747815][T16141] ? find_held_lock+0x2b/0x80 [ 461.747826][T16141] ? __free_frozen_pages+0x747/0x10f0 [ 461.747841][T16141] ? __free_frozen_pages+0x747/0x10f0 [ 461.747858][T16141] ? _raw_spin_unlock+0x28/0x50 [ 461.747872][T16141] ? __pfx_alloc_migration_target+0x10/0x10 [ 461.747894][T16141] __folio_alloc_noprof+0x16/0x260 [ 461.747913][T16141] alloc_migration_target+0x1d7/0x6d0 [ 461.747929][T16141] migrate_pages_batch+0x5c4/0x4680 [ 461.747947][T16141] ? __pfx_alloc_migration_target+0x10/0x10 [ 461.747965][T16141] ? migrate_pages_sync+0x12c/0x880 [ 461.747980][T16141] ? migrate_pages_sync+0x588/0x880 [ 461.747995][T16141] ? __pfx_migrate_pages_batch+0x10/0x10 [ 461.748014][T16141] ? __pfx_migrate_pages_sync+0x10/0x10 [ 461.748048][T16141] migrate_pages+0x1950/0x2850 [ 461.748068][T16141] ? __pfx_alloc_migration_target+0x10/0x10 [ 461.748087][T16141] ? __pfx_migrate_pages+0x10/0x10 [ 461.748108][T16141] ? mtree_load+0x3a4/0xb50 [ 461.748125][T16141] move_pages_and_store_status+0xf1/0x230 [ 461.748143][T16141] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 461.748179][T16141] kernel_move_pages+0xca4/0x14d0 [ 461.748200][T16141] ? __pfx_kernel_move_pages+0x10/0x10 [ 461.748220][T16141] ? xfd_validate_state+0x129/0x190 [ 461.748241][T16141] __ia32_sys_move_pages+0xdd/0x1b0 [ 461.748262][T16141] ? __do_fast_syscall_32+0xb3/0x8b0 [ 461.748277][T16141] ? lockdep_hardirqs_on+0x7d/0x110 [ 461.748291][T16141] __do_fast_syscall_32+0x13a/0x8b0 [ 461.748308][T16141] do_fast_syscall_32+0x32/0x70 [ 461.748323][T16141] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 461.748338][T16141] RIP: 0023:0xf7fc6fec [ 461.748351][T16141] Code: Unable to access opcode bytes at 0xf7fc6fc2. [ 461.748356][T16141] RSP: 002b:00000000f544450c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 461.748367][T16141] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 461.748374][T16141] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 461.748381][T16141] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 461.748387][T16141] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 461.748394][T16141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 461.748408][T16141] [ 461.884239][T16141] Mem-Info: [ 461.884304][T16141] active_anon:4205 inactive_anon:16565 isolated_anon:12 [ 461.884304][T16141] active_file:2824 inactive_file:4230 isolated_file:0 [ 461.884304][T16141] unevictable:0 dirty:35 writeback:4 [ 461.884304][T16141] slab_reclaimable:6729 slab_unreclaimable:64752 [ 461.884304][T16141] mapped:25222 shmem:16571 pagetables:1349 [ 461.884304][T16141] sec_pagetables:336 bounce:0 [ 461.884304][T16141] kernel_misc_reclaimable:0 [ 461.884304][T16141] free:25100 free_pcp:4294 free_cma:0 [ 461.884386][T16141] Node 0 active_anon:0kB inactive_anon:12kB active_file:100kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:12kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9184kB pagetables:1500kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 461.884448][T16141] Node 1 active_anon:16820kB inactive_anon:66248kB active_file:11196kB inactive_file:16868kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:100848kB dirty:140kB writeback:16kB shmem:66272kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5400kB pagetables:3896kB sec_pagetables:216kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 461.884509][T16141] Node 0 DMA free:2000kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 461.884591][T16141] lowmem_reserve[]: 0 278 278 278 278 [ 461.884738][T16141] Node 0 DMA32 free:27612kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:12kB active_file:100kB inactive_file:52kB unevictable:0kB writepending:0kB zspages:644kB present:1032196kB managed:284688kB mlocked:0kB bounce:0kB free_pcp:176kB local_pcp:172kB free_cma:0kB [ 461.884818][T16141] lowmem_reserve[]: 0 0 0 0 0 [ 461.884964][T16141] Node 1 DMA32 free:70788kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:16820kB inactive_anon:66248kB active_file:11196kB inactive_file:16868kB unevictable:0kB writepending:156kB zspages:8484kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:17000kB local_pcp:9532kB free_cma:0kB [ 461.885047][T16141] lowmem_reserve[]: 0 0 0 0 0 [ 461.885299][T16141] Node 0 DMA: 38*4kB (UE) 3*8kB (U) 2*16kB (UE) 12*32kB (UE) 10*64kB (UE) 2*128kB (E) 2*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2000kB [ 461.885898][T16141] Node 0 DMA32: 815*4kB (UME) 208*8kB (UME) 49*16kB (UME) 234*32kB (UME) 52*64kB (UME) 21*128kB (UME) 11*256kB (UME) 9*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 27660kB [ 461.886967][T16141] Node 1 DMA32: 588*4kB (UME) 392*8kB (ME) 107*16kB (ME) 190*32kB (UME) 67*64kB (UME) 37*128kB (UME) 11*256kB (ME) 15*512kB (ME) 3*1024kB [ 461.906767][ T1032] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 461.920855][T16141] (M) 9*2048kB (UM) 4*4096kB (UM) = 70688kB [ 461.920899][T16141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 461.920914][T16141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 461.920926][T16141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 461.920939][T16141] Node 1 hugepages_total=8 hugepages_free=7 hugepages_surp=4 hugepages_size=2048kB [ 461.920951][T16141] 25105 total pagecache pages [ 461.920957][T16141] 1432 pages in swap cache [ 461.920963][T16141] Free swap = 0kB [ 461.920969][T16141] Total swap = 124996kB [ 461.920976][T16141] 524155 pages RAM [ 461.920982][T16141] 0 pages HighMem/MovableOnly [ 461.920987][T16141] 212091 pages reserved [ 461.920993][T16141] 0 pages cma reserved [ 462.087219][ T1032] usb 9-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 462.088161][ T1032] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 462.088431][ T1032] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 462.091756][ T1032] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.091790][ T1032] usb 9-1: Product: syz [ 462.091912][ T1032] usb 9-1: Manufacturer: syz [ 462.091939][ T1032] usb 9-1: SerialNumber: syz [ 462.355084][T16170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.355346][T16170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.416829][T16165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.465661][ T1032] usb 9-1: Unsupported UAC3 BADD profile [ 462.495202][ T1032] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 462.503822][ T1032] usb 9-1: USB disconnect, device number 33 [ 462.576987][T14428] udevd[14428]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 462.839987][T16184] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3275'. [ 462.844159][T16184] Set syz1 is full, maxelem 65536 reached [ 463.281280][T16197] overlayfs: failed to clone lowerpath [ 464.675830][T16195] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3277'. [ 465.586183][T16232] tipc: New replicast peer: 172.30.0.3 [ 465.586321][T16232] tipc: Enabled bearer , priority 10 [ 465.605687][T16232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3296'. [ 465.609204][T16232] tipc: Disabling bearer [ 466.456845][ T10] usb 9-1: new low-speed USB device number 34 using dummy_hcd [ 466.649148][ T10] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 466.667278][ T10] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 466.672171][ T10] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 466.677577][ T10] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 466.683075][ T10] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 466.687800][ T10] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 466.687821][ T10] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 466.687835][ T10] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 466.687849][ T10] usb 9-1: config 168 interface 0 has no altsetting 0 [ 466.708071][ T10] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 466.711119][ T10] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 466.716702][ T10] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 466.721992][ T10] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 466.727287][ T10] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 466.731648][ T10] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 466.736826][ T10] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 466.736854][ T10] usb 9-1: config 168 interface 0 has no altsetting 0 [ 466.749922][ T10] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 466.752950][ T10] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 466.757881][ T10] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 466.757909][ T10] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 466.757932][ T10] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 466.757953][ T10] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 466.757976][ T10] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 466.757999][ T10] usb 9-1: config 168 interface 0 has no altsetting 0 [ 466.793923][ T10] usb 9-1: string descriptor 0 read error: -22 [ 466.794033][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.806875][ T10] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 466.952707][T16249] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 466.996892][T16249] md: array md0 already has disks! [ 467.022290][T16236] Set syz1 is full, maxelem 65536 reached [ 467.177054][T16253] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 467.177090][T16253] md: pers->run() failed ... [ 467.193213][T16256] md: could not open device unknown-block(1,2). [ 467.193330][T16256] md: error, md_import_device() returned -16 [ 467.441416][ T1032] usb 9-1: USB disconnect, device number 34 [ 467.892330][T16273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.994491][T16273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.061148][T16276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.486689][ T10] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 468.596702][ T30] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 468.637241][ T10] usb 6-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 468.641197][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 468.644606][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 468.649896][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.652777][ T10] usb 6-1: Product: syz [ 468.652790][ T10] usb 6-1: Manufacturer: syz [ 468.652798][ T10] usb 6-1: SerialNumber: syz [ 468.747574][ T30] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 468.748867][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.920790][T16288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.924725][T16288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.022181][ T10] usb 6-1: Unsupported UAC3 BADD profile [ 469.042071][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 469.047054][ T10] usb 6-1: USB disconnect, device number 83 [ 469.060312][T14428] udevd[14428]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 469.157516][T16275] tipc: Enabling of bearer rejected, already enabled [ 469.162351][T16275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3300'. [ 469.165171][T16275] tipc: Disabling bearer [ 469.169627][ T30] hid-picolcd 0003:04D8:C002.003D: unknown main item tag 0x0 [ 469.169693][ T30] hid-picolcd 0003:04D8:C002.003D: unknown main item tag 0x0 [ 469.169728][ T30] hid-picolcd 0003:04D8:C002.003D: unknown main item tag 0x0 [ 469.169763][ T30] hid-picolcd 0003:04D8:C002.003D: unbalanced collection at end of report description [ 469.170087][ T30] hid-picolcd 0003:04D8:C002.003D: device report parse failed [ 469.170145][ T30] hid-picolcd 0003:04D8:C002.003D: probe with driver hid-picolcd failed with error -22 [ 469.249991][T16290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3307'. [ 469.251254][T16290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3307'. [ 469.251432][T16290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3307'. [ 469.251905][T16290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3307'. [ 469.252039][T16290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3307'. [ 469.381800][ T1032] usb 9-1: USB disconnect, device number 35 [ 470.434231][T16324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3318'. [ 470.736789][ T1032] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 470.887457][ T1032] usb 6-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 470.891245][ T1032] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 470.894799][ T1032] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 470.900073][ T1032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.902656][ T1032] usb 6-1: Product: syz [ 470.904218][ T1032] usb 6-1: Manufacturer: syz [ 470.905936][ T1032] usb 6-1: SerialNumber: syz [ 471.143945][T16327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.144279][T16327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.232158][ T1032] usb 6-1: Unsupported UAC3 BADD profile [ 471.253476][ T1032] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 471.259429][ T1032] usb 6-1: USB disconnect, device number 84 [ 471.275500][T14428] udevd[14428]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 471.434184][T16338] jffs2: notice: (16338) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 471.451592][T16341] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3324'. [ 471.717913][T16347] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3326'. [ 472.372631][T16358] wg2 speed is unknown, defaulting to 1000 [ 473.916915][ T1032] usb 9-1: new low-speed USB device number 36 using dummy_hcd [ 474.077243][ T1032] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 474.081417][ T1032] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 474.084695][ T1032] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 474.088853][ T1032] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 474.092488][ T1032] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 474.096678][ T1032] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 474.096727][ T1032] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 474.099151][ T1032] usb 9-1: string descriptor 0 read error: -22 [ 474.099209][ T1032] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.306850][T16400] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3338'. [ 474.344084][T16400] Set syz1 is full, maxelem 65536 reached [ 474.345924][ T1032] usb 9-1: USB disconnect, device number 36 [ 474.989444][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3358'. [ 474.998564][T16444] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3357'. [ 475.073529][T16451] wg2 speed is unknown, defaulting to 1000 [ 475.991064][T16477] overlayfs: failed to clone lowerpath [ 476.527801][T16480] socket: no more sockets [ 476.554000][T16478] syz.4.3362: vmalloc error: size 4096, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 476.559811][T16478] CPU: 0 UID: 0 PID: 16478 Comm: syz.4.3362 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.559841][T16478] Tainted: [L]=SOFTLOCKUP [ 476.559847][T16478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 476.559854][T16478] Call Trace: [ 476.559858][T16478] [ 476.559863][T16478] dump_stack_lvl+0x100/0x190 [ 476.559896][T16478] warn_alloc.cold+0x9e/0xb2 [ 476.559919][T16478] ? __pfx_warn_alloc+0x10/0x10 [ 476.559953][T16478] ? alloc_pages_mpol+0x260/0x550 [ 476.559969][T16478] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 476.559985][T16478] ? __get_vm_area_node+0x22b/0x350 [ 476.560006][T16478] __vmalloc_node_range_noprof+0x111c/0x1420 [ 476.560027][T16478] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 476.560043][T16478] ? __do_fast_syscall_32+0x13a/0x8b0 [ 476.560061][T16478] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 476.560081][T16478] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 476.560096][T16478] __vmalloc_node_noprof+0xad/0xf0 [ 476.560111][T16478] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 476.560127][T16478] __vmalloc_noprof+0xa3/0x120 [ 476.560142][T16478] ? __pfx___vmalloc_noprof+0x10/0x10 [ 476.560161][T16478] bpf_prog_alloc_no_stats+0x58/0x690 [ 476.560178][T16478] bpf_prog_alloc+0x3b/0x200 [ 476.560193][T16478] bpf_prog_create_from_user+0xb4/0x2e0 [ 476.560250][T16478] ? __pfx_seccomp_check_filter+0x10/0x10 [ 476.560271][T16478] do_seccomp+0x7f7/0x2730 [ 476.560286][T16478] ? __pfx_do_seccomp+0x10/0x10 [ 476.560297][T16478] ? xfd_validate_state+0x129/0x190 [ 476.560320][T16478] __do_fast_syscall_32+0x13a/0x8b0 [ 476.560335][T16478] ? lockdep_hardirqs_on+0x7d/0x110 [ 476.560350][T16478] do_fast_syscall_32+0x32/0x70 [ 476.560366][T16478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 476.560381][T16478] RIP: 0023:0xf701efec [ 476.560396][T16478] Code: Unable to access opcode bytes at 0xf701efc2. [ 476.560401][T16478] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000162 [ 476.560413][T16478] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000 [ 476.560420][T16478] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 476.560427][T16478] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 476.560434][T16478] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 476.560441][T16478] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 476.560455][T16478] [ 476.561720][T16478] Mem-Info: [ 476.561922][T16478] active_anon:2291 inactive_anon:19038 isolated_anon:0 [ 476.561922][T16478] active_file:3758 inactive_file:5425 isolated_file:0 [ 476.561922][T16478] unevictable:0 dirty:354 writeback:0 [ 476.561922][T16478] slab_reclaimable:6630 slab_unreclaimable:64174 [ 476.561922][T16478] mapped:25278 shmem:17444 pagetables:1349 [ 476.561922][T16478] sec_pagetables:343 bounce:0 [ 476.561922][T16478] kernel_misc_reclaimable:0 [ 476.561922][T16478] free:22394 free_pcp:5562 free_cma:0 [ 476.561975][T16478] Node 0 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:5576kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180kB dirty:12kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9024kB pagetables:1496kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 476.562009][T16478] Node 1 active_anon:9164kB inactive_anon:76152kB active_file:14956kB inactive_file:16124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100932kB dirty:1404kB writeback:0kB shmem:69776kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5364kB pagetables:3900kB sec_pagetables:244kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 476.562038][T16478] Node 0 DMA free:2000kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 476.562069][T16478] lowmem_reserve[]: 0 278 278 278 278 [ 476.562088][T16478] Node 0 DMA32 free:14856kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:2048kB free_highatomic:1124kB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:5576kB unevictable:0kB writepending:12kB zspages:644kB present:1032196kB managed:284688kB mlocked:0kB bounce:0kB free_pcp:7524kB local_pcp:76kB free_cma:0kB [ 476.562120][T16478] lowmem_reserve[]: 0 0 0 0 0 [ 476.563189][T16478] Node 1 DMA32 free:72720kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:9164kB inactive_anon:76152kB active_file:14956kB inactive_file:16124kB unevictable:0kB writepending:1404kB zspages:8484kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:14724kB local_pcp:5092kB free_cma:0kB [ 476.563564][T16478] lowmem_reserve[]: 0 0 0 0 0 [ 476.563791][T16478] Node 0 DMA: 38*4kB (UE) 3*8kB (U) 2*16kB (UE) 12*32kB (UE) 10*64kB (UE) 2*128kB (E) 2*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2000kB [ 476.564303][T16478] Node 0 DMA32: 726*4kB (UEH) 142*8kB (UH) 18*16kB (UH) 119*32kB (UH) 23*64kB (UEH) 13*128kB (UEH) 6*256kB (UE) 4*512kB (UH) 0*1024kB 0*2048kB 0*4096kB = 14856kB [ 476.565291][T16478] Node 1 DMA32: 20*4kB (E) 346*8kB (UME) 408*16kB (UME) 199*32kB (UME) 154*64kB (UME) 82*128kB (UME) 29*256kB (UME) 19*512kB (UME) 7*1024kB (UM) 4*2048kB (ME) 1*4096kB (U) = 72704kB [ 476.565410][T16478] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 476.565419][T16478] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 476.565428][T16478] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 476.565437][T16478] Node 1 hugepages_total=8 hugepages_free=7 hugepages_surp=4 hugepages_size=2048kB [ 476.566945][T16478] 28058 total pagecache pages [ 476.566952][T16478] 1432 pages in swap cache [ 476.566956][T16478] Free swap = 0kB [ 476.567146][T16478] Total swap = 124996kB [ 476.567153][T16478] 524155 pages RAM [ 476.567156][T16478] 0 pages HighMem/MovableOnly [ 476.567161][T16478] 212091 pages reserved [ 476.567165][T16478] 0 pages cma reserved [ 477.616709][ T35] usb 6-1: new low-speed USB device number 85 using dummy_hcd [ 477.769175][ T35] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 477.773916][ T35] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 477.773971][ T35] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 477.781001][ T35] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 477.781035][ T35] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 477.787982][ T35] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 477.792027][ T35] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 477.797341][ T35] usb 6-1: string descriptor 0 read error: -22 [ 477.799814][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.005329][T16486] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3364'. [ 478.035905][ T35] usb 6-1: USB disconnect, device number 85 [ 478.622026][T16531] FAULT_INJECTION: forcing a failure. [ 478.622026][T16531] name failslab, interval 1, probability 0, space 0, times 0 [ 478.622084][T16531] CPU: 1 UID: 0 PID: 16531 Comm: syz.1.3381 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.622113][T16531] Tainted: [L]=SOFTLOCKUP [ 478.622119][T16531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 478.622126][T16531] Call Trace: [ 478.622131][T16531] [ 478.622137][T16531] dump_stack_lvl+0x100/0x190 [ 478.622160][T16531] should_fail_ex.cold+0x5/0xa [ 478.622176][T16531] should_failslab+0xc2/0x120 [ 478.622192][T16531] __kmalloc_cache_noprof+0x91/0x6d0 [ 478.622211][T16531] ? proc_self_get_link+0x189/0x1f0 [ 478.622228][T16531] proc_self_get_link+0x189/0x1f0 [ 478.622241][T16531] pick_link+0xac2/0x13c0 [ 478.622259][T16531] ? __pfx_proc_self_get_link+0x10/0x10 [ 478.622274][T16531] step_into_slowpath+0x9ba/0xf90 [ 478.622294][T16531] ? __pfx_step_into_slowpath+0x10/0x10 [ 478.622314][T16531] ? lookup_fast+0x2da/0x600 [ 478.622330][T16531] ? inode_permission+0x374/0x620 [ 478.622347][T16531] link_path_walk+0xf28/0x1cc0 [ 478.622370][T16531] path_openat+0x1ac/0x2440 [ 478.622384][T16531] ? __pfx_path_openat+0x10/0x10 [ 478.622401][T16531] do_file_open+0x20e/0x430 [ 478.622415][T16531] ? __pfx_do_file_open+0x10/0x10 [ 478.622437][T16531] ? _raw_spin_unlock+0x28/0x50 [ 478.622449][T16531] ? alloc_fd+0x471/0x7a0 [ 478.622499][T16531] do_sys_openat2+0x10f/0x1e0 [ 478.622517][T16531] ? __pfx_do_sys_openat2+0x10/0x10 [ 478.622534][T16531] ? trace_event_raw_event_msr_trace_class+0x1a1/0x270 [ 478.622551][T16531] ? __pfx_trace_event_raw_event_msr_trace_class+0x10/0x10 [ 478.622568][T16531] __ia32_compat_sys_openat+0x12d/0x210 [ 478.622585][T16531] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 478.622607][T16531] do_int80_emulation+0x166/0x650 [ 478.622624][T16531] asm_int80_emulation+0x1a/0x20 [ 478.622635][T16531] RIP: 0023:0xf71775ab [ 478.622652][T16531] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 478.622664][T16531] RSP: 002b:00000000f543642c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 478.622677][T16531] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7241962 [ 478.622684][T16531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 478.622692][T16531] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 478.622700][T16531] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 478.622708][T16531] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 478.622723][T16531] [ 479.066789][ T5833] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 479.076028][T16545] Set syz1 is full, maxelem 65536 reached [ 479.101337][T16547] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3388'. [ 479.161486][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3389'. [ 479.199102][T16553] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3392'. [ 479.219761][ T5833] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 479.220744][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.626853][T16539] tipc: New replicast peer: 172.30.0.2 [ 479.628716][T16539] tipc: Enabled bearer , priority 10 [ 479.631788][T16539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3385'. [ 479.631838][T16539] tipc: Disabling bearer [ 479.638332][ T5833] hid-picolcd 0003:04D8:C002.003E: unknown main item tag 0x0 [ 479.638379][ T5833] hid-picolcd 0003:04D8:C002.003E: unknown main item tag 0x0 [ 479.638471][ T5833] hid-picolcd 0003:04D8:C002.003E: unknown main item tag 0x0 [ 479.638484][ T5833] hid-picolcd 0003:04D8:C002.003E: unbalanced collection at end of report description [ 479.638791][ T5833] hid-picolcd 0003:04D8:C002.003E: device report parse failed [ 479.638831][ T5833] hid-picolcd 0003:04D8:C002.003E: probe with driver hid-picolcd failed with error -22 [ 479.836408][ T5823] usb 6-1: USB disconnect, device number 86 [ 480.092670][T16566] Set syz1 is full, maxelem 65536 reached [ 480.120791][T16571] FAULT_INJECTION: forcing a failure. [ 480.120791][T16571] name failslab, interval 1, probability 0, space 0, times 0 [ 480.120852][T16571] CPU: 0 UID: 0 PID: 16571 Comm: syz.4.3397 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.120880][T16571] Tainted: [L]=SOFTLOCKUP [ 480.120885][T16571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 480.120892][T16571] Call Trace: [ 480.120897][T16571] [ 480.120902][T16571] dump_stack_lvl+0x100/0x190 [ 480.120921][T16571] should_fail_ex.cold+0x5/0xa [ 480.120937][T16571] should_failslab+0xc2/0x120 [ 480.120953][T16571] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 480.120966][T16571] ? find_held_lock+0x2b/0x80 [ 480.120978][T16571] ? sock_alloc_inode+0x26/0x2c0 [ 480.120996][T16571] ? __pfx_sock_alloc_inode+0x10/0x10 [ 480.121023][T16571] sock_alloc_inode+0x26/0x2c0 [ 480.121039][T16571] ? __pfx_sock_alloc_inode+0x10/0x10 [ 480.121054][T16571] alloc_inode+0x68/0x250 [ 480.121070][T16571] sock_alloc+0x44/0x280 [ 480.121083][T16571] ? security_socket_create+0x7f/0x250 [ 480.121097][T16571] __sock_create+0xc2/0x860 [ 480.121117][T16571] __sys_socket+0x14d/0x260 [ 480.121133][T16571] ? xfd_validate_state+0x129/0x190 [ 480.121154][T16571] ? __pfx___sys_socket+0x10/0x10 [ 480.121174][T16571] __ia32_sys_socket+0x72/0xb0 [ 480.121191][T16571] ? lockdep_hardirqs_on+0x7d/0x110 [ 480.121207][T16571] __do_fast_syscall_32+0x13a/0x8b0 [ 480.121225][T16571] do_fast_syscall_32+0x32/0x70 [ 480.121241][T16571] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 480.121255][T16571] RIP: 0023:0xf701efec [ 480.121269][T16571] Code: Unable to access opcode bytes at 0xf701efc2. [ 480.121274][T16571] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 480.121287][T16571] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000000003 [ 480.121294][T16571] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 480.121302][T16571] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 480.121310][T16571] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 480.121317][T16571] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 480.121331][T16571] [ 480.121396][T16571] socket: no more sockets [ 480.161764][T16573] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801 [ 480.390836][T16589] Set syz1 is full, maxelem 65536 reached [ 480.616758][ T5823] usb 6-1: new low-speed USB device number 87 using dummy_hcd [ 480.767261][ T5823] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 480.768225][ T5823] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 480.768239][ T5823] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 480.769086][ T5823] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 480.769098][ T5823] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 480.770697][ T5823] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 480.770710][ T5823] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 480.773155][ T5823] usb 6-1: string descriptor 0 read error: -22 [ 480.773300][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.856750][ T5833] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 480.980692][T16587] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3405'. [ 481.017301][ T5833] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 481.018131][ T5833] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.229301][ T5887] usb 6-1: USB disconnect, device number 87 [ 481.369852][T16604] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3412'. [ 481.429053][T16594] tipc: New replicast peer: 172.30.0.5 [ 481.429259][T16594] tipc: Enabled bearer , priority 10 [ 481.431027][T16594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3408'. [ 481.431039][T16594] tipc: Disabling bearer [ 481.436333][ T5833] hid-picolcd 0003:04D8:C002.003F: unknown main item tag 0x0 [ 481.436350][ T5833] hid-picolcd 0003:04D8:C002.003F: unknown main item tag 0x0 [ 481.436362][ T5833] hid-picolcd 0003:04D8:C002.003F: unknown main item tag 0x0 [ 481.436374][ T5833] hid-picolcd 0003:04D8:C002.003F: unbalanced collection at end of report description [ 481.436962][ T5833] hid-picolcd 0003:04D8:C002.003F: device report parse failed [ 481.437002][ T5833] hid-picolcd 0003:04D8:C002.003F: probe with driver hid-picolcd failed with error -22 [ 481.537094][T16606] tipc: New replicast peer: 172.30.0.3 [ 481.537233][T16606] tipc: Enabled bearer , priority 10 [ 481.537911][T16606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3413'. [ 481.537922][T16606] tipc: Disabling bearer [ 481.634916][ T5833] usb 9-1: USB disconnect, device number 37 [ 482.026778][ T5823] usb 6-1: new low-speed USB device number 88 using dummy_hcd [ 482.132703][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3418'. [ 482.200276][ T5823] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 482.201101][ T5823] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 482.201114][ T5823] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 482.201906][ T5823] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 482.201918][ T5823] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 482.202704][ T5823] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 482.202717][ T5823] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 482.205075][ T5823] usb 6-1: string descriptor 0 read error: -22 [ 482.205128][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.409985][T16612] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3415'. [ 482.689111][ T10] usb 6-1: USB disconnect, device number 88 [ 482.716765][ T5823] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 482.720978][T16636] tipc: New replicast peer: 172.30.0.1 [ 482.721139][T16636] tipc: Enabled bearer , priority 10 [ 482.721969][T16636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3426'. [ 482.721982][T16636] tipc: Disabling bearer [ 482.877566][ T5823] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 482.878672][ T5823] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.312411][T16627] tipc: New replicast peer: 172.30.0.5 [ 483.312632][T16627] tipc: Enabled bearer , priority 10 [ 483.386889][ T5823] hid-picolcd 0003:04D8:C002.0040: unknown main item tag 0x0 [ 483.386946][ T5823] hid-picolcd 0003:04D8:C002.0040: unknown main item tag 0x0 [ 483.386990][ T5823] hid-picolcd 0003:04D8:C002.0040: unknown main item tag 0x0 [ 483.387003][ T5823] hid-picolcd 0003:04D8:C002.0040: unbalanced collection at end of report description [ 483.387326][ T5823] hid-picolcd 0003:04D8:C002.0040: device report parse failed [ 483.387366][ T5823] hid-picolcd 0003:04D8:C002.0040: probe with driver hid-picolcd failed with error -22 [ 483.586325][ T35] usb 9-1: USB disconnect, device number 38 [ 483.676725][ T5833] usb 6-1: new full-speed USB device number 89 using dummy_hcd [ 483.827233][ T5833] usb 6-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 483.829661][ T5833] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 483.829684][ T5833] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 483.831396][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.831408][ T5833] usb 6-1: Product: syz [ 483.831415][ T5833] usb 6-1: Manufacturer: syz [ 483.831423][ T5833] usb 6-1: SerialNumber: syz [ 484.100890][T16650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.101219][T16650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.173647][ T5833] usb 6-1: Unsupported UAC3 BADD profile [ 484.188572][ T5833] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 484.195013][ T5833] usb 6-1: USB disconnect, device number 89 [ 484.206332][T14428] udevd[14428]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 485.063516][T16663] tipc: New replicast peer: 172.30.0.3 [ 485.063713][T16663] tipc: Enabled bearer , priority 10 [ 485.102141][T16663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3437'. [ 485.102199][T16663] tipc: Disabling bearer [ 485.126708][ T1032] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 485.277502][ T1032] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 485.281299][ T1032] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.692451][T16660] tipc: Enabling of bearer rejected, already enabled [ 485.737688][T16660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3438'. [ 485.737743][T16660] tipc: Disabling bearer [ 485.743921][ T1032] hid-picolcd 0003:04D8:C002.0041: unknown main item tag 0x0 [ 485.746227][ T1032] hid-picolcd 0003:04D8:C002.0041: unknown main item tag 0x0 [ 485.748643][ T1032] hid-picolcd 0003:04D8:C002.0041: unknown main item tag 0x0 [ 485.751002][ T1032] hid-picolcd 0003:04D8:C002.0041: unbalanced collection at end of report description [ 485.754203][ T1032] hid-picolcd 0003:04D8:C002.0041: device report parse failed [ 485.756579][ T1032] hid-picolcd 0003:04D8:C002.0041: probe with driver hid-picolcd failed with error -22 [ 485.770895][T13958] syz_tun (unregistering): left allmulticast mode [ 485.823825][T16702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3454'. [ 485.833572][T16702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3454'. [ 485.834386][T16702] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3454'. [ 485.834398][T16702] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3454'. [ 485.941999][ T1032] usb 9-1: USB disconnect, device number 39 [ 486.207180][T14516] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 486.208163][T14516] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 486.209996][T14516] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 486.211888][T14516] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 486.213844][T14516] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 486.383494][T16707] wg2 speed is unknown, defaulting to 1000 [ 486.450193][T16690] 9pnet_fd: p9_fd_create_tcp (16690): problem connecting socket to 127.0.0.1 [ 486.555879][T16718] tipc: New replicast peer: 172.30.0.3 [ 486.557889][T16718] tipc: Enabled bearer , priority 10 [ 486.560895][T16718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3457'. [ 486.563747][T16718] tipc: Disabling bearer [ 486.627680][T16707] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.630050][T16707] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.632577][T16707] bridge_slave_0: entered allmulticast mode [ 486.635336][T16707] bridge_slave_0: entered promiscuous mode [ 486.638708][T16707] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.641072][T16707] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.643497][T16707] bridge_slave_1: entered allmulticast mode [ 486.644230][T16707] bridge_slave_1: entered promiscuous mode [ 486.661078][T16707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.662528][T16707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.675863][T16707] team0: Port device team_slave_0 added [ 486.677455][T16707] team0: Port device team_slave_1 added [ 486.688676][T16707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.688715][T16707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.688731][T16707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.689768][T16707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.689776][T16707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.689788][T16707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.713091][T16707] hsr_slave_0: entered promiscuous mode [ 486.713516][T16707] hsr_slave_1: entered promiscuous mode [ 486.714454][T16707] debugfs: 'hsr0' already exists in 'hsr' [ 486.714466][T16707] Cannot create hsr debugfs directory [ 486.756834][ T35] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 486.842626][T16707] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 486.861964][T16707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 486.863137][T16707] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 486.870640][T16707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 486.871587][T16707] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 486.876382][T16707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 486.878104][T16707] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 486.884391][T16707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 486.917752][ T35] usb 9-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 486.918833][ T35] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 486.918856][ T35] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 486.920641][ T35] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.920656][ T35] usb 9-1: Product: syz [ 486.920664][ T35] usb 9-1: Manufacturer: syz [ 486.920672][ T35] usb 9-1: SerialNumber: syz [ 486.931774][T16707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.944352][T16707] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.949398][ T8817] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.949471][ T8817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.958831][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.958896][ T8817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.147232][T16724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.153505][T16724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.157765][T16724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.203883][T16707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.227468][ T35] usb 9-1: Unsupported UAC3 BADD profile [ 487.275348][ T35] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 487.290349][ T35] usb 9-1: USB disconnect, device number 40 [ 487.308934][T14428] udevd[14428]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 487.359262][T16707] veth0_vlan: entered promiscuous mode [ 487.366012][T16707] veth1_vlan: entered promiscuous mode [ 487.382125][T16707] veth0_macvtap: entered promiscuous mode [ 487.384394][T16707] veth1_macvtap: entered promiscuous mode [ 487.391528][T16707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.393369][T16707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.446718][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.447753][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.447858][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.447881][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.447950][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.447959][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.462956][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.462975][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.541446][ T43] audit: type=1800 audit(2000000199.630:696): pid=16760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3469" name="file1" dev="tmpfs" ino=6212 res=0 errno=0 [ 487.786739][ T1032] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 487.947225][ T1032] usb 10-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 487.948187][ T1032] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 487.948209][ T1032] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 487.949875][ T1032] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.949930][ T1032] usb 10-1: Product: syz [ 487.949940][ T1032] usb 10-1: Manufacturer: syz [ 487.949947][ T1032] usb 10-1: SerialNumber: syz [ 488.170087][T16761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.174997][T16761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.175474][T16761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.253844][ T1032] usb 10-1: Unsupported UAC3 BADD profile [ 488.270201][ T1032] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 488.274594][ T1032] usb 10-1: USB disconnect, device number 2 [ 488.283709][T14428] udevd[14428]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 488.286851][ T64] Bluetooth: hci2: command tx timeout [ 489.056241][T16782] tipc: New replicast peer: 172.30.0.3 [ 489.056369][T16782] tipc: Enabled bearer , priority 10 [ 489.057740][T16782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3467'. [ 489.057752][T16782] tipc: Disabling bearer [ 489.296764][ T35] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 489.447238][ T35] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 489.448298][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.610626][T16790] overlayfs: failed to clone lowerpath [ 489.777563][T16796] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3477'. [ 489.857560][T16781] tipc: New replicast peer: 172.30.0.5 [ 489.857815][T16781] tipc: Enabled bearer , priority 10 [ 489.858873][T16781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3470'. [ 489.858885][T16781] tipc: Disabling bearer [ 489.865192][ T35] hid-picolcd 0003:04D8:C002.0042: unknown main item tag 0x0 [ 489.865211][ T35] hid-picolcd 0003:04D8:C002.0042: unknown main item tag 0x0 [ 489.865223][ T35] hid-picolcd 0003:04D8:C002.0042: unknown main item tag 0x0 [ 489.865235][ T35] hid-picolcd 0003:04D8:C002.0042: unbalanced collection at end of report description [ 489.865554][ T35] hid-picolcd 0003:04D8:C002.0042: device report parse failed [ 489.865598][ T35] hid-picolcd 0003:04D8:C002.0042: probe with driver hid-picolcd failed with error -22 [ 490.042125][T16807] tipc: New replicast peer: 172.30.0.3 [ 490.042270][T16807] tipc: Enabled bearer , priority 10 [ 490.043658][T16807] tipc: Disabling bearer [ 490.063485][ T10] usb 9-1: USB disconnect, device number 41 [ 490.366711][ T64] Bluetooth: hci2: command tx timeout [ 490.659571][T16812] device-mapper: ioctl: Unable to rename non-existent device, to j [ 490.664436][T16814] __nla_validate_parse: 1 callbacks suppressed [ 490.664450][T16814] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3484'. [ 490.664478][T16814] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3484'. [ 490.724385][T16820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3484'. [ 490.724521][T16820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3484'. [ 490.734181][T16814] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3484'. [ 490.734257][T16814] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3484'. [ 490.766454][T16820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3484'. [ 490.766523][T16820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3484'. [ 490.809715][T16820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3484'. [ 490.809788][T16820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3484'. [ 490.838768][T16816] tipc: New replicast peer: 172.30.0.1 [ 490.838909][T16816] tipc: Enabled bearer , priority 10 [ 490.841494][T16816] tipc: Disabling bearer [ 491.336738][ T1356] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 491.487385][ T1356] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 491.488396][ T1356] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.733892][T16864] binder: 16863:16864 ioctl c0306201 800001c0 returned -14 [ 491.830854][T16860] tipc: New replicast peer: 172.30.0.3 [ 491.831892][T16860] tipc: Enabled bearer , priority 10 [ 491.832786][T16860] tipc: Disabling bearer [ 491.895711][T16843] tipc: New replicast peer: 172.30.0.5 [ 491.895895][T16843] tipc: Enabled bearer , priority 10 [ 491.897379][T16843] tipc: Disabling bearer [ 491.900106][ T1356] hid-picolcd 0003:04D8:C002.0043: unknown main item tag 0x0 [ 491.900122][ T1356] hid-picolcd 0003:04D8:C002.0043: unknown main item tag 0x0 [ 491.900136][ T1356] hid-picolcd 0003:04D8:C002.0043: unknown main item tag 0x0 [ 491.900148][ T1356] hid-picolcd 0003:04D8:C002.0043: unbalanced collection at end of report description [ 491.900485][ T1356] hid-picolcd 0003:04D8:C002.0043: device report parse failed [ 491.900526][ T1356] hid-picolcd 0003:04D8:C002.0043: probe with driver hid-picolcd failed with error -22 [ 492.006815][ T10] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 492.102060][ T5823] usb 9-1: USB disconnect, device number 42 [ 492.178202][ T10] usb 10-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 492.179041][ T10] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 492.179062][ T10] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 492.180895][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.180908][ T10] usb 10-1: Product: syz [ 492.180916][ T10] usb 10-1: Manufacturer: syz [ 492.180923][ T10] usb 10-1: SerialNumber: syz [ 492.380411][T16873] ip6tnl1: entered allmulticast mode [ 492.403243][T16866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.407442][T16866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.408138][T16866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.446838][ T64] Bluetooth: hci2: command tx timeout [ 492.477255][ T10] usb 10-1: Unsupported UAC3 BADD profile [ 492.493826][ T10] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 492.498357][ T10] usb 10-1: USB disconnect, device number 3 [ 492.507682][T14428] udevd[14428]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 492.776955][T16890] md: array md0 already has disks! [ 493.007328][T16904] device-mapper: ioctl: Invalid ioctl structure: name myp, dev f802 [ 493.026091][T16899] tipc: New replicast peer: 172.30.0.1 [ 493.026237][T16899] tipc: Enabled bearer , priority 10 [ 493.027681][T16899] tipc: Disabling bearer [ 493.171253][ C3] IPv4: Oversized IP packet from 127.0.0.1 [ 493.416696][ T35] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 493.587342][ T35] usb 10-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 493.588422][ T35] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.995593][T16907] tipc: Started in network mode [ 493.995698][T16907] tipc: Node identity ac14140f, cluster identity 4711 [ 493.995902][T16907] tipc: New replicast peer: 172.30.0.6 [ 493.996045][T16907] tipc: Enabled bearer , priority 10 [ 494.003240][ T35] hid-picolcd 0003:04D8:C002.0044: unknown main item tag 0x0 [ 494.003258][ T35] hid-picolcd 0003:04D8:C002.0044: unknown main item tag 0x0 [ 494.003270][ T35] hid-picolcd 0003:04D8:C002.0044: unknown main item tag 0x0 [ 494.003282][ T35] hid-picolcd 0003:04D8:C002.0044: unbalanced collection at end of report description [ 494.003595][ T35] hid-picolcd 0003:04D8:C002.0044: device report parse failed [ 494.003633][ T35] hid-picolcd 0003:04D8:C002.0044: probe with driver hid-picolcd failed with error -22 [ 494.206821][ T10] usb 9-1: new full-speed USB device number 43 using dummy_hcd [ 494.210527][ T25] usb 10-1: USB disconnect, device number 4 [ 494.357205][ T10] usb 9-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 494.361089][ T10] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 494.364743][ T10] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 494.370037][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.372630][ T10] usb 9-1: Product: syz [ 494.372640][ T10] usb 9-1: Manufacturer: syz [ 494.372648][ T10] usb 9-1: SerialNumber: syz [ 494.526742][ T64] Bluetooth: hci2: command tx timeout [ 494.544373][T16931] tipc: New replicast peer: 172.30.0.3 [ 494.544558][T16931] tipc: Enabled bearer , priority 10 [ 494.545653][T16931] tipc: Disabling bearer [ 494.600760][T16925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.603830][T16925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.604167][T16925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.667383][ T10] usb 9-1: Unsupported UAC3 BADD profile [ 494.684444][ T10] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 494.688031][ T10] usb 9-1: USB disconnect, device number 43 [ 494.697326][T14428] udevd[14428]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 495.021673][ T35] tipc: Node number set to 2886997007 [ 495.484616][T16962] jffs2: notice: (16962) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 495.946721][ T1032] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 496.082146][T14516] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 496.094720][T14516] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 496.116336][T14516] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 496.116374][ T1032] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 496.120180][ T1032] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.122830][T14516] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 496.131184][T14516] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 496.330534][T13221] bridge_slave_1: left allmulticast mode [ 496.330763][T13221] bridge_slave_1: left promiscuous mode [ 496.336174][T13221] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.342225][T13221] bridge_slave_0: left allmulticast mode [ 496.343198][T13221] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.360307][T13221] dvmrp6: left allmulticast mode [ 496.492289][T13221] bond2 (unregistering): (slave gretap1): Releasing active interface [ 496.566524][T13221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.582756][T13221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.586921][T13221] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 496.590795][T13221] bond0 (unregistering): Released all slaves [ 496.594259][T13221] bond1 (unregistering): (slave dummy0): Releasing active interface [ 496.598924][T13221] bond1 (unregistering): Released all slaves [ 496.603950][T13221] bond2 (unregistering): Released all slaves [ 496.625987][T13221] bond3 (unregistering): Released all slaves [ 496.631407][T13221] bond4 (unregistering): Released all slaves [ 496.640715][T16967] tipc: New replicast peer: 172.30.0.5 [ 496.640891][T16967] tipc: Enabled bearer , priority 10 [ 496.645677][T16967] __nla_validate_parse: 13 callbacks suppressed [ 496.645780][T16967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3541'. [ 496.645792][T16967] tipc: Disabling bearer [ 496.652796][ T1032] hid-picolcd 0003:04D8:C002.0045: unknown main item tag 0x0 [ 496.652906][ T1032] hid-picolcd 0003:04D8:C002.0045: unknown main item tag 0x0 [ 496.652998][ T1032] hid-picolcd 0003:04D8:C002.0045: unknown main item tag 0x0 [ 496.653014][ T1032] hid-picolcd 0003:04D8:C002.0045: unbalanced collection at end of report description [ 496.653344][ T1032] hid-picolcd 0003:04D8:C002.0045: device report parse failed [ 496.653384][ T1032] hid-picolcd 0003:04D8:C002.0045: probe with driver hid-picolcd failed with error -22 [ 496.718586][T16970] wg2 speed is unknown, defaulting to 1000 [ 496.757864][T16986] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3545'. [ 496.799102][T13221] tipc: Disabling bearer [ 496.799322][T13221] tipc: Left network mode [ 496.856289][ T1032] usb 9-1: USB disconnect, device number 44 [ 496.973658][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2 [ 497.159223][T16970] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.159315][T16970] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.159495][T16970] bridge_slave_0: entered allmulticast mode [ 497.160389][T16970] bridge_slave_0: entered promiscuous mode [ 497.162024][T16970] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.162091][T16970] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.162146][T16970] bridge_slave_1: entered allmulticast mode [ 497.162881][T16970] bridge_slave_1: entered promiscuous mode [ 497.176374][T16970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.178347][T16970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.179667][ T5454] 8021q: adding VLAN 0 to HW filter on device eth3 [ 497.200274][T16970] team0: Port device team_slave_0 added [ 497.204265][T16970] team0: Port device team_slave_1 added [ 497.247873][T16970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.247919][T16970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.248215][T16970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.250711][T16970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.250723][T16970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.250833][T16970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.433697][T13221] hsr_slave_0: left promiscuous mode [ 497.435698][T13221] hsr_slave_1: left promiscuous mode [ 497.436157][T13221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.441156][T13221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.478733][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 497.497336][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 497.498335][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 497.502354][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 497.503762][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 497.675322][T13221] team0 (unregistering): Port device team_slave_1 removed [ 497.686567][T13221] team0 (unregistering): Port device team_slave_0 removed [ 497.747254][T16970] hsr_slave_0: entered promiscuous mode [ 497.749622][T16970] hsr_slave_1: entered promiscuous mode [ 497.751801][T16970] debugfs: 'hsr0' already exists in 'hsr' [ 497.751894][T16970] Cannot create hsr debugfs directory [ 497.753264][ T5454] 8021q: adding VLAN 0 to HW filter on device eth4 [ 497.787943][ T35] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 497.937846][T16970] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 497.960367][ T35] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 497.966052][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.991994][T16970] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 498.004213][ T5454] 8021q: adding VLAN 0 to HW filter on device eth5 [ 498.005338][T16970] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 498.013449][T16970] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 498.034654][T16970] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 498.047573][T16970] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 498.047854][T17018] wg2 speed is unknown, defaulting to 1000 [ 498.048350][T16970] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 498.076877][T16970] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 498.130924][T17046] tipc: New replicast peer: 172.30.0.3 [ 498.131117][T17046] tipc: Enabled bearer , priority 10 [ 498.141352][T16970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.170018][T16970] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.186007][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.186077][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.196944][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.197063][ T8817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.218125][T14516] Bluetooth: hci0: command tx timeout [ 498.301184][T13221] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.352193][T17018] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.352297][T17018] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.352354][T17018] bridge_slave_0: entered allmulticast mode [ 498.353032][T17018] bridge_slave_0: entered promiscuous mode [ 498.354667][T17018] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.354708][T17018] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.354853][T17018] bridge_slave_1: entered allmulticast mode [ 498.355584][T17018] bridge_slave_1: entered promiscuous mode [ 498.366184][T16970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 498.382119][T17018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.397988][T17017] tipc: New replicast peer: 172.30.0.5 [ 498.398159][T17017] tipc: Enabled bearer , priority 10 [ 498.401242][T17017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3551'. [ 498.401260][T17017] tipc: Disabling bearer [ 498.405364][T17018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.409917][ T35] hid-picolcd 0003:04D8:C002.0046: unknown main item tag 0x0 [ 498.409935][ T35] hid-picolcd 0003:04D8:C002.0046: unknown main item tag 0x0 [ 498.409947][ T35] hid-picolcd 0003:04D8:C002.0046: unknown main item tag 0x0 [ 498.409959][ T35] hid-picolcd 0003:04D8:C002.0046: unbalanced collection at end of report description [ 498.410442][ T35] hid-picolcd 0003:04D8:C002.0046: device report parse failed [ 498.410494][ T35] hid-picolcd 0003:04D8:C002.0046: probe with driver hid-picolcd failed with error -22 [ 498.429042][T17018] team0: Port device team_slave_0 added [ 498.430500][T17018] team0: Port device team_slave_1 added [ 498.475617][T13221] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.481606][T17018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.481649][T17018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.481844][T17018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.482802][T17018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.482826][T17018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.482869][T17018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.529641][T17018] hsr_slave_0: entered promiscuous mode [ 498.531994][T17018] hsr_slave_1: entered promiscuous mode [ 498.534231][T17018] debugfs: 'hsr0' already exists in 'hsr' [ 498.536132][T17018] Cannot create hsr debugfs directory [ 498.575796][T13221] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.607078][ T5833] usb 9-1: USB disconnect, device number 45 [ 498.654078][T13221] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.724951][T17095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3557'. [ 498.765187][T17018] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 498.773762][T17018] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 498.774623][T17018] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 498.784720][T17018] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 498.791364][T16970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.792853][T17018] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 498.798707][T17018] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 498.799243][T17018] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 498.804038][T17018] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 498.893486][T13221] bridge_slave_1: left allmulticast mode [ 498.893542][T13221] bridge_slave_1: left promiscuous mode [ 498.893823][T13221] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.900488][T13221] bridge_slave_0: left allmulticast mode [ 498.900535][T13221] bridge_slave_0: left promiscuous mode [ 498.900660][T13221] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.024870][T13221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.029883][T13221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.036343][T13221] bond0 (unregistering): Released all slaves [ 499.067065][T17018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.076210][T17018] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.079522][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.079570][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.085202][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.085257][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.117191][T17128] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3559'. [ 499.144956][T13221] tipc: Disabling bearer [ 499.145150][T13221] tipc: Left network mode [ 499.169444][T16970] veth0_vlan: entered promiscuous mode [ 499.172731][T16970] veth1_vlan: entered promiscuous mode [ 499.236472][T16970] veth0_macvtap: entered promiscuous mode [ 499.239177][T16970] veth1_macvtap: entered promiscuous mode [ 499.246397][T16970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.251352][T16970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.305679][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.357936][ T5789] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.367596][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.390289][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.467363][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.469974][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.523050][ T8817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.523104][ T8817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.567119][T14516] Bluetooth: hci2: command tx timeout [ 499.603488][T13221] hsr_slave_0: left promiscuous mode [ 499.607925][T13221] hsr_slave_1: left promiscuous mode [ 499.609556][T13221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.609598][T13221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.610261][T13221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.611240][T13221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.643361][T13221] veth1_macvtap: left promiscuous mode [ 499.643453][T13221] veth0_macvtap: left promiscuous mode [ 499.643694][T13221] veth1_vlan: left promiscuous mode [ 499.643747][T13221] veth0_vlan: left promiscuous mode [ 499.798900][T13221] team0 (unregistering): Port device team_slave_1 removed [ 499.804162][T13221] team0 (unregistering): Port device team_slave_0 removed [ 499.862759][T17018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.867967][ T5454] 8021q: adding VLAN 0 to HW filter on device eth6 [ 500.031159][T17018] veth0_vlan: entered promiscuous mode [ 500.036494][T17018] veth1_vlan: entered promiscuous mode [ 500.055455][ T5454] 8021q: adding VLAN 0 to HW filter on device eth7 [ 500.059335][T17018] veth0_macvtap: entered promiscuous mode [ 500.065500][T17018] veth1_macvtap: entered promiscuous mode [ 500.074542][T17018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.083201][T17018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.168391][ C2] IPv4: Oversized IP packet from 127.0.0.1 [ 500.203772][ T5789] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.203836][ T5789] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.203870][ T5789] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.203903][ T5789] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.233260][ T8817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.234236][ T8817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.293563][T14516] Bluetooth: hci0: command tx timeout [ 500.300414][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.300454][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.384363][ T5454] 8021q: adding VLAN 0 to HW filter on device eth8 [ 500.433814][T17186] tipc: Enabling of bearer rejected, already enabled [ 500.466800][ T61] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 500.582817][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 500.596283][ T5454] 8021q: adding VLAN 0 to HW filter on device eth9 [ 500.627229][ T61] usb 11-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 500.628229][ T61] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.856863][ T25] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 500.928268][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.027810][ T25] usb 12-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 501.028831][ T25] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.038454][T17174] tipc: Started in network mode [ 501.038504][T17174] tipc: Node identity ac14140f, cluster identity 4711 [ 501.039735][T17174] tipc: New replicast peer: 172.30.0.7 [ 501.039836][T17174] tipc: Enabled bearer , priority 10 [ 501.046195][T17174] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3562'. [ 501.046208][T17174] tipc: Disabling bearer [ 501.049455][ T61] hid-picolcd 0003:04D8:C002.0047: unknown main item tag 0x0 [ 501.049518][ T61] hid-picolcd 0003:04D8:C002.0047: unknown main item tag 0x0 [ 501.049531][ T61] hid-picolcd 0003:04D8:C002.0047: unknown main item tag 0x0 [ 501.049543][ T61] hid-picolcd 0003:04D8:C002.0047: unbalanced collection at end of report description [ 501.049956][ T61] hid-picolcd 0003:04D8:C002.0047: device report parse failed [ 501.051008][ T61] hid-picolcd 0003:04D8:C002.0047: probe with driver hid-picolcd failed with error -22 [ 501.249782][ T61] usb 11-1: USB disconnect, device number 2 [ 501.438422][T17201] tipc: Started in network mode [ 501.438471][T17201] tipc: Node identity ac14140f, cluster identity 4711 [ 501.438954][T17201] tipc: New replicast peer: 172.30.0.8 [ 501.439088][T17201] tipc: Enabled bearer , priority 10 [ 501.451115][T17201] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3566'. [ 501.451206][T17201] tipc: Disabling bearer [ 501.453412][ T25] hid-picolcd 0003:04D8:C002.0048: unknown main item tag 0x0 [ 501.453428][ T25] hid-picolcd 0003:04D8:C002.0048: unknown main item tag 0x0 [ 501.453440][ T25] hid-picolcd 0003:04D8:C002.0048: unknown main item tag 0x0 [ 501.453452][ T25] hid-picolcd 0003:04D8:C002.0048: unbalanced collection at end of report description [ 501.453766][ T25] hid-picolcd 0003:04D8:C002.0048: device report parse failed [ 501.453806][ T25] hid-picolcd 0003:04D8:C002.0048: probe with driver hid-picolcd failed with error -22 [ 501.656269][ T25] usb 12-1: USB disconnect, device number 2 [ 501.656721][T14516] Bluetooth: hci2: command tx timeout [ 501.656911][ T1356] usb 9-1: new low-speed USB device number 46 using dummy_hcd [ 501.806413][ T43] audit: type=1800 audit(2000000213.890:697): pid=17233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3572" name="nullb0" dev="tmpfs" ino=1124 res=0 errno=0 [ 501.810219][T17235] CIFS: Attempting to mount //127.0.0.1/share [ 501.837498][ T1356] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 501.838326][ T1356] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 501.838339][ T1356] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 501.839111][ T1356] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 501.839122][ T1356] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 501.839878][ T1356] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 501.839895][ T1356] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 501.842147][ T1356] usb 9-1: string descriptor 0 read error: -22 [ 501.842202][ T1356] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.872414][T17235] CIFS: VFS: cifs_mount failed w/return code = -112 [ 502.019575][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 502.049039][T17229] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3570'. [ 502.051936][T17229] Set syz1 is full, maxelem 65536 reached [ 502.234602][ T42] usb 9-1: USB disconnect, device number 46 [ 502.266732][ T5833] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 502.341899][ C2] IPv4: Oversized IP packet from 127.0.0.1 [ 502.366868][T14516] Bluetooth: hci0: command tx timeout [ 502.417908][ T5833] usb 11-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 502.419001][ T5833] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.586800][ T25] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 502.737195][ T25] usb 12-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 502.738373][ T25] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.827705][T17242] tipc: New replicast peer: 172.30.0.7 [ 502.827906][T17242] tipc: Enabled bearer , priority 10 [ 502.831028][ T5833] hid-picolcd 0003:04D8:C002.0049: unknown main item tag 0x0 [ 502.831053][ T5833] hid-picolcd 0003:04D8:C002.0049: unbalanced collection at end of report description [ 502.831361][ T5833] hid-picolcd 0003:04D8:C002.0049: device report parse failed [ 502.831402][ T5833] hid-picolcd 0003:04D8:C002.0049: probe with driver hid-picolcd failed with error -22 [ 503.032079][ T1032] usb 11-1: USB disconnect, device number 3 [ 503.066761][ T5824] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 503.147641][T17251] tipc: New replicast peer: 172.30.0.8 [ 503.147822][T17251] tipc: Enabled bearer , priority 10 [ 503.149044][T17251] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3578'. [ 503.149103][T17251] tipc: Disabling bearer [ 503.152441][ T25] hid-picolcd 0003:04D8:C002.004A: unbalanced collection at end of report description [ 503.152819][ T25] hid-picolcd 0003:04D8:C002.004A: device report parse failed [ 503.152860][ T25] hid-picolcd 0003:04D8:C002.004A: probe with driver hid-picolcd failed with error -22 [ 503.152890][T17263] tipc: Enabling of bearer rejected, already enabled [ 503.154553][T17263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3582'. [ 503.154566][T17263] tipc: Disabling bearer [ 503.227410][ T5824] usb 9-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 503.228360][ T5824] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 503.228381][ T5824] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 503.230064][ T5824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.230076][ T5824] usb 9-1: Product: syz [ 503.230084][ T5824] usb 9-1: Manufacturer: syz [ 503.230091][ T5824] usb 9-1: SerialNumber: syz [ 503.352018][ T5847] usb 12-1: USB disconnect, device number 3 [ 503.449569][T17255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.452750][T17255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.456479][T17255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.524233][ T5824] usb 9-1: Unsupported UAC3 BADD profile [ 503.544649][ T5824] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 503.548489][ T5824] usb 9-1: USB disconnect, device number 47 [ 503.561790][T14428] udevd[14428]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 503.726937][T14516] Bluetooth: hci2: command tx timeout [ 503.837366][ T25] tipc: Node number set to 2886997007 [ 503.863906][T17275] tipc: New replicast peer: 172.30.0.3 [ 503.864059][T17275] tipc: Enabled bearer , priority 10 [ 503.864923][T17275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3586'. [ 503.864934][T17275] tipc: Disabling bearer [ 504.329864][T17292] X25: diagnostic #0 - 00 00 00 [ 504.437691][T17298] kvm: user requested TSC rate below hardware speed [ 504.443103][T17298] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 504.447783][T14516] Bluetooth: hci0: command tx timeout [ 504.578520][T17300] tipc: New replicast peer: 172.30.0.3 [ 504.578658][T17300] tipc: Enabled bearer , priority 10 [ 504.579754][T17300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3593'. [ 504.579766][T17300] tipc: Disabling bearer [ 504.747761][ C3] IPv4: Oversized IP packet from 127.0.0.1 [ 504.927339][ T42] usb 9-1: new full-speed USB device number 48 using dummy_hcd [ 505.006938][ T5816] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 505.077236][ T42] usb 9-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 505.081822][ T42] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 505.081905][ T42] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 505.088771][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.088785][ T42] usb 9-1: Product: syz [ 505.088793][ T42] usb 9-1: Manufacturer: syz [ 505.088800][ T42] usb 9-1: SerialNumber: syz [ 505.157241][ T5816] usb 11-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 505.158197][ T5816] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.176036][T17323] fuse: fd is not a fuse device [ 505.318862][T17317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.327059][T17317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.330780][T17317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.413763][ T42] usb 9-1: Unsupported UAC3 BADD profile [ 505.430816][T17325] tipc: New replicast peer: 172.30.0.3 [ 505.431006][T17325] tipc: Enabled bearer , priority 10 [ 505.432293][T17325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3601'. [ 505.432310][T17325] tipc: Disabling bearer [ 505.453272][ T42] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 505.465193][ T42] usb 9-1: USB disconnect, device number 48 [ 505.477255][T14428] udevd[14428]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 505.563875][T17311] tipc: Enabling of bearer rejected, already enabled [ 505.567249][T17311] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3595'. [ 505.567264][T17311] tipc: Disabling bearer [ 505.570020][ T5816] hid_parser_main: 5 callbacks suppressed [ 505.570033][ T5816] hid-picolcd 0003:04D8:C002.004B: unknown main item tag 0x0 [ 505.570048][ T5816] hid-picolcd 0003:04D8:C002.004B: unknown main item tag 0x0 [ 505.570060][ T5816] hid-picolcd 0003:04D8:C002.004B: unknown main item tag 0x0 [ 505.570073][ T5816] hid-picolcd 0003:04D8:C002.004B: unbalanced collection at end of report description [ 505.570455][ T5816] hid-picolcd 0003:04D8:C002.004B: device report parse failed [ 505.570499][ T5816] hid-picolcd 0003:04D8:C002.004B: probe with driver hid-picolcd failed with error -22 [ 505.778481][ T5847] usb 11-1: USB disconnect, device number 4 [ 505.806913][T14516] Bluetooth: hci2: command tx timeout [ 506.069381][T17338] trusted_key: syz.4.3604 sent an empty control message without MSG_MORE. [ 506.223802][T17349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3607'. [ 506.224664][T17349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3607'. [ 506.305727][T17356] fuse: fd is not a fuse device [ 506.335609][T17358] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3611'. [ 506.377813][ T42] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 506.526923][ T42] usb 12-1: Using ep0 maxpacket: 16 [ 506.527428][ T42] usb 12-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 506.528280][ T42] usb 12-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 506.528302][ T42] usb 12-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.528315][ T42] usb 12-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.528326][ T42] usb 12-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 506.528339][ T42] usb 12-1: config 7 interface 0 has no altsetting 0 [ 506.528354][ T42] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.599453][ T30] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 506.611032][T17369] wg2 speed is unknown, defaulting to 1000 [ 506.747124][ T30] usb 11-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 506.748161][ T30] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 506.748183][ T30] usb 11-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 506.750056][ T30] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.750069][ T30] usb 11-1: Product: syz [ 506.750076][ T30] usb 11-1: Manufacturer: syz [ 506.750084][ T30] usb 11-1: SerialNumber: syz [ 506.968015][ T42] input: HID 0458:5010 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:7.0/0003:0458:5010.004C/input/input36 [ 506.986385][T17362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.003127][T17362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.003535][T17362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.018862][ T42] kye 0003:0458:5010.004C: input,hiddev0,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.7-1/input0 [ 507.125207][ T30] usb 11-1: Unsupported UAC3 BADD profile [ 507.151039][ T30] snd-usb-audio 11-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 507.158087][ T30] usb 11-1: USB disconnect, device number 5 [ 507.170273][T14428] udevd[14428]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 507.177478][ T5816] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 507.199506][ T5847] usb 12-1: USB disconnect, device number 4 [ 507.326748][ T5816] usb 9-1: Using ep0 maxpacket: 8 [ 507.328731][ T5816] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 507.329686][ T5816] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 507.329714][ T5816] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 507.329726][ T5816] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 507.329737][ T5816] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 507.329749][ T5816] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 507.329768][ T5816] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.535460][ T5816] usb 9-1: GET_CAPABILITIES returned 0 [ 507.535516][ T5816] usbtmc 9-1:16.0: can't read capabilities [ 507.740794][ T42] usb 9-1: USB disconnect, device number 49 [ 507.820429][T17385] tipc: New replicast peer: 172.30.0.3 [ 507.820568][T17385] tipc: Enabled bearer , priority 10 [ 507.821384][T17385] __nla_validate_parse: 1 callbacks suppressed [ 507.821394][T17385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3620'. [ 507.821402][T17385] tipc: Disabling bearer [ 507.896901][ T25] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 507.961886][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 508.066815][ T25] usb 11-1: Using ep0 maxpacket: 16 [ 508.069073][ T25] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 508.073075][ T25] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 508.077057][ T25] usb 11-1: config 0 interface 0 has no altsetting 0 [ 508.081451][ T25] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.083923][ T25] usb 11-1: Product: syz [ 508.085276][ T25] usb 11-1: Manufacturer: syz [ 508.085319][ T25] usb 11-1: SerialNumber: syz [ 508.089529][ T25] usb 11-1: config 0 descriptor?? [ 508.206731][ T42] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 508.301011][ C2] imon 11-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 508.303257][ T25] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input37 [ 508.314769][ T25] imon:send_packet: packet tx failed (-71) [ 508.336993][ T25] imon 11-1:0.0: panel buttons/knobs setup failed [ 508.359559][ T42] usb 12-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 508.364704][ T42] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.386739][ T25] rc_core: IR keymap rc-imon-pad not found [ 508.386772][ T25] Registered IR keymap rc-empty [ 508.393893][ T25] imon 11-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 508.394071][ T25] imon 11-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 508.394308][ T25] imon:send_packet: packet tx failed (-71) [ 508.407088][ T25] imon 11-1:0.0: remote input dev register failed [ 508.407189][ T25] imon 11-1:0.0: imon_init_intf0: rc device setup failed [ 508.433898][ T25] imon 11-1:0.0: unable to initialize intf0, err 0 [ 508.433941][ T25] imon:imon_probe: failed to initialize context! [ 508.434095][ T25] imon 11-1:0.0: unable to register, err -19 [ 508.436848][ T25] usb 11-1: USB disconnect, device number 6 [ 508.454254][T17407] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 508.461183][T17407] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 508.461327][T17407] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 508.461550][T17407] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 508.461984][T17407] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 508.466467][T17407] pci 0000:00:01.0: Adding to iommu group 1 [ 508.470933][T17407] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 508.470947][T17407] pci 0000:00:01.0: vgaarb: bridge control possible [ 508.470955][T17407] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 508.475080][T17407] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 508.475239][T17407] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 508.476981][T17407] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 508.483010][T17407] [drm] Found bochs VGA, ID 0xb0c5. [ 508.483025][T17407] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 508.493936][T17407] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 508.529129][T17407] Console: switching to colour frame buffer device 160x50 [ 508.529237][T17407] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 508.774077][T17395] tipc: New replicast peer: 172.30.0.8 [ 508.774625][T17395] tipc: Enabled bearer , priority 10 [ 508.775545][T17395] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3624'. [ 508.775557][T17395] tipc: Disabling bearer [ 508.781447][ T42] hid-picolcd 0003:04D8:C002.004D: unknown main item tag 0x0 [ 508.781464][ T42] hid-picolcd 0003:04D8:C002.004D: unknown main item tag 0x0 [ 508.781476][ T42] hid-picolcd 0003:04D8:C002.004D: unknown main item tag 0x0 [ 508.781488][ T42] hid-picolcd 0003:04D8:C002.004D: unbalanced collection at end of report description [ 508.781799][ T42] hid-picolcd 0003:04D8:C002.004D: device report parse failed [ 508.781841][ T42] hid-picolcd 0003:04D8:C002.004D: probe with driver hid-picolcd failed with error -22 [ 508.839665][ T25] usb 11-1: new full-speed USB device number 7 using dummy_hcd [ 508.980380][ T5847] usb 12-1: USB disconnect, device number 5 [ 508.998007][ T25] usb 11-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 508.998938][ T25] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 508.998954][ T25] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 508.998968][ T25] usb 11-1: config 0 interface 0 has no altsetting 0 [ 509.000657][ T25] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.000670][ T25] usb 11-1: Product: syz [ 509.000677][ T25] usb 11-1: Manufacturer: syz [ 509.000685][ T25] usb 11-1: SerialNumber: syz [ 509.008599][ T25] usb 11-1: config 0 descriptor?? [ 509.009300][T17383] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 509.215027][ C2] imon 11-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 509.219883][ T25] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input39 [ 509.486848][ T25] rc_core: IR keymap rc-imon-pad not found [ 509.486947][ T25] Registered IR keymap rc-empty [ 509.486985][ T25] imon 11-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 509.486995][ T25] imon 11-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 509.516780][ T5816] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 509.560560][T17438] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 509.628748][ T25] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 509.633972][ T25] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input40 [ 509.642069][ T25] imon 11-1:0.0: iMON device (15c2:0045, intf0) on usb<11:7> initialized [ 509.669203][ T5816] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 509.671519][ T5816] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.725163][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 509.815082][T17383] imon:lcd_write: invalid payload size: 0 (expected 8) [ 509.815654][ T25] usb 11-1: USB disconnect, device number 7 [ 509.986744][ T5824] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 510.080032][T17425] tipc: New replicast peer: 172.30.0.5 [ 510.080237][T17425] tipc: Enabled bearer , priority 10 [ 510.081545][T17425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3635'. [ 510.081565][T17425] tipc: Disabling bearer [ 510.084629][ T5816] hid-picolcd 0003:04D8:C002.004E: unknown main item tag 0x0 [ 510.084647][ T5816] hid-picolcd 0003:04D8:C002.004E: unknown main item tag 0x0 [ 510.084659][ T5816] hid-picolcd 0003:04D8:C002.004E: unknown main item tag 0x0 [ 510.084671][ T5816] hid-picolcd 0003:04D8:C002.004E: unbalanced collection at end of report description [ 510.084985][ T5816] hid-picolcd 0003:04D8:C002.004E: device report parse failed [ 510.085026][ T5816] hid-picolcd 0003:04D8:C002.004E: probe with driver hid-picolcd failed with error -22 [ 510.157473][ T5824] usb 12-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 510.162237][ T5824] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.283576][ T5847] usb 9-1: USB disconnect, device number 50 [ 510.567874][T17440] tipc: New replicast peer: 172.30.0.8 [ 510.568011][T17440] tipc: Enabled bearer , priority 10 [ 510.569183][T17440] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3638'. [ 510.569195][T17440] tipc: Disabling bearer [ 510.572107][ T5824] hid-picolcd 0003:04D8:C002.004F: unknown main item tag 0x0 [ 510.572132][ T5824] hid-picolcd 0003:04D8:C002.004F: unbalanced collection at end of report description [ 510.572501][ T5824] hid-picolcd 0003:04D8:C002.004F: device report parse failed [ 510.572542][ T5824] hid-picolcd 0003:04D8:C002.004F: probe with driver hid-picolcd failed with error -22 [ 510.691960][T17467] fuse: fd is not a fuse device [ 511.305112][ T5824] usb 12-1: USB disconnect, device number 6 [ 511.559996][ T7725] usb 9-1: new low-speed USB device number 51 using dummy_hcd [ 511.717182][ T7725] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 511.717992][ T7725] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 511.718028][ T7725] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 511.718945][ T7725] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 511.718973][ T7725] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 511.719727][ T7725] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 511.719754][ T7725] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 511.722146][ T7725] usb 9-1: string descriptor 0 read error: -22 [ 511.722200][ T7725] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.936130][T17476] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3649'. [ 511.970444][T17476] Set syz1 is full, maxelem 65536 reached [ 512.124589][T17530] tipc: New replicast peer: 172.30.0.3 [ 512.130644][T17530] tipc: Enabled bearer , priority 10 [ 512.133511][T17530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3657'. [ 512.136371][T17530] tipc: Disabling bearer [ 512.310881][ T7725] usb 9-1: USB disconnect, device number 51 [ 512.496679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 512.992875][T17558] tipc: New replicast peer: 172.30.0.3 [ 512.993034][T17558] tipc: Enabled bearer , priority 10 [ 512.993747][T17558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3664'. [ 512.993759][T17558] tipc: Disabling bearer [ 513.255939][T17565] bond0: (slave veth0): Error: Device can not be enslaved while up [ 513.544391][T17571] jffs2: notice: (17571) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 513.613868][T17575] jffs2: notice: (17575) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 513.652460][T17575] jffs2: warning: (17575) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=36 [ 513.731786][T17583] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3673'. [ 513.833033][ C2] IPv4: Oversized IP packet from 127.0.0.1 [ 514.077957][ T7725] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 514.237445][ T7725] usb 12-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 514.238438][ T7725] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.319146][ T1032] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 514.477384][ T1032] usb 9-1: Using ep0 maxpacket: 32 [ 514.478079][ T1032] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 514.478996][ T1032] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 514.479009][ T1032] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 514.479020][ T1032] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 514.479039][ T1032] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 514.479050][ T1032] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 514.479062][ T1032] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 514.479081][ T1032] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.482529][ T1032] usb 9-1: config 0 descriptor?? [ 514.645336][T17580] tipc: New replicast peer: 172.30.0.8 [ 514.645696][T17580] tipc: Enabled bearer , priority 10 [ 514.647281][T17580] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3672'. [ 514.647399][T17580] tipc: Disabling bearer [ 514.655216][ T7725] hid_parser_main: 2 callbacks suppressed [ 514.655315][ T7725] hid-picolcd 0003:04D8:C002.0050: unknown main item tag 0x0 [ 514.655344][ T7725] hid-picolcd 0003:04D8:C002.0050: unknown main item tag 0x0 [ 514.655371][ T7725] hid-picolcd 0003:04D8:C002.0050: unknown main item tag 0x0 [ 514.655397][ T7725] hid-picolcd 0003:04D8:C002.0050: unbalanced collection at end of report description [ 514.658531][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 514.670137][ T7725] hid-picolcd 0003:04D8:C002.0050: device report parse failed [ 514.672725][ T7725] hid-picolcd 0003:04D8:C002.0050: probe with driver hid-picolcd failed with error -22 [ 514.692397][ T1032] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 514.852570][ T5833] usb 12-1: USB disconnect, device number 7 [ 514.906862][ T42] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 514.960148][ T7725] usb 9-1: USB disconnect, device number 52 [ 514.964024][ T7725] usblp0: removed [ 515.057675][ T42] usb 11-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 515.058869][ T42] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.467926][T17589] tipc: New replicast peer: 172.30.0.7 [ 515.468105][T17589] tipc: Enabled bearer , priority 10 [ 515.470808][ T42] hid-picolcd 0003:04D8:C002.0051: unknown main item tag 0x0 [ 515.470825][ T42] hid-picolcd 0003:04D8:C002.0051: unknown main item tag 0x0 [ 515.470838][ T42] hid-picolcd 0003:04D8:C002.0051: unknown main item tag 0x0 [ 515.470849][ T42] hid-picolcd 0003:04D8:C002.0051: unbalanced collection at end of report description [ 515.471155][ T42] hid-picolcd 0003:04D8:C002.0051: device report parse failed [ 515.471194][ T42] hid-picolcd 0003:04D8:C002.0051: probe with driver hid-picolcd failed with error -22 [ 515.679950][ T42] usb 11-1: USB disconnect, device number 8 [ 515.959163][T17614] wg2 speed is unknown, defaulting to 1000 [ 516.046897][ T7725] usb 12-1: new low-speed USB device number 8 using dummy_hcd [ 516.086717][ T30] usb 9-1: new low-speed USB device number 53 using dummy_hcd [ 516.164754][T17620] fuse: fd is not a fuse device [ 516.199208][ T7725] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 516.203380][ T7725] usb 12-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 516.203420][ T7725] usb 12-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 516.212426][ T7725] usb 12-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 516.212462][ T7725] usb 12-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 516.221280][ T7725] usb 12-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 516.224681][ T7725] usb 12-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 516.231513][ T7725] usb 12-1: string descriptor 0 read error: -22 [ 516.233772][ T7725] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.253387][ T30] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 516.254241][ T30] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 516.254255][ T30] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 516.255129][ T30] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 516.255143][ T30] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 516.255914][ T30] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 516.255927][ T30] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 516.258440][ T30] usb 9-1: string descriptor 0 read error: -22 [ 516.258502][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.451642][T17610] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3683'. [ 516.530478][T17612] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3684'. [ 516.818188][T17612] Set syz1 is full, maxelem 65536 reached [ 516.914688][ T989] usb 12-1: USB disconnect, device number 8 [ 517.028597][ T7725] usb 9-1: USB disconnect, device number 53 [ 517.108608][ T1032] hid-generic 0000:0008:4000001.0052: unknown main item tag 0x0 [ 517.115941][ T1032] hid-generic 0000:0008:4000001.0052: unknown main item tag 0x0 [ 517.118788][ T1032] hid-generic 0000:0008:4000001.0052: unknown main item tag 0x0 [ 517.137449][ T1032] hid-generic 0000:0008:4000001.0052: unknown main item tag 0x0 [ 517.198052][ T1032] hid-generic 0000:0008:4000001.0052: hidraw1: HID v0.10 Device [syz0] on syz1 [ 517.290223][ T5789] bridge_slave_1: left allmulticast mode [ 517.292610][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.297990][ T5789] bridge_slave_0: left allmulticast mode [ 517.298107][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.306196][ T5789] dvmrp6: left allmulticast mode [ 517.332392][T17640] fido_id[17640]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 517.388453][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 517.421227][ T5789] bond1 (unregistering): (slave geneve2): Releasing active interface [ 517.473346][ T5789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.478780][ T5789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.482874][ T5789] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 517.486309][ T5789] bond0 (unregistering): Released all slaves [ 517.494205][ T5789] bond1 (unregistering): Released all slaves [ 517.501962][ T5789] bond2 (unregistering): Released all slaves [ 517.510851][ T5789] bond4 (unregistering): Released all slaves [ 517.518587][ T5789] bond3 (unregistering): Released all slaves [ 517.526811][ T5789] bond5 (unregistering): Released all slaves [ 517.539028][ T5789] bond6 (unregistering): (slave veth3): Releasing backup interface [ 517.546735][ T5789] veth3: left promiscuous mode [ 517.555183][ T5789] bond6 (unregistering): Released all slaves [ 517.634929][ T5789] tipc: Left network mode [ 517.637103][ T5824] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 517.753371][T17656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3695'. [ 517.777899][ T5454] 8021q: adding VLAN 0 to HW filter on device eth10 [ 517.809570][ T5824] usb 11-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 517.810450][ T5824] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.004068][ T5789] hsr_slave_0: left promiscuous mode [ 518.020178][ T5789] hsr_slave_1: left promiscuous mode [ 518.021203][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.023387][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.053268][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 518.174221][ T5789] team0 (unregistering): Port device team_slave_1 removed [ 518.205619][ T5789] team0 (unregistering): Port device team_slave_0 removed [ 518.253125][ T1169] smc: removing ib device syz0 [ 518.306839][ T30] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 518.310380][ T8817] smbdirect: ib_dev[syz2] removed [ 518.324949][ T1169] smbdirect: ib_dev[syz0] removed [ 518.339388][ T5454] 8021q: adding VLAN 0 to HW filter on device eth11 [ 518.377287][T17643] tipc: Enabling of bearer rejected, already enabled [ 518.377720][T17675] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3694'. [ 518.377734][T17675] tipc: Disabling bearer [ 518.401626][T17677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3700'. [ 518.402746][ T5824] hid-picolcd 0003:04D8:C002.0053: unbalanced collection at end of report description [ 518.403065][ T5824] hid-picolcd 0003:04D8:C002.0053: device report parse failed [ 518.403105][ T5824] hid-picolcd 0003:04D8:C002.0053: probe with driver hid-picolcd failed with error -22 [ 518.467786][ T30] usb 12-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 518.473479][ T30] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.622614][ T5816] usb 11-1: USB disconnect, device number 9 [ 518.687379][ T5454] 8021q: adding VLAN 0 to HW filter on device eth12 [ 518.887878][T17660] tipc: New replicast peer: 172.30.0.8 [ 518.889798][T17660] tipc: Enabled bearer , priority 10 [ 518.895031][ T30] hid-picolcd 0003:04D8:C002.0054: unbalanced collection at end of report description [ 518.899004][ T30] hid-picolcd 0003:04D8:C002.0054: device report parse failed [ 518.901851][ T30] hid-picolcd 0003:04D8:C002.0054: probe with driver hid-picolcd failed with error -22 [ 518.979968][T17699] bridge2: entered promiscuous mode [ 518.980044][T17699] bridge2: entered allmulticast mode [ 519.106819][ T5833] usb 12-1: USB disconnect, device number 9 [ 519.183135][ T5454] 8021q: adding VLAN 0 to HW filter on device eth13 [ 519.250916][ T5789] IPVS: stop unused estimator thread 0... [ 519.884837][ C2] IPv4: Oversized IP packet from 127.0.0.1 [ 519.976325][T17717] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 519.995872][T17717] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 520.002991][T17717] overlayfs: failed to look up (tracing) for ino (-66) [ 520.006734][ T5833] tipc: Node number set to 2886997007 [ 520.061331][T17721] fuse: fd is not a fuse device [ 520.138659][ T1032] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 520.167813][ T5824] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 520.297265][ T1032] usb 12-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 520.298121][ T1032] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.336978][ T5824] usb 9-1: Using ep0 maxpacket: 32 [ 520.337771][ T5824] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 520.338789][ T5824] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 520.338821][ T5824] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 520.338843][ T5824] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 520.338863][ T5824] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 520.341550][ T5824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.341570][ T5824] usb 9-1: Product: syz [ 520.341582][ T5824] usb 9-1: Manufacturer: syz [ 520.341594][ T5824] usb 9-1: SerialNumber: syz [ 520.354900][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 520.355682][ T5824] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input41 [ 520.383411][T17732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3714'. [ 520.466998][T17737] fuse: fd is not a fuse device [ 520.576744][ T5824] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 520.576819][ T5824] (id 0x00) [ 520.618227][ T5824] rc_core: IR keymap rc-imon-pad not found [ 520.618280][ T5824] Registered IR keymap rc-empty [ 520.618335][ T5824] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 520.618346][ T5824] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 520.708113][T17711] tipc: Enabling of bearer rejected, already enabled [ 520.715217][T17711] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3705'. [ 520.715316][T17711] tipc: Disabling bearer [ 520.719825][ T1032] hid_parser_main: 10 callbacks suppressed [ 520.719839][ T1032] hid-picolcd 0003:04D8:C002.0055: unknown main item tag 0x0 [ 520.719852][ T1032] hid-picolcd 0003:04D8:C002.0055: unknown main item tag 0x0 [ 520.719864][ T1032] hid-picolcd 0003:04D8:C002.0055: unknown main item tag 0x0 [ 520.719876][ T1032] hid-picolcd 0003:04D8:C002.0055: unbalanced collection at end of report description [ 520.720191][ T1032] hid-picolcd 0003:04D8:C002.0055: device report parse failed [ 520.720231][ T1032] hid-picolcd 0003:04D8:C002.0055: probe with driver hid-picolcd failed with error -22 [ 520.779286][ T5824] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 520.783401][ T5824] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input42 [ 520.788814][ T5824] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:54> initialized [ 520.921814][ T1032] usb 12-1: USB disconnect, device number 10 [ 521.051579][T17756] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3721'. [ 521.326161][T17761] imon:send_packet: task interrupted [ 521.328037][T17761] imon:send_packet: packet tx failed (-512) [ 521.328711][T17761] imon:vfd_write: send packet #1 failed [ 521.332709][T17761] imon:send_packet: task interrupted [ 521.332718][T17761] imon:send_packet: packet tx failed (-512) [ 521.332738][T17761] imon:vfd_write: send packet #0 failed [ 521.332970][T17761] imon:send_packet: packet tx failed (-32) [ 521.342650][T17761] imon:vfd_write: send packet #0 failed [ 521.350161][T17762] input: syz0 as /devices/virtual/input/input43 [ 521.515065][ T5847] usb 9-1: USB disconnect, device number 54 [ 522.334653][T12818] ffs_data_put(): freeing [ 522.726721][ T7725] usb 12-1: new low-speed USB device number 11 using dummy_hcd [ 522.806717][ T42] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 522.877356][ T7725] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 522.880882][ T7725] usb 12-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 522.880903][ T7725] usb 12-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 522.881772][ T7725] usb 12-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 522.881790][ T7725] usb 12-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 522.882802][ T7725] usb 12-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 522.882819][ T7725] usb 12-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 522.885878][ T7725] usb 12-1: string descriptor 0 read error: -22 [ 522.885971][ T7725] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.957229][ T42] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 522.958160][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.092419][T17791] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3733'. [ 523.367923][T17788] tipc: New replicast peer: 172.30.0.5 [ 523.368138][T17788] tipc: Enabled bearer , priority 10 [ 523.369640][T17788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3732'. [ 523.369652][T17788] tipc: Disabling bearer [ 523.372854][ T42] hid-picolcd 0003:04D8:C002.0056: unknown main item tag 0x0 [ 523.372870][ T42] hid-picolcd 0003:04D8:C002.0056: unknown main item tag 0x0 [ 523.372888][ T42] hid-picolcd 0003:04D8:C002.0056: unknown main item tag 0x0 [ 523.372900][ T42] hid-picolcd 0003:04D8:C002.0056: unbalanced collection at end of report description [ 523.373206][ T42] hid-picolcd 0003:04D8:C002.0056: device report parse failed [ 523.373246][ T42] hid-picolcd 0003:04D8:C002.0056: probe with driver hid-picolcd failed with error -22 [ 523.382982][ T7725] usb 12-1: USB disconnect, device number 11 [ 523.575970][ T42] usb 9-1: USB disconnect, device number 55 [ 523.613837][T17821] binder_alloc: 17820: pid 17820 spamming oneway? 1 buffers allocated for a total size of 4096 [ 523.924270][T17841] syzkaller0: entered promiscuous mode [ 523.924332][T17841] syzkaller0: entered allmulticast mode [ 524.299300][T17874] binder: 17873:17874 unknown command 0 [ 524.299346][T17874] binder: 17873:17874 ioctl c0306201 800001c0 returned -22 [ 524.613128][T17889] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 524.613176][T17889] lpc_ich 0000:00:00.0: No MFD cells added [ 524.686726][ T7725] usb 9-1: new low-speed USB device number 56 using dummy_hcd [ 524.851198][ T7725] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 524.855913][ T7725] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 524.855935][ T7725] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 524.858163][ T7725] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 524.858183][ T7725] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 524.860290][ T7725] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 524.860307][ T7725] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 524.867561][ T7725] usb 9-1: string descriptor 0 read error: -22 [ 524.867659][ T7725] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.958863][T17894] Bluetooth: (null): Invalid header checksum [ 525.080695][T17881] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3760'. [ 525.084631][T17881] Set syz1 is full, maxelem 65536 reached [ 525.649654][ T7725] usb 9-1: USB disconnect, device number 56 [ 525.676623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 525.696991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 526.421598][T17912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3770'. [ 526.665457][T17915] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 526.665545][T17915] md: pers->run() failed ... [ 526.718012][T17915] md: could not open device unknown-block(1,2). [ 526.718130][T17915] md: error, md_import_device() returned -16 [ 527.076797][ T7725] usb 11-1: new low-speed USB device number 10 using dummy_hcd [ 527.227332][ T7725] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 527.228386][ T7725] usb 11-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 527.228405][ T7725] usb 11-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 527.230821][ T7725] usb 11-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 527.230841][ T7725] usb 11-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 527.231746][ T7725] usb 11-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 527.231765][ T7725] usb 11-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 527.234108][ T7725] usb 11-1: string descriptor 0 read error: -22 [ 527.234164][ T7725] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.433559][T17941] syzkaller0: entered promiscuous mode [ 527.433619][T17941] syzkaller0: entered allmulticast mode [ 527.445019][T17924] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3774'. [ 527.721452][ T5847] usb 11-1: USB disconnect, device number 10 [ 528.029201][ T7725] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 528.179954][ T7725] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 528.180996][ T7725] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.250754][T17955] tipc: Enabling of bearer rejected, failed to enable media [ 528.379701][T17967] syzkaller0: entered promiscuous mode [ 528.379784][T17967] syzkaller0: entered allmulticast mode [ 528.763477][T17945] tipc: New replicast peer: 172.30.0.5 [ 528.763680][T17945] tipc: Enabled bearer , priority 10 [ 528.764470][T17977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3781'. [ 528.764484][T17977] tipc: Disabling bearer [ 528.766797][ T7725] hid-picolcd 0003:04D8:C002.0057: unknown main item tag 0x0 [ 528.766814][ T7725] hid-picolcd 0003:04D8:C002.0057: unknown main item tag 0x0 [ 528.766826][ T7725] hid-picolcd 0003:04D8:C002.0057: unknown main item tag 0x0 [ 528.766838][ T7725] hid-picolcd 0003:04D8:C002.0057: unbalanced collection at end of report description [ 528.767162][ T7725] hid-picolcd 0003:04D8:C002.0057: device report parse failed [ 528.767207][ T7725] hid-picolcd 0003:04D8:C002.0057: probe with driver hid-picolcd failed with error -22 [ 528.972024][T17982] syz.6.3788 (17982): drop_caches: 2 [ 528.975982][ T1032] usb 9-1: USB disconnect, device number 57 [ 529.053394][T17985] syzkaller0: entered promiscuous mode [ 529.053559][T17985] syzkaller0: entered allmulticast mode [ 529.223788][T17988] input: syz0 as /devices/virtual/input/input44 [ 529.341074][T17991] mac80211_hwsim hwsim15 .: renamed from wlan1 (while UP) [ 529.593723][T18001] syzkaller0: entered promiscuous mode [ 529.597154][T18001] syzkaller0: entered allmulticast mode [ 529.611646][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 529.831480][T18015] [ 529.832278][T18015] ====================================================== [ 529.834454][T18015] WARNING: possible circular locking dependency detected [ 529.836597][T18015] syzkaller #0 Tainted: G L [ 529.839188][T18015] ------------------------------------------------------ [ 529.841894][T18015] syz.4.3795/18015 is trying to acquire lock: [ 529.843777][T18015] ffffffff903fc168 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_extension_ba_source_id_store+0xdb/0x430 [ 529.847300][T18015] [ 529.847300][T18015] but task is already holding lock: [ 529.850247][T18015] ffff888022856d70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 529.853651][T18015] [ 529.853651][T18015] which lock already depends on the new lock. [ 529.853651][T18015] [ 529.856804][ T7725] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 529.859875][T18015] [ 529.859875][T18015] the existing dependency chain (in reverse order) is: [ 529.862975][T18015] [ 529.862975][T18015] -> #4 (&p->frag_sem){++++}-{4:4}: [ 529.865385][T18015] lock_acquire+0x1d1/0x380 [ 529.867027][T18015] down_write_killable+0x93/0x240 [ 529.868820][T18015] configfs_rmdir+0x3fa/0x950 [ 529.870662][T18015] vfs_rmdir+0x328/0x8a0 [ 529.872184][T18015] filename_rmdir+0x31a/0x5c0 [ 529.873808][T18015] __ia32_sys_unlinkat+0xf5/0x130 [ 529.875951][T18015] __do_fast_syscall_32+0x13a/0x8b0 [ 529.878123][T18015] do_fast_syscall_32+0x32/0x70 [ 529.880433][T18015] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 529.883738][T18015] [ 529.883738][T18015] -> #3 (&sb->s_type->i_mutex_key#26){++++}-{4:4}: [ 529.887578][T18015] lock_acquire+0x1d1/0x380 [ 529.889460][T18015] down_write+0x8b/0x1f0 [ 529.891108][T18015] configfs_depend_item_unlocked+0xf3/0x6a0 [ 529.893571][T18015] usbg_make_tpg+0x251/0x610 [ 529.895364][T18015] target_fabric_make_tpg+0xab/0x8c0 [ 529.897409][T18015] configfs_mkdir+0x525/0xd40 [ 529.899221][T18015] vfs_mkdir+0x364/0x850 [ 529.901160][T18015] filename_mkdirat+0x48b/0x5e0 [ 529.903447][T18015] __ia32_sys_mkdir+0x6a/0x90 [ 529.905851][T18015] __do_fast_syscall_32+0x13a/0x8b0 [ 529.907686][T18015] do_fast_syscall_32+0x32/0x70 [ 529.909753][T18015] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 529.912372][T18015] [ 529.912372][T18015] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 529.915134][T18015] lock_acquire+0x1d1/0x380 [ 529.917163][T18015] __mutex_lock+0x1a4/0x1bc0 [ 529.919638][T18015] tcm_alloc_inst+0x5f/0x1e0 [ 529.922319][T18015] try_get_usb_function_instance+0x136/0x1f0 [ 529.925315][T18015] usb_get_function_instance+0x16/0x70 [ 529.927800][T18015] function_make+0x18c/0x3f0 [ 529.929925][T18015] configfs_mkdir+0x525/0xd40 [ 529.932403][T18015] vfs_mkdir+0x364/0x850 [ 529.935133][T18015] filename_mkdirat+0x48b/0x5e0 [ 529.937270][T18015] __ia32_sys_mkdir+0x6a/0x90 [ 529.940738][T18015] __do_fast_syscall_32+0x13a/0x8b0 [ 529.942795][T18015] do_fast_syscall_32+0x32/0x70 [ 529.945015][T18015] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 529.947714][T18015] [ 529.947714][T18015] -> #1 (func_lock){+.+.}-{4:4}: [ 529.950943][T18015] lock_acquire+0x1d1/0x380 [ 529.953216][T18015] __mutex_lock+0x1a4/0x1bc0 [ 529.955649][T18015] try_get_usb_function_instance+0x26/0x1f0 [ 529.958335][T18015] usb_get_function_instance+0x16/0x70 [ 529.961034][T18015] function_make+0x18c/0x3f0 [ 529.963280][T18015] configfs_mkdir+0x525/0xd40 [ 529.965764][T18015] vfs_mkdir+0x364/0x850 [ 529.967870][T18015] filename_mkdirat+0x48b/0x5e0 [ 529.970343][T18015] __ia32_sys_mkdirat+0x88/0xc0 [ 529.972980][T18015] __do_fast_syscall_32+0x13a/0x8b0 [ 529.975834][T18015] do_fast_syscall_32+0x32/0x70 [ 529.978191][T18015] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 529.981052][T18015] [ 529.981052][T18015] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 529.984846][T18015] check_prev_add+0xeb/0xe60 [ 529.987221][T18015] __lock_acquire+0x1492/0x1ec0 [ 529.989938][T18015] lock_acquire+0x1d1/0x380 [ 529.992603][T18015] __mutex_lock+0x1a4/0x1bc0 [ 529.995049][T18015] uvcg_extension_ba_source_id_store+0xdb/0x430 [ 529.997928][T18015] configfs_write_iter+0x302/0x4e0 [ 530.000340][T18015] vfs_write+0x6af/0x1050 [ 530.002389][T18015] ksys_write+0x12a/0x250 [ 530.004459][T18015] __do_fast_syscall_32+0x13a/0x8b0 [ 530.006766][T18015] do_fast_syscall_32+0x32/0x70 [ 530.007193][ T7725] usb 11-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 530.008181][ T7725] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.016998][T18015] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 530.019855][T18015] [ 530.019855][T18015] other info that might help us debug this: [ 530.019855][T18015] [ 530.023937][T18015] Chain exists of: [ 530.023937][T18015] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#26 --> &p->frag_sem [ 530.023937][T18015] [ 530.030436][T18015] Possible unsafe locking scenario: [ 530.030436][T18015] [ 530.033890][T18015] CPU0 CPU1 [ 530.036331][T18015] ---- ---- [ 530.038874][T18015] rlock(&p->frag_sem); [ 530.040959][T18015] lock(&sb->s_type->i_mutex_key#26); [ 530.044645][T18015] lock(&p->frag_sem); [ 530.047660][T18015] lock(gadget_subsys.su_mutex); [ 530.049775][T18015] [ 530.049775][T18015] *** DEADLOCK *** [ 530.049775][T18015] [ 530.053318][T18015] locks held by syz.4.3795/18015: 4, last CPU#0: [ 530.056113][T18015] #0: ffff88802a901970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 530.059899][T18015] #1: ffff8880226ee460 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 530.063659][T18015] #2: ffff8880272f7c80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 530.068457][T18015] #3: ffff888022856d70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 530.073459][T18015] [ 530.073459][T18015] stack backtrace: [ 530.075934][T18015] CPU: 0 UID: 0 PID: 18015 Comm: syz.4.3795 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.080658][T18015] Tainted: [L]=SOFTLOCKUP [ 530.082053][T18015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 530.085270][T18015] Call Trace: [ 530.086365][T18015] [ 530.087422][T18015] dump_stack_lvl+0x100/0x190 [ 530.089048][T18015] print_circular_bug.cold+0x178/0x1be [ 530.091121][T18015] check_noncircular+0x146/0x160 [ 530.093179][T18015] check_prev_add+0xeb/0xe60 [ 530.095465][T18015] __lock_acquire+0x1492/0x1ec0 [ 530.098632][T18015] ? __pfx_stack_trace_save+0x10/0x10 [ 530.101193][T18015] lock_acquire+0x1d1/0x380 [ 530.102940][T18015] ? uvcg_extension_ba_source_id_store+0xdb/0x430 [ 530.105255][T18015] ? __pfx___might_resched+0x10/0x10 [ 530.107217][T18015] ? __lock_acquire+0x4c5/0x1ec0 [ 530.109023][T18015] __mutex_lock+0x1a4/0x1bc0 [ 530.110878][T18015] ? uvcg_extension_ba_source_id_store+0xdb/0x430 [ 530.113227][T18015] ? uvcg_extension_ba_source_id_store+0xdb/0x430 [ 530.115805][T18015] ? __pfx___mutex_lock+0x10/0x10 [ 530.117959][T18015] ? find_held_lock+0x2b/0x80 [ 530.120628][T18015] ? __might_fault+0xc5/0x140 [ 530.123144][T18015] ? __might_fault+0xc5/0x140 [ 530.125557][T18015] ? lock_acquire+0x1d1/0x380 [ 530.127988][T18015] ? configfs_write_iter+0x218/0x4e0 [ 530.131092][T18015] ? uvcg_extension_ba_source_id_store+0xdb/0x430 [ 530.134594][T18015] uvcg_extension_ba_source_id_store+0xdb/0x430 [ 530.138267][T18015] ? __pfx_uvcg_extension_ba_source_id_store+0x10/0x10 [ 530.142278][T18015] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 530.145477][T18015] ? configfs_write_iter+0x388/0x4e0 [ 530.148994][T18015] configfs_write_iter+0x302/0x4e0 [ 530.153020][T18015] vfs_write+0x6af/0x1050 [ 530.157224][T18015] ? __pfx_configfs_write_iter+0x10/0x10 [ 530.161204][T18015] ? __pfx_vfs_write+0x10/0x10 [ 530.164027][T18015] ? find_held_lock+0x2b/0x80 [ 530.166790][T18015] ksys_write+0x12a/0x250 [ 530.169274][T18015] ? __pfx_ksys_write+0x10/0x10 [ 530.172074][T18015] __do_fast_syscall_32+0x13a/0x8b0 [ 530.175073][T18015] do_fast_syscall_32+0x32/0x70 [ 530.177891][T18015] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 530.183489][T18015] RIP: 0023:0xf701efec [ 530.187016][T18015] Code: Unable to access opcode bytes at 0xf701efc2. [ 530.190926][T18015] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 530.195773][T18015] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 530.200301][T18015] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000000 [ 530.205043][T18015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 530.210747][T18015] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 530.215297][T18015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 530.223693][T18015] [ 530.425920][T17996] tipc: New replicast peer: 172.30.0.7 [ 530.427121][T17996] tipc: Enabled bearer , priority 10 [ 530.434623][T17996] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3792'. [ 530.434667][T17996] tipc: Disabling bearer [ 530.439633][ T7725] hid-picolcd 0003:04D8:C002.0058: unknown main item tag 0x0 [ 530.439654][ T7725] hid-picolcd 0003:04D8:C002.0058: unknown main item tag 0x0 [ 530.439668][ T7725] hid-picolcd 0003:04D8:C002.0058: unknown main item tag 0x0 [ 530.439683][ T7725] hid-picolcd 0003:04D8:C002.0058: unbalanced collection at end of report description [ 530.439889][ T7725] hid-picolcd 0003:04D8:C002.0058: device report parse failed [ 530.439922][ T7725] hid-picolcd 0003:04D8:C002.0058: probe with driver hid-picolcd failed with error -22 [ 530.662515][ T30] usb 11-1: USB disconnect, device number 11