last executing test programs: 7m29.406674941s ago: executing program 1 (id=2): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) sendmsg$alg(r1, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48801}, 0x4008011) close(0x4) 7m27.897375255s ago: executing program 1 (id=9): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x22882, 0x0) writev(r0, &(0x7f0000003500)=[{&(0x7f0000000380)="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", 0xe8e}], 0x1) 7m26.798688099s ago: executing program 1 (id=11): unshare(0x8040480) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 7m24.933727404s ago: executing program 1 (id=13): r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) unshare(0x26020480) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000240)='ns/time_for_children\x00') syz_open_procfs$namespace(r3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r4 = userfaultfd(0x80800) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0xfffffffc, 0x80000014}, 0xc) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/173, 0x17) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) r5 = io_uring_setup(0x76a9, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x3, 0x1, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 7m9.236643996s ago: executing program 32 (id=13): r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) unshare(0x26020480) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000240)='ns/time_for_children\x00') syz_open_procfs$namespace(r3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r4 = userfaultfd(0x80800) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0xfffffffc, 0x80000014}, 0xc) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/173, 0x17) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) r5 = io_uring_setup(0x76a9, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x3, 0x1, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 7m1.777896829s ago: executing program 0 (id=56): r0 = fsopen(&(0x7f0000001c80)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000001cc0)='noxattr', &(0x7f0000001d00), 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = open(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, 0x0) fchmod(r2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x6c, 0x0, &(0x7f0000000600)="e3ef7f6700001544940000000000000000000000040033a42c9550f5810011e0f0544b00aab0d153bf01de50151803c474719193461531001128afc5bb008000001c6f04aa6846a184d8f21d2eed60c9355bed06b10fadb3a923a73e05030000002d0f57b0041e37a64645cc", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x4c) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='test_dummy_encryption', 0x0, 0xffffffffffffff9c) r3 = fsopen(&(0x7f0000000100)='affs\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r4) ptrace(0x4208, r4) ptrace$peekuser(0x3, r4, 0x4) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') close(0x3) socket$packet(0x11, 0x2, 0x300) 6m58.151444562s ago: executing program 0 (id=65): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x20, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000140)={@hyper, 0x6}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbde0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x5, 0x0, 0xffffff01, 0x0, 0x72c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], 0x1, 0x400}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) 6m57.342317461s ago: executing program 0 (id=69): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) io_uring_setup(0x6390, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="a1"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x0, &(0x7f0000000440), 0x2) writev(0xffffffffffffffff, 0x0, 0x0) 6m55.266542672s ago: executing program 0 (id=71): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendfile(r1, r0, 0x0, 0x8010002b) connect$inet(r1, &(0x7f0000000480)={0x1e, 0x4e22, @rand_addr=0x640100fd}, 0x10) 6m53.645279109s ago: executing program 0 (id=76): openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0xa, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r1], 0x7) 6m51.932641501s ago: executing program 0 (id=82): socket$inet(0xa, 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @multicast1}, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)=""/11, 0xfffffe36}, {&(0x7f0000000400)=""/32}, {&(0x7f0000000580)=""/215}, {&(0x7f0000000680)=""/72}, {&(0x7f0000000780)=""/87}]}, 0x5}], 0xfffffffffffffee9, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000880)=""/254, 0xfe}], 0x1}, 0x127) shutdown(r2, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x209, 0x8, 0xfffffe0000000002, 0x8000fa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x101, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) unshare(0x2040400) rseq(&(0x7f0000001040)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000740)={'sit0\x00', 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f00000003c0)) socket$unix(0x1, 0x1, 0x0) r5 = syz_clone(0x10000400, &(0x7f00000000c0)="1c09cefc6a12f0a61fe80df404ce2ebec9ede6fc26e26a88d2ebc45c5f8d399cfb1a27aab8573fde54d3bc2cb2a29dac1aeded85ca2a6ccde8a0c9e8607d0726c35b5ce2d41ddfd8ef83f74923259ffad74a4315cd4fbdfbbb143a443f52169c8be1ee17253512e2ccf97c0216243eaab5e4d010bb9ddcb2e64c0508261a08b6be7ad76a79213f269f5350df5a712a29d5de9104e9894e38143cdf2e92f6cbe67ee4", 0xa2, &(0x7f0000000240), 0x0, 0x0) ioprio_get$pid(0x3, r5) 6m36.203006028s ago: executing program 33 (id=82): socket$inet(0xa, 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @multicast1}, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)=""/11, 0xfffffe36}, {&(0x7f0000000400)=""/32}, {&(0x7f0000000580)=""/215}, {&(0x7f0000000680)=""/72}, {&(0x7f0000000780)=""/87}]}, 0x5}], 0xfffffffffffffee9, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000880)=""/254, 0xfe}], 0x1}, 0x127) shutdown(r2, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x209, 0x8, 0xfffffe0000000002, 0x8000fa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x101, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) unshare(0x2040400) rseq(&(0x7f0000001040)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000740)={'sit0\x00', 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f00000003c0)) socket$unix(0x1, 0x1, 0x0) r5 = syz_clone(0x10000400, &(0x7f00000000c0)="1c09cefc6a12f0a61fe80df404ce2ebec9ede6fc26e26a88d2ebc45c5f8d399cfb1a27aab8573fde54d3bc2cb2a29dac1aeded85ca2a6ccde8a0c9e8607d0726c35b5ce2d41ddfd8ef83f74923259ffad74a4315cd4fbdfbbb143a443f52169c8be1ee17253512e2ccf97c0216243eaab5e4d010bb9ddcb2e64c0508261a08b6be7ad76a79213f269f5350df5a712a29d5de9104e9894e38143cdf2e92f6cbe67ee4", 0xa2, &(0x7f0000000240), 0x0, 0x0) ioprio_get$pid(0x3, r5) 4m25.755635011s ago: executing program 5 (id=361): unshare(0x2c020680) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0xe0) 4m24.778784075s ago: executing program 5 (id=364): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x400, 0x9, 0x0, 0x8}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, 0x52, 0x701, 0x0, 0x25dfdc02, {0x2}, [@nested={0x4, 0x65}]}, 0x18}}, 0x4010) 4m24.033412651s ago: executing program 5 (id=366): r0 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket(0x28, 0x801, 0x0) setpriority(0x1, r0, 0x0) 4m23.436747956s ago: executing program 5 (id=369): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 4m22.314292831s ago: executing program 5 (id=375): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe}, [@map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 4m21.477392634s ago: executing program 5 (id=378): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @multicast1}, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)=""/11, 0xfffffe36}, {&(0x7f0000000400)=""/32}, {&(0x7f0000000580)=""/215}, {&(0x7f0000000680)=""/72}, {&(0x7f0000000780)=""/87}]}, 0x5}], 0xfffffffffffffee9, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x127) shutdown(0xffffffffffffffff, 0x2) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x101, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) unshare(0x2040400) rseq(&(0x7f0000001040)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000740)={'sit0\x00', 0x0}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000003c0)) socket$unix(0x1, 0x1, 0x0) ioprio_get$pid(0x3, 0x0) 4m7.649350575s ago: executing program 3 (id=415): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x19, 0x0) 4m6.120881701s ago: executing program 34 (id=378): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @multicast1}, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)=""/11, 0xfffffe36}, {&(0x7f0000000400)=""/32}, {&(0x7f0000000580)=""/215}, {&(0x7f0000000680)=""/72}, {&(0x7f0000000780)=""/87}]}, 0x5}], 0xfffffffffffffee9, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x127) shutdown(0xffffffffffffffff, 0x2) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x101, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) unshare(0x2040400) rseq(&(0x7f0000001040)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000740)={'sit0\x00', 0x0}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000003c0)) socket$unix(0x1, 0x1, 0x0) ioprio_get$pid(0x3, 0x0) 4m6.048133005s ago: executing program 3 (id=419): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) 4m4.524999464s ago: executing program 3 (id=423): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) io_uring_setup(0x9, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xf5a6, 0x10100}, 0x0, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r2 = dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000002ac0)={'syztnl2\x00', &(0x7f00000029c0)={'gre0\x00', 0x0, 0x1, 0x8, 0x9359, 0x1, {{0x1e, 0x4, 0x1, 0x5, 0x78, 0x66, 0x0, 0x2, 0x2f, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x8c, 0x3, 0x5, [{@empty}, {@local, 0x6}, {@remote, 0x2}, {@rand_addr=0x64010102, 0x8}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4, 0xe0, 0x1, 0x4}, @ra={0x94, 0x4}, @generic={0x82, 0x5, "e1c78b"}, @cipso={0x86, 0x16, 0x1, [{0x7, 0x2}, {0x6, 0xe, "e745f6fcc537405abeba86a1"}]}, @lsrr={0x83, 0x13, 0xe1, [@loopback, @broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002e40)={r2, 0xe0, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000002bc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002c00)=[0x0, 0x0], 0x0, 0x1c, 0x0, 0x0, 0x10, &(0x7f0000002c80), &(0x7f0000002cc0), 0x8, 0x43, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080)) timerfd_create(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$vimc2(0xffffff9c, &(0x7f0000001900), 0x2, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000001f00)={0x3}) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x2300, {}, {}, @raw32}], 0xffc8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x21, 0x3, 0x29c, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8) 4m1.738731383s ago: executing program 3 (id=431): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r1, &(0x7f0000001880)=[{{0x0, 0x4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, 0x0, 0x0, 0x60ff}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "b1"}]}], {0x14}}, 0x70}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0585605, &(0x7f00000005c0)={0x1, 0x1, @start={0x50e4, 0x1}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0x3eb, 0x21e2f, 0x3, 0x0, 0x0, 0xc, 0x400, 0x0, 0x9}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x90, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000180)={'raw\x00', 0x2, [{}, {}]}, 0x44) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80000d}) migrate_pages(0x0, 0x200, 0x0, &(0x7f00000000c0)=0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @dev}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x74, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4d82, 0x40}, [@IFLA_PORT_SELF={0x54, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "c46345dd772809c8fb4e38c3cc486ab3"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9aeea62700337293bf1f520bec529408"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5e913ab178e30054be717d7cc4699558"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f73b56b4bd457cfa5c83ad2000"}]}]}, 0x74}}, 0x0) 3m56.498303885s ago: executing program 3 (id=440): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff034}, {0x40, 0x83, 0x0, 0x4}, {0x6, 0x68, 0x0, 0x2}]}, 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$rds(r2, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_map={0x2c, 0x10c, 0x3, {{0x0}, 0x0, 0x10}}], 0x2c}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x40, 0x7800, 0xb, 0x8, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x67, 0x0, 0x0, 0x13a510832a07e4e5, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6000000000000a000000000001000700000008000640000000040900020073797a32000000000900020073797a3200000000050001000700000008000640000000030100020073797a31000000000800064000003c8c00"/96], 0x60}, 0x1, 0x0, 0x0, 0x8}, 0x8000040) socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) io_setup(0x2, &(0x7f0000000100)) 3m45.109420886s ago: executing program 3 (id=462): sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x9f9ec54af98ce9ae}, 0x40840) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x115000}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) sendfile(r3, r3, &(0x7f0000000040)=0x8, 0xc) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r9, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r11 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32=r10, @ANYBLOB="0800db00", @ANYRES32=r11, @ANYBLOB="37d4a11df563710ce8b5d6122d90ef484550f1657eb33eae5b755637503bafcdd0f5f9b2efe1b7d74435b0aa9c19602ed8a53212204ab65597dcb7"], 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 3m29.004764765s ago: executing program 35 (id=462): sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x9f9ec54af98ce9ae}, 0x40840) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x115000}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) sendfile(r3, r3, &(0x7f0000000040)=0x8, 0xc) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r9, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r11 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32=r10, @ANYBLOB="0800db00", @ANYRES32=r11, @ANYBLOB="37d4a11df563710ce8b5d6122d90ef484550f1657eb33eae5b755637503bafcdd0f5f9b2efe1b7d74435b0aa9c19602ed8a53212204ab65597dcb7"], 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 1m20.365824364s ago: executing program 4 (id=819): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xe0000000, 0x0, 0xb, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000001080)={&(0x7f0000000240)={0x50, 0xffffffffffffffda, 0xf992, {0x7, 0x2b, 0x4, 0x28000000, 0x23, 0x1, 0x8000, 0x9, 0x0, 0x0, 0x10, 0x8f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x2) 1m19.276557007s ago: executing program 4 (id=822): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020752600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f50b000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m18.404177219s ago: executing program 4 (id=823): socket(0x10, 0x803, 0x0) openat$ptp0(0xffffff9c, &(0x7f0000000080), 0x101002, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 1m16.769695698s ago: executing program 4 (id=825): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x526, &(0x7f0000000340)="$eJzs3U9sI1cZAPBvJsnau02bLfQAqNClFBa0WjvxbqOqF5ZThVARokcO25A4URQ7jmKnNGEP2SN3JCpxghNnDkgckHrijsQBblzKAanACtQgIWHksZ11/jhxu47djX8/aTRv5o39vRdn3rO+7M4LYGLdiIj9iLgSEW9HxFznfNLZ4l57a1330aMHywePHiwn0Wy+9Y8kq2+di57XtDzTec98RHz/jYgfJseC/jGivru3sVSplLc7p4qN6laxvrt3e726tFZeK2+WSosLi/Ov3Xm1NLS+vlT99YdXI+J3v/3iB3/Y/8aPW82a7dT19mOY2l2fOYzTMh0R37mIYGMwFZGf7vz+fGyf6EUMUxoRn4mIl7P7fy6mst/Oo45+TN8cYesAgIvQbM5Fc673GAC47NIsB5akhU4uYDbStFBo5/BeiGtppVZv3Fqt7WyutHNl12MmXV2vlOc7ucLrMZOsrk+XF7Jy97hSLh07vhMRz0fET3NXs+PCcq2yMs4vPgAwwZ45Nv//O9ee/wGASy7/uJgbZzsAgNHJj7sBAMDImf8BYPKY/wFg8pj/AWDymP8BYPKY/wFgonzvzTdbW/Og8/zrlXd2dzZq79xeKdc3CtWd5cJybXursFarrWXP7Kme936VWm1r4W7svFtslOuNYn137361trPZuJ891/t+eWYkvQIAzvL8S+//OYmI/devZlv0PO//3Ln6xYtuHXCR0nE3ABibqXE3ABibk6t9AZNCPh4m1/+azWb0rN0bEQ8PSz0PA+37T4TeGyhMat1Q+PS5+fknyP8DTzX5f5hcnyz/77s8XAby/zC5ms3Emv8AMGHk+IHknPrev//PN3sOBvv7PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxKs9mWpIXOWuCzkaaFQsSzEXE9ZpLV9Up5PiKei4g/5WZyreOFiLBuEAA8zdK/JZ31v27OvTJ7vPZK7j+5bB8RP/r5Wz97d6nR2F6IuJL88/B8473O+dI42g8AnKc7T3fn8a6PHj1Y7m6jbM+H32ovLtqKe9DZ2jXTMZ3t81mu4dq/ks5xW+v7ytQQ4u8/jIjPndb/JMuNXO+sfHo8fiv2syONnx6Jn2Z17X3rZ/HZIbQFJs37rfHn3mn3Xxo3sv3p938+G6GeXHf8Ozgx/qWH499Un/HvxqAx7v7+2ydONufadQ8jvjAdcdB9857xpxs/6RP/lQHj/+XFL73cr675i4ibcVr/kyOxio3qVrG+u3d7vbq0Vl4rb5ZKiwuL86/debVUzHLUxW6m+qS/v37ruX7xW/2/1id+/pz+f3XA/v/yv2//4MtnxP/6V07//F84I35rTvzagPGXrv0m36+uFX+lT//P+/xvDRj/g7/urQx4KQAwAvXdvY2lSqW8/eSF/JnXpMMIMUAhidi/4BCPC7lf/eSN8y/ODS/ovYgYfneiX9XUGa+6+92IUf2cL08h9+loxgCFcY9MwEV7fNOPuyUAAAAAAAAAAAAAAEA/o/jvROPuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJfX/wMAAP//Y6fUJg==") 1m15.03417467s ago: executing program 4 (id=832): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xe0000000, 0x0, 0xb, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000001080)={&(0x7f0000000240)={0x50, 0xffffffffffffffda, 0xf992, {0x7, 0x2b, 0x4, 0x28000000, 0x23, 0x1, 0x8000, 0x9, 0x0, 0x0, 0x10, 0x8f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x2) 1m13.702257401s ago: executing program 4 (id=837): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r1) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xffffff64, 0xfffffffc}, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100e00000010800364a838b1def900191a11a671b113e0200640101000c0002800500010000000000240002800c000280050001000000000014000180080001141416080007400000000508000840000000021c000f8008000140000005d508"], 0x88}}, 0x4004000) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000240)={0x0, 0xfffffffd, 0x5, 0x1e, 0x0, 0x40000}) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3801000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000084000500fe80000000a23f18f37e63dbe89e3823c1754d00000000000000000000bb000000003c00000000000088384ea865a8c739d9e0fdf1191f00fe80000000000000000000000000000000000000000000000700000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000"], 0x138}}, 0x4040000) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xad) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) 57.901372631s ago: executing program 36 (id=837): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r1) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xffffff64, 0xfffffffc}, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100e00000010800364a838b1def900191a11a671b113e0200640101000c0002800500010000000000240002800c000280050001000000000014000180080001141416080007400000000508000840000000021c000f8008000140000005d508"], 0x88}}, 0x4004000) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000240)={0x0, 0xfffffffd, 0x5, 0x1e, 0x0, 0x40000}) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3801000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000084000500fe80000000a23f18f37e63dbe89e3823c1754d00000000000000000000bb000000003c00000000000088384ea865a8c739d9e0fdf1191f00fe80000000000000000000000000000000000000000000000700000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000"], 0x138}}, 0x4040000) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xad) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) 14.454089416s ago: executing program 7 (id=938): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/27], 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6}, 0x94) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000240)={0x20, 0x15, 0x4, "8d011df4"}, 0x0, 0x0}) 10.807062685s ago: executing program 7 (id=943): unshare(0x60000600) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x8, 0x0, 0x0}}, 0x10) 10.653230296s ago: executing program 2 (id=944): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140)=0x9, 0x4) 10.557201428s ago: executing program 6 (id=945): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r0, 0x3) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, 0x0, 0x0) 9.79083876s ago: executing program 6 (id=946): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x2404c845) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) sync() sync() sync() sync() 9.671605577s ago: executing program 2 (id=947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x2008040) 9.658986445s ago: executing program 8 (id=948): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x5}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x7}, 0x4) 8.987156602s ago: executing program 8 (id=949): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x60b, 0x0) 8.769291489s ago: executing program 6 (id=950): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60880, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000680)={[{@debug}, {@dioread_nolock}, {@inlinecrypt}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@test_dummy_encryption}, {@bh}, {@delalloc}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@jqfmt_vfsold}, {@noacl}]}, 0x1, 0xbf5, &(0x7f0000003400)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="740000006c0001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="914001004000000014000300000000400034991400350070696dd146"], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x30080, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRESHEX, @ANYBLOB=',dfltgid=', @ANYRESHEX, @ANYBLOB="2c63610467747569643d", @ANYRESHEX, @ANYBLOB=',posixacl,loose,mmap,audit,uid=', @ANYRESDEC, @ANYBLOB=',obj_role=dioread_nolock,\x00']) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r6, @ANYRES8=r0], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x9, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x10, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x4, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0x2000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0x4000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x4, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01032abd70000000000001000000080001001200000008000300"], 0x30}, 0x1, 0x0, 0x0, 0x4000064}, 0x40) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 8.653787296s ago: executing program 2 (id=951): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xd3f, 0x5, 0x5, 0x80006, 0xfffffffe, 0x7}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 8.001332857s ago: executing program 7 (id=952): r0 = syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x4, 0x2d1, &(0x7f0000000740)="$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") r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000000007, 0x4, 0x20103, 0x80001, {0x200006, 0x10005c62, 0x8000000203, 0x0, 0x83, 0xd612, 0x10000006, 0x6, 0x0, 0x4000, 0x0, 0x0, 0xee00, 0xd31}}, {0x0, 0xa}}}, 0xa0) dup3(r0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xfff, 0xab06) write$FUSE_IOCTL(r1, &(0x7f0000000040)={0x20, 0x0, 0x0, {0x101, 0x4, 0xb, 0xffffffff}}, 0x20) 5.580725436s ago: executing program 2 (id=953): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001d00)='ns/mnt\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 5.07956944s ago: executing program 7 (id=954): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f000004d000/0x2000)=nil, 0x2000, 0xb) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) getpriority(0x2, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='./mnt\x00', 0x804, &(0x7f0000000500)={[{@utf8}, {@dmask={'dmask', 0x3d, 0x5}}, {@uid={'uid', 0x3d, 0xee00}}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x10001}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@fmask={'fmask', 0x3d, 0x1}}, {@discard}, {@namecase}, {@errors_remount}], [{@seclabel}]}, 0x1, 0x1534, &(0x7f0000002c00)="$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") capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) socket$inet_udp(0x2, 0x2, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) 4.363690757s ago: executing program 6 (id=955): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x810042, 0x0, 0x1, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x8a, 0x100000}, 0x20) 4.363398248s ago: executing program 8 (id=956): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r0, 0x3) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, 0x0, 0x0) 2.107296587s ago: executing program 2 (id=957): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) getpgrp(0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000000000)) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000f8dbdf25030000000500020009000000180001801400020073797a5f74756e000000000000000000050005"], 0x3c}, 0x1, 0x0, 0x0, 0x20009805}, 0x40010) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 2.011459052s ago: executing program 8 (id=958): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/254, 0xfe}], 0x1, 0x9, 0x80000001) 1.85849228s ago: executing program 6 (id=959): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x2404c845) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) sync() sync() sync() sync() 1.361536394s ago: executing program 7 (id=960): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x485, 0x0, 0x9}, {0xb7c, 0x0, 0x401}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000540)={0xfffffff7, 0x200403, 0xe, 0xc6cf, 0x91, "0000080100", 0x7ff, 0x1fd}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x66c5edaba57c34cf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 981.336875ms ago: executing program 8 (id=961): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) shutdown(r0, 0x1) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x144}, 0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r1, 0x0, r2, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r3, 0x0, 0x0) listen(r0, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20040014, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x57) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r6 = fcntl$dupfd(r4, 0x0, r0) sendto(r6, &(0x7f0000000580)="120000", 0x3, 0x1, 0x0, 0x0) 561.167619ms ago: executing program 2 (id=962): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x2f, 0xb, 0x8, 0x9, 0x8, @mcast2, @local, 0x7, 0x7, 0x6, 0x5}}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x3, 0x400005, 0x9fd, 0x85, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x50) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f00000000c0), 0x2c8, 0x0) 65.011595ms ago: executing program 6 (id=963): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) fadvise64(r0, 0x2, 0xc, 0x0) 36.487285ms ago: executing program 7 (id=964): getpid() setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x50, 0x21, 0x1, 0xfffffffe, 0x25dfdbfe, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 0x4e22, 0xfffd, 0xa, 0x0, 0x0, 0x86}, 0x6e4bbd}}, 0x50}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x24020804) 0s ago: executing program 8 (id=965): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xfdef, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) write$binfmt_register(r3, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, '\\x\'\xcd\x98\xfb\x87\xc8-vFJ\x94\x99)++\x00\x00+\xb1!\xf6\xafZS\xf3\xfe\x81\xdchW\x9b\x0f\t1\x9b&\xcb\xd6[8E\xe9\xcd\xff\x7f\x00\x00\x00\x00\x00\x00\xa7\xd9\x98\x12\xc7\xe7\xae\xb9@\x92>%(T\xf6\xe6m\f\x8c\xcd\xcf\x9c', 0x3a, ')\v\b]+!', 0x3a, './file0'}, 0xfdef) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', 0x0}) kernel console output (not intermixed with test programs): ][ T6791] Cannot create hsr debugfs directory [ 359.889810][ T6975] ªªªªªª: renamed from vlan0 (while UP) [ 360.889750][ T6987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.320338][ T5303] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 361.495351][ T5303] usb 3-1: device descriptor read/64, error -71 [ 361.849058][ T5303] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 362.040680][ T5303] usb 3-1: device descriptor read/64, error -71 [ 362.204656][ T5303] usb usb3-port1: attempt power cycle [ 362.251282][ T6791] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 362.374365][ T6791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.423043][ T6791] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 362.524861][ T6791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.575282][ T6791] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 362.599136][ T5303] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 362.700397][ T5303] usb 3-1: device descriptor read/8, error -71 [ 362.725667][ T6791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.767581][ T6791] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 362.867825][ T6791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 362.969204][ T5303] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 363.024981][ T5303] usb 3-1: device descriptor read/8, error -71 [ 363.159324][ T5303] usb usb3-port1: unable to enumerate USB device [ 363.589921][ T7012] fuse: Bad value for 'fd' [ 364.105162][ T6791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.161118][ T5230] 8021q: adding VLAN 0 to HW filter on device eth7 [ 364.464123][ T6791] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.595670][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.603376][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.830010][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.837701][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.591363][ T7036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.163542][ T7071] process 'syz.3.289' launched './file0' with NULL argv: empty string added [ 369.301615][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 369.327208][ T7073] fuse: Bad value for 'fd' [ 369.438311][ T24] usb 5-1: device descriptor read/64, error -71 [ 369.721883][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 369.872150][ T24] usb 5-1: device descriptor read/64, error -71 [ 369.979738][ T24] usb usb5-port1: attempt power cycle [ 370.339796][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 370.422543][ T24] usb 5-1: device descriptor read/8, error -71 [ 370.689165][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 370.764074][ T24] usb 5-1: device descriptor read/8, error -71 [ 370.901341][ T24] usb usb5-port1: unable to enumerate USB device [ 371.116695][ T5230] 8021q: adding VLAN 0 to HW filter on device eth8 [ 371.258922][ T7096] fuse: Bad value for 'user_id' [ 371.296979][ T7096] fuse: Bad value for 'user_id' [ 371.570953][ T6791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.239935][ T7149] fuse: Bad value for 'fd' [ 376.767425][ T6791] veth0_vlan: entered promiscuous mode [ 376.974438][ T6791] veth1_vlan: entered promiscuous mode [ 377.613634][ T6791] veth0_macvtap: entered promiscuous mode [ 377.779050][ T6791] veth1_macvtap: entered promiscuous mode [ 378.217363][ T6791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.288784][ T7167] fuse: Bad value for 'user_id' [ 378.327191][ T7167] fuse: Bad value for 'user_id' [ 378.378284][ T6791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.434100][ T5303] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 378.621639][ T5871] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.640549][ T5303] usb 3-1: device descriptor read/64, error -71 [ 378.654704][ T5871] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.755820][ T5871] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.804483][ T5871] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.918690][ T5303] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 379.110791][ T5303] usb 3-1: device descriptor read/64, error -71 [ 379.260263][ T5303] usb usb3-port1: attempt power cycle [ 379.679163][ T5303] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 379.786820][ T5303] usb 3-1: device descriptor read/8, error -71 [ 380.021630][ T7175] ªªªªªª: renamed from vlan0 (while UP) [ 380.061985][ T5303] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 380.146767][ T5303] usb 3-1: device descriptor read/8, error -71 [ 380.285497][ T5303] usb usb3-port1: unable to enumerate USB device [ 386.285206][ T7231] syz_tun: entered allmulticast mode [ 386.389232][ T7229] syz_tun: left allmulticast mode [ 388.393073][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.405788][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.024113][ T7250] fuse: Bad value for 'user_id' [ 389.075357][ T7250] fuse: Bad value for 'user_id' [ 389.193361][ T5697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.257471][ T5697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.711111][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.746070][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.018269][ T5303] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 391.161690][ T7266] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 391.253625][ T5303] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 391.253723][ T5303] usb 3-1: config 0 has no interface number 0 [ 391.253820][ T5303] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 391.253924][ T5303] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 391.254089][ T5303] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 391.254193][ T5303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.302274][ T5303] usb 3-1: config 0 descriptor?? [ 391.304489][ T7264] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 391.450921][ T5303] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 391.706382][ T5303] usb 3-1: USB disconnect, device number 18 [ 392.999115][ T29] audit: type=1326 audit(1781617006.123:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.2.329" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb950b9ce59 code=0x7ffc0000 [ 393.013151][ T29] audit: type=1326 audit(1781617006.143:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.2.329" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb950b9ce59 code=0x7ffc0000 [ 393.030270][ T29] audit: type=1326 audit(1781617006.163:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.2.329" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb950b9ce59 code=0x7ffc0000 [ 393.039453][ T29] audit: type=1326 audit(1781617006.173:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.2.329" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb950b9ce59 code=0x7ffc0000 [ 393.049986][ T29] audit: type=1326 audit(1781617006.173:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.2.329" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb950b9ce59 code=0x7ffc0000 [ 393.052264][ T29] audit: type=1326 audit(1781617006.183:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.2.329" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb950b9ce59 code=0x7ffc0000 [ 393.057829][ T29] audit: type=1326 audit(1781617006.183:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.2.329" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb950b9ce59 code=0x7ffc0000 [ 393.065343][ T29] audit: type=1326 audit(1781617006.183:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.2.329" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb950b9ce59 code=0x7ffc0000 [ 393.072101][ T29] audit: type=1326 audit(1781617006.193:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.2.329" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb950b9ce59 code=0x7ffc0000 [ 393.074251][ T29] audit: type=1326 audit(1781617006.193:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.2.329" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb950b9ce59 code=0x7ffc0000 [ 395.018297][ T5303] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 395.040331][ T11] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 395.213973][ T5303] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 395.223378][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 395.282813][ T5303] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 395.298175][ T11] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 395.315106][ T5303] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 395.365275][ T11] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 395.378100][ T5303] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 395.407152][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.448126][ T5303] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 395.464459][ T11] usb 6-1: Product: syz [ 395.482169][ T11] usb 6-1: Manufacturer: syz [ 395.513497][ T5303] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 395.525991][ T11] usb 6-1: SerialNumber: syz [ 395.561015][ T5303] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 395.589884][ T11] r8152-cfgselector 6-1: Unknown version 0x0000 [ 395.612230][ T5303] usb 5-1: Product: syz [ 395.623372][ T11] r8152-cfgselector 6-1: config 0 descriptor?? [ 395.638975][ T5303] usb 5-1: Manufacturer: syz [ 395.800949][ T5303] cdc_wdm 5-1:1.0: skipping garbage [ 395.841515][ T5303] cdc_wdm 5-1:1.0: skipping garbage [ 395.919157][ T5303] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 395.949544][ T5303] cdc_wdm 5-1:1.0: Unknown control protocol [ 396.097081][ T5677] r8152-cfgselector 6-1: USB disconnect, device number 2 [ 397.801697][ T7329] netlink: 40 bytes leftover after parsing attributes in process `syz.3.342'. [ 397.991707][ T7308] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.002022][ T7308] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.266287][ T5677] usb 5-1: USB disconnect, device number 14 [ 399.283517][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.5.343'. [ 400.195979][ T7308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.386220][ T7308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.424715][ T5870] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.448649][ T5697] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.480391][ T5871] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.521100][ T5871] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.180571][ T7363] fuse: Bad value for 'fd' [ 402.544930][ T7373] netlink: 'syz.5.351': attribute type 10 has an invalid length. [ 402.706940][ T7373] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.797493][ T7373] bond0: (slave team0): Enslaving as an active interface with an up link [ 406.553177][ T7407] netlink: 'syz.3.360': attribute type 32 has an invalid length. [ 406.600386][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 407.105914][ T7407] bond1: option coupled_control: invalid value (46) [ 407.216627][ T7407] bond1 (unregistering): Released all slaves [ 407.508317][ T7415] fuse: Bad value for 'fd' [ 410.073576][ T7448] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 410.143914][ T7448] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 411.124335][ T7471] fuse: Bad value for 'fd' [ 412.072143][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.081389][ T7464] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.062264][ T7464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.185186][ T7464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.390452][ T477] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.436534][ T477] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.485402][ T477] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.535215][ T477] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.069232][ T7520] fuse: Bad value for 'fd' [ 419.949542][ T11] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 420.190653][ T11] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 420.229742][ T11] usb 3-1: config 1 has no interface number 0 [ 420.269460][ T11] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 420.322367][ T11] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 420.349578][ T11] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 420.418010][ T11] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 420.448498][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.495853][ T11] usb 3-1: Product: syz [ 420.521098][ T11] usb 3-1: Manufacturer: syz [ 420.541801][ T11] usb 3-1: SerialNumber: syz [ 420.601399][ T7547] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 420.953753][ T7547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.029907][ T7547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.178455][ T7547] IPv6: NLM_F_REPLACE set, but no existing node found! [ 421.305684][ T7547] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 421.386324][ T11] usb 3-1: No status endpoint found [ 421.620972][ T5682] usb 3-1: USB disconnect, device number 19 [ 422.885198][ T7572] fuse: Bad value for 'fd' [ 424.937237][ T7589] team0: entered promiscuous mode [ 424.976462][ T7589] team_slave_0: entered promiscuous mode [ 425.027209][ T7589] team_slave_1: entered promiscuous mode [ 425.146772][ T7589] netlink: 40 bytes leftover after parsing attributes in process `syz.4.413'. [ 425.259996][ T7589] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 426.491546][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.6.420'. [ 426.851537][ T11] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 427.156268][ T11] usb 7-1: unable to get BOS descriptor or descriptor too short [ 427.215212][ T11] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 427.242460][ T11] usb 7-1: can't read configurations, error -71 [ 428.044534][ T5584] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 428.062052][ T5584] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 428.076313][ T5584] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 428.111886][ T5584] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 428.155123][ T5584] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 430.218976][ T5584] Bluetooth: hci1: command tx timeout [ 432.308451][ T5584] Bluetooth: hci1: command tx timeout [ 433.154857][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.435'. [ 433.518697][ T5677] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 433.826425][ T5677] usb 5-1: unable to get BOS descriptor or descriptor too short [ 433.889683][ T5677] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 433.900296][ T5677] usb 5-1: can't read configurations, error -71 [ 434.378445][ T5584] Bluetooth: hci1: command tx timeout [ 436.458823][ T5584] Bluetooth: hci1: command tx timeout [ 438.431177][ T7695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.960394][ T7625] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.987468][ T7625] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.013542][ T7625] bridge_slave_0: entered allmulticast mode [ 439.077478][ T7625] bridge_slave_0: entered promiscuous mode [ 439.171383][ T7625] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.222211][ T7625] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.259265][ T7625] bridge_slave_1: entered allmulticast mode [ 439.304047][ T7625] bridge_slave_1: entered promiscuous mode [ 440.088983][ T7705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.447'. [ 440.127384][ T7625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.488413][ T5679] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 440.494064][ T7625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.765859][ T5679] usb 3-1: unable to get BOS descriptor or descriptor too short [ 440.808389][ T5679] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 440.854248][ T5679] usb 3-1: can't read configurations, error -71 [ 441.035650][ T7625] team0: Port device team_slave_0 added [ 441.159005][ T7625] team0: Port device team_slave_1 added [ 441.711321][ T7625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.760247][ T7625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.908683][ T7625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.004969][ T7625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.040284][ T7625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.141480][ T7625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.814990][ T5677] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 443.080937][ T5677] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.146175][ T5677] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.176412][ T7625] hsr_slave_0: entered promiscuous mode [ 443.209633][ T5677] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 443.277795][ T5677] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 443.322726][ T5677] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.342452][ T7625] hsr_slave_1: entered promiscuous mode [ 443.405859][ T7625] debugfs: 'hsr0' already exists in 'hsr' [ 443.441796][ T5677] usb 7-1: config 0 descriptor?? [ 443.462530][ T7625] Cannot create hsr debugfs directory [ 444.029028][ T5677] usbhid 7-1:0.0: can't add hid device: -71 [ 444.075592][ T5677] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 444.169324][ T5677] usb 7-1: USB disconnect, device number 4 [ 444.365141][ T7724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.326077][ T7738] netlink: 12 bytes leftover after parsing attributes in process `syz.6.460'. [ 446.709049][ T5679] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 447.023915][ T5679] usb 7-1: unable to get BOS descriptor or descriptor too short [ 447.096291][ T5679] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 447.135335][ T7625] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 447.135771][ T5679] usb 7-1: can't read configurations, error -71 [ 447.280690][ T7625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 447.339501][ T7625] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 447.441317][ T7625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 447.520075][ T7625] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 447.732391][ T7625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 447.859141][ T7625] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 448.006352][ T7625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 448.880584][ T7763] netlink: 56 bytes leftover after parsing attributes in process `syz.6.465'. [ 449.841838][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.854018][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.176366][ T7625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.359903][ T7764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.545541][ T7625] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.746236][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.754011][ T5871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.954479][ T5697] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.962015][ T5697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.489032][ T7783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.474'. [ 453.843427][ T11] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 454.189055][ T11] usb 5-1: unable to get BOS descriptor or descriptor too short [ 454.242487][ T11] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 454.283781][ T11] usb 5-1: can't read configurations, error -71 [ 454.557122][ T55] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.773583][ T55] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.198484][ T55] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.553812][ T55] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.267548][ T7802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.418231][ T55] bridge_slave_1: left allmulticast mode [ 456.442144][ T55] bridge_slave_1: left promiscuous mode [ 456.483771][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.559980][ T55] bridge_slave_0: left allmulticast mode [ 456.612605][ T55] bridge_slave_0: left promiscuous mode [ 456.670565][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.946532][ T7806] loop2: detected capacity change from 0 to 4096 [ 457.023969][ T7806] EXT4-fs: Ignoring removed mblk_io_submit option [ 457.082859][ T7806] ext4: Unknown parameter 'appraise' [ 457.372842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 457.558873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 460.938235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 460.960783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 462.152683][ T5579] Bluetooth: hci3: command 0x0406 tx timeout [ 462.403336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 462.679044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 463.163851][ T7819] netlink: 20 bytes leftover after parsing attributes in process `syz.6.483'. [ 463.630659][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.676987][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.724447][ T55] bond0 (unregistering): (slave team0): Releasing backup interface [ 463.762948][ T55] bond0 (unregistering): Released all slaves [ 463.836665][ T7819] tipc: Started in network mode [ 463.845884][ T7819] tipc: Node identity ac14142f, cluster identity 4711 [ 463.876036][ T7819] tipc: New replicast peer: 0.0.0.0 [ 463.980121][ T7819] tipc: Enabled bearer , priority 10 [ 464.652340][ T7625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.660134][ T5579] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 464.671557][ T5579] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 464.692185][ T5579] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 464.712687][ T5579] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 464.736121][ T5579] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 465.332125][ T24] tipc: Node number set to 2886997039 [ 465.456423][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.487'. [ 465.635868][ T55] hsr_slave_0: left promiscuous mode [ 465.683220][ T55] hsr_slave_1: left promiscuous mode [ 465.716440][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.748728][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.799799][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.846440][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.848746][ T11] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 466.005810][ T55] veth1_macvtap: left promiscuous mode [ 466.026697][ T55] veth0_macvtap: left promiscuous mode [ 466.042024][ T55] veth1_vlan: left promiscuous mode [ 466.062967][ T55] veth0_vlan: left promiscuous mode [ 466.859811][ T5584] Bluetooth: hci5: command tx timeout [ 468.449321][ T55] team0 (unregistering): Port device team_slave_1 removed [ 468.508863][ T55] team0 (unregistering): Port device team_slave_0 removed [ 468.948724][ T5584] Bluetooth: hci5: command tx timeout [ 469.628255][ T11] usb 7-1: unable to get BOS descriptor or descriptor too short [ 469.652379][ T7866] netdevsim netdevsim2 : renamed from netdevsim0 [ 469.680709][ T11] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 469.729421][ T11] usb 7-1: can't read configurations, error -71 [ 469.810218][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 469.810300][ T29] audit: type=1326 audit(1781617082.923:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.2.496" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb950b9ce59 code=0x0 [ 470.188666][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 470.412763][ T24] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 470.443922][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 470.488478][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 470.520103][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 470.568290][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 470.611921][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 470.674954][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 470.727353][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 470.760552][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 470.802471][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 470.830932][ T7874] loop6: detected capacity change from 0 to 4096 [ 470.844609][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 470.871608][ T7874] EXT4-fs: Ignoring removed mblk_io_submit option [ 470.880917][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 470.920604][ T7874] ext4: Unknown parameter 'appraise' [ 470.938680][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 470.976168][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 471.058926][ T5584] Bluetooth: hci5: command tx timeout [ 471.729744][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 471.861081][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 471.873769][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 471.903650][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 472.072176][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 472.162335][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 472.171794][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 472.202291][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 472.217962][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 472.227689][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 472.268410][ T5682] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 472.318516][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 472.461844][ T5682] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 472.512160][ T5682] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 472.823250][ T7625] veth0_vlan: entered promiscuous mode [ 473.098691][ T5584] Bluetooth: hci5: command tx timeout [ 473.176190][ T7625] veth1_vlan: entered promiscuous mode [ 473.217698][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 473.248572][ T24] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 473.257340][ T5682] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 473.267293][ T24] usb 3-1: Product: syz [ 473.273677][ T5682] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 473.287752][ T24] usb 3-1: Manufacturer: syz [ 473.310430][ T5682] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 473.324693][ T24] usb 3-1: config 0 descriptor?? [ 473.338678][ T24] usb 3-1: can't set config #0, error -71 [ 473.361321][ T5682] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 473.394701][ T5682] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 473.410511][ T24] usb 3-1: USB disconnect, device number 22 [ 473.475943][ T5682] usb 5-1: Product: syz [ 473.512559][ T5682] usb 5-1: Manufacturer: syz [ 473.585293][ T5682] cdc_wdm 5-1:1.0: skipping garbage [ 473.611486][ T5682] cdc_wdm 5-1:1.0: skipping garbage [ 473.660436][ T5682] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 473.695892][ T5682] cdc_wdm 5-1:1.0: Unknown control protocol [ 474.337181][ T7898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.388786][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 7 bytes [ 474.855576][ T7625] veth0_macvtap: entered promiscuous mode [ 474.984042][ T7625] veth1_macvtap: entered promiscuous mode [ 475.263394][ T7625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.518945][ T7625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.629004][ T7914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.505'. [ 475.943249][ T5679] usb 5-1: USB disconnect, device number 19 [ 475.981819][ T11] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 476.131218][ T1157] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.173454][ T5873] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.269429][ T5230] 8021q: adding VLAN 0 to HW filter on device eth9 [ 476.281288][ T11] usb 3-1: unable to get BOS descriptor or descriptor too short [ 476.312518][ T11] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 476.332952][ T11] usb 3-1: can't read configurations, error -71 [ 476.478711][ T5873] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.509211][ T5873] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.266208][ T7827] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.289149][ T7827] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.314822][ T7827] bridge_slave_0: entered allmulticast mode [ 478.370711][ T7827] bridge_slave_0: entered promiscuous mode [ 478.457501][ T7827] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.504510][ T7827] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.535172][ T7827] bridge_slave_1: entered allmulticast mode [ 478.572108][ T7827] bridge_slave_1: entered promiscuous mode [ 479.116276][ T7827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.235210][ T7827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.682964][ T7953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.730143][ T7827] team0: Port device team_slave_0 added [ 479.838767][ T7827] team0: Port device team_slave_1 added [ 480.218358][ T7827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.250417][ T7827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.367431][ T7827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.454584][ T7827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.483464][ T11] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 480.498507][ T7827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.616417][ T7827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.717002][ T11] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 480.725929][ T11] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 480.768143][ T11] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 480.815608][ T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 480.873197][ T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 480.957337][ T11] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 480.986948][ T11] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 481.033498][ T11] usb 5-1: Product: syz [ 481.053524][ T11] usb 5-1: Manufacturer: syz [ 481.157339][ T11] cdc_wdm 5-1:1.0: skipping garbage [ 481.200370][ T11] cdc_wdm 5-1:1.0: skipping garbage [ 481.243852][ T11] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 481.275884][ T11] cdc_wdm 5-1:1.0: Unknown control protocol [ 481.286324][ T7827] hsr_slave_0: entered promiscuous mode [ 481.357751][ T7827] hsr_slave_1: entered promiscuous mode [ 481.390697][ T7827] debugfs: 'hsr0' already exists in 'hsr' [ 481.415796][ T7827] Cannot create hsr debugfs directory [ 481.949095][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 483.037970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 483.695352][ T11] usb 5-1: USB disconnect, device number 20 [ 483.853853][ T5230] 8021q: adding VLAN 0 to HW filter on device eth10 [ 484.530258][ T7827] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 484.668292][ T7827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 484.726857][ T7827] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 484.865269][ T7827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.942496][ T7827] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 485.055748][ T7827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 485.097306][ T7827] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 485.229373][ T7827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 487.354150][ T8014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.394846][ T7827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.775577][ T7827] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.934689][ T5697] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.942374][ T5697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.226800][ T5697] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.234702][ T5697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.294619][ T5579] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 488.308859][ T5579] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 488.325363][ T5579] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 488.352554][ T5579] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 488.385631][ T5579] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 489.407323][ T8033] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 489.407471][ T8033] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 489.638103][ T8029] [U]  [ 490.458395][ T5584] Bluetooth: hci4: command tx timeout [ 491.365699][ T14] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.478834][ T5230] 8021q: adding VLAN 0 to HW filter on device eth11 [ 491.715626][ T14] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.958749][ T14] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.236751][ T14] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.540130][ T5584] Bluetooth: hci4: command tx timeout [ 493.749477][ T14] bridge_slave_1: left allmulticast mode [ 493.791599][ T14] bridge_slave_1: left promiscuous mode [ 493.836788][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.929787][ T14] bridge_slave_0: left allmulticast mode [ 493.946607][ T14] bridge_slave_0: left promiscuous mode [ 493.981352][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.618439][ T5584] Bluetooth: hci4: command tx timeout [ 495.175428][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.200306][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.214420][ T14] bond0 (unregistering): Released all slaves [ 495.550543][ T14] hsr_slave_0: left promiscuous mode [ 495.556669][ T14] hsr_slave_1: left promiscuous mode [ 495.594418][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.594528][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.605627][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.605717][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.662047][ T8095] [U]  [ 495.707372][ T14] veth1_macvtap: left promiscuous mode [ 495.707526][ T14] veth0_macvtap: left promiscuous mode [ 495.707992][ T14] veth1_vlan: left promiscuous mode [ 495.709180][ T14] veth0_vlan: left promiscuous mode [ 496.699403][ T5584] Bluetooth: hci4: command tx timeout [ 497.378748][ T8122] fuse: Unknown parameter '0x0000000000000003' [ 498.233071][ T14] team0 (unregistering): Port device team_slave_1 removed [ 498.418752][ T14] team0 (unregistering): Port device team_slave_0 removed [ 499.430345][ T5230] 8021q: adding VLAN 0 to HW filter on device eth12 [ 499.530026][ T8101] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 499.653088][ T7827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.718602][ T8101] usb 3-1: Using ep0 maxpacket: 32 [ 499.751876][ T8101] usb 3-1: config index 0 descriptor too short (expected 164, got 36) [ 499.773460][ T8101] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.798258][ T8101] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.820532][ T8101] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 499.842878][ T8101] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.884429][ T8101] usb 3-1: config 0 descriptor?? [ 500.308278][ T8151] netlink: 'syz.4.552': attribute type 1 has an invalid length. [ 500.430008][ T8101] logitech 0003:046D:C29C.0002: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 500.562162][ T8101] logitech 0003:046D:C29C.0002: no inputs found [ 500.706148][ T8101] usb 3-1: USB disconnect, device number 25 [ 501.343456][ T8158] fido_id[8158]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 502.068935][ T24] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 502.248566][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.248720][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 502.248884][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.249086][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 502.249242][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.267481][ T24] usb 3-1: config 0 descriptor?? [ 502.365019][ T8165] [U]  [ 502.769826][ T24] hid-picolcd 0003:04D8:F002.0003: unbalanced collection at end of report description [ 502.801947][ T24] hid-picolcd 0003:04D8:F002.0003: device report parse failed [ 502.810707][ T24] hid-picolcd 0003:04D8:F002.0003: probe with driver hid-picolcd failed with error -22 [ 502.957229][ T5675] usb 3-1: USB disconnect, device number 26 [ 503.501195][ T8022] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.501572][ T8022] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.502221][ T8022] bridge_slave_0: entered allmulticast mode [ 503.541186][ T8022] bridge_slave_0: entered promiscuous mode [ 503.586028][ T8022] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.586391][ T8022] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.587001][ T8022] bridge_slave_1: entered allmulticast mode [ 503.610393][ T8022] bridge_slave_1: entered promiscuous mode [ 503.630875][ T7827] veth0_vlan: entered promiscuous mode [ 504.061471][ T8022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.096311][ T8022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.331758][ T8022] team0: Port device team_slave_0 added [ 504.339665][ T8101] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 504.346650][ T7827] veth1_vlan: entered promiscuous mode [ 504.389966][ T8022] team0: Port device team_slave_1 added [ 504.498166][ T8101] usb 3-1: Using ep0 maxpacket: 32 [ 504.516731][ T8101] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.554586][ T8101] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.611253][ T8101] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 504.630874][ T8101] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 504.664298][ T8101] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.676212][ T8022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.688944][ T8022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.720151][ T8101] usb 3-1: config 0 descriptor?? [ 504.792153][ T8022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.985684][ T8022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.019552][ T8022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.114122][ T8022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.280064][ T5230] 8021q: adding VLAN 0 to HW filter on device eth13 [ 505.505743][ T8101] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0004/input/input8 [ 505.585193][ T8101] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0004/input/input9 [ 505.724443][ T8206] kvm: pic: non byte read [ 505.754708][ T8206] kvm: pic: non byte read [ 505.774625][ T8206] kvm: pic: non byte read [ 505.792121][ T8206] kvm: pic: non byte read [ 505.824926][ T8206] kvm: pic: non byte read [ 505.847535][ T8206] kvm: pic: non byte read [ 505.885662][ T8206] kvm: pic: non byte read [ 505.896644][ T8022] hsr_slave_0: entered promiscuous mode [ 505.922092][ T8101] kye 0003:0458:5011.0004: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 505.925431][ T8206] kvm: pic: non byte read [ 505.951531][ T8022] hsr_slave_1: entered promiscuous mode [ 506.002806][ T8022] debugfs: 'hsr0' already exists in 'hsr' [ 506.038137][ T8206] kvm: pic: non byte read [ 506.049823][ T8022] Cannot create hsr debugfs directory [ 506.061847][ T8206] kvm: pic: non byte read [ 506.304018][ T24] usb 3-1: USB disconnect, device number 27 [ 506.945310][ T8212] fido_id[8212]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 507.175335][ T7827] veth0_macvtap: entered promiscuous mode [ 507.627459][ T7827] veth1_macvtap: entered promiscuous mode [ 507.698977][ T8101] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 507.899778][ T8101] usb 3-1: Using ep0 maxpacket: 32 [ 507.924973][ T8101] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 507.946172][ T8101] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 507.967754][ T8101] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 507.977828][ T8101] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 508.019695][ T8101] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 508.035167][ T8101] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 508.050943][ T8101] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 508.066176][ T8101] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.133472][ T8101] usb 3-1: config 0 descriptor?? [ 508.420988][ T8101] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 508.524604][ T8101] usb 3-1: USB disconnect, device number 28 [ 508.619302][ T8101] usblp0: removed [ 508.636619][ T7827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.752426][ T7827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.009099][ T8101] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 509.031192][ T477] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.031706][ T477] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.034329][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.034570][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.162146][ T8101] usb 3-1: Using ep0 maxpacket: 32 [ 509.172675][ T8101] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 509.172814][ T8101] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 509.172945][ T8101] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 509.173097][ T8101] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 509.173231][ T8101] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 509.173380][ T8101] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 509.173607][ T8101] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 509.173784][ T8101] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.221974][ T8101] usb 3-1: config 0 descriptor?? [ 509.422830][ T8228] [U]  [ 509.467025][ T8101] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 509.846228][ T8239] usblp0:failed reading printer status (-32) [ 509.872508][ T24] usb 3-1: USB disconnect, device number 29 [ 509.904652][ T24] usblp0: removed [ 510.013364][ T8022] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 510.123855][ T8022] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 510.137198][ T8022] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 510.199260][ T8022] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 510.217041][ T8022] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 510.368589][ T8022] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 510.394759][ T8022] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 510.462735][ T8022] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 511.271466][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.278263][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.208635][ T8022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.502333][ T8022] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.698779][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.706612][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.932872][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.940879][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.191417][ T8278] netlink: 1 bytes leftover after parsing attributes in process `syz.2.579'. [ 513.727547][ T8282] fuse: Unknown parameter '0x0000000000000003' [ 514.025446][ T11] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 514.146138][ T11] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 516.003806][ T8300] [U]  [ 516.292739][ T11] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 516.469306][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 516.498691][ T11] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 516.498999][ T11] usb 5-1: config 0 has no interface number 0 [ 516.499146][ T11] usb 5-1: config 0 interface 184 has no altsetting 0 [ 516.534076][ T11] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 516.534236][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.534365][ T11] usb 5-1: Product: syz [ 516.534470][ T11] usb 5-1: Manufacturer: syz [ 516.534573][ T11] usb 5-1: SerialNumber: syz [ 516.572636][ T11] usb 5-1: config 0 descriptor?? [ 517.000732][ T8312] loop9: detected capacity change from 0 to 7 [ 517.024219][ T8312] Dev loop9: unable to read RDB block 7 [ 517.024450][ T8312] loop9: unable to read partition table [ 517.025213][ T8312] loop9: partition table beyond EOD, truncated [ 517.035287][ T8312] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 517.130313][ T11] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 517.131190][ T11] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 517.241493][ T11] usb 5-1: USB disconnect, device number 21 [ 517.312664][ T6873] udevd[6873]: setting mode of /dev/bus/usb/005/021 to 020664 failed: No such file or directory [ 517.313119][ T6873] udevd[6873]: setting owner of /dev/bus/usb/005/021 to uid=0, gid=0 failed: No such file or directory [ 518.360748][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.420125][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.894762][ T8022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.962783][ T477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.995515][ T477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.426842][ T8374] fuse: Bad value for 'fd' [ 521.490349][ T11] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 521.755921][ T11] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 521.809012][ T11] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 521.877211][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 521.900875][ T11] usb 3-1: New USB device found, idVendor=056a, idProduct=037b, bcdDevice= 0.00 [ 521.928722][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.987670][ T11] usb 3-1: config 0 descriptor?? [ 522.316476][ T8022] veth0_vlan: entered promiscuous mode [ 522.467175][ T8022] veth1_vlan: entered promiscuous mode [ 522.677826][ T11] wacom 0003:056A:037B.0006: unknown main item tag 0x2 [ 522.726509][ T11] wacom 0003:056A:037B.0006: unknown main item tag 0x6 [ 522.795567][ T11] wacom 0003:056A:037B.0006: ignoring exceeding usage max [ 522.943337][ T11] usb 3-1: USB disconnect, device number 30 [ 523.054218][ T8022] veth0_macvtap: entered promiscuous mode [ 523.134916][ T8022] veth1_macvtap: entered promiscuous mode [ 523.486183][ T8022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.675156][ T8022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.950610][ T5708] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.995208][ T5708] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.032963][ T5708] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.080510][ T5708] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.649466][ T5682] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 524.850667][ T5682] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.900409][ T5682] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 524.960726][ T5682] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.993207][ T5682] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 525.015539][ T5682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.090260][ T5682] usb 5-1: config 0 descriptor?? [ 525.678927][ T5682] hid-picolcd 0003:04D8:F002.0007: No report with id 0xf3 found [ 525.711105][ T5682] hid-picolcd 0003:04D8:F002.0007: No report with id 0xf4 found [ 525.808288][ T5682] usb 5-1: USB disconnect, device number 22 [ 527.080911][ T8433] fuse: Bad value for 'fd' [ 528.963083][ T5684] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 529.191801][ T5684] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 529.246373][ T5684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.297672][ T5684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.327021][ T5684] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 529.408835][ T5684] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 529.459821][ T5684] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 529.488559][ T5684] usb 3-1: Manufacturer: syz [ 529.542919][ T5684] usb 3-1: config 0 descriptor?? [ 530.106533][ T5684] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 530.218455][ T5684] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 530.261211][ T5682] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 530.341643][ T5684] usb 3-1: USB disconnect, device number 31 [ 530.456967][ T5682] usb 5-1: Using ep0 maxpacket: 16 [ 530.513652][ T5682] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 530.561628][ T5682] usb 5-1: config 0 has no interface number 0 [ 530.601453][ T5682] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.668975][ T5682] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.715221][ T5682] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 530.759896][ T5682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.832439][ T5682] usb 5-1: config 0 descriptor?? [ 531.529566][ T8486] fido_id[8486]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 531.778999][ T5682] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0009/input/input10 [ 532.025845][ T5682] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0009/input/input11 [ 532.049845][ T8496] fuse: Bad value for 'fd' [ 532.206418][ T5682] uclogic 0003:28BD:0071.0009: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 532.429316][ T5682] usb 5-1: USB disconnect, device number 23 [ 533.314947][ T8501] fido_id[8501]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 533.787039][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.838573][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.904789][ T5584] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 533.915027][ T5584] CPU: 1 UID: 0 PID: 5584 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(lazy) [ 533.915188][ T5584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 533.915336][ T5584] Workqueue: hci5 hci_rx_work [ 533.915654][ T5584] Call Trace: [ 533.915707][ T5584] [ 533.915760][ T5584] __dump_stack+0x26/0x30 [ 533.915998][ T5584] dump_stack_lvl+0x14c/0x1c0 [ 533.916167][ T5584] dump_stack+0x1e/0x25 [ 533.916316][ T5584] sysfs_create_dir_ns+0x46c/0x540 [ 533.916540][ T5584] kobject_add_internal+0x1084/0x19b0 [ 533.916850][ T5584] kobject_add+0x2c1/0x410 [ 533.917054][ T5584] ? kmsan_get_metadata+0xf1/0x160 [ 533.917326][ T5584] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 533.917548][ T5584] device_add+0xa70/0x1c90 [ 533.917831][ T5584] hci_conn_add_sysfs+0x159/0x2e0 [ 533.918087][ T5584] le_conn_complete_evt+0x1de1/0x2330 [ 533.918374][ T5584] hci_le_enh_conn_complete_evt+0x158/0x260 [ 533.918594][ T5584] hci_le_meta_evt+0x6eb/0x960 [ 533.918782][ T5584] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 533.918988][ T5584] hci_event_packet+0xb8c/0x1820 [ 533.919137][ T5584] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 533.919340][ T5584] hci_rx_work+0x8c3/0xfc0 [ 533.919492][ T5584] ? kmsan_get_metadata+0xf1/0x160 [ 533.919690][ T5584] ? __pfx_hci_rx_work+0x10/0x10 [ 533.919856][ T5584] process_scheduled_works+0xb65/0x1e40 [ 533.920138][ T5584] worker_thread+0xee4/0x1590 [ 533.920366][ T5584] kthread+0x53a/0x5f0 [ 533.920561][ T5584] ? __pfx_worker_thread+0x10/0x10 [ 533.920747][ T5584] ? __pfx_kthread+0x10/0x10 [ 533.920934][ T5584] ret_from_fork+0x20f/0x8d0 [ 533.921104][ T5584] ? __switch_to+0x573/0x7a0 [ 533.921299][ T5584] ? __pfx_kthread+0x10/0x10 [ 533.921490][ T5584] ret_from_fork_asm+0x1a/0x30 [ 533.921696][ T5584] [ 534.138600][ T5584] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 534.155735][ T5584] Bluetooth: hci5: failed to register connection device [ 534.610628][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.668158][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.550925][ T5682] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 537.771668][ T5682] usb 7-1: Using ep0 maxpacket: 32 [ 537.874603][ T5682] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 537.925683][ T5682] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.967624][ T5682] usb 7-1: Product: syz [ 537.995985][ T5682] usb 7-1: Manufacturer: syz [ 538.009745][ T5682] usb 7-1: SerialNumber: syz [ 538.325083][ T5682] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 539.043124][ T5682] usb 7-1: USB disconnect, device number 9 [ 539.263395][ T5798] udevd[5798]: setting owner of /dev/bus/usb/007/009 to uid=0, gid=0 failed: No such file or directory [ 540.259629][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.089722][ T8101] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 541.359207][ T8101] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 90, changing to 10 [ 541.440422][ T8101] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33288, setting to 1024 [ 541.532721][ T8101] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 541.613515][ T8101] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.710294][ T8101] usb 9-1: config 0 descriptor?? [ 542.336071][ T8101] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 542.504377][ T8101] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.000A/input/input12 [ 542.584272][ C0] usb 9-1: input irq status -75 received [ 542.809102][ T11] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 542.863257][ T8101] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 542.977323][ T8101] usb 9-1: USB disconnect, device number 2 [ 543.030356][ T11] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 543.082810][ T11] usb 7-1: config 0 has no interface number 0 [ 543.145428][ T11] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 543.199460][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.244574][ T11] usb 7-1: Product: syz [ 543.285557][ T11] usb 7-1: Manufacturer: syz [ 543.313809][ T11] usb 7-1: SerialNumber: syz [ 543.413650][ T11] usb 7-1: config 0 descriptor?? [ 543.586999][ T8632] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 543.880259][ T8628] fido_id[8628]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 544.125142][ T11] asix 7-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 544.193907][ T11] asix 7-1:0.251: probe with driver asix failed with error -524 [ 544.381967][ T30] usb 7-1: USB disconnect, device number 10 [ 545.572140][ T8651] netlink: 80 bytes leftover after parsing attributes in process `syz.8.664'. [ 545.594828][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.8.664'. [ 545.777148][ T8651] netlink: 128 bytes leftover after parsing attributes in process `syz.8.664'. [ 549.429182][ T30] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 549.655748][ T30] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 549.706344][ T30] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 549.779573][ T30] usb 7-1: config 220 has no interface number 2 [ 549.803904][ T30] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 549.860435][ T30] usb 7-1: config 220 interface 0 has no altsetting 0 [ 549.885855][ T30] usb 7-1: config 220 interface 76 has no altsetting 0 [ 549.916671][ T30] usb 7-1: config 220 interface 1 has no altsetting 0 [ 549.984734][ T30] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 550.022531][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.067225][ T30] usb 7-1: Product: syz [ 550.098443][ T30] usb 7-1: Manufacturer: syz [ 550.125926][ T30] usb 7-1: SerialNumber: syz [ 550.522771][ T30] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 550.571618][ T30] uvcvideo 7-1:220.0: No valid video chain found. [ 550.588851][ T30] usb 7-1: selecting invalid altsetting 0 [ 550.774513][ T30] usb 7-1: selecting invalid altsetting 0 [ 550.782026][ T8710] fuse: Unknown parameter 'grou00000000000000000000' [ 550.802646][ T30] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 550.882648][ T30] usb 7-1: USB disconnect, device number 11 [ 553.911149][ T8738] fuse: Unknown parameter 'grou00000000000000000000' [ 557.571875][ T30] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 557.585100][ T8779] fuse: Unknown parameter 'grou00000000000000000000' [ 557.774935][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 557.832621][ T30] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 557.852737][ T30] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 557.886333][ T30] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 557.916016][ T30] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 557.945208][ T30] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 557.963195][ T30] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 557.984244][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.111542][ T30] usbtmc 3-1:16.0: bulk endpoints not found [ 559.695588][ T8806] netlink: 80 bytes leftover after parsing attributes in process `syz.7.714'. [ 559.740511][ T8806] netlink: 12 bytes leftover after parsing attributes in process `syz.7.714'. [ 559.924960][ T8806] netlink: 128 bytes leftover after parsing attributes in process `syz.7.714'. [ 560.588701][ T30] usb 3-1: USB disconnect, device number 32 [ 565.805106][ T8873] netlink: 12 bytes leftover after parsing attributes in process `syz.6.736'. [ 566.288517][ T30] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 566.458845][ T30] usb 7-1: device descriptor read/64, error -71 [ 566.771680][ T30] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 566.952008][ T30] usb 7-1: device descriptor read/64, error -71 [ 567.107713][ T30] usb usb7-port1: attempt power cycle [ 567.508368][ T30] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 567.574023][ T30] usb 7-1: device descriptor read/8, error -71 [ 567.851741][ T30] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 567.914253][ T30] usb 7-1: device descriptor read/8, error -71 [ 568.061298][ T30] usb usb7-port1: unable to enumerate USB device [ 569.473801][ T8906] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 569.718223][ T30] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 569.859924][ T30] usb 7-1: device descriptor read/64, error -71 [ 570.128454][ T30] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 570.288530][ T30] usb 7-1: device descriptor read/64, error -71 [ 570.411352][ T30] usb usb7-port1: attempt power cycle [ 570.768528][ T30] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 570.811852][ T30] usb 7-1: device descriptor read/8, error -71 [ 571.068707][ T30] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 571.136279][ T30] usb 7-1: device descriptor read/8, error -71 [ 571.254110][ T30] usb usb7-port1: unable to enumerate USB device [ 571.263354][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.759'. [ 571.522254][ T8936] netlink: 80 bytes leftover after parsing attributes in process `syz.4.760'. [ 571.608252][ T8101] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 571.617787][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.760'. [ 571.749302][ T8101] usb 3-1: device descriptor read/64, error -71 [ 571.781856][ T8936] netlink: 128 bytes leftover after parsing attributes in process `syz.4.760'. [ 572.018524][ T8101] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 572.358287][ T8101] usb 3-1: device descriptor read/64, error -71 [ 572.511762][ T8101] usb usb3-port1: attempt power cycle [ 572.713244][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.720165][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.881515][ T8101] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 572.975512][ T8101] usb 3-1: device descriptor read/8, error -71 [ 573.268310][ T8101] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 573.360127][ T8101] usb 3-1: device descriptor read/8, error -71 [ 573.500048][ T8101] usb usb3-port1: unable to enumerate USB device [ 576.151779][ T30] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 576.364962][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 576.428948][ T30] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 576.448085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 576.473110][ T30] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 576.527389][ T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.594257][ T30] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 576.640660][ T30] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 576.684538][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.761846][ T30] usb 3-1: config 0 descriptor?? [ 576.781696][ T14] Bluetooth: hci1: Frame reassembly failed (-84) [ 577.071409][ T8101] usb 3-1: USB disconnect, device number 37 [ 577.652693][ T8101] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 577.871520][ T8101] usb 3-1: Using ep0 maxpacket: 32 [ 577.922884][ T8101] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 577.961407][ T8101] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 577.996048][ T8101] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.039372][ T8101] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 578.100176][ T8101] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 578.133336][ T8101] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.207549][ T8101] usb 3-1: config 0 descriptor?? [ 578.364632][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.8.782'. [ 578.778388][ T5579] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 578.811583][ T8101] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 579.102308][ T8101] usb 9-1: unable to get BOS descriptor or descriptor too short [ 579.170656][ T8101] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 579.216408][ T8101] usb 9-1: can't read configurations, error -71 [ 580.623026][ T30] usb 3-1: USB disconnect, device number 38 [ 581.448846][ T9014] loop4: detected capacity change from 0 to 1024 [ 581.554918][ T9014] EXT4-fs: Ignoring removed oldalloc option [ 581.610908][ T9014] EXT4-fs: Ignoring removed oldalloc option [ 581.707112][ T9014] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 581.789715][ T29] audit: type=1326 audit(1781617194.833:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.6.793" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c59d9ce59 code=0x7ffc0000 [ 582.011308][ T29] audit: type=1326 audit(1781617194.853:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.6.793" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8c59d59bbb code=0x7ffc0000 [ 582.039621][ T9014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.163868][ T29] audit: type=1326 audit(1781617194.853:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.6.793" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c59d9ce59 code=0x7ffc0000 [ 582.200571][ T29] audit: type=1326 audit(1781617194.863:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.6.793" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c59d9ce59 code=0x7ffc0000 [ 582.265406][ T29] audit: type=1326 audit(1781617194.863:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.6.793" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c59d9caeb code=0x7ffc0000 [ 582.353008][ T29] audit: type=1326 audit(1781617194.863:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.6.793" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f8c59d9ce59 code=0x7ffc0000 [ 582.404658][ T9025] fuse: Unknown parameter 'fd0x0000000000000004' [ 582.478248][ T29] audit: type=1326 audit(1781617194.883:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.6.793" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c59d9ce59 code=0x7ffc0000 [ 582.489373][ T29] audit: type=1326 audit(1781617194.883:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.6.793" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c59d9ce59 code=0x7ffc0000 [ 582.489660][ T29] audit: type=1326 audit(1781617194.953:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.6.793" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c59d9ce59 code=0x7ffc0000 [ 582.489913][ T29] audit: type=1326 audit(1781617195.013:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.6.793" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c59d9ce59 code=0x7ffc0000 [ 582.842117][ T5581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.782105][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.7.798'. [ 584.749977][ T8101] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 584.932047][ T8101] usb 5-1: Using ep0 maxpacket: 32 [ 584.968925][ T8101] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 585.003807][ T8101] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 585.040997][ T8101] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.083655][ T8101] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 585.118070][ T8101] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 585.156478][ T8101] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.194831][ T8101] usb 5-1: config 0 descriptor?? [ 585.447423][ T8101] usb 5-1: USB disconnect, device number 24 [ 585.554347][ T9056] netlink: 128 bytes leftover after parsing attributes in process `syz.8.802'. [ 586.025312][ T9062] loop2: detected capacity change from 0 to 512 [ 586.045547][ T9062] EXT4-fs: Ignoring removed nobh option [ 586.086428][ T8101] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 586.097746][ T9062] EXT4-fs (loop2): orphan cleanup on readonly fs [ 586.179965][ T9062] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.804: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 586.258560][ T9062] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 586.262197][ T9062] EXT4-fs (loop2): Remounting filesystem read-only [ 586.271896][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 586.271998][ C0] EXT4-fs (loop2): initial error at time 1781617199: ext4_xattr_inode_update_ref:1037: inode 11 [ 586.272183][ C0] EXT4-fs (loop2): last error at time 1781617199: ext4_xattr_inode_update_ref:1037: inode 11 [ 586.348766][ T9062] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.804: ea_inode dec ref err=-117 [ 586.352737][ T8101] usb 5-1: Using ep0 maxpacket: 32 [ 586.404211][ T9062] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -30) [ 586.443029][ T8101] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 586.450057][ T9062] EXT4-fs (loop2): 1 orphan inode deleted [ 586.477643][ T8101] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 586.503713][ T8101] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.519474][ T9062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 586.567337][ T8101] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 586.610679][ T8101] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 586.648111][ T8101] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.699857][ T8101] usb 5-1: config 0 descriptor?? [ 587.047034][ T5576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.553030][ T9072] fuse: Unknown parameter 'fd0x0000000000000004' [ 587.587504][ T8101] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 587.778124][ T8101] usb 7-1: Using ep0 maxpacket: 16 [ 587.803830][ T8101] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.834415][ T8101] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.865310][ T8101] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 587.904174][ T8101] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 587.924066][ T8101] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.983689][ T8101] usb 7-1: config 0 descriptor?? [ 588.443648][ T8101] usbhid 7-1:0.0: can't add hid device: -71 [ 588.453265][ T8101] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 588.506949][ T8101] usb 7-1: USB disconnect, device number 20 [ 589.096740][ T30] usb 5-1: USB disconnect, device number 25 [ 589.187233][ T9082] loop7: detected capacity change from 0 to 256 [ 589.265690][ T9082] exfat: Deprecated parameter 'namecase' [ 589.476896][ T9082] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 590.138934][ T5579] Bluetooth: hci5: command 0x0406 tx timeout [ 590.189792][ T9090] tmpfs: Bad value for 'nr_inodes' [ 592.046724][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.6.818'. [ 592.508169][ T5051] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 592.694541][ T5051] usb 7-1: device descriptor read/64, error -71 [ 592.998332][ T5051] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 593.235168][ T5051] usb 7-1: device descriptor read/64, error -71 [ 593.412604][ T5051] usb usb7-port1: attempt power cycle [ 593.811935][ T9117] loop7: detected capacity change from 0 to 4096 [ 593.829281][ T5051] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 593.894499][ T9117] EXT4-fs: Ignoring removed mblk_io_submit option [ 593.920896][ T5051] usb 7-1: device descriptor read/8, error -71 [ 593.975182][ T9117] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 594.019145][ T9117] EXT4-fs (loop7): Test dummy encryption mode enabled [ 594.104806][ T9117] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 594.189471][ T9117] System zones: 0-5 [ 594.189602][ T5051] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 594.189640][ T9117] [ 594.225581][ T5051] usb 7-1: device descriptor read/8, error -71 [ 594.340544][ T5051] usb usb7-port1: unable to enumerate USB device [ 594.347392][ T9117] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.662149][ T8022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.081417][ T9130] loop4: detected capacity change from 0 to 512 [ 596.240062][ T9130] EXT4-fs error (device loop4): ext4_quota_enable:7221: comm syz.4.825: Bad quota inum: 134217731, type: 0 [ 596.353335][ T9130] loop4: lost filesystem error report for type 5 error -117 [ 596.354839][ T9130] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=134217731). Please run e2fsck to fix. [ 596.362678][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 596.362777][ C1] EXT4-fs (loop4): initial error at time 1781617209: ext4_quota_enable:7221 [ 596.362908][ C1] EXT4-fs (loop4): last error at time 1781617209: ext4_quota_enable:7221 [ 596.441485][ T9130] EXT4-fs (loop4): mount failed [ 596.456172][ T30] kernel read not supported for file /input/event2 (pid: 30 comm: kworker/1:1) [ 597.718217][ T30] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 597.898640][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 597.933713][ T30] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 597.961219][ T30] usb 3-1: config 0 has no interface number 0 [ 597.982591][ T30] usb 3-1: config 0 interface 184 has no altsetting 0 [ 598.025729][ T30] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 598.044403][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.080703][ T30] usb 3-1: Product: syz [ 598.103881][ T30] usb 3-1: Manufacturer: syz [ 598.146858][ T30] usb 3-1: SerialNumber: syz [ 598.181852][ T30] usb 3-1: config 0 descriptor?? [ 598.577638][ T9158] loop9: detected capacity change from 0 to 7 [ 598.629529][ T9158] Dev loop9: unable to read RDB block 7 [ 598.690343][ T9158] loop9: unable to read partition table [ 598.739091][ T9158] loop9: partition table beyond EOD, truncated [ 598.813555][ T9158] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 598.868460][ T30] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 598.935372][ T30] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 599.081353][ T30] usb 3-1: USB disconnect, device number 39 [ 599.235580][ T9176] loop7: detected capacity change from 0 to 256 [ 599.285319][ T9176] ======================================================= [ 599.285319][ T9176] WARNING: The mand mount option has been deprecated and [ 599.285319][ T9176] and is ignored by this kernel. Remove the mand [ 599.285319][ T9176] option from the mount to silence this warning. [ 599.285319][ T9176] ======================================================= [ 599.361324][ T9173] netlink: 80 bytes leftover after parsing attributes in process `syz.4.837'. [ 599.388151][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.837'. [ 599.416504][ T8101] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 599.552639][ T9173] netlink: 128 bytes leftover after parsing attributes in process `syz.4.837'. [ 599.604740][ T8101] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.645504][ T8101] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.660381][ T9182] loop6: detected capacity change from 0 to 512 [ 599.672078][ T8101] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.700015][ T9176] FAT-fs (loop7): Directory bread(block 64) failed [ 599.709636][ T9182] EXT4-fs: Ignoring removed bh option [ 599.728027][ T9176] FAT-fs (loop7): Directory bread(block 65) failed [ 599.737608][ T8101] usb 9-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 599.767441][ T9176] FAT-fs (loop7): Directory bread(block 66) failed [ 599.780827][ T8101] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.797075][ T9176] FAT-fs (loop7): Directory bread(block 67) failed [ 599.808937][ T9176] FAT-fs (loop7): Directory bread(block 68) failed [ 599.820030][ T8101] usb 9-1: config 0 descriptor?? [ 599.862352][ T9176] FAT-fs (loop7): Directory bread(block 69) failed [ 599.870287][ T9182] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.840: corrupted in-inode xattr: e_value size too large [ 599.924409][ T9176] FAT-fs (loop7): Directory bread(block 70) failed [ 599.976090][ T9182] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 599.977525][ T9176] FAT-fs (loop7): Directory bread(block 71) failed [ 599.987338][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 599.987532][ C1] EXT4-fs (loop6): initial error at time 1781617213: ext4_iget_extra_inode:5128: inode 15 [ 599.987706][ C1] EXT4-fs (loop6): last error at time 1781617213: ext4_iget_extra_inode:5128: inode 15 [ 600.059218][ T9182] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.840: couldn't read orphan inode 15 (err -117) [ 600.120321][ T9182] loop6: lost filesystem error report for type 5 error -117 [ 600.152875][ T9182] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.236003][ T9176] FAT-fs (loop7): Directory bread(block 72) failed [ 600.318157][ T9176] FAT-fs (loop7): Directory bread(block 73) failed [ 600.446794][ T8101] hid-rmi 0003:0461:4E72.000B: unbalanced collection at end of report description [ 600.569897][ T8101] hid-rmi 0003:0461:4E72.000B: parse failed [ 600.621626][ T8101] hid-rmi 0003:0461:4E72.000B: probe with driver hid-rmi failed with error -22 [ 600.757538][ T8101] usb 9-1: USB disconnect, device number 5 [ 600.954817][ T9188] loop2: detected capacity change from 0 to 512 [ 601.051565][ T9188] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 601.072192][ T6791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.737933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 603.463740][ T9205] fuse: Bad value for 'fd' [ 604.808222][ T30] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 605.500892][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 605.531982][ T30] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 605.557716][ T30] usb 7-1: config 0 has no interface number 0 [ 605.565216][ T30] usb 7-1: config 0 interface 184 has no altsetting 0 [ 606.575253][ T30] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 606.598120][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.628116][ T30] usb 7-1: Product: syz [ 606.632629][ T30] usb 7-1: Manufacturer: syz [ 606.637425][ T30] usb 7-1: SerialNumber: syz [ 606.661614][ T30] usb 7-1: config 0 descriptor?? [ 606.767925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 608.668611][ T30] usb 7-1: can't set config #0, error -71 [ 608.735395][ T9233] loop8: detected capacity change from 0 to 16 [ 608.739724][ T30] usb 7-1: USB disconnect, device number 25 [ 608.795884][ T9232] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 608.857321][ T9229] loop2: detected capacity change from 0 to 1024 [ 608.900031][ T9229] EXT4-fs: Ignoring removed bh option [ 608.932918][ T9229] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 609.043013][ T9229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.474599][ T9238] loop6: detected capacity change from 0 to 2048 [ 609.658680][ T9238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.709268][ T9238] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 609.890312][ T5576] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /229/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 609.991739][ T5576] EXT4-fs (loop2): Remounting filesystem read-only [ 610.175581][ T5576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.620201][ T5579] Bluetooth: hci4: command 0x0406 tx timeout [ 610.676962][ T6791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.455033][ T9255] fuse: Bad value for 'fd' [ 614.724173][ T9270] loop6: detected capacity change from 0 to 512 [ 614.799564][ T9270] EXT4-fs (loop6): Test dummy encryption mode enabled [ 614.908750][ T8101] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 614.932273][ T9270] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.865: corrupted in-inode xattr: invalid ea_ino [ 614.973589][ T30] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 614.989313][ T9270] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 614.991087][ T9270] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.865: couldn't read orphan inode 15 (err -117) [ 615.000933][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 615.001039][ C0] EXT4-fs (loop6): initial error at time 1781617228: ext4_iget_extra_inode:5128: inode 15 [ 615.001210][ C0] EXT4-fs (loop6): last error at time 1781617228: ext4_iget_extra_inode:5128: inode 15 [ 615.186719][ T8101] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 615.211879][ T8101] usb 3-1: config 0 has no interface number 0 [ 615.233992][ T9270] loop6: lost filesystem error report for type 5 error -117 [ 615.258658][ T30] usb 9-1: Using ep0 maxpacket: 8 [ 615.269869][ T8101] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 615.310537][ T9270] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.338152][ T8101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.386213][ T30] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 615.405862][ T8101] usb 3-1: Product: syz [ 615.412012][ T30] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 615.455685][ T8101] usb 3-1: Manufacturer: syz [ 615.471700][ T30] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 615.525011][ T8101] usb 3-1: SerialNumber: syz [ 615.539233][ T9270] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #13: comm syz.6.865: corrupted inode contents [ 615.543617][ T30] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 615.629969][ T8101] usb 3-1: config 0 descriptor?? [ 615.669623][ T9270] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #13: comm syz.6.865: mark_inode_dirty error [ 615.686103][ T30] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 615.760695][ T30] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 615.804122][ T9270] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.865: invalid indirect mapped block 234881024 (level 0) [ 615.867237][ T30] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 615.891769][ T9270] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #13: comm syz.6.865: corrupted inode contents [ 615.935132][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.956917][ T9270] EXT4-fs error (device loop6): ext4_truncate:4690: inode #13: comm syz.6.865: mark_inode_dirty error [ 616.062495][ T9270] EXT4-fs error (device loop6) in ext4_setattr:6120: Corrupt filesystem [ 616.095805][ T30] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -22 [ 616.368792][ T5579] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 616.385486][ T5579] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 616.397578][ T5579] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 616.415252][ T5579] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 616.429942][ T5579] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 616.446363][ T8101] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 616.536212][ T8101] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 616.659925][ T8101] asix 3-1:0.251: probe with driver asix failed with error -61 [ 616.674568][ T9270] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.847760][ T8101] usb 3-1: USB disconnect, device number 40 [ 616.936682][ T9287] loop7: detected capacity change from 0 to 1024 [ 617.729045][ T8101] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 617.958475][ T8101] usb 7-1: Using ep0 maxpacket: 16 [ 618.030954][ T8101] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.096598][ T8101] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.155954][ T8101] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 618.180324][ T11] usb 9-1: USB disconnect, device number 6 [ 618.238896][ T8101] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 618.296141][ T8101] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.323248][ T5708] Bluetooth: hci6: Frame reassembly failed (-84) [ 618.416105][ T8101] usb 7-1: config 0 descriptor?? [ 618.450264][ T9297] netlink: 'syz.7.871': attribute type 4 has an invalid length. [ 618.541432][ T5579] Bluetooth: hci1: command tx timeout [ 619.071695][ T8101] usbhid 7-1:0.0: can't add hid device: -71 [ 619.096949][ T8101] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 619.130800][ T8101] usb 7-1: USB disconnect, device number 26 [ 620.379188][ T5579] Bluetooth: hci6: command 0x1003 tx timeout [ 620.385612][ T5584] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 620.497576][ T9315] loop7: detected capacity change from 0 to 128 [ 620.616463][ T9315] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 620.628495][ T5584] Bluetooth: hci1: command tx timeout [ 620.662263][ T9315] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 620.810129][ T9314] fuse: Bad value for 'fd' [ 621.765977][ T8022] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 621.836674][ T9324] IPv6: »»»»»»ªªªªª»†`: Disabled Multicast RS [ 622.341110][ T14] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.698758][ T5584] Bluetooth: hci1: command tx timeout [ 622.713202][ T14] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.847402][ T9330] loop6: detected capacity change from 0 to 8192 [ 622.932911][ T14] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.953239][ T9330] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 623.044197][ T30] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 623.206216][ T14] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.248423][ T30] usb 9-1: Using ep0 maxpacket: 8 [ 623.282555][ T30] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 623.328191][ T30] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 623.361672][ T30] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 623.403439][ T30] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 623.452440][ T30] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 623.515929][ T30] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 623.561874][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.977429][ T30] usb 9-1: usb_control_msg returned -32 [ 624.014781][ T30] usbtmc 9-1:16.0: can't read capabilities [ 624.131981][ T30] usb 9-1: USB disconnect, device number 7 [ 624.471530][ T5051] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 624.621277][ T14] bridge_slave_1: left allmulticast mode [ 624.638380][ T14] bridge_slave_1: left promiscuous mode [ 624.645313][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.681337][ T14] bridge_slave_0: left allmulticast mode [ 624.682303][ T5051] usb 7-1: Using ep0 maxpacket: 16 [ 624.702428][ T14] bridge_slave_0: left promiscuous mode [ 624.716091][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.754036][ T5051] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.779807][ T5584] Bluetooth: hci1: command tx timeout [ 624.821757][ T5051] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.886648][ T5051] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 624.933275][ T5051] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 624.962343][ T5051] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.011737][ T5051] usb 7-1: config 0 descriptor?? [ 625.105646][ T9348] loop2: detected capacity change from 0 to 256 [ 625.453838][ T9348] FAT-fs (loop2): Directory bread(block 64) failed [ 625.483262][ T9348] FAT-fs (loop2): Directory bread(block 65) failed [ 625.521935][ T5051] usbhid 7-1:0.0: can't add hid device: -71 [ 625.531323][ T9348] FAT-fs (loop2): Directory bread(block 66) failed [ 625.561489][ T5051] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 625.616020][ T9348] FAT-fs (loop2): Directory bread(block 67) failed [ 625.616129][ T5051] usb 7-1: USB disconnect, device number 27 [ 625.638731][ T9348] FAT-fs (loop2): Directory bread(block 68) failed [ 625.683960][ T9348] FAT-fs (loop2): Directory bread(block 69) failed [ 625.723549][ T9348] FAT-fs (loop2): Directory bread(block 70) failed [ 625.756208][ T9348] FAT-fs (loop2): Directory bread(block 71) failed [ 625.794820][ T9348] FAT-fs (loop2): Directory bread(block 72) failed [ 625.834913][ T9348] FAT-fs (loop2): Directory bread(block 73) failed [ 626.462939][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.505984][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.552361][ T14] bond0 (unregistering): Released all slaves [ 627.507140][ T9366] loop2: detected capacity change from 0 to 256 [ 627.568463][ T9366] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 627.625540][ T9366] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 627.817142][ T9366] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5817f139, utbl_chksum : 0xe619d30d) [ 627.886882][ T9366] exFAT-fs (loop2): failed to load alloc-bitmap [ 627.936233][ T9366] exFAT-fs (loop2): failed to recognize exfat type [ 628.117692][ T9366] exFAT-fs (loop2): unable to read boot sector [ 628.172735][ T9366] exFAT-fs (loop2): failed to read boot sector [ 628.195255][ T14] hsr_slave_0: left promiscuous mode [ 628.214973][ T9366] exFAT-fs (loop2): failed to recognize exfat type [ 628.230319][ T9371] input: syz0 as /devices/virtual/input/input13 [ 628.251927][ T14] hsr_slave_1: left promiscuous mode [ 628.289547][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.297391][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.680260][ T11] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 628.958419][ T11] usb 9-1: device descriptor read/64, error -71 [ 629.024883][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.072859][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.743091][ T14] veth1_macvtap: left promiscuous mode [ 629.783766][ T14] veth0_macvtap: left promiscuous mode [ 629.838705][ T14] veth1_vlan: left promiscuous mode [ 629.888219][ T14] veth0_vlan: left promiscuous mode [ 630.203818][ T9382] loop7: detected capacity change from 0 to 512 [ 630.478149][ T9382] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.561400][ T9382] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.175121][ T11] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 631.275826][ T8022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.261154][ T5684] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 632.655795][ T9398] raw_sendmsg: syz.7.898 forgot to set AF_INET. Fix it! [ 634.257607][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.266737][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.263505][ T11] usb 9-1: device descriptor read/64, error -71 [ 637.023570][ T9408] 9pnet_fd: p9_fd_create_tcp (9408): problem connecting socket to 127.0.0.1 [ 637.289341][ T11] usb usb9-port1: attempt power cycle [ 637.638081][ T11] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 638.628402][ T11] usb 9-1: device descriptor read/8, error -71 [ 639.875880][ T9434] loop7: detected capacity change from 0 to 256 [ 640.074458][ T14] team_slave_1 (unregistering): left promiscuous mode [ 640.111497][ T9434] FAT-fs (loop7): Directory bread(block 64) failed [ 640.122962][ T14] team0 (unregistering): Port device team_slave_1 removed [ 640.140783][ T9434] FAT-fs (loop7): Directory bread(block 65) failed [ 640.148842][ T5684] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 640.151134][ T11] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 640.177536][ T9434] FAT-fs (loop7): Directory bread(block 66) failed [ 640.185116][ T9434] FAT-fs (loop7): Directory bread(block 67) failed [ 640.197484][ T9434] FAT-fs (loop7): Directory bread(block 68) failed [ 640.206011][ T9434] FAT-fs (loop7): Directory bread(block 69) failed [ 640.223763][ T9434] FAT-fs (loop7): Directory bread(block 70) failed [ 640.236091][ T9434] FAT-fs (loop7): Directory bread(block 71) failed [ 640.250850][ T9434] FAT-fs (loop7): Directory bread(block 72) failed [ 640.259425][ T9434] FAT-fs (loop7): Directory bread(block 73) failed [ 640.278716][ T14] team_slave_0 (unregistering): left promiscuous mode [ 640.304984][ T14] team0 (unregistering): Port device team_slave_0 removed [ 640.332606][ T11] usb 9-1: device descriptor read/64, error -71 [ 640.349633][ T5684] usb 7-1: Using ep0 maxpacket: 8 [ 640.386132][ T5684] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 640.416654][ T5684] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 640.463454][ T5684] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 640.499512][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 640.499590][ T29] audit: type=1800 audit(1781617253.633:247): pid=9434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.909" name="file1" dev="loop7" ino=1048626 res=0 errno=0 [ 640.532267][ T5684] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 640.580315][ T9434] syz.7.909: attempt to access beyond end of device [ 640.580315][ T9434] loop7: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 640.614599][ T5684] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 640.631964][ T11] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 640.688764][ T5684] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 640.716986][ T5684] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.808350][ T11] usb 9-1: device descriptor read/64, error -71 [ 640.963618][ T11] usb usb9-port1: attempt power cycle [ 641.096884][ T5684] usb 7-1: usb_control_msg returned -32 [ 641.132125][ T5684] usbtmc 7-1:16.0: can't read capabilities [ 641.797394][ T9284] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.846140][ T9284] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.898239][ T9284] bridge_slave_0: entered allmulticast mode [ 641.966027][ T5684] usb 7-1: USB disconnect, device number 28 [ 641.994301][ T11] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 642.035085][ T9284] bridge_slave_0: entered promiscuous mode [ 642.554214][ T11] usb 9-1: device descriptor read/8, error -71 [ 642.632906][ T5230] 8021q: adding VLAN 0 to HW filter on device eth13 [ 642.680919][ T9284] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.735242][ T9284] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.784103][ T9284] bridge_slave_1: entered allmulticast mode [ 642.819512][ T9284] bridge_slave_1: entered promiscuous mode [ 642.828844][ T11] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 643.058313][ T11] usb 9-1: device descriptor read/8, error -71 [ 643.189019][ T11] usb usb9-port1: unable to enumerate USB device [ 643.393318][ T9284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.486675][ T9284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.644963][ T29] audit: type=1326 audit(1781617256.773:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9456 comm="syz.2.918" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb950b9ce59 code=0x7ffc0000 [ 643.740011][ T29] audit: type=1326 audit(1781617256.803:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9456 comm="syz.2.918" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb950b9ce59 code=0x7ffc0000 [ 643.794440][ T29] audit: type=1326 audit(1781617256.803:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9456 comm="syz.2.918" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb950b9ce59 code=0x7ffc0000 [ 643.835208][ T9452] [U]  [ 643.860988][ T29] audit: type=1326 audit(1781617256.823:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9456 comm="syz.2.918" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb950b9ce59 code=0x7ffc0000 [ 643.892039][ T9284] team0: Port device team_slave_0 added [ 643.957267][ T29] audit: type=1326 audit(1781617256.823:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9456 comm="syz.2.918" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb950b9ce59 code=0x7ffc0000 [ 644.027138][ T9284] team0: Port device team_slave_1 added [ 644.037592][ T29] audit: type=1326 audit(1781617256.823:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9456 comm="syz.2.918" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb950b9ce59 code=0x7ffc0000 [ 644.165690][ T29] audit: type=1326 audit(1781617256.833:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9456 comm="syz.2.918" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb950b9ce59 code=0x7ffc0000 [ 644.272497][ T29] audit: type=1326 audit(1781617256.833:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9456 comm="syz.2.918" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb950b9ce59 code=0x7ffc0000 [ 644.391099][ T29] audit: type=1326 audit(1781617256.833:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9456 comm="syz.2.918" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fb950b9ce59 code=0x7ffc0000 [ 644.573067][ T9284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.604056][ T9284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.732212][ T9284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.785851][ T9284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.793297][ T9284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.885592][ T9284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.235727][ T9284] hsr_slave_0: entered promiscuous mode [ 645.299700][ T9284] hsr_slave_1: entered promiscuous mode [ 645.356422][ T9284] debugfs: 'hsr0' already exists in 'hsr' [ 645.394719][ T9284] Cannot create hsr debugfs directory [ 645.573434][ T5051] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 645.773182][ T5051] usb 7-1: Using ep0 maxpacket: 8 [ 645.823156][ T5051] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 645.880213][ T5051] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 645.926603][ T5051] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 646.009057][ T5051] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 646.058620][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 646.058702][ T29] audit: type=1326 audit(1781617259.183:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.7.925" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b159ce59 code=0x7ffc0000 [ 646.115812][ T5051] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 646.163831][ T5051] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 646.207000][ T5051] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.236591][ T29] audit: type=1326 audit(1781617259.183:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.7.925" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b159ce59 code=0x7ffc0000 [ 646.358517][ T29] audit: type=1326 audit(1781617259.243:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.7.925" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b159ce59 code=0x7ffc0000 [ 646.396413][ T9483] loop2: detected capacity change from 0 to 4096 [ 646.513000][ T29] audit: type=1326 audit(1781617259.243:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.7.925" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b159ce59 code=0x7ffc0000 [ 646.626902][ T29] audit: type=1326 audit(1781617259.273:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.7.925" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fd6b159ce59 code=0x7ffc0000 [ 646.653029][ T5051] usb 7-1: usb_control_msg returned -32 [ 646.659211][ T5051] usbtmc 7-1:16.0: can't read capabilities [ 646.670379][ T29] audit: type=1326 audit(1781617259.273:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.7.925" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b159ce59 code=0x7ffc0000 [ 646.699834][ T29] audit: type=1326 audit(1781617259.273:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.7.925" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd6b159ce59 code=0x7ffc0000 [ 646.744853][ T5051] usb 7-1: USB disconnect, device number 29 [ 646.761405][ T29] audit: type=1326 audit(1781617259.273:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.7.925" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd6b159ce59 code=0x7ffc0000 [ 646.805019][ T9483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.818599][ T29] audit: type=1326 audit(1781617259.283:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.7.925" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b159ce59 code=0x7ffc0000 [ 646.938268][ T11] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 647.132981][ T11] usb 9-1: device descriptor read/64, error -71 [ 647.418793][ T11] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 647.619824][ T11] usb 9-1: device descriptor read/64, error -71 [ 647.780921][ T11] usb usb9-port1: attempt power cycle [ 648.564740][ T29] audit: type=1800 audit(1781617261.673:293): pid=9498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.924" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 648.623313][ T9493] loop7: detected capacity change from 0 to 4096 [ 648.754153][ T9493] EXT4-fs (loop7): Test dummy encryption mode enabled [ 648.834876][ T9493] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8843c01c, mo2=0003] [ 648.940670][ T9493] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.927: bad orphan inode 16777216 [ 649.029649][ T9493] loop7: lost filesystem error report for type 5 error -117 [ 649.067596][ T9493] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.108117][ T11] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 649.593724][ T9493] fscrypt (loop7): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 649.771794][ T11] usb 9-1: device descriptor read/8, error -71 [ 649.880813][ T9504] fscrypt (loop7): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 651.326205][ T8022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.705957][ T9515] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 651.845194][ T9284] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 652.087474][ T9284] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 652.628719][ T9521] loop7: detected capacity change from 0 to 128 [ 652.701126][ T9284] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 652.795915][ T9514] [U]  [ 652.969481][ T9521] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 653.075288][ T9521] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.781768][ T9284] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 653.895879][ T9284] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 653.931436][ T9284] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 654.487222][ T8022] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 654.848765][ T9284] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 655.160781][ T9284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 655.308955][ T5230] 8021q: adding VLAN 0 to HW filter on device eth14 [ 655.928276][ T5576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.718760][ T11] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 656.824235][ T9553] loop2: detected capacity change from 0 to 256 [ 656.918357][ T11] usb 9-1: Using ep0 maxpacket: 32 [ 656.957133][ T11] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 656.990640][ T11] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 657.004044][ T9553] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 657.040772][ T11] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 657.081908][ T11] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 657.140298][ T11] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 657.199385][ T11] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 657.227921][ T9553] exFAT-fs (loop2): valid_size(562949953421322) is greater than size(10) [ 657.261346][ T11] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 657.358200][ T11] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 657.405081][ T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.492460][ T11] usb 9-1: config 0 descriptor?? [ 657.795250][ T11] usb 9-1: USB disconnect, device number 20 [ 658.044624][ T9284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.248315][ T5682] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 658.301925][ T9284] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.372450][ T477] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.380161][ T477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.403059][ T11] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 658.425469][ T5682] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 658.476203][ T5682] usb 7-1: config 1 interface 0 has no altsetting 0 [ 658.545919][ T5682] usb 7-1: string descriptor 0 read error: -22 [ 658.556351][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.564060][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.584657][ T5682] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 658.589401][ T11] usb 9-1: Using ep0 maxpacket: 32 [ 658.594393][ T5682] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.655091][ T11] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 658.695597][ T11] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 658.744493][ T11] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 658.793721][ T11] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 658.830165][ T11] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 658.893374][ T11] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 658.928705][ T11] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 658.997645][ T11] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 659.044613][ T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.111758][ T11] usb 9-1: config 0 descriptor?? [ 659.177417][ T5682] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 659.382204][ T5682] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:0926:3333.000C/input/input14 [ 659.721897][ T5682] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 659.840186][ T5682] usb 7-1: USB disconnect, device number 30 [ 659.852720][ T11] usb 9-1: USB disconnect, device number 21 [ 660.682432][ T9570] fido_id[9570]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 661.875281][ T9583] [U]  [ 662.046590][ T5230] 8021q: adding VLAN 0 to HW filter on device eth15 [ 663.480247][ T11] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 663.622658][ T9610] loop2: detected capacity change from 0 to 128 [ 663.679346][ T11] usb 9-1: Using ep0 maxpacket: 32 [ 663.746117][ T9610] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 663.780880][ T11] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 663.870296][ T9610] System zones: 1-3, 19-19, 35-36 [ 663.878374][ T11] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 663.938614][ T11] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 663.952736][ T9610] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 664.028443][ T11] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 664.051389][ T9610] ext4 filesystem being mounted at /252/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 664.067399][ T11] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 664.168926][ T9609] loop6: detected capacity change from 0 to 4096 [ 664.208001][ T11] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 664.234261][ T9609] EXT4-fs: inline encryption not supported [ 664.260301][ T11] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 664.276606][ T9609] EXT4-fs: quotafile must be on filesystem root [ 664.349009][ T9610] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 1986356271 (only 1 groups) [ 664.367630][ T11] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 664.395917][ T9617] loop7: detected capacity change from 0 to 256 [ 664.430127][ T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.638552][ T11] usb 9-1: config 0 descriptor?? [ 665.069161][ T9617] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 665.168174][ T9617] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 665.179158][ T9617] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 665.193617][ T29] audit: type=1800 audit(1781617278.323:294): pid=9617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.952" name="file1" dev="loop7" ino=1048628 res=0 errno=0 [ 665.233236][ T5682] usb 9-1: USB disconnect, device number 22 [ 665.239871][ T9617] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 665.377971][ T9623] netlink: 12 bytes leftover after parsing attributes in process `syz.6.950'. [ 666.311069][ T5682] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 666.491141][ T5576] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 667.352466][ T9284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.177508][ T9640] loop7: detected capacity change from 0 to 256 [ 668.187265][ T9640] exfat: Deprecated parameter 'utf8' [ 668.193789][ T9640] exfat: Deprecated parameter 'namecase' [ 668.202992][ T9640] exfat: Unknown parameter 'seclabel' [ 668.682715][ T9636] fuse: Bad value for 'fd' [ 670.831944][ T9650] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 670.879292][ T9650] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 670.955772][ T9648] [U]  [ 671.461725][ T9664] netlink: 'syz.8.961': attribute type 4 has an invalid length. [ 672.540597][ T9670] evm: overlay not supported [ 673.290902][ T9678] ===================================================== [ 673.298247][ T9678] BUG: KMSAN: uninit-value in irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 673.307250][ T9678] irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 673.313922][ T9678] irqentry_exit+0x82/0xa00 [ 673.318782][ T9678] sysvec_reschedule_ipi+0x74/0x80 [ 673.324138][ T9678] asm_sysvec_reschedule_ipi+0x1f/0x30 [ 673.329815][ T9678] pfkey_send_policy_notify+0xbcf/0x12b0 [ 673.335765][ T9678] km_policy_notify+0xc9/0x1a0 [ 673.340819][ T9678] pfkey_spdadd+0x1bed/0x21d0 [ 673.345732][ T9678] pfkey_sendmsg+0x1bd6/0x1d10 [ 673.350723][ T9678] ____sys_sendmsg+0xf37/0xfd0 [ 673.355831][ T9678] ___sys_sendmsg+0x271/0x3b0 [ 673.360748][ T9678] __sys_sendmmsg+0x2d9/0x7c0 [ 673.365669][ T9678] __x64_sys_sendmmsg+0xc6/0x150 [ 673.370851][ T9678] x64_sys_call+0x2f8c/0x3ea0 [ 673.375748][ T9678] do_syscall_64+0x15d/0x3c0 [ 673.380507][ T9678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.386602][ T9678] [ 673.389027][ T9678] Local variable c created at: [ 673.393911][ T9678] pfkey_spdadd+0x6e/0x21d0 [ 673.398638][ T9678] pfkey_sendmsg+0x1bd6/0x1d10 [ 673.403615][ T9678] [ 673.406057][ T9678] CPU: 1 UID: 0 PID: 9678 Comm: syz.2.962 Not tainted syzkaller #0 PREEMPT(lazy) [ 673.415438][ T9678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 673.425635][ T9678] ===================================================== [ 673.432715][ T9678] Disabling lock debugging due to kernel taint [ 673.438997][ T9678] Kernel panic - not syncing: kmsan.panic set ... [ 673.445567][ T9678] CPU: 1 UID: 0 PID: 9678 Comm: syz.2.962 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 673.456550][ T9678] Tainted: [B]=BAD_PAGE [ 673.460824][ T9678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 673.471055][ T9678] Call Trace: [ 673.474449][ T9678] [ 673.477504][ T9678] __dump_stack+0x26/0x30 [ 673.482051][ T9678] dump_stack_lvl+0x50/0x1c0 [ 673.486841][ T9678] ? dump_stack+0x12/0x25 [ 673.491409][ T9678] dump_stack+0x1e/0x25 [ 673.495758][ T9678] vpanic+0x7b4/0x1430 [ 673.500078][ T9678] panic+0x15d/0x160 [ 673.504269][ T9678] kmsan_report+0x31a/0x320 [ 673.509033][ T9678] ? __msan_warning+0x1b/0x30 [ 673.513933][ T9678] ? irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 673.520768][ T9678] ? irqentry_exit+0x82/0xa00 [ 673.525691][ T9678] ? sysvec_reschedule_ipi+0x74/0x80 [ 673.531217][ T9678] ? asm_sysvec_reschedule_ipi+0x1f/0x30 [ 673.537067][ T9678] ? pfkey_send_policy_notify+0xbcf/0x12b0 [ 673.543118][ T9678] ? km_policy_notify+0xc9/0x1a0 [ 673.548266][ T9678] ? pfkey_spdadd+0x1bed/0x21d0 [ 673.553370][ T9678] ? pfkey_sendmsg+0x1bd6/0x1d10 [ 673.558551][ T9678] ? ____sys_sendmsg+0xf37/0xfd0 [ 673.563734][ T9678] ? ___sys_sendmsg+0x271/0x3b0 [ 673.568849][ T9678] ? __sys_sendmmsg+0x2d9/0x7c0 [ 673.573938][ T9678] ? __x64_sys_sendmmsg+0xc6/0x150 [ 673.579296][ T9678] ? x64_sys_call+0x2f8c/0x3ea0 [ 673.584377][ T9678] ? do_syscall_64+0x15d/0x3c0 [ 673.589329][ T9678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.595614][ T9678] ? preempt_schedule_irq+0x79/0xa0 [ 673.601133][ T9678] ? raw_irqentry_exit_cond_resched+0x5d/0x80 [ 673.607420][ T9678] ? irqentry_exit_to_kernel_mode_preempt+0x8b/0xc0 [ 673.614242][ T9678] ? irqentry_exit+0x82/0xa00 [ 673.619182][ T9678] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 673.625789][ T9678] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 673.632096][ T9678] ? trace_reschedule_exit+0x22/0x1a0 [ 673.637740][ T9678] ? sysvec_reschedule_ipi+0x74/0x80 [ 673.643281][ T9678] ? kmsan_get_metadata+0xf1/0x160 [ 673.648667][ T9678] __msan_warning+0x1b/0x30 [ 673.653416][ T9678] irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 673.660108][ T9678] irqentry_exit+0x82/0xa00 [ 673.664875][ T9678] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 673.671543][ T9678] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 673.677861][ T9678] ? trace_reschedule_exit+0x22/0x1a0 [ 673.683464][ T9678] sysvec_reschedule_ipi+0x74/0x80 [ 673.688842][ T9678] asm_sysvec_reschedule_ipi+0x1f/0x30 [ 673.694518][ T9678] RIP: 0010:pfkey_send_policy_notify+0xbcf/0x12b0 [ 673.701184][ T9678] Code: 94 c3 20 c3 44 89 75 84 45 85 f6 0f 95 45 d4 45 8b 75 0c 49 83 fe 14 0f 94 45 a0 48 8b bd 08 ff ff ff e8 24 05 81 f3 44 8b 28 <4d> 85 ed 0f 95 85 70 ff ff ff 8b 02 41 c7 04 24 00 00 00 00 45 89 [ 673.721000][ T9678] RSP: 0018:ffff888059d7b5c8 EFLAGS: 00010282 [ 673.727259][ T9678] RAX: ffff88805957b72c RBX: 0000000000000001 RCX: 00000000001bff67 [ 673.735404][ T9678] RDX: ffff88805997b72c RSI: 0000000000000001 RDI: ffff888059d7b72c [ 673.743581][ T9678] RBP: ffff888059d7b6c0 R08: ffffea000000000f R09: 0000000000000002 [ 673.751766][ T9678] R10: 000000000000000a R11: 0000000000000002 R12: ffff888053f9ad58 [ 673.759925][ T9678] R13: 0000000000000000 R14: 0000000000000019 R15: 0000000000000000 [ 673.768086][ T9678] ? pfkey_send_policy_notify+0xbcc/0x12b0 [ 673.774191][ T9678] ? __pfx_pfkey_send_policy_notify+0x10/0x10 [ 673.780504][ T9678] km_policy_notify+0xc9/0x1a0 [ 673.785509][ T9678] pfkey_spdadd+0x1bed/0x21d0 [ 673.790491][ T9678] pfkey_sendmsg+0x1bd6/0x1d10 [ 673.795577][ T9678] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 673.800927][ T9678] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 673.806288][ T9678] ____sys_sendmsg+0xf37/0xfd0 [ 673.811385][ T9678] ___sys_sendmsg+0x271/0x3b0 [ 673.816310][ T9678] ? kmsan_get_metadata+0xf1/0x160 [ 673.821741][ T9678] ? __rcu_read_unlock+0x6c/0xd0 [ 673.826881][ T9678] ? __fget_files+0x3b4/0x4a0 [ 673.831883][ T9678] ? __fget_files+0x3b9/0x4a0 [ 673.836770][ T9678] ? kmsan_get_metadata+0xf1/0x160 [ 673.842145][ T9678] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 673.848235][ T9678] __sys_sendmmsg+0x2d9/0x7c0 [ 673.853177][ T9678] ? kmsan_get_metadata+0xf1/0x160 [ 673.858530][ T9678] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 673.864654][ T9678] __x64_sys_sendmmsg+0xc6/0x150 [ 673.869938][ T9678] x64_sys_call+0x2f8c/0x3ea0 [ 673.874845][ T9678] do_syscall_64+0x15d/0x3c0 [ 673.879722][ T9678] ? clear_bhb_loop+0x50/0xa0 [ 673.884606][ T9678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.890706][ T9678] RIP: 0033:0x7fb950b9ce59 [ 673.895295][ T9678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.915107][ T9678] RSP: 002b:00007fb94edb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 673.923725][ T9678] RAX: ffffffffffffffda RBX: 00007fb950e16180 RCX: 00007fb950b9ce59 [ 673.931866][ T9678] RDX: 00000000000002c8 RSI: 00002000000000c0 RDI: 0000000000000009 [ 673.939982][ T9678] RBP: 00007fb950c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 673.948117][ T9678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.956237][ T9678] R13: 00007fb950e16218 R14: 00007fb950e16180 R15: 00007ffcfa1512e8 [ 673.964408][ T9678] [ 673.968219][ T9678] Kernel Offset: disabled [ 673.972622][ T9678] Rebooting in 86400 seconds..