last executing test programs: 7m4.046284836s ago: executing program 0 (id=93): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="009b501d4d01e77fcea978cb7f9bc8e4b8313a6f5b75fbe99f655f168883fb361a3b9f59f7998da4ce8d19dd17748a1836e8471d396358222e91d591b891b7635a553abc4e9dee9473231216df3e31316986b1495c93f92995ea51553d8fe52b0e654a2fad6c4fcc5303206bd855d68b0c11000bf7fb9793cabf8340b0b8bc026f1006708a62a64ba44e9d6b0a7c29c13d82b30999f92815780d4b7e65dcb6ed20a067898ce8368fbb972d2d"], 0x3, 0x288, &(0x7f0000001000)="$eJzs3c9qM1UUAPAzTdIkn0KycCXCN6ALVx+tT9AiFcSCoGShLrTYFKQTCi0EqmLsyifwCXweN+IL+ACKO7sQRyYzSVOZtPZ/6ff7LdrLuef0npuZtqu588Ubo/3dg6O9k29/i04niZWN2IjTJPqxEjPfR61f/6iPAwCP3Gmex595qV2Gjs9ntJZUNlfuvDkA4E4s/v9/6F4AgPvx8SeffrC5vb31UZp2IkY/jAdJlN/L+c29+CqyGMZa9OLviHyuHL/3/vZWNNNCP94aTcaDonL0+c/Vz9/8PWJavx696NfXr6elhfrJeNCKZ9X6G1kMP/wpevFaff07NfUxWI233yzrnxXrv4he/PJlHEQWu1Vvs/rv1tP03fzHv775rIgW9clkPGjP86rsxr1eGAAAAAAAAAAAAAAAAAAAAAAAnrQX6Vz//Pk7s4P/L5i/4HygycL5PGtpmuZJmX9W34zXm9F8yL0DAAAAAAAAAAAAAAAAAADAY3F0/PX+TpYND291MHusv2Yq/jkfaUfE9dd6/v+TG9N+olG1liURV1urFe1p5eXJjSvuolv0MzxMmnF7lyCZR7qLU8+jXKuIdMvBQuTGq3diOpjdXfs7yWUXt1N3k2RZ3LSfvOb2ayytWv1vpFvtoCa5e8Hqq69cq+e8t2QqiYjW/MMsp16t/8SGrdv9Xb6/v0EAAAAAAAAAAAAAAAAAAEDp7KHfmsmT6Vfv6AcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgyTt7//8VBpOqeFlO3igGzagiD7xFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXgL/BgAA///ejGTs") r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) connect$unix(r1, &(0x7f0000000400)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e) sendfile(r4, r4, &(0x7f0000000100)=0x4, 0x80000000) 7m1.611726985s ago: executing program 0 (id=98): timer_create(0x3, 0x0, &(0x7f00000016c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000001700)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r5, r4, &(0x7f0000000080)=0x2, 0x7ff) stat(&(0x7f0000000100)='./file0\x00', 0x0) 7m0.063989332s ago: executing program 0 (id=100): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b26e53f07030000002a900683749e821dab8b9236592b0004000093"], 0x0}, 0x0) r1 = syz_open_dev$evdev(0x0, 0x4, 0x2) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x2, 0x7]) 6m54.245065941s ago: executing program 0 (id=111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400}) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000007c0)=""/8, 0x8}], 0x1, 0xe, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000340)=0x40, r4, 0x0, 0x3, 0x1}}, 0x20) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32, @ANYBLOB], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x11, 0x80a, 0x1) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) setsockopt$inet_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000380)=@ccm_128={{0x304}, "4be1e9b3b04165b5", "2800ce947570e819230b9a6cd328f1d6", "9ba41a02", "7711108d0dcf87b1"}, 0x28) syz_emit_ethernet(0x2a, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r11, @ANYBLOB="0800050003000000d34b760e048165ccf9b8f9824f2a49ec802fdf0e3fd461260859040a6518075f5f075c33d46f62b097aee6a2fec7d6f9042c1787af457eeb7e664525e3902b13cdf69101000000ab8472914b248dfa82da5ad7a7ae10637f0aa56bfc37de713468c8f4c28866a0d9101af8d1f91eb3242091be9582fa9591eec59e747bbebf8c4ade6bf0839bb4b2ef6a6e2c081cfe8f6e5a13f35647685e42a8"], 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$pptp(0x18, 0x1, 0x2) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f00000004c0), 0x0, 0x0, {0x440}, 0x0, 0x0, 0x0, 0x0}, 0x91) unshare(0x6020400) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0x8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x200000000800, 0x6}, 0x0, 0x0) 6m52.719644365s ago: executing program 0 (id=115): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSEhL2/9J78L5v7/f1ff/e/993fbN+17Wv2WvuZ61n3bPmmue+n+ua57ueo+q1qF+7GRGJPwT+/CVFCBEjhBgmhLhOCBEIISrFV4q/fLyAgpQ/9iTs3+vh9KvdAbuaeP55G88/b+P55208/7yN55+38fzzNp5/3sbzZywv2z6n2PW88u7i9//zMn79/18kt/zkrzaWv7HXfyOF55+38fzzNp5/3sbzz9t4/nkbz/9/v1r/yTGef97G82csL9sOWoj/Ae9D87o662r//jHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYyxvO+Su0EOKv+6vdF2OMMcYYY4wxxv59fP6r3QFjjDHGGGOMMcb+3wMhhRJaBCKfyC9iRAERK64RceJaUVBcJyLiehEvbhCFxI2isCgiiopiIkEUFyWEESisIBGKkqKUiIqbRGlxs0gUZURZUU44UV4kiVtEBXGrqChuE5XE7aKyuENUEVVFNVFd3ClqiLtETVFL1BZ3izqirqgn6ot7RANxr2go7hONxP2isXhANBEPiqbiIdFMPCyai0dEC/GoaCkeE61Ea9FGtBXt/q/yXxJ9xcuin+gvUsQAMVC8IgaJwWKIGCqGiVfFcPGaGCFeF6lipBgl3hCjxZtijHhLjBXjxHjxtpggJopJYrKYIqaKNPGOmCbeFdPFe2KGmClmidkiXcwRc8X7Yp6YLxaID8RC8aFYJBaLJWKpyBAfiUyxTGSJj8Vy8YnIFivESrFKrBZrxFqxTqwXG8RGsUlsFlvEVrFNbBefih1ip9gldos9Yq/YJz4T+8Xn4oD4QuSIL/+b+Wf/Kb8XCBAgQYIGDfkgH8RADMRCLMRBHBSEghCBCMRDPBSCQlAYCkNRKAoJkAAloAQgIBAQlISSEIUolIbSkAiJUBbKggMHSZAEFeBWqAgVoRJUgspQGapAVagK1aE61IAaUBNqQm2oDXWgDtSDenAP3AP3QkNoCI2gETSGxtAEmkBTaArNoBk0h+bQAlpAS2gJraAVtIE20A7aQXtoDx2gA3SCTtAZOkMX6ALJkAxdoSt0g27QHbpDD+gBPaEn9ILe0BtegpfgZXgZ+kMdOQAGwkAYBINgCAyFofAqDIfX4DV4HVJhJIyCN+ANeBPGwBkYC+NgPIyHGnIiTILJQHIqpEEaTINpMB2mwwyYCTNhNqTDHJgLc2EezIf58AEshA/hQ1gMi2EpZEAGZMIyyIIsWA5nIRtWwEpYBathDayGdbAe1sFG2AQbYQtsgW2wDT6FT2En7ITdsBv2wl74DD6Dz+FzSIUcyIGDcBAOwSE4DIchF3LhCByBo3AUjsExOA7H4QSchFNwEk7DaTgDZ+EcnIPzcB4uwAsJ3zTfW2ZDqpCXaallPplPxsgYGStjZZyMkwVlQRmRERkv42UhWUgWloVlUVlUJsgEWUKWkChRkgxlSVlSRmVUlpalZaJMlGVlWemkk0kySVaQFWRFWVFWkrfLyvIOWUVWlR1ddVld1pCdXE1ZS9aWtWUdWVfWk/VlfdlANpANZUPZSDaSjWVj2UQ+KJvKATAEHpaXJ9NCjoSWchS0kq1lG9lWvgmPy/ZyDHSQHWUn+aQcB2Ohi2zvkuUzsqucBN3kc3IyPC97yKnQU74oe8neso98SfaVHVw/2V/OgAFyoJwNg+RgOUQOlfOgrrw8sXrydZkqR8pR8g25FN6UY+RbcqwcJ8fLt+UEOVFOkpPlFDlVpsl35DT5rpwu35Mz5Ew5S86W6XKOnCvfl/PkfLlAfiAXyg/lIrlYLpFLZYb8SGbKZTJLfiyXy09ktlwhV8pVcrVcI9fKdXK93CA3yk1ys9wit8ptcrv8VO6QO+UuuVvukXvlPvmZ3C8/lwfkFzJHfikPyj/JQ/IreVh+LXPlN/KI/FYeld/JY/J7eVz+IE/Ik/KU/FGelj/JM/KsPCd/luflL/KCvCgvSS+FAiWVUloFKp/Kr2JUARWrrlFx6lpVUF2nIup6Fa9uUIXUjaqwKqKKqmIqQRVXJZRRqKwiFaqSqpSKqptUaXWzSlRlVFlVTjlVXiWpW1QFdauqqG5TldTtqrK6Q1VRVVU1VV3dqWqou1RNVUvVVnerOqquqqfqq3tUA3WvaqjuU43U/aqxekA1UQ+qpuoh1Uw9rJqrR1QL9ahqqR5TrVRr1Ua1Ve3U46q9ekJ1UB1VJ/Wk6qyeUl3U0ypZPaO6qmdVN/Wc6q6eVz3UC6qnelH1Ur1VH3VRXVJe9VP9VYoaoAaqV9QgNVgNUUPVMPWqGq5eUyPU6ypVjVSj1BtqtHpTjVFvqbFqnBqv3lYT1EQ1SU1WU9RUlabeUdPUu2q6ek/NUDPVLDVbpas5ashfKi34L+S/+y/yR/z67NvUdvWp2qF2ql1qt9qj9qp9ap/ar/arA+qAylE56qA6qA6pQ+qwOqxyVa46oo6oo+qoOqaOqePquDqhTqqf1Y/qtPpJnVFn1Vn1szqvzqsLf/kZCA1aaqW1DnQ+nV/H6AI6Vl+j4/S1uqC+Tkf09Tpe36AL6Rt1YV1EF9XFdIIurktoo1FbTTrUJXUpHdU36dL6Zp2oy+iyupx2urxO0rf84fzf66+dbqfb6/a6g+6gO+lOurPurLvoLjpZJ+uuuqvuprvp7rq77qF76J66p+6le+k+uo/uq/vqfrqfTtEpeqB+RQ/Sg/UQPVQP06/q4Xq4HqFH6FSdqkfpUXq0Hq3H6DF6rB6rx+vxeoKeoCfpSXqKnqLTdJqepqfp6Xq6nqFn6Fl6lk7X6Xqunqvn6Xl6gV6gF+qFepFepJfoJTpDZ+hMnamzdJZerpfrbL1Cr9Cr9Cq9Rq/R6/Q6vUFv0Jv0Jr1Fb9HZervernfoHXqX3qX36D16n96n9+v9+oA+oHN0jj6oD+pD+pA+rA/rXJ2rj+gj+qg+qo/pY/q4Pq5P6BP6lD6lT+vT+ow+o8/pc/q8Pq8v6Av6kr50+bIvkIEMdKCDfEG+ICaICWKD2CAuiAsKBgWDSBAJ4oP4oFBwY1A4KBIUDYoFCUHxoERgAgxsQEEYlAxKBdHgpqB0cHOQGJQJygblAheUD5KCW4IKwa1BxeC2oFJwe1A5uCOoUkAE1YLqwZ1BjeCuoGZQK6gd3B3UCeoG9YL6wT1Bg+DeoGFwX9AouD9oHDwQNAkeDJoGDwXNgoeD5sEjQYvg0aBl8FjQKmgdtAnaBu3+uX5Q9Q/U9/5MkSdcP9PfpJgBZqB5xQwyg80QM9QMM6+a4eY1M8K8blLNSDPKvGFGmzfNGPOWGWvGmfHmbTPBTDSTzGQzxUw1aeYdM828a6ab98wMM9PMMrNNuplj5pr3zTwz3ywwH5iF5kOzyCw2S8xSk2E+MplmmckyH5vl5hOTbVaYlWaVWW3WmLVmnVlvNpiNZpPZbLaYrWab2W4+NTvMTrPL7DZ7zF6zz3xm9pvPzQHzhckxX5qD5k/mkPnKHDZfm1zzjTlivjVHzXfmmPneHDc/mBPmpDllfjSnzU/mjDlrzpmfzXnzi7lgLppLxl++uL/88o4aNebDfBiDMRiLsRiHcVgQC2IEIxiP8VgIC2FhLIxFsSgmYAKWwBJ4GSFhSSyJUYxiaSyNiZiIZbEsOnSYhElYAStgRayIlbASVsbKWAWrYDWshnfinXgX3oW1sBbejXdjXayL9bE+NsAG2BAbYiNshI2xMTbBJtgUm2IzbIbNsTm2wBbYEltiK2yFbbANtsN22B7bYwfsgJ2wE3bGztgFu2AyJmNX7IrdsBt2x+7YA3tgT+yJvbAX9sE+2Bf7Yj/shymYggNxIA7CQTgEh+AwHIbDcTiOwBGYiqk4CkfhaByNY3AMjsVxOB7fxgk4ESfhZJyCUzEN03AaTsPpOB1n4AychbMwHdNxLs7FeTgPF+ACXIgLcREuwiW4BDMwAzMxE7MwC5fjcszGbFyJK3E1rsa1uBbX43rciBtxM27GrbgVt+N23IE7cBfuwj24B/fhPtyP+/EAHsAczMGDeBAP4SE8jIcxF3PxCB7Bo3gUj+ExPI7H8QSewFN4Ck/jaTyDZ/AcnsPz+AtewIt4CT3GWCli7TU2zl5rC9rrbIwtYP8+LmqL2QRb3Jawxha2Rf4hRmttoi1jy9py1tnyNsne8pu4iq1qq9nq9k5bw95la/4mbmDvtQ3tfbaRvd/Wt/f8Q9zYPmCb2EdtU/uYbWZb2+a2rW1hH7Ut7WO2lW1t29i2trN9ynaxT9tk+4ztap/9TZxpl9n1doPdaDfZ/fZze87+bI/a7+x5+4vtZ/vbYfZVO9y+ZkfY122qHfmbeLx9206wE+0kO9lOsVN/E8+ys226nWPn2vftPDv/N3GG/cgutFl2kV1sl9ilv8aXe8qyH9vl9hObbVfYlXaVXW3X2LV23d96XWW32K12m91nP7M77E67y+62e+zeX+PL53HAfmFz7Jf2iP3WHrJf2cP2mM213/waXz6/Y/Z7e9z+YE/Yk/aU/dGetj/ZM/bsr+d/+dx/tBftJeutICBJijQFlI/yUwwVoFi6huLoWipI11GErqd4uoEK0Y1UmIpQUSpGCVScSpAhJEtEIZWkUhSlm6g03UyJVIbKUjlyVJ6S6BaqQLdSRbqNKtHtVJnuoCpUlapRdbqTatBdVJNqUW26m+pQXapH9ekeakD3UkO6jxrR/dSYHqAm9CA1pYeoGT1MzekRakGPUkt6jFpRa2pDbakdPU7t6QnqQB2pEz1Jnekp6kJPUzI9Q13pWepGz1F3ep560AvUk16kXtSb+tBL1Jdepn7Un1JoAA2kV2gQDaYhNJSG0as0nF6jEfQ6pdJIGkVv0Gh6k8bQWzSWxtF4epsm0ESaRJNpCk2lNHqHptG7NJ3eoxk0k2bRbEqnOTSX3qd5NJ8W0Ae0kD6kRbSYltBSyqCPKJOWURZ9TMvpE8qmFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbadPaQftpF20m/bQXtpHn9F++pwO0BeUQ1/SQfoTHaKv6DB9Tbn0DR2hb+kofUfH6Hs6Tj/QCTpJp+hHOk0/0Rk6S+foZzpPv9AFukiXyJMIIZShCnUYhPnC/GFMWCCMDa8J48Jrw4LhdWEkvD6MD28IC4U3hoXDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCkuHN4eJYZmwbFgudGH5MCm8JawQ3hpWDG8LK4W3h5XDO8IqYdXw0furh3eGNcK7wpphrbB2eHdYJ6wb1gvrh/eEDcJ7w4bhfWGj8P6wYvhA2CR8MGwaPhQ2Cx8Om4ePhC3CR8OW4WNhq7B12CZsG7YLHw/bh0+EHcKOYafwybBz+FTYJXw6TA6fCbuGz/7u8ZRwQDgwfCV8JfT+PrUkujSaEf0omhldFs2KfhxdHv0kmh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFumtcnLvWFXTXuYi73sW7G1whd6Mr7Iq4oq6YS3DFXQlnHDrryIWupCvlou4mV9rd7BJdGVfWlXPOlXdJrq1r59q59u4J18F1dJ3ck+5J95R7yj3tnnbPuK7uWdfNPee6u+ddD/eCe8G96Hq53q6Pe8n1dS+7fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3tct037oj71h1137lj7nt33P3gTriT7pT70Z12P7kz7qw75352590v7oK76C4579Ii70SmRd6NTI+8F5kRmRmZFZkdSY/MicyNvB+ZF5kfWRD5ILIw8mFkUWRxZElkaSQj8lEkM7IskhX5OLI88kkkO7IisjKyKrI6sibiffEdoS/pS/mov8mX9jf7RF/Gl/XlvPPlfZK/xVfwt/qK/jZfyd/uK/s7fBVf1Vfzj/lWvrVv49v6dv5x394/4Tv4jr6Tf9J39k/5Lv5pn+yf8V39s76bf85398/7Hv4F39O/6Hv53r6Pf8n39S/7fr6/T/ED/ED/ih/kB/shfqgf5l/1w/1rfoR/3af6kX6Uf8OP9m/6Mf4tP9aP8+P9236Cn+gn+cl+ip/q0/w7fpp/10/37/kZfqaf5Wf7dD/Hz/Xv+3l+vl/gP/AL/Yd+kV/sl/ilPsN/5DP9Mp/lP/bL/Sc+26/wK/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v91/6nf4nX6X3+33+L1+n//M7/ef+wP+C5/jv/QH/Z/8If+VP+y/9rn+G3/Ef+uP+u/8Mf+9P+5/8Cf8SX/K/+hP+5/8GX/Wn/M/+/P+F3/BX/SX+H/WGGOMMcb+S9TvHB/wL74n/7IuGyiEuHZnsdx/rrm58J/3g2VC54gQ4pn+PR/+66pTJyUl5S+PzVYiKLVYCBG5kp9PXIlXiE7iKZEsOooK/7K/wbL3efqd+tHbhYj9W+dCxIi/xn9f/9b/oP7jT47PrByei/9P6i8WIrHUlZwC4kp8pX7F/6B+kfa/03+Br9KE6PB3OXHiSnylfpJ4Qjwrkv/hkYwxxhhjjDHG2J8NltW6/9798+X78wR9JSe/uBL/3v05Y4wxxhhjjDHGrr7ne/d5+vHk5I7decMb3vDmb5ur/ZeJMcYYY4wx9u925aL/anfCGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlXf8/Pk7sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//JhA6YA==") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ff9) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x4) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000, 0x2000}]) 6m51.060096783s ago: executing program 0 (id=120): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x24, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x4}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x4}}}}}]}}]}}, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) userfaultfd(0x801) pipe2$watch_queue(&(0x7f0000000040), 0x80) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) 6m35.61475859s ago: executing program 32 (id=120): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x24, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x4}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x4}}}}}]}}]}}, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) userfaultfd(0x801) pipe2$watch_queue(&(0x7f0000000040), 0x80) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) 4m36.2679884s ago: executing program 3 (id=464): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = semget$private(0x0, 0x4000000009, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000000c0)=[0x5, 0x8000]) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="07000002000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32, @ANYBLOB], 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f00000004c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x5, 0x6, 0x20, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x20, 0x2, 0x2}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x10}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x20000011}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x3c0, 0x1d8, 0x1d8, 0x3c0, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x9400, 0x98, 0x100, 0x94, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50) 4m31.179828085s ago: executing program 3 (id=472): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) dup3(r2, r0, 0x0) 4m25.313655935s ago: executing program 3 (id=480): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="009b501d4d01e77fcea978cb7f9bc8e4b8313a6f5b75fbe99f655f168883fb361a3b9f59f7998da4ce8d19dd17748a1836e8471d396358222e91d591b891b7635a553abc4e9dee9473231216df3e31316986b1495c93f92995ea51553d8fe52b0e654a2fad6c4fcc5303206bd855d68b0c11000bf7fb9793cabf8340b0b8bc026f1006708a62a64ba44e9d6b0a7c29c13d82b30999f92815780d4b7e65dcb6ed20a067898ce8368fbb972d2d"], 0x3, 0x288, &(0x7f0000001000)="$eJzs3c9qM1UUAPAzTdIkn0KycCXCN6ALVx+tT9AiFcSCoGShLrTYFKQTCi0EqmLsyifwCXweN+IL+ACKO7sQRyYzSVOZtPZ/6ff7LdrLuef0npuZtqu588Ubo/3dg6O9k29/i04niZWN2IjTJPqxEjPfR61f/6iPAwCP3Gmex595qV2Gjs9ntJZUNlfuvDkA4E4s/v9/6F4AgPvx8SeffrC5vb31UZp2IkY/jAdJlN/L+c29+CqyGMZa9OLviHyuHL/3/vZWNNNCP94aTcaDonL0+c/Vz9/8PWJavx696NfXr6elhfrJeNCKZ9X6G1kMP/wpevFaff07NfUxWI233yzrnxXrv4he/PJlHEQWu1Vvs/rv1tP03fzHv775rIgW9clkPGjP86rsxr1eGAAAAAAAAAAAAAAAAAAAAAAAnrQX6Vz//Pk7s4P/L5i/4HygycL5PGtpmuZJmX9W34zXm9F8yL0DAAAAAAAAAAAAAAAAAADAY3F0/PX+TpYND291MHusv2Yq/jkfaUfE9dd6/v+TG9N+olG1liURV1urFe1p5eXJjSvuolv0MzxMmnF7lyCZR7qLU8+jXKuIdMvBQuTGq3diOpjdXfs7yWUXt1N3k2RZ3LSfvOb2ayytWv1vpFvtoCa5e8Hqq69cq+e8t2QqiYjW/MMsp16t/8SGrdv9Xb6/v0EAAAAAAAAAAAAAAAAAAEDp7KHfmsmT6Vfv6AcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgyTt7//8VBpOqeFlO3igGzagiD7xFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXgL/BgAA///ejGTs") r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) connect$unix(r1, &(0x7f0000000400)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e) execve(&(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000dc0)={[0x0]}, 0x0) sendfile(r4, r4, &(0x7f0000000100)=0x4, 0x80000000) 4m23.362357416s ago: executing program 3 (id=481): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = semget$private(0x0, 0x4000000009, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000000c0)=[0x5, 0x8000]) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="07000002000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32, @ANYBLOB], 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f00000004c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x5, 0x6, 0x20, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x20, 0x2, 0x2}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x10}, 0x8) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xff2e) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000011}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x3c0, 0x1d8, 0x1d8, 0x3c0, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x9400, 0x98, 0x100, 0x94, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) 4m20.16980602s ago: executing program 3 (id=484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2004a6}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x8, 0x8, 0xffff, 0x101, 0x6e0, 0xffffffffffffffff}) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x3) syz_clone3(&(0x7f00000003c0)={0x1800100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, &(0x7f0000000340)=""/4, 0x0}, 0x58) 4m14.680187867s ago: executing program 3 (id=488): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x3, 0x5) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r3, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1f, 0x1000, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x4}, 0x50) creat(0x0, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/rndis.usb0/host_addr\x00', 0x2, 0x0) 3m58.742647472s ago: executing program 33 (id=488): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x3, 0x5) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r3, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1f, 0x1000, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x4}, 0x50) creat(0x0, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/rndis.usb0/host_addr\x00', 0x2, 0x0) 1m52.428681942s ago: executing program 4 (id=723): sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x2000004) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000002c0)={0x0, 0x0}, 0x10) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r1, 0x0, 0x9) 1m51.271512063s ago: executing program 4 (id=725): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x3, 0x5) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r2, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1f, 0x1000, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x4}, 0x50) creat(0x0, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/rndis.usb0/host_addr\x00', 0x2, 0x0) 1m50.02546127s ago: executing program 4 (id=728): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000480)={0x0, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c", 0xb}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x0) close(r1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@fallback, 0xffffffffffffffff, 0x2b, 0x4000}, 0x20) clock_adjtime(0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="01265f"], 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000280)=[0xee00]) 1m46.478027742s ago: executing program 4 (id=738): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x204002, 0x0) close(r1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvfrom(r4, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) 1m45.076030775s ago: executing program 4 (id=743): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x84) msgsnd(r0, &(0x7f0000002580)=ANY=[@ANYBLOB="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"/1021], 0x401, 0x0) msgctl$IPC_RMID(r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ptrace(0x10, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000500)={{0x3, 0x4, 0x8edf, 0x1, 'syz0\x00', 0x5}, 0x6, 0x4, 0x0, 0x0, 0x1, 0x3, 'syz1\x00', &(0x7f0000000040)=['\x16%*\\!!\'!}\':\x00'], 0xc}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, 0x0, 0x4000080) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x3c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)="bd", 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) setxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x3c, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88}, 0x80) write(0xffffffffffffffff, 0x0, 0x0) 1m42.794103082s ago: executing program 4 (id=749): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0100000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41100, 0x2b}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0/file0\x00'}) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f00000003c0)=@filename='./file0\x00', r4, &(0x7f0000000600)={0x2, 0xe26, 0x1, 0x5}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004091}, 0x808) 1m26.674787521s ago: executing program 34 (id=749): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0100000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41100, 0x2b}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0/file0\x00'}) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f00000003c0)=@filename='./file0\x00', r4, &(0x7f0000000600)={0x2, 0xe26, 0x1, 0x5}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004091}, 0x808) 20.344327137s ago: executing program 5 (id=893): sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x2000004) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000002c0)={0x0, 0x0}, 0x10) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r2, 0x0, 0x9) 19.204465677s ago: executing program 5 (id=897): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat(0xffffffffffffffff, 0x0, 0x4081c0, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 16.9107403s ago: executing program 5 (id=898): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_setup(0x1b7c, 0x0) socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_pidfd_open(0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, 0x0, 0x20000000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000003000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_udp_int(r6, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100"], 0x0) writev(r5, &(0x7f00000003c0)=[{0x0}], 0x1) 15.17155426s ago: executing program 5 (id=901): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_setup(0x1b7c, 0x0) socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_pidfd_open(0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, 0x0, 0x20000000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000003000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 12.618919176s ago: executing program 5 (id=905): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x1, 0x2, 0x1, 0x3, {0x0, 0x8, 0x5f, 0x4, 0xae, 0x96, 0xe, 0x101, 0x55, "87d886d758f4e7ae67edc0dd4de52a91753779a71e615d45ac9136d9b4d51ba5bfbf9ff2bef194084311faf99e8ae1604882eeb7bf245f9f6d6b7278703870453b4065c9fadddd219b0d6abad067ead9f77ea92d22"}}, 0x66) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) 11.14937713s ago: executing program 5 (id=911): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 7.85125835s ago: executing program 1 (id=918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0xa3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd706b00dbdf255c000000", @ANYRES32, @ANYBLOB='\b\x00k\x00'], 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x800) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, 0x0}, 0x20) 7.716738981s ago: executing program 2 (id=919): recvmsg(0xffffffffffffffff, 0x0, 0x1f00) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0xfffffffa, 0x101) 7.701380163s ago: executing program 6 (id=920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) readv(r3, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f00000000c0)) memfd_create(&(0x7f0000000900)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\x87\f\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vs7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\xb3\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x02\x00\x00\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x9b\x99\xa8<\x12\xd5\xd78\x9d\x84\x1c&_I\xbd\xb8[\xc3^\xfb\x8a\x05*\x14[\xac\x7f\xb2\xa1\x1b\xbbI\xdbd\x87\xdbl\x13\xa7\x91\xbd\b\xbb\xb0\xf6\xc3m\xc1\vEa\xa5\x16\xf9\xfe\xe4\x9a:\xa65\xaamX#\xf8\xadlq&\xc6\x9aF\xec\x81-\xef\xf2\x92_z\x8a \xb0\x15m\xc2\xe6Z\xdc\xa7F\xe9\xe8|\x9ac\xf3\x85:\xf7fL\tTb\xa5\xb6\x80x\x0f\x10\xd4\xe6\xb9\x9d\x9fE\xe2`\xe4\xd8m\r-`\xde_}\xa7\t:\xd7X\x17\x10\xc2\\\x90u2\x9a\x8e\xe0\xf4\xf4\b\xe1\xd3\r\x02\xbavSyf\xe0\x9biT\xdc#\x1e\x86\xf9H\x9d\xbd\x0e\x7f\xca\x93\x8e\x83S\x06!\a;\x1b\xb3v\x06\xb65%\x88w\x13\xc1\xe3]nMG\x9eL\xb8v\x1c4\x04\xbd\x8acx\r\xb2\x10.\x18M\xd4\x90\xc2\nX\x85\xf4H\x7f\xd2b*A', 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) mq_open(&(0x7f00000007c0)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x8a\xe0U\xbc%\x05%\xfei\x96\xb0\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\x96yU\x9c\x0f\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V', 0x83, 0x10, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'veth0_to_bond\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x604000, 0x82) landlock_restrict_self(r4, 0x0) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x2) fchdir(r6) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r7, 0x6, 0x1) 6.600576315s ago: executing program 1 (id=921): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) 5.399885247s ago: executing program 2 (id=922): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x7, 0x7fff0000}]}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r1, 0x40187014, &(0x7f0000000040)) socket(0x2b, 0x1, 0x1) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 5.307807895s ago: executing program 6 (id=923): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0xcb, 0x0) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='1', 0x1) 4.792403829s ago: executing program 1 (id=924): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x40, &(0x7f0000000000)=0x0) io_submit(r1, 0x8e, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r0, 0x0}]) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0x5, 0x0, &(0x7f00000016c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) socket(0x2, 0x80805, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_off}, {@redirect_dir_on}]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r6 = open(0x0, 0x84242, 0x1df2a23c5997fad6) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) fallocate(r2, 0x0, 0x1, 0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) 3.453506191s ago: executing program 6 (id=925): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000c00)=""/123, 0x7b}], 0x1}, 0x7}], 0x1, 0xa874d1150d5f925c, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) symlinkat(0x0, 0xffffffffffffff9c, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 3.282161505s ago: executing program 2 (id=926): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x2, 0x1}]}}, 0x0, 0x26}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x201, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.93278974s ago: executing program 2 (id=927): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)={[{@errors_remount}, {@nomblk_io_submit}, {@noblock_validity}, {@nodiscard}, {@nolazytime}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', 0xee01}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}, 0x1, 0x492, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) unshare(0x22020600) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f0000000300)="a0", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @empty, 0x9}, 0x1c) shutdown(r3, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000a5f000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/125, 0x7d, 0x1, 0x0}, &(0x7f0000000480)=0x40) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x225000, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x6, 0xc38, &(0x7f0000001140)="$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") syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_ADD_TO_RESOLV_LIST={{0x9}, 0x10}}}, 0x7) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x1, 0x0, r4, 0x0}]) 1.875149666s ago: executing program 1 (id=928): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xfffffffc}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x0, 0x0, 0x1000}}]}]}}}]}, 0x6c}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, 0x8}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20040000, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x1}, 0x1c) 1.764629606s ago: executing program 6 (id=929): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x46, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") setrlimit(0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) write$UHID_INPUT(r0, 0x0, 0x0) 1.436557088s ago: executing program 6 (id=930): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom(r3, 0x0, 0x0, 0x142, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = fsopen(&(0x7f0000000100)='erofs\x00', 0x1) close(r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 1.406082467s ago: executing program 1 (id=931): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 980.071747ms ago: executing program 2 (id=932): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a00)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 224.731168ms ago: executing program 6 (id=933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xaed8e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount(0x0, 0x0, 0x0, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)={0x30000004}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffb, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) 8.898336ms ago: executing program 2 (id=934): r0 = fanotify_init(0x200, 0x0) read(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 0s ago: executing program 1 (id=935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000080008000a40fffffffc0900010073797a3100000000080005400000000b1400"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioprio_get$pid(0x1, 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x830}, 0x810) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x79}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)) close(0xffffffffffffffff) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) syz_open_dev$sndctrl(&(0x7f0000000100), 0x80007fffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b0001000010000904330001"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x2, [0x0, 0x0]}, &(0x7f0000000340)=0xc) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) kernel console output (not intermixed with test programs): 7f676d306fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 207.463596][ T6956] RAX: ffffffffffffffda RBX: 00007f676c625fa0 RCX: 00007f676c39e019 [ 207.463610][ T6956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 207.463621][ T6956] RBP: 00007f676c43500c R08: 0000000000000000 R09: 0000000000000000 [ 207.463633][ T6956] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 207.463644][ T6956] R13: 00007f676c626038 R14: 00007f676c625fa0 R15: 00007ffc18b6df78 [ 207.463674][ T6956] [ 207.869040][ T6956] memory: usage 96kB, limit 96kB, failcnt 32 [ 208.001395][ T6956] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 208.072758][ T6956] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 208.097055][ T6956] Memory cgroup stats for /syz6/test: [ 208.097230][ T6956] cache 0 [ 208.129045][ T6956] rss 0 [ 208.136854][ T6956] rss_huge 0 [ 208.145353][ T6956] shmem 0 [ 208.153934][ T6956] mapped_file 0 [ 208.163177][ T6956] dirty 0 [ 208.171657][ T6956] writeback 0 [ 208.181787][ T6956] workingset_refault_anon 0 [ 208.284661][ T6956] workingset_refault_file 0 [ 208.344657][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 208.390319][ T6956] swap 0 [ 208.400215][ T6956] swapcached 0 [ 208.409550][ T6956] pgpgin 0 [ 208.414652][ T30] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 208.428577][ T6956] pgpgout 0 [ 208.448489][ T6956] pgfault 0 [ 208.453668][ T6956] pgmajfault 0 [ 208.459700][ T6956] inactive_anon 0 [ 208.463437][ T6956] active_anon 0 [ 208.471156][ T6956] inactive_file 0 [ 208.474959][ T6956] active_file 0 [ 208.478509][ T6956] unevictable 0 [ 208.482193][ T6956] hierarchical_memory_limit 98304 [ 208.487500][ T6956] hierarchical_memsw_limit 9223372036854771712 [ 208.493879][ T6956] total_cache 0 [ 208.502168][ T6956] total_rss 0 [ 208.514676][ T6956] total_rss_huge 0 [ 208.524666][ T6956] total_shmem 0 [ 208.528821][ T6956] total_mapped_file 0 [ 208.537790][ T6956] total_dirty 0 [ 208.541442][ T6956] total_writeback 0 [ 208.545957][ T6956] total_workingset_refault_anon 0 [ 208.551163][ T6956] total_workingset_refault_file 0 [ 208.557212][ T6956] total_swap 0 [ 208.560673][ T6956] total_swapcached 0 [ 208.565481][ T6956] total_pgpgin 0 [ 208.567264][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.569199][ T6956] total_pgpgout 0 [ 208.596669][ T9] usb 3-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 208.615879][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.636984][ T9] usb 3-1: Product: syz [ 208.644930][ T6956] total_pgfault 0 [ 208.651288][ T9] usb 3-1: Manufacturer: syz [ 208.661073][ T6956] total_pgmajfault 0 [ 208.665257][ T9] usb 3-1: SerialNumber: syz [ 208.686432][ T6956] total_inactive_anon 0 [ 208.698125][ T9] kl5kusb105 3-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 208.718147][ T6956] total_active_anon 0 [ 208.738380][ T6956] total_inactive_file 0 [ 208.752789][ T6956] total_active_file 0 [ 208.772112][ T9] usb 3-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 208.781325][ T6956] total_unevictable 0 [ 208.792505][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 208.795902][ T6956] anon_cost 0 [ 208.816660][ T6956] file_cost 0 [ 208.825890][ T6956] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6/test,task_memcg=/syz6/test,task=syz.6.277,pid=6955,uid=0 [ 208.842851][ T6956] Memory cgroup out of memory: Killed process 6955 (syz.6.277) total-vm:104228kB, anon-rss:1424kB, file-rss:24036kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 208.860554][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.891195][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.591725][ T30] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 209.614577][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.633838][ T30] usb 2-1: config 0 descriptor?? [ 209.659171][ T30] hub 2-1:0.0: USB hub found [ 209.856951][ T30] hub 2-1:0.0: 1 port detected [ 210.333057][ T6990] loop5: detected capacity change from 0 to 2048 [ 211.472922][ T30] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 211.475648][ T9] usb 2-1: USB disconnect, device number 7 [ 211.536160][ T6990] loop5: p2 p3 < > p4 < p5 > [ 211.559630][ T6990] loop5: partition table partially beyond EOD, truncated [ 211.611576][ T6990] loop5: p2 start 53543428 is beyond EOD, truncated [ 211.637998][ T5644] Bluetooth: hci0: command 0x0406 tx timeout [ 211.645152][ T5644] Bluetooth: hci3: command 0x0406 tx timeout [ 211.651724][ T5644] Bluetooth: hci4: command 0x0406 tx timeout [ 211.658030][ T5644] Bluetooth: hci1: command 0x0406 tx timeout [ 211.664107][ T5641] Bluetooth: hci5: command 0x0406 tx timeout [ 211.769816][ T6990] loop5: p3 start 4284289 is beyond EOD, truncated [ 211.872107][ T6990] loop5: p5 start 53543428 is beyond EOD, truncated [ 212.207652][ T7002] loop6: detected capacity change from 0 to 32768 [ 212.215482][ T7002] btrfs: Deprecated parameter 'usebackuproot' [ 212.221583][ T7002] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 212.250871][ T7002] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.291 (7002) [ 212.284113][ T7002] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 212.294353][ T7002] BTRFS info (device loop6): using crc32c checksum algorithm [ 212.304984][ T30] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 212.449299][ T12] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 212.465482][ T7002] BTRFS error (device loop6): failed to load root extent [ 212.472614][ T7002] BTRFS warning (device loop6): try to load backup roots slot 1 [ 212.480949][ T12] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 212.494908][ T7002] BTRFS warning (device loop6): couldn't read tree root [ 212.497305][ T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.501918][ T7002] BTRFS warning (device loop6): try to load backup roots slot 2 [ 212.516613][ T30] usb 4-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 212.525586][ T49] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 212.529687][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.548119][ T30] usb 4-1: Product: syz [ 212.552313][ T30] usb 4-1: Manufacturer: syz [ 212.556944][ T30] usb 4-1: SerialNumber: syz [ 212.570192][ T30] kl5kusb105 4-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 212.577827][ T5871] udevd[5871]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 212.588839][ T30] usb 4-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB1 [ 212.779911][ T7002] BTRFS warning (device loop6): couldn't read tree root [ 212.786999][ T7002] BTRFS warning (device loop6): try to load backup roots slot 3 [ 213.147130][ T7002] BTRFS info (device loop6): rebuilding free space tree [ 213.176701][ T7002] BTRFS info (device loop6): checking UUID tree [ 213.189208][ T7002] BTRFS info (device loop6): enabling ssd optimizations [ 213.196297][ T7002] BTRFS info (device loop6): turning on async discard [ 213.203114][ T7002] BTRFS info (device loop6): enabling free space tree [ 213.210087][ T7002] BTRFS info (device loop6): force clearing of disk cache [ 213.217294][ T7002] BTRFS info (device loop6): enabling auto defrag [ 213.224266][ T7002] BTRFS info (device loop6): trying to use backup root at mount time [ 213.232885][ T7002] BTRFS info (device loop6): use zstd compression, level 3 [ 213.609080][ T30] usb 4-1: USB disconnect, device number 4 [ 213.720298][ T30] kl5kusb105d ttyUSB1: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB1 [ 213.767036][ T30] kl5kusb105 4-1:1.0: device disconnected [ 214.086234][ T7034] loop1: detected capacity change from 0 to 256 [ 214.181506][ T7034] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 214.271603][ T7034] exFAT-fs (loop1): valid_size(562949953421322) is greater than size(10) [ 214.351218][ T31] audit: type=1800 audit(1785817003.714:38): pid=7034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.294" name="file1" dev="loop1" ino=1048625 res=0 errno=0 [ 214.501133][ T7045] loop4: detected capacity change from 0 to 256 [ 214.867422][ T6969] kl5kusb105d ttyUSB0: Change port settings failed (error = -110) [ 215.040757][ T6969] kl5kusb105d ttyUSB0: Enabling read failed (error = -32) [ 215.044190][ T7045] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 215.268737][ T7045] exFAT-fs (loop4): valid_size(562949953421322) is greater than size(10) [ 215.294277][ T9] usb 3-1: USB disconnect, device number 6 [ 215.361327][ T31] audit: type=1800 audit(1785817004.724:39): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.295" name="file1" dev="loop4" ino=1048626 res=0 errno=0 [ 215.402902][ T9] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 215.483220][ T9] kl5kusb105 3-1:1.0: device disconnected [ 215.914631][ T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 216.564355][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 216.612956][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 216.672825][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 216.714676][ T9] usb 3-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 216.778790][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.795454][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.845669][ T9] usb 3-1: Product: syz [ 216.882764][ T9] usb 3-1: Manufacturer: syz [ 216.919654][ T9] usb 3-1: SerialNumber: syz [ 216.985315][ T7054] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 217.687434][ T7054] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 217.830567][ T7074] loop1: detected capacity change from 0 to 8 [ 217.859255][ T7074] SQUASHFS error: xz decompression failed, data probably corrupt [ 217.867339][ T7074] SQUASHFS error: Failed to read block 0x108: -5 [ 217.873772][ T7074] SQUASHFS error: Unable to read metadata cache entry [106] [ 217.881534][ T7074] SQUASHFS error: Unable to read inode 0x11f [ 219.127893][ T7054] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 219.138478][ T7079] loop1: detected capacity change from 0 to 512 [ 219.201349][ T7079] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 219.290213][ T7079] EXT4-fs (loop1): 1 truncate cleaned up [ 219.346375][ T7079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.383192][ T9] cdc_ncm 3-1:1.0: bind() failure [ 219.463091][ T9] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 219.486813][ T9] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 219.506901][ T9] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 219.541958][ T9] usb 3-1: USB disconnect, device number 7 [ 219.664022][ T6429] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 219.687675][ T30] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 219.870186][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.907562][ T30] usb 5-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 219.953329][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.981689][ T30] usb 5-1: Product: syz [ 220.020622][ T30] usb 5-1: Manufacturer: syz [ 220.054909][ T30] usb 5-1: SerialNumber: syz [ 220.151330][ T30] kl5kusb105 5-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 220.249867][ T7100] loop5: detected capacity change from 0 to 8 [ 220.261959][ T7100] SQUASHFS error: xz decompression failed, data probably corrupt [ 220.269908][ T7100] SQUASHFS error: Failed to read block 0x108: -5 [ 220.276462][ T7100] SQUASHFS error: Unable to read metadata cache entry [106] [ 220.283765][ T7100] SQUASHFS error: Unable to read inode 0x11f [ 220.308083][ T30] usb 5-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 220.478789][ T30] usb 5-1: USB disconnect, device number 5 [ 220.769520][ T30] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 220.807767][ T30] kl5kusb105 5-1:1.0: device disconnected [ 221.433463][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.453827][ T7124] loop5: detected capacity change from 0 to 256 [ 222.536722][ T7124] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 222.637156][ T7124] exFAT-fs (loop5): valid_size(562949953421322) is greater than size(10) [ 222.683975][ T31] audit: type=1800 audit(1785817012.044:40): pid=7124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.315" name="file1" dev="loop5" ino=1048627 res=0 errno=0 [ 223.545913][ T7137] loop1: detected capacity change from 0 to 256 [ 223.560174][ T7137] exfat: Bad value for 'uid' [ 223.565666][ T7137] exfat: Bad value for 'uid' [ 224.167926][ T7145] netlink: 60 bytes leftover after parsing attributes in process `syz.5.319'. [ 224.224204][ T7145] netlink: 'syz.5.319': attribute type 10 has an invalid length. [ 224.255396][ T7145] syz_tun: entered promiscuous mode [ 224.304327][ T7152] loop2: detected capacity change from 0 to 8 [ 224.319926][ T7152] SQUASHFS error: xz decompression failed, data probably corrupt [ 224.329151][ T7152] SQUASHFS error: Failed to read block 0x108: -5 [ 224.334821][ T7145] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 224.335568][ T7152] SQUASHFS error: Unable to read metadata cache entry [106] [ 224.351448][ T7152] SQUASHFS error: Unable to read inode 0x11f [ 224.998702][ T7166] 9p: Bad value for 'rfdno' [ 225.872190][ T7174] loop2: detected capacity change from 0 to 8 [ 225.921313][ T7174] SQUASHFS error: xz decompression failed, data probably corrupt [ 225.929660][ T7174] SQUASHFS error: Failed to read block 0x108: -5 [ 225.936153][ T7174] SQUASHFS error: Unable to read metadata cache entry [106] [ 225.943514][ T7174] SQUASHFS error: Unable to read inode 0x11f [ 226.729152][ T7178] netlink: 60 bytes leftover after parsing attributes in process `syz.5.326'. [ 226.790259][ T7178] netlink: 'syz.5.326': attribute type 10 has an invalid length. [ 226.824407][ T7181] netlink: 60 bytes leftover after parsing attributes in process `syz.2.327'. [ 226.861423][ T7181] netlink: 'syz.2.327': attribute type 10 has an invalid length. [ 226.886617][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 227.624442][ T7197] loop3: detected capacity change from 0 to 512 [ 227.651633][ T7197] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 228.332387][ T7195] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 229.717742][ T30] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 230.068801][ T7216] veth7: entered promiscuous mode [ 230.074032][ T7216] veth7: entered allmulticast mode [ 230.710232][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 230.718748][ T30] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.729468][ T30] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.729522][ T30] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 230.729551][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.734466][ T30] usb 6-1: config 0 descriptor?? [ 230.738737][ T30] hub 6-1:0.0: bad descriptor, ignoring hub [ 230.738766][ T30] hub 6-1:0.0: probe with driver hub failed with error -5 [ 230.741112][ T30] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 231.753197][ T7236] loop6: detected capacity change from 0 to 512 [ 231.775397][ T7236] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 231.817134][ T7235] 9p: Bad value for 'rfdno' [ 232.588038][ T7234] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 233.414880][ T30] usb 6-1: USB disconnect, device number 7 [ 233.753733][ T7251] loop2: detected capacity change from 0 to 8 [ 234.661593][ T7251] SQUASHFS error: xz decompression failed, data probably corrupt [ 234.669444][ T7251] SQUASHFS error: Failed to read block 0x108: -5 [ 234.675894][ T7251] SQUASHFS error: Unable to read metadata cache entry [106] [ 234.683436][ T7251] SQUASHFS error: Unable to read inode 0x11f [ 235.242902][ T7258] fuse: Bad value for 'fd' [ 235.422318][ T31] audit: type=1326 audit(1785817024.784:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.348" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331179e019 code=0x7ffc0000 [ 235.589382][ T31] audit: type=1326 audit(1785817024.784:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.348" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331179e019 code=0x7ffc0000 [ 236.100811][ T31] audit: type=1326 audit(1785817024.784:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.348" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331179e019 code=0x7ffc0000 [ 236.515009][ T7269] loop6: detected capacity change from 0 to 512 [ 236.537133][ T7269] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 237.169313][ T7268] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 237.172706][ T31] audit: type=1326 audit(1785817024.784:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.348" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f331179e019 code=0x7ffc0000 [ 237.221454][ T31] audit: type=1326 audit(1785817024.784:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.348" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331179e019 code=0x7ffc0000 [ 237.473899][ T31] audit: type=1326 audit(1785817024.794:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.348" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331179e019 code=0x7ffc0000 [ 237.541382][ T31] audit: type=1326 audit(1785817024.794:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.348" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331179e019 code=0x7ffc0000 [ 238.768335][ T31] audit: type=1326 audit(1785817024.794:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.348" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f331179e019 code=0x7ffc0000 [ 238.792798][ T31] audit: type=1326 audit(1785817024.834:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.348" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331179e019 code=0x7ffc0000 [ 238.825257][ T31] audit: type=1326 audit(1785817024.834:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.348" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331179e019 code=0x7ffc0000 [ 240.230194][ T7295] 9p: Bad value for 'rfdno' [ 241.387202][ T7306] netlink: 60 bytes leftover after parsing attributes in process `syz.5.361'. [ 241.455190][ T7306] netlink: 'syz.5.361': attribute type 10 has an invalid length. [ 241.516508][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.361'. [ 241.624943][ T7311] netlink: 60 bytes leftover after parsing attributes in process `syz.3.363'. [ 241.658016][ T7311] netlink: 'syz.3.363': attribute type 10 has an invalid length. [ 241.683898][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.363'. [ 242.573670][ T7321] netlink: 60 bytes leftover after parsing attributes in process `syz.5.366'. [ 242.620565][ T7321] netlink: 'syz.5.366': attribute type 10 has an invalid length. [ 243.256839][ T7335] 9p: Bad value for 'rfdno' [ 243.759335][ T7337] loop2: detected capacity change from 0 to 256 [ 243.773077][ T7337] exfat: Bad value for 'uid' [ 243.777804][ T7337] exfat: Bad value for 'uid' [ 244.420851][ T7340] fuse: Unknown parameter 'grou00000000000000000000' [ 245.901054][ T7359] 9p: Bad value for 'rfdno' [ 246.470847][ T7361] loop5: detected capacity change from 0 to 32768 [ 246.478446][ T7361] btrfs: Deprecated parameter 'usebackuproot' [ 246.484607][ T7361] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 246.548093][ T7361] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.379 (7361) [ 246.570098][ T7361] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 246.580336][ T7361] BTRFS info (device loop5): using crc32c checksum algorithm [ 246.707403][ T5898] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 246.765394][ T7361] BTRFS error (device loop5): failed to load root extent [ 246.765796][ T7373] loop6: detected capacity change from 0 to 512 [ 246.772543][ T7361] BTRFS warning (device loop5): try to load backup roots slot 1 [ 246.790546][ T5898] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 246.823352][ T7373] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 246.867926][ T7361] BTRFS warning (device loop5): couldn't read tree root [ 246.875171][ T7361] BTRFS warning (device loop5): try to load backup roots slot 2 [ 246.891447][ T1020] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 246.934803][ T5863] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 246.961464][ T7373] EXT4-fs (loop6): 1 truncate cleaned up [ 246.967538][ T7361] BTRFS warning (device loop5): couldn't read tree root [ 246.974576][ T7361] BTRFS warning (device loop5): try to load backup roots slot 3 [ 247.001216][ T7361] BTRFS info (device loop5): rebuilding free space tree [ 247.030867][ T7361] BTRFS info (device loop5): checking UUID tree [ 247.039457][ T7361] BTRFS info (device loop5): enabling ssd optimizations [ 247.046577][ T7361] BTRFS info (device loop5): turning on async discard [ 247.053400][ T7361] BTRFS info (device loop5): enabling free space tree [ 247.060331][ T7361] BTRFS info (device loop5): force clearing of disk cache [ 247.067510][ T7361] BTRFS info (device loop5): enabling auto defrag [ 247.070483][ T7373] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.073975][ T7361] BTRFS info (device loop5): trying to use backup root at mount time [ 247.094899][ T7361] BTRFS info (device loop5): use zstd compression, level 3 [ 247.417206][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 247.460977][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.504882][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.768585][ T5863] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 247.822663][ T6429] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.841103][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.927615][ T5863] usb 4-1: config 0 descriptor?? [ 247.978229][ T5863] hub 4-1:0.0: USB hub found [ 248.187261][ T5863] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 248.463496][ T5863] usbhid 4-1:0.0: can't add hid device: -71 [ 248.479834][ T5863] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 248.945582][ T7415] loop1: detected capacity change from 0 to 256 [ 248.959989][ T7415] exfat: Bad value for 'uid' [ 248.964703][ T7415] exfat: Bad value for 'uid' [ 249.177656][ T5863] usb 4-1: USB disconnect, device number 5 [ 249.882649][ T7420] loop1: detected capacity change from 0 to 8 [ 249.895679][ T7420] SQUASHFS error: xz decompression failed, data probably corrupt [ 249.903507][ T7420] SQUASHFS error: Failed to read block 0x108: -5 [ 249.909893][ T7420] SQUASHFS error: Unable to read metadata cache entry [106] [ 249.917253][ T7420] SQUASHFS error: Unable to read inode 0x11f [ 250.553388][ T7426] netlink: 60 bytes leftover after parsing attributes in process `syz.4.393'. [ 250.628737][ T7426] netlink: 'syz.4.393': attribute type 10 has an invalid length. [ 251.993310][ T7438] netlink: 60 bytes leftover after parsing attributes in process `syz.6.396'. [ 252.005733][ T7438] netlink: 'syz.6.396': attribute type 10 has an invalid length. [ 252.014839][ T7438] syz_tun: entered promiscuous mode [ 252.048371][ T7438] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 252.503669][ T7442] loop3: detected capacity change from 0 to 256 [ 252.518480][ T7442] exfat: Bad value for 'uid' [ 252.523180][ T7442] exfat: Bad value for 'uid' [ 252.827914][ T7429] loop1: detected capacity change from 0 to 32768 [ 252.853481][ T7429] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.394 (7429) [ 252.868910][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.396'. [ 252.951988][ T7444] fuse: Bad value for 'fd' [ 253.454407][ T7429] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 253.520699][ T7429] BTRFS info (device loop1): using blake2b checksum algorithm [ 253.585872][ T7429] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 253.594278][ T7429] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 253.691356][ T7429] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 254.269392][ T7429] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 254.307964][ T7429] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 254.332890][ T7429] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 254.431710][ T5636] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 254.501053][ T7429] BTRFS error (device loop1): open_ctree failed: -12 [ 255.004838][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.015935][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.183894][ T7481] loop2: detected capacity change from 0 to 512 [ 255.267896][ T7481] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 255.377538][ T7481] EXT4-fs (loop2): 1 truncate cleaned up [ 255.427863][ T7481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.751012][ T5640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.767422][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 256.785536][ T7468] loop6: detected capacity change from 0 to 32768 [ 256.980596][ T7468] JBD2: Ignoring recovery information on journal [ 257.007024][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.021084][ T24] usb 6-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 257.030713][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.044585][ T24] usb 6-1: Product: syz [ 257.049276][ T24] usb 6-1: Manufacturer: syz [ 257.057121][ T24] usb 6-1: SerialNumber: syz [ 257.068440][ T24] kl5kusb105 6-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 257.158259][ T24] usb 6-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 257.300799][ T24] usb 6-1: USB disconnect, device number 8 [ 257.420294][ T7468] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 257.926665][ T24] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 258.010058][ T7507] netlink: 60 bytes leftover after parsing attributes in process `syz.1.415'. [ 258.048405][ T24] kl5kusb105 6-1:1.0: device disconnected [ 258.110329][ T7507] netlink: 'syz.1.415': attribute type 10 has an invalid length. [ 258.441864][ T6429] ocfs2: Unmounting device (7,6) on (node local) [ 265.944460][ T7536] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input9 [ 266.316096][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 266.550187][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 266.713131][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.881873][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.002936][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 267.049336][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.293975][ T24] usb 4-1: config 0 descriptor?? [ 267.556552][ T24] hub 4-1:0.0: USB hub found [ 267.969165][ T24] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 268.216431][ T24] usbhid 4-1:0.0: can't add hid device: -32 [ 268.256215][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 268.355746][ T24] usb 4-1: USB disconnect, device number 6 [ 269.466715][ T7573] netlink: 'syz.1.437': attribute type 2 has an invalid length. [ 271.033554][ T5788] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 271.466485][ T5788] usb 6-1: Using ep0 maxpacket: 32 [ 271.685363][ T5788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.697094][ T5788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.708259][ T5788] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 271.724668][ T5788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.736004][ T5788] usb 6-1: config 0 descriptor?? [ 271.744321][ T5788] hub 6-1:0.0: USB hub found [ 271.979955][ T5788] hub 6-1:0.0: 1 port detected [ 272.687617][ T188] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 273.065449][ T188] usb 3-1: Using ep0 maxpacket: 32 [ 273.096142][ T188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.140508][ T188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.192052][ T188] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 273.224577][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.243691][ T5863] usb 6-1: USB disconnect, device number 9 [ 273.269428][ T188] usb 3-1: config 0 descriptor?? [ 273.328091][ T188] hub 3-1:0.0: USB hub found [ 273.811566][ T188] hub 3-1:0.0: 1 port detected [ 274.743089][ T7611] loop4: detected capacity change from 0 to 512 [ 274.898687][ T24] usb 3-1: USB disconnect, device number 8 [ 281.303781][ T7639] loop2: detected capacity change from 0 to 32768 [ 281.350845][ T7639] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.460 (7639) [ 281.436723][ T7639] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 281.470857][ T7637] loop4: detected capacity change from 0 to 32768 [ 281.487123][ T7639] BTRFS info (device loop2): using crc32c checksum algorithm [ 281.513154][ T7637] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.458 (7637) [ 281.638927][ T7637] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 281.702461][ T7637] BTRFS info (device loop4): using blake2b checksum algorithm [ 281.827850][ T7639] BTRFS info (device loop2): setting nodatasum [ 281.884226][ T7639] BTRFS info (device loop2): enabling ssd optimizations [ 281.906767][ T7639] BTRFS info (device loop2): disabling tree log [ 281.932374][ T7639] BTRFS info (device loop2): turning on async discard [ 281.959980][ T7637] BTRFS info (device loop4): enabling ssd optimizations [ 281.997691][ T7639] BTRFS info (device loop2): enabling free space tree [ 282.018102][ T7637] BTRFS info (device loop4): turning on async discard [ 282.052372][ T7637] BTRFS info (device loop4): enabling free space tree [ 282.064006][ T7639] BTRFS info (device loop2): enabling auto defrag [ 282.085622][ T7637] BTRFS info (device loop4): use zstd compression, level 3 [ 283.104454][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 283.104479][ T31] audit: type=1800 audit(1785817072.464:53): pid=7639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.460" name="file2" dev="loop2" ino=261 res=0 errno=0 [ 283.158598][ T5626] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 284.483055][ T5640] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 293.229263][ T7734] loop3: detected capacity change from 0 to 512 [ 293.336822][ T7734] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 293.467513][ T7734] EXT4-fs (loop3): 1 truncate cleaned up [ 293.567559][ T7734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.969886][ T5637] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.669481][ T7767] netlink: 60 bytes leftover after parsing attributes in process `syz.6.478'. [ 303.702389][ T7767] netlink: 'syz.6.478': attribute type 10 has an invalid length. [ 309.260248][ T5781] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 309.295953][ T7795] netlink: 60 bytes leftover after parsing attributes in process `syz.2.487'. [ 310.221590][ T5781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 310.233047][ T7795] netlink: 'syz.2.487': attribute type 10 has an invalid length. [ 310.294918][ T5781] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 310.321010][ T5781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.068383][ T5781] usb 2-1: config 0 descriptor?? [ 312.235704][ T5781] usb 2-1: can't set config #0, error -71 [ 312.247876][ T5781] usb 2-1: USB disconnect, device number 8 [ 315.165036][ T5863] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 315.356853][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 315.396187][ T5863] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 315.426169][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.477123][ T5863] usb 2-1: config 0 descriptor?? [ 317.075678][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.082328][ T7817] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 317.086321][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.409588][ T5863] ath6kl: Failed to submit usb control message: -71 [ 317.448689][ T5863] ath6kl: unable to send the bmi data to the device: -71 [ 317.488564][ T5863] ath6kl: Unable to send get target info: -71 [ 317.512617][ T5863] ath6kl: Failed to init ath6kl core: -71 [ 317.553066][ T5863] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 317.632002][ T5863] usb 2-1: USB disconnect, device number 9 [ 320.021342][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 320.036550][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 320.050207][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 320.058737][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 320.069309][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 322.124861][ T5638] Bluetooth: hci2: command tx timeout [ 324.427011][ T5638] Bluetooth: hci2: command tx timeout [ 326.435048][ T5638] Bluetooth: hci2: command tx timeout [ 328.525173][ T5638] Bluetooth: hci2: command tx timeout [ 329.929255][ T7882] dummy_hcd dummy_hcd.0: remove, state 4 [ 329.935548][ T7882] usb usb1: USB disconnect, device number 1 [ 330.762919][ T7882] dummy_hcd dummy_hcd.0: stopped [ 330.768088][ T7882] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 331.911578][ T5637] bond0: (slave syz_tun): Releasing backup interface [ 334.100487][ T7836] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.113881][ T7836] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.137247][ T7836] bridge_slave_0: entered allmulticast mode [ 334.160424][ T7836] bridge_slave_0: entered promiscuous mode [ 334.243355][ T5898] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.265029][ T5748] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 334.281670][ T7836] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.290321][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.298077][ T7836] bridge_slave_1: entered allmulticast mode [ 334.307757][ T7836] bridge_slave_1: entered promiscuous mode [ 334.424834][ T5748] usb 2-1: device descriptor read/64, error -71 [ 334.489155][ T5898] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.829613][ T5748] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 335.660403][ T7836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.674631][ T5748] usb 2-1: device descriptor read/64, error -71 [ 335.740586][ T5788] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 335.771212][ T7836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.809316][ T5748] usb usb2-port1: attempt power cycle [ 335.862943][ T5898] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.927073][ T5788] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.947693][ T5788] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 335.987349][ T7836] team0: Port device team_slave_0 added [ 335.996143][ T5788] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 336.014881][ T5788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.037257][ T5788] usb 7-1: Product: syz [ 336.041491][ T5788] usb 7-1: Manufacturer: syz [ 336.063383][ T5788] usb 7-1: SerialNumber: syz [ 336.086142][ T5788] usb 7-1: config 0 descriptor?? [ 336.112940][ T5788] streamzap 7-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 336.137710][ T5898] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.185727][ T5748] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 338.641476][ T5748] usb 2-1: device descriptor read/8, error -71 [ 338.658787][ T7836] team0: Port device team_slave_1 added [ 338.721350][ T30] usb 7-1: USB disconnect, device number 2 [ 341.846179][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.526'. [ 341.935293][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.952774][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.014277][ T7836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.061301][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.104108][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.963107][ T7836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.474544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 346.983582][ T7836] hsr_slave_0: entered promiscuous mode [ 347.009584][ T7836] hsr_slave_1: entered promiscuous mode [ 347.034074][ T7836] debugfs: 'hsr0' already exists in 'hsr' [ 347.041628][ T7836] Cannot create hsr debugfs directory [ 347.425229][ T5863] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 347.818813][ T5863] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 347.966047][ T5863] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 348.140109][ T5863] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 348.178870][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.210993][ T5863] usb 2-1: Product: syz [ 348.228894][ T5863] usb 2-1: Manufacturer: syz [ 348.247012][ T5863] usb 2-1: SerialNumber: syz [ 348.274138][ T5863] usb 2-1: config 0 descriptor?? [ 348.288408][ T5898] bridge_slave_1: left allmulticast mode [ 348.294191][ T5898] bridge_slave_1: left promiscuous mode [ 348.312459][ T5863] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 348.324966][ T5898] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.369624][ T5898] bridge_slave_0: left allmulticast mode [ 348.386573][ T30] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 348.407491][ T5898] bridge_slave_0: left promiscuous mode [ 348.417441][ T5898] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.578497][ T30] usb 5-1: device descriptor read/64, error -71 [ 348.706781][ T24] usb 2-1: USB disconnect, device number 14 [ 348.894888][ T30] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 349.115039][ T30] usb 5-1: device descriptor read/64, error -71 [ 349.363113][ T30] usb usb5-port1: attempt power cycle [ 349.461557][ T7997] loop2: detected capacity change from 0 to 256 [ 349.522709][ T7997] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 256) [ 349.704665][ T5863] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 349.774827][ T30] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 349.796900][ T30] usb 5-1: device descriptor read/8, error -71 [ 350.045722][ T30] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 350.082331][ T30] usb 5-1: device descriptor read/8, error -71 [ 350.082525][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 350.099539][ T5863] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 350.108701][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.137290][ T5863] usb 6-1: config 0 descriptor?? [ 350.152779][ T7990] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 350.248751][ T30] usb usb5-port1: unable to enumerate USB device [ 350.265935][ T5787] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 350.335501][ T5898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.349162][ T5898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.367387][ T5898] bond0 (unregistering): Released all slaves [ 350.396338][ T5863] ath6kl: Failed to submit usb control message: -71 [ 350.404697][ T5863] ath6kl: unable to send the bmi data to the device: -71 [ 350.407085][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 350.411879][ T5863] ath6kl: Unable to send get target info: -71 [ 350.439318][ T5787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 350.451693][ T5863] ath6kl: Failed to init ath6kl core: -71 [ 350.464031][ T5787] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 350.473747][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.493568][ T5863] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 350.511711][ T5787] usb 2-1: config 0 descriptor?? [ 350.517199][ T5863] usb 6-1: USB disconnect, device number 10 [ 350.524075][ T8011] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 350.817432][ T5787] ath6kl: Failed to submit usb control message: -71 [ 350.835868][ T5787] ath6kl: unable to send the bmi data to the device: -71 [ 350.853176][ T5787] ath6kl: Unable to send get target info: -71 [ 350.868983][ T5787] ath6kl: Failed to init ath6kl core: -71 [ 350.889892][ T5787] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 350.922381][ T5787] usb 2-1: USB disconnect, device number 15 [ 351.270492][ T5898] hsr_slave_0: left promiscuous mode [ 351.347511][ T5898] hsr_slave_1: left promiscuous mode [ 351.392817][ T5898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.453010][ T5898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.508815][ T5898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.536160][ T5898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.545144][ T5748] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 352.766133][ T5898] veth1_macvtap: left promiscuous mode [ 352.789214][ T5748] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 352.815536][ T5898] veth0_macvtap: left promiscuous mode [ 352.922594][ T5898] veth1_vlan: left promiscuous mode [ 352.970801][ T5748] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 353.006255][ T5748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.061845][ T5898] veth0_vlan: left promiscuous mode [ 353.062994][ T5748] usb 7-1: config 0 descriptor?? [ 353.127251][ T8029] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 353.597980][ T5748] ath6kl: Failed to submit usb control message: -71 [ 353.618150][ T5748] ath6kl: unable to send the bmi data to the device: -71 [ 353.625323][ T5748] ath6kl: Unable to send get target info: -71 [ 353.642863][ T5748] ath6kl: Failed to init ath6kl core: -71 [ 353.665230][ T5748] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 353.695356][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.5.552'. [ 353.710337][ T5748] usb 7-1: USB disconnect, device number 3 [ 357.755960][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.6.557'. [ 359.585868][ T5898] team0 (unregistering): Port device team_slave_1 removed [ 359.655307][ T5898] team0 (unregistering): Port device team_slave_0 removed [ 359.682013][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.562'. [ 360.034827][ T188] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 360.050460][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 360.206960][ T188] usb 3-1: Using ep0 maxpacket: 8 [ 360.295070][ T31] audit: type=1800 audit(1785817148.654:54): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.563" name="host_addr" dev="configfs" ino=17365 res=0 errno=0 [ 361.098412][ T7836] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 361.152778][ T188] usb 3-1: unable to get BOS descriptor or descriptor too short [ 361.198161][ T188] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 361.212394][ T188] usb 3-1: can't read configurations, error -71 [ 361.238641][ T7836] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 361.271536][ T7836] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 361.333588][ T7836] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 361.381286][ T7836] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 361.820076][ T7836] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.076734][ T7836] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 362.299615][ T7836] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 363.056513][ T188] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 363.241050][ T188] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 363.276881][ T188] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 363.311719][ T188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.347841][ T188] usb 6-1: config 0 descriptor?? [ 363.411352][ T8128] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 363.419022][ T5748] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 363.450278][ T7836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.565483][ T7836] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.627013][ T5748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 363.660852][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.668049][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.700084][ T5748] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 363.723177][ T5748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.747562][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.754806][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.774178][ T5748] usb 3-1: config 0 descriptor?? [ 363.824078][ T8137] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 363.842625][ T8128] trusted_key: encrypted_key: insufficient parameters specified [ 363.981594][ T188] ath6kl: Failed to submit usb control message: -71 [ 364.031223][ T188] ath6kl: unable to send the bmi data to the device: -71 [ 364.086474][ T188] ath6kl: Unable to send get target info: -71 [ 364.139909][ T188] ath6kl: Failed to init ath6kl core: -71 [ 364.188877][ T188] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 364.213170][ T188] usb 6-1: USB disconnect, device number 11 [ 364.219568][ T5748] ath6kl: Failed to submit usb control message: -71 [ 364.239354][ T5748] ath6kl: unable to send the bmi data to the device: -71 [ 364.250320][ T5748] ath6kl: Unable to send get target info: -71 [ 364.265910][ T5748] ath6kl: Failed to init ath6kl core: -71 [ 364.279084][ T5748] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 364.308455][ T5748] usb 3-1: USB disconnect, device number 11 [ 364.588663][ T8170] syz_tun: entered allmulticast mode [ 364.655454][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 364.845373][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 364.864655][ T24] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 364.871154][ T8174] netlink: 60 bytes leftover after parsing attributes in process `syz.5.578'. [ 364.923047][ T24] usb 5-1: config 0 has no interface number 0 [ 364.940408][ T24] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 364.945012][ T8176] netlink: 'syz.5.578': attribute type 10 has an invalid length. [ 365.054927][ T24] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 365.088039][ T24] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 365.129107][ T24] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 112, changing to 10 [ 365.169112][ T24] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 10229, setting to 1024 [ 365.200853][ T8155] syz_tun: left allmulticast mode [ 365.214929][ T24] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.270756][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 365.294221][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.323271][ T24] usb 5-1: Product: syz [ 365.336103][ T24] usb 5-1: Manufacturer: syz [ 365.341738][ T24] usb 5-1: SerialNumber: syz [ 365.381662][ T24] usb 5-1: config 0 descriptor?? [ 365.407792][ T8159] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 365.465675][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 366.849540][ T24] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 366.944245][ T24] usb 5-1: USB disconnect, device number 10 [ 366.964708][ T5626] ffs_data_put(): freeing [ 367.584593][ T5748] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 368.146498][ T5748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 368.174681][ T5748] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 368.947472][ T5748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.963575][ T5748] usb 2-1: config 0 descriptor?? [ 368.970468][ T8189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 369.595565][ T5748] ath6kl: Failed to submit usb control message: -71 [ 369.623056][ T5748] ath6kl: unable to send the bmi data to the device: -71 [ 369.662821][ T5748] ath6kl: Unable to send get target info: -71 [ 369.714950][ T5748] ath6kl: Failed to init ath6kl core: -71 [ 369.747514][ T5748] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 369.790855][ T5748] usb 2-1: USB disconnect, device number 16 [ 369.801636][ T7836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.826291][ T24] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 371.862829][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 372.146834][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 372.339741][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.352092][ T24] usb 5-1: config 0 descriptor?? [ 372.360167][ T8210] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 373.063815][ T24] ath6kl: Failed to submit usb control message: -71 [ 373.628386][ T31] audit: type=1800 audit(1785817161.804:55): pid=8253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.594" name="host_addr" dev="configfs" ino=18453 res=0 errno=0 [ 373.653673][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 373.757274][ T24] ath6kl: Unable to send get target info: -71 [ 373.930682][ T24] ath6kl: Failed to init ath6kl core: -71 [ 374.148359][ T24] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 374.172267][ T24] usb 5-1: USB disconnect, device number 11 [ 374.220847][ T8259] 9p: Bad value for 'rfdno' [ 374.438612][ T8269] loop5: detected capacity change from 0 to 256 [ 374.491186][ T8269] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 256) [ 374.520920][ T7836] veth0_vlan: entered promiscuous mode [ 374.552322][ T7836] veth1_vlan: entered promiscuous mode [ 374.605352][ T5787] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 374.638074][ T5281] 8021q: adding VLAN 0 to HW filter on device eth8 [ 374.835242][ T7836] veth0_macvtap: entered promiscuous mode [ 374.873333][ T7836] veth1_macvtap: entered promiscuous mode [ 374.894422][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.906440][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.645660][ T5755] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 375.647820][ T5787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 375.680350][ T5787] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 375.699892][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.883570][ T5755] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 375.986995][ T5755] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 376.091478][ T5755] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.156583][ T146] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.520941][ T5787] usb 2-1: config 0 descriptor?? [ 376.537245][ T8264] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 376.673336][ T1020] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.952610][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.140648][ T5755] usb 6-1: config 0 descriptor?? [ 377.154668][ T5898] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.156209][ T8274] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 377.260274][ T5787] ath6kl: Failed to submit usb control message: -71 [ 377.275890][ T5787] ath6kl: unable to send the bmi data to the device: -71 [ 377.296999][ T5787] ath6kl: Unable to send get target info: -71 [ 377.314387][ T5787] ath6kl: Failed to init ath6kl core: -71 [ 377.329174][ T5787] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 377.342560][ T5787] usb 2-1: USB disconnect, device number 17 [ 377.698657][ T5788] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 377.881998][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.908172][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.215324][ T5788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 378.289062][ T5755] ath6kl: Failed to submit usb control message: -71 [ 378.296230][ T5755] ath6kl: unable to send the bmi data to the device: -71 [ 378.303439][ T5755] ath6kl: Unable to send get target info: -71 [ 378.316040][ T5788] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 378.360804][ T5755] ath6kl: Failed to init ath6kl core: -71 [ 378.362354][ T5788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.408417][ T5788] usb 5-1: config 0 descriptor?? [ 378.423122][ T5755] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 378.440820][ T5755] usb 6-1: USB disconnect, device number 12 [ 378.485946][ T8295] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 379.977088][ T5788] ath6kl: Failed to submit usb control message: -110 [ 380.021900][ T5788] ath6kl: unable to send the bmi data to the device: -110 [ 380.072875][ T5788] ath6kl: Unable to send get target info: -110 [ 380.115016][ T5788] ath6kl: Failed to init ath6kl core: -110 [ 380.156722][ T5788] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 380.457857][ T5788] usb 5-1: USB disconnect, device number 12 [ 380.565093][ T31] audit: type=1800 audit(1785817168.934:56): pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.612" name="host_addr" dev="configfs" ino=18686 res=0 errno=0 [ 382.437177][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.449664][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.458461][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.481125][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.492636][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 384.507298][ T8352] netlink: 12 bytes leftover after parsing attributes in process `syz.5.617'. [ 384.519300][ T5634] Bluetooth: hci4: command tx timeout [ 384.825402][ T5748] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 385.036305][ T5748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 385.079941][ T5788] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 385.081632][ T5748] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 385.170816][ T5748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.230309][ T5748] usb 3-1: config 0 descriptor?? [ 385.254034][ T8353] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 385.315160][ T5788] usb 6-1: Using ep0 maxpacket: 8 [ 385.329425][ T5788] usb 6-1: unable to get BOS descriptor or descriptor too short [ 385.347735][ T5788] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 385.359089][ T5788] usb 6-1: can't read configurations, error -71 [ 385.514468][ T5748] ath6kl: Failed to submit usb control message: -71 [ 385.534207][ T5748] ath6kl: unable to send the bmi data to the device: -71 [ 385.556354][ T5748] ath6kl: Unable to send get target info: -71 [ 385.596976][ T5748] ath6kl: Failed to init ath6kl core: -71 [ 385.620637][ T5748] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 385.681658][ T5748] usb 3-1: USB disconnect, device number 12 [ 386.098497][ T6144] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.160653][ T8366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.763561][ T5634] Bluetooth: hci4: command tx timeout [ 387.797846][ T6144] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.828984][ T8392] binder: 8391:8392 ioctl c0306201 0 returned -14 [ 389.837371][ T5634] Bluetooth: hci4: command tx timeout [ 389.879957][ T6144] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.208784][ T5634] Bluetooth: hci6: command 0x0406 tx timeout [ 391.881052][ T5638] Bluetooth: hci4: command tx timeout [ 392.186933][ T6144] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.784590][ T8425] syz_tun: entered allmulticast mode [ 394.767829][ T8406] syz_tun: left allmulticast mode [ 395.731212][ T6144] bridge_slave_1: left allmulticast mode [ 395.768497][ T6144] bridge_slave_1: left promiscuous mode [ 395.792826][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.858952][ T6144] bridge_slave_0: left allmulticast mode [ 395.896569][ T6144] bridge_slave_0: left promiscuous mode [ 395.911984][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.180887][ T8456] syz.2.640 uses obsolete (PF_INET,SOCK_PACKET) [ 396.248764][ T8457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.284614][ T991] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 396.372534][ T6144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.384230][ T6144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.385613][ T5748] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 396.407122][ T6144] bond0 (unregistering): Released all slaves [ 396.418819][ T8460] netlink: 60 bytes leftover after parsing attributes in process `syz.5.641'. [ 396.436174][ T8460] netlink: 'syz.5.641': attribute type 10 has an invalid length. [ 396.447640][ T991] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 396.471145][ T991] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 396.483735][ T991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.511051][ T991] usb 7-1: config 0 descriptor?? [ 396.521433][ T8451] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 396.555529][ T5748] usb 5-1: Using ep0 maxpacket: 8 [ 396.583713][ T5748] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 396.595349][ T5748] usb 5-1: config 0 has no interface number 0 [ 396.611351][ T5748] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 396.635828][ T5748] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 396.646691][ T5748] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 396.663617][ T5748] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 112, changing to 10 [ 396.675741][ T5748] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 10229, setting to 1024 [ 396.719348][ T5748] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.773893][ T5748] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 396.823892][ T991] ath6kl: Failed to submit usb control message: -71 [ 396.832920][ T991] ath6kl: unable to send the bmi data to the device: -71 [ 396.840751][ T5748] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.840799][ T991] ath6kl: Unable to send get target info: -71 [ 396.860747][ T991] ath6kl: Failed to init ath6kl core: -71 [ 396.873712][ T991] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 396.885402][ T5748] usb 5-1: Product: syz [ 397.014174][ T8469] loop1: detected capacity change from 0 to 512 [ 397.035636][ T8469] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 397.469704][ T8469] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 397.493296][ T5748] usb 5-1: Manufacturer: syz [ 397.496495][ T991] usb 7-1: USB disconnect, device number 4 [ 397.499190][ T5748] usb 5-1: SerialNumber: syz [ 397.523976][ T5748] usb 5-1: config 0 descriptor?? [ 397.544861][ T8453] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 397.857417][ T5748] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 397.877281][ T5748] usb 5-1: USB disconnect, device number 13 [ 397.979368][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.5.644'. [ 399.946719][ T6144] hsr_slave_0: left promiscuous mode [ 399.989494][ T6144] hsr_slave_1: left promiscuous mode [ 400.017978][ T6144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.037645][ T5863] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 400.063392][ T6144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.134626][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 400.207756][ T6144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.219769][ T6144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.236289][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 400.301413][ T5863] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 400.349369][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.354756][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 400.390639][ T6144] veth1_macvtap: left promiscuous mode [ 400.413492][ T5863] usb 2-1: config 0 descriptor?? [ 400.432537][ T6144] veth0_macvtap: left promiscuous mode [ 400.452486][ T8479] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 400.463805][ T6144] veth1_vlan: left promiscuous mode [ 400.485368][ T6144] veth0_vlan: left promiscuous mode [ 401.074518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 401.114522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 401.904522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 402.014531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 402.054519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 402.114510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 402.124512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 402.570570][ T5863] ath6kl: Failed to submit usb control message: -110 [ 402.593364][ T5863] ath6kl: unable to send the bmi data to the device: -110 [ 403.464712][ T5863] ath6kl: Unable to send get target info: -110 [ 403.491001][ T5863] ath6kl: Failed to init ath6kl core: -110 [ 403.498309][ T5863] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 403.693761][ T991] usb 2-1: USB disconnect, device number 18 [ 403.736280][ T8508] netlink: 12 bytes leftover after parsing attributes in process `syz.6.650'. [ 405.702006][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 405.756342][ T24] usb 6-1: unable to read config index 0 descriptor/start: -32 [ 405.795414][ T24] usb 6-1: chopping to 0 config(s) [ 405.829325][ T24] usb 6-1: can't read configurations, error -32 [ 405.851601][ T8524] netlink: 60 bytes leftover after parsing attributes in process `syz.4.654'. [ 407.700040][ T8529] netlink: 'syz.4.654': attribute type 10 has an invalid length. [ 407.744596][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 407.909030][ T24] usb 6-1: device descriptor read/64, error -32 [ 408.043010][ T6144] team0 (unregistering): Port device team_slave_1 removed [ 408.046367][ T24] usb usb6-port1: attempt power cycle [ 408.100772][ T6144] team0 (unregistering): Port device team_slave_0 removed [ 408.191500][ T8536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.424638][ T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 409.835105][ T24] usb 6-1: device descriptor read/8, error -32 [ 410.094982][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 410.395692][ T24] usb 6-1: device descriptor read/8, error -32 [ 410.629884][ T31] audit: type=1800 audit(1785817198.994:57): pid=8551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.660" name="host_addr" dev="configfs" ino=17937 res=0 errno=0 [ 411.079013][ T24] usb usb6-port1: unable to enumerate USB device [ 411.560982][ T8341] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.574736][ T8341] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.595453][ T8341] bridge_slave_0: entered allmulticast mode [ 411.609503][ T8341] bridge_slave_0: entered promiscuous mode [ 411.777013][ T8530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 411.801523][ T8530] 8021q: adding VLAN 0 to HW filter on device bond2 [ 412.437092][ T8341] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.545955][ T8341] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.648839][ T8341] bridge_slave_1: entered allmulticast mode [ 412.929108][ T8341] bridge_slave_1: entered promiscuous mode [ 415.187769][ T8584] syz_tun: entered allmulticast mode [ 415.273588][ T8341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.369446][ T8341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.567929][ T8595] netlink: 60 bytes leftover after parsing attributes in process `syz.5.669'. [ 415.627983][ T8596] netlink: 'syz.5.669': attribute type 10 has an invalid length. [ 415.709620][ T8341] team0: Port device team_slave_0 added [ 416.031488][ T8564] syz_tun: left allmulticast mode [ 417.761083][ T31] audit: type=1800 audit(1785817205.564:58): pid=8609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.671" name="host_addr" dev="configfs" ino=17999 res=0 errno=0 [ 417.847087][ T8341] team0: Port device team_slave_1 added [ 418.416508][ T8341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.423655][ T8341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.451185][ T8341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.498754][ T8341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.522946][ T8341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.108492][ T5788] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 420.362901][ T8341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.584873][ T5788] usb 3-1: Using ep0 maxpacket: 8 [ 421.023919][ T5788] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 421.064465][ T5788] usb 3-1: config 0 has no interface number 0 [ 421.087272][ T5788] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 421.146445][ T5788] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 421.221720][ T5788] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 421.260076][ T8341] hsr_slave_0: entered promiscuous mode [ 421.296542][ T8341] hsr_slave_1: entered promiscuous mode [ 421.304268][ T5788] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 112, changing to 10 [ 421.339365][ T8341] debugfs: 'hsr0' already exists in 'hsr' [ 421.368114][ T5788] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 10229, setting to 1024 [ 421.379654][ T8341] Cannot create hsr debugfs directory [ 421.419581][ T5788] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.475205][ T5788] usb 3-1: string descriptor 0 read error: -71 [ 421.495264][ T5863] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 421.497680][ T5788] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 421.606008][ T31] audit: type=1800 audit(1785817209.974:59): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.677" name="host_addr" dev="configfs" ino=19337 res=0 errno=0 [ 421.668081][ T5788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.362573][ T5788] usb 3-1: config 0 descriptor?? [ 422.467955][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 422.508997][ T5788] usb 3-1: can't set config #0, error -71 [ 422.527552][ T5863] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 422.538052][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.562659][ T5863] usb 5-1: config 0 descriptor?? [ 422.571910][ T8625] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 422.584873][ T5788] usb 3-1: USB disconnect, device number 13 [ 422.785177][ T30] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 422.887890][ T5863] ath6kl: Failed to submit usb control message: -71 [ 422.913047][ T5863] ath6kl: unable to send the bmi data to the device: -71 [ 422.931555][ T5863] ath6kl: Unable to send get target info: -71 [ 422.947013][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 422.957069][ T5863] ath6kl: Failed to init ath6kl core: -71 [ 422.967225][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.983448][ T5863] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 422.994642][ T5788] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 423.004133][ T30] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 423.037368][ T5863] usb 5-1: USB disconnect, device number 14 [ 423.037597][ T30] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 423.102533][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.693037][ T8650] 9p: Bad value for 'rfdno' [ 423.794344][ T5788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 423.807916][ T5788] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 423.817112][ T5788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.827632][ T30] usb 2-1: config 0 descriptor?? [ 423.875628][ T5788] usb 3-1: config 0 descriptor?? [ 423.888237][ T8641] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 424.995926][ T5788] ath6kl: Failed to submit usb control message: -110 [ 425.086355][ T5788] ath6kl: unable to send the bmi data to the device: -110 [ 425.132693][ T5788] ath6kl: Unable to send get target info: -110 [ 425.159318][ T5788] ath6kl: Failed to init ath6kl core: -110 [ 425.199127][ T5788] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 425.211289][ T8673] netlink: 60 bytes leftover after parsing attributes in process `syz.5.676'. [ 425.333329][ T8673] netlink: 'syz.5.676': attribute type 10 has an invalid length. [ 425.441326][ T5788] usb 3-1: USB disconnect, device number 14 [ 425.492372][ T5787] usb 2-1: USB disconnect, device number 19 [ 426.163091][ T5863] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 426.341838][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 426.619622][ T5863] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 426.878588][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.083972][ T5863] usb 7-1: config 0 descriptor?? [ 427.231337][ T8676] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 427.867072][ T8676] trusted_key: encrypted_key: key user:syz not found [ 428.227619][ T8689] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 428.243484][ T5863] ath6kl: Failed to submit usb control message: -71 [ 428.251198][ T5863] ath6kl: unable to send the bmi data to the device: -71 [ 428.259888][ T5863] ath6kl: Unable to send get target info: -71 [ 428.290392][ T5863] ath6kl: Failed to init ath6kl core: -71 [ 428.453053][ T5863] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 428.813472][ T5863] usb 7-1: USB disconnect, device number 5 [ 430.031511][ T8713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.692'. [ 430.284614][ T5787] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 431.147449][ T5787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 431.178515][ T5787] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 431.224384][ T5787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.285472][ T5787] usb 6-1: config 0 descriptor?? [ 431.497007][ T8710] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 431.499200][ T8341] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 431.545223][ T8341] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.336883][ T8341] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 432.628784][ T5787] ath6kl: Failed to submit usb control message: -110 [ 432.745154][ T5787] ath6kl: unable to send the bmi data to the device: -110 [ 432.803636][ T8341] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 432.870464][ T5787] ath6kl: Unable to send get target info: -110 [ 432.904464][ T8710] trusted_key: encrypted_key: key user:syz not found [ 432.969117][ T8341] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 433.004984][ T5787] ath6kl: Failed to init ath6kl core: -110 [ 433.037582][ T5787] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 433.051294][ T8341] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.075813][ T8341] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 433.359395][ T8341] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 434.118517][ T5787] usb 6-1: USB disconnect, device number 19 [ 434.578771][ T31] audit: type=1800 audit(1785817222.914:60): pid=8752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.701" name="host_addr" dev="configfs" ino=19581 res=0 errno=0 [ 435.688334][ T8341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.732523][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.704'. [ 436.719485][ T8341] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.925267][ T8768] infiniband syz0: set active [ 436.930126][ T8768] infiniband syz0: added bond_slave_1 [ 436.940388][ T8768] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 436.944364][ T8768] infiniband syz0: Couldn't open port 1 [ 436.959452][ T8768] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 436.974894][ T8768] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 436.992059][ T8768] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 437.033785][ T8768] RDS/IB: syz0: added [ 437.038447][ T8768] smc: adding ib device syz0 with port count 1 [ 437.044880][ T8768] smc: ib device syz0 port 1 has no pnetid [ 437.729293][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.736553][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.952029][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.959334][ T1020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.159947][ T8777] loop5: detected capacity change from 0 to 512 [ 438.167607][ T8777] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 438.339280][ T8777] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 438.648911][ T8341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.106489][ T8790] overlayfs: failed to resolve './bus': -2 [ 439.391183][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.683053][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.401556][ T8802] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 442.959896][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 442.970755][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 442.984804][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 442.996890][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 443.005783][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 444.654940][ T31] audit: type=1800 audit(1785817231.708:61): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.717" name="host_addr" dev="configfs" ino=19677 res=0 errno=0 [ 445.114701][ T5634] Bluetooth: hci2: command tx timeout [ 445.361570][ T8824] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 445.930400][ T8842] loop6: detected capacity change from 0 to 512 [ 445.938116][ T8842] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 445.962334][ T8842] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 446.154601][ T5781] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 447.077136][ T5781] usb 2-1: Using ep0 maxpacket: 8 [ 447.120309][ T5781] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 447.162360][ T5634] Bluetooth: hci2: command tx timeout [ 447.198428][ T31] audit: type=1800 audit(1785817234.518:62): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.725" name="host_addr" dev="configfs" ino=20536 res=0 errno=0 [ 447.313519][ T5781] usb 2-1: config 0 has no interface number 0 [ 447.460666][ T5781] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 447.672797][ T5781] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 447.873337][ T5781] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 448.145153][ T5781] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 112, changing to 10 [ 448.185170][ T5781] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 10229, setting to 1024 [ 448.243296][ T5781] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.338230][ T5781] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 448.368898][ T5781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.406389][ T5781] usb 2-1: Product: syz [ 448.423235][ T5781] usb 2-1: Manufacturer: syz [ 448.441245][ T5781] usb 2-1: SerialNumber: syz [ 448.480127][ T8865] 9p: Bad value for 'rfdno' [ 448.490358][ T5781] usb 2-1: config 0 descriptor?? [ 448.514074][ T8839] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 448.659680][ T5781] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 448.680714][ T5625] ffs_data_put(): freeing [ 448.739130][ T5781] usb 2-1: USB disconnect, device number 20 [ 448.775010][ T5755] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 448.971127][ T5755] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 448.982201][ T5755] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 448.995647][ T5755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.078164][ T5755] usb 5-1: config 0 descriptor?? [ 449.168199][ T8871] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 449.244623][ T5634] Bluetooth: hci2: command tx timeout [ 450.089978][ T5755] ath6kl: Failed to submit usb control message: -71 [ 450.100900][ T5755] ath6kl: unable to send the bmi data to the device: -71 [ 450.109098][ T5755] ath6kl: Unable to send get target info: -71 [ 450.119225][ T5755] ath6kl: Failed to init ath6kl core: -71 [ 450.126920][ T5755] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 450.152999][ T5755] usb 5-1: USB disconnect, device number 15 [ 450.403757][ T188] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 450.579664][ T188] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 450.591355][ T188] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 450.604327][ T188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.617617][ T188] usb 6-1: config 0 descriptor?? [ 450.627465][ T8889] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 451.175155][ T8889] trusted_key: encrypted_key: key user:syz not found [ 451.470592][ T5634] Bluetooth: hci2: command tx timeout [ 451.620076][ T188] ath6kl: Failed to submit usb control message: -71 [ 451.631927][ T188] ath6kl: unable to send the bmi data to the device: -71 [ 451.645182][ T188] ath6kl: Unable to send get target info: -71 [ 451.663866][ T188] ath6kl: Failed to init ath6kl core: -71 [ 451.677729][ T188] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 451.790248][ T188] usb 6-1: USB disconnect, device number 20 [ 453.139951][ T6144] bridge_slave_1: left allmulticast mode [ 453.176070][ T6144] bridge_slave_1: left promiscuous mode [ 453.202154][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.399546][ T8913] 9p: Bad value for 'rfdno' [ 453.706222][ T6144] bridge_slave_0: left allmulticast mode [ 453.880575][ T6144] bridge_slave_0: left promiscuous mode [ 454.007547][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.673892][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.6.745'. [ 455.504584][ T5755] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 455.676439][ T5755] usb 7-1: Using ep0 maxpacket: 8 [ 455.883729][ T8946] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 456.800987][ T8947] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 457.028015][ T6144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.069813][ T6144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.113511][ T6144] bond0 (unregistering): Released all slaves [ 458.259902][ T5755] usb 7-1: unable to get BOS descriptor or descriptor too short [ 458.280338][ T5755] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 458.551112][ T5755] usb 7-1: can't read configurations, error -71 [ 459.694959][ T5788] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 459.826920][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9 [ 460.036345][ T5788] usb 2-1: Using ep0 maxpacket: 8 [ 460.052381][ T5788] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 460.061045][ T5788] usb 2-1: config 0 has no interface number 0 [ 460.069937][ T5788] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 460.089344][ T6144] hsr_slave_0: left promiscuous mode [ 460.204802][ T6144] hsr_slave_1: left promiscuous mode [ 460.266102][ T5788] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 460.276731][ T5788] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 460.288526][ T5788] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 112, changing to 10 [ 460.313841][ T6144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.322864][ T5788] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 10229, setting to 1024 [ 460.348566][ T5788] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.115135][ T5788] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 461.126076][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.134433][ T5788] usb 2-1: Product: syz [ 461.139257][ T5788] usb 2-1: Manufacturer: syz [ 461.143889][ T5788] usb 2-1: SerialNumber: syz [ 461.319745][ T5788] usb 2-1: config 0 descriptor?? [ 461.396769][ T6144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.404921][ T8976] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 461.445039][ T8968] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 462.373072][ T5788] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 462.395132][ T5625] ffs_data_put(): freeing [ 462.509795][ T5788] usb 2-1: USB disconnect, device number 21 [ 462.714920][ T8978] 9p: Bad value for 'rfdno' [ 464.075383][ T5863] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 464.304681][ T5863] usb 3-1: Using ep0 maxpacket: 8 [ 464.398016][ T5863] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 464.507443][ T5863] usb 3-1: config 0 has no interface number 0 [ 464.602508][ T5863] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 464.825441][ T5863] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 464.942940][ T5863] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 466.704147][ T5863] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 112, changing to 10 [ 466.725141][ T5863] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 10229, setting to 1024 [ 466.744697][ T5863] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.989332][ T6144] team0 (unregistering): Port device team_slave_1 removed [ 469.088632][ T6144] team0 (unregistering): Port device team_slave_0 removed [ 469.529917][ T9006] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 469.673039][ T8986] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 469.773985][ T5863] usb 3-1: string descriptor 0 read error: -71 [ 469.799927][ T5640] ffs_data_put(): freeing [ 469.821528][ T5863] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 469.842650][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.902382][ T5863] usb 3-1: config 0 descriptor?? [ 469.997426][ T5863] usb 3-1: can't set config #0, error -71 [ 470.009625][ T5863] usb 3-1: USB disconnect, device number 15 [ 470.098342][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.767'. [ 470.644944][ T5863] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 470.986147][ T5863] usb 3-1: Using ep0 maxpacket: 8 [ 471.568143][ T5863] usb 3-1: unable to get BOS descriptor or descriptor too short [ 471.624159][ T5863] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 471.664641][ T5863] usb 3-1: can't read configurations, error -71 [ 471.675354][ T9024] 9p: Bad value for 'rfdno' [ 471.978758][ T9029] syz.6.771 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 472.028679][ T9029] CPU: 1 UID: 0 PID: 9029 Comm: syz.6.771 Tainted: G L syzkaller #0 PREEMPT(full) [ 472.028721][ T9029] Tainted: [L]=SOFTLOCKUP [ 472.028731][ T9029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 472.028753][ T9029] Call Trace: [ 472.028763][ T9029] [ 472.028773][ T9029] dump_stack_lvl+0xe8/0x150 [ 472.028819][ T9029] dump_header+0xd3/0x4b0 [ 472.028859][ T9029] oom_kill_process+0x3ab/0x970 [ 472.028895][ T9029] out_of_memory+0x1064/0x1480 [ 472.028926][ T9029] ? try_charge_memcg+0xbca/0x1590 [ 472.028965][ T9029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.029011][ T9029] ? __pfx_out_of_memory+0x10/0x10 [ 472.029037][ T9029] ? do_raw_spin_unlock+0xf5/0x210 [ 472.029082][ T9029] try_charge_memcg+0xc74/0x1590 [ 472.029142][ T9029] ? __pfx_try_charge_memcg+0x10/0x10 [ 472.029192][ T9029] ? percpu_ref_tryget+0x15/0x180 [ 472.029243][ T9029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.029278][ T9029] ? __memcg_kmem_charge_page+0x159/0x510 [ 472.029319][ T9029] __memcg_kmem_charge_page+0x31b/0x510 [ 472.029353][ T9029] ? __memcg_kmem_charge_page+0x159/0x510 [ 472.029391][ T9029] __alloc_frozen_pages_noprof+0x1be/0x380 [ 472.029437][ T9029] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 472.029482][ T9029] ? __pfx_policy_nodemask+0x10/0x10 [ 472.029525][ T9029] ? __pfx___css_rstat_updated+0x10/0x10 [ 472.029573][ T9029] alloc_pages_mpol+0x212/0x380 [ 472.029622][ T9029] alloc_pages_noprof+0xac/0x2a0 [ 472.029650][ T9029] pte_alloc_one+0x22/0x370 [ 472.029684][ T9029] do_pte_missing+0x13c8/0x34b0 [ 472.029725][ T9029] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 472.029777][ T9029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.029808][ T9029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.029839][ T9029] ? __pmd_alloc+0x40a/0x5c0 [ 472.029874][ T9029] handle_mm_fault+0x1b36/0x3080 [ 472.029906][ T9029] ? mt_find+0x186/0x630 [ 472.029956][ T9029] ? handle_mm_fault+0xec/0x3080 [ 472.029995][ T9029] ? __pfx_handle_mm_fault+0x10/0x10 [ 472.030040][ T9029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.030077][ T9029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.030116][ T9029] __get_user_pages+0x1678/0x2720 [ 472.030183][ T9029] populate_vma_page_range+0x2be/0x3c0 [ 472.030216][ T9029] ? __pfx_populate_vma_page_range+0x10/0x10 [ 472.030248][ T9029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.030278][ T9029] ? down_read+0x2be/0x330 [ 472.030321][ T9029] __mm_populate+0x25f/0x390 [ 472.030353][ T9029] ? __pfx___mm_populate+0x10/0x10 [ 472.030381][ T9029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.030415][ T9029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.030453][ T9029] vm_mmap_pgoff+0x353/0x4e0 [ 472.030496][ T9029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.030534][ T9029] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 472.030581][ T9029] ? rcu_is_watching+0x15/0xb0 [ 472.030611][ T9029] ? ksys_mmap_pgoff+0xf3/0x760 [ 472.030642][ T9029] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.030673][ T9029] ? __x64_sys_mmap+0x7f/0x140 [ 472.030716][ T9029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.030754][ T9029] do_syscall_64+0x174/0x580 [ 472.030790][ T9029] ? trace_irq_disable+0x3b/0x140 [ 472.030833][ T9029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.030860][ T9029] RIP: 0033:0x7f676c39e019 [ 472.030884][ T9029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.030906][ T9029] RSP: 002b:00007f676d307028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 472.030933][ T9029] RAX: ffffffffffffffda RBX: 00007f676c625fa0 RCX: 00007f676c39e019 [ 472.030953][ T9029] RDX: 0000000000000002 RSI: 0000000000001000 RDI: 0000000000000000 [ 472.030969][ T9029] RBP: 00007f676c43500c R08: ffffffffffffffff R09: 0000000010000000 [ 472.030988][ T9029] R10: 0000000000109031 R11: 0000000000000246 R12: 0000000000000000 [ 472.031005][ T9029] R13: 00007f676c626038 R14: 00007f676c625fa0 R15: 00007ffc18b6df78 [ 472.031045][ T9029] [ 472.031149][ T9029] memory: usage 8kB, limit 8kB, failcnt 70 [ 472.191159][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 472.195168][ T9029] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 472.467195][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 472.477476][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 472.485748][ T5638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 472.495879][ T5638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 472.647128][ T9029] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 472.730115][ T8817] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.753177][ T9029] Memory cgroup stats for /syz6/test: [ 472.753446][ T9029] cache 0 [ 472.800300][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.811095][ T9029] rss 0 [ 472.820123][ T8817] bridge_slave_0: entered allmulticast mode [ 472.835967][ T9029] rss_huge 0 [ 472.867564][ T8817] bridge_slave_0: entered promiscuous mode [ 472.869340][ T9029] shmem 0 [ 472.917550][ T9029] mapped_file 0 [ 472.922095][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.932007][ T9029] dirty 0 [ 472.944766][ T8817] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.952838][ T9029] writeback 0 [ 472.959855][ T9029] workingset_refault_anon 0 [ 472.960860][ T8817] bridge_slave_1: entered allmulticast mode [ 472.979167][ T9029] workingset_refault_file 0 [ 472.992976][ T8817] bridge_slave_1: entered promiscuous mode [ 472.996030][ T9029] swap 0 [ 473.017815][ T9029] swapcached 0 [ 473.036568][ T9029] pgpgin 0 [ 473.050912][ T9029] pgpgout 0 [ 473.089459][ T9029] pgfault 18 [ 473.102110][ T9029] pgmajfault 0 [ 473.120253][ T9029] inactive_anon 0 [ 473.138212][ T9029] active_anon 0 [ 473.158808][ T9029] inactive_file 0 [ 473.183764][ T9029] active_file 0 [ 473.199838][ T9029] unevictable 0 [ 473.211828][ T9029] hierarchical_memory_limit 8192 [ 473.232320][ T9029] hierarchical_memsw_limit 9223372036854771712 [ 473.256144][ T9029] total_cache 0 [ 473.266578][ T8817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.267491][ T9029] total_rss 0 [ 473.315679][ T9029] total_rss_huge 0 [ 473.328922][ T9029] total_shmem 0 [ 473.341366][ T9029] total_mapped_file 0 [ 473.356625][ T9029] total_dirty 0 [ 473.368815][ T8817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.370050][ T9029] total_writeback 0 [ 473.424365][ T9029] total_workingset_refault_anon 0 [ 473.456223][ T9029] total_workingset_refault_file 0 [ 473.493545][ T9029] total_swap 0 [ 473.540013][ T9029] total_swapcached 0 [ 473.568831][ T9029] total_pgpgin 0 [ 473.576100][ T9029] total_pgpgout 0 [ 473.589608][ T9029] total_pgfault 18 [ 473.599169][ T9029] total_pgmajfault 0 [ 473.609561][ T9029] total_inactive_anon 0 [ 473.620678][ T9029] total_active_anon 0 [ 473.642647][ T9029] total_inactive_file 0 [ 473.660799][ T9029] total_active_file 0 [ 473.672879][ T9029] total_unevictable 0 [ 473.684330][ T8817] team0: Port device team_slave_0 added [ 473.689701][ T9029] anon_cost 0 [ 473.698437][ T9029] file_cost 0 [ 473.729783][ T9029] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6/test,task_memcg=/syz6/test,task=syz.6.771,pid=9026,uid=0 [ 473.793362][ T8817] team0: Port device team_slave_1 added [ 473.813711][ T9029] Memory cgroup out of memory: Killed process 9029 (syz.6.771) total-vm:102256kB, anon-rss:1432kB, file-rss:22624kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 474.231427][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.239552][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.267306][ T8817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.362729][ T9070] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 474.611652][ T5638] Bluetooth: hci4: command tx timeout [ 475.232620][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.364856][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.294312][ T8817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.674673][ T5634] Bluetooth: hci4: command tx timeout [ 476.721474][ T5281] 8021q: adding VLAN 0 to HW filter on device eth11 [ 477.519643][ T8817] hsr_slave_0: entered promiscuous mode [ 477.546467][ T8817] hsr_slave_1: entered promiscuous mode [ 477.566744][ T8817] debugfs: 'hsr0' already exists in 'hsr' [ 477.637795][ T8817] Cannot create hsr debugfs directory [ 478.693860][ T9098] syz0: rxe_newlink: already configured on bond_slave_1 [ 478.755420][ T5634] Bluetooth: hci4: command tx timeout [ 480.754852][ T9101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.786'. [ 480.811367][ T9101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.786'. [ 480.835708][ T5634] Bluetooth: hci4: command tx timeout [ 481.203405][ T9107] syz0: rxe_newlink: already configured on bond_slave_1 [ 483.262229][ T9120] loop6: detected capacity change from 0 to 512 [ 483.270177][ T9120] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 483.302938][ T9120] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 483.715951][ T8943] bond0: (slave syz_tun): Releasing backup interface [ 485.144681][ T5748] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 485.410130][ T5748] usb 7-1: Using ep0 maxpacket: 8 [ 485.754994][ T5748] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 485.786366][ T5748] usb 7-1: config 0 has no interface number 0 [ 485.824663][ T5748] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 485.877102][ T5748] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 485.920813][ T5748] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 485.971360][ T5748] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 486.012172][ T5748] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.025268][ T146] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.038866][ T5748] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 486.048165][ T5748] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.070946][ T5748] usb 7-1: Product: syz [ 486.079415][ T5748] usb 7-1: Manufacturer: syz [ 486.098229][ T5748] usb 7-1: SerialNumber: syz [ 486.113095][ T5748] usb 7-1: config 0 descriptor?? [ 486.159369][ T5281] 8021q: adding VLAN 0 to HW filter on device eth10 [ 486.281464][ T146] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.342647][ T9132] read descriptors [ 486.348486][ T9132] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 486.421619][ T5748] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 486.467429][ T5748] usb 7-1: USB disconnect, device number 8 [ 486.549041][ T146] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.531646][ T6429] ffs_data_put(): freeing [ 488.541986][ T146] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.763973][ T9165] netlink: 12 bytes leftover after parsing attributes in process `syz.5.804'. [ 489.174588][ T991] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 490.244631][ T991] usb 6-1: Using ep0 maxpacket: 8 [ 490.264152][ T991] usb 6-1: unable to get BOS descriptor or descriptor too short [ 490.285003][ T991] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 490.302961][ T991] usb 6-1: can't read configurations, error -71 [ 490.682632][ T8817] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 490.724926][ T8817] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 490.975154][ T8817] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 490.997051][ T8817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 491.136318][ T8817] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 491.183740][ T8817] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 492.260961][ T8817] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 492.309424][ T8817] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 492.339597][ T9033] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.347455][ T9033] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.355300][ T9033] bridge_slave_0: entered allmulticast mode [ 492.364139][ T9033] bridge_slave_0: entered promiscuous mode [ 492.375445][ T9033] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.382642][ T9033] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.392356][ T9033] bridge_slave_1: entered allmulticast mode [ 492.401332][ T9033] bridge_slave_1: entered promiscuous mode [ 492.830522][ T9033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.554835][ T146] bridge_slave_1: left allmulticast mode [ 493.596691][ T146] bridge_slave_1: left promiscuous mode [ 493.633857][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.827297][ T146] bridge_slave_0: left allmulticast mode [ 493.842200][ T146] bridge_slave_0: left promiscuous mode [ 493.854846][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.231041][ T9234] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 495.744647][ T991] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 495.906534][ T991] usb 2-1: Using ep0 maxpacket: 8 [ 495.915460][ T991] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 495.933289][ T991] usb 2-1: config 0 has no interface number 0 [ 495.949996][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.963529][ T991] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 495.988911][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.004886][ T991] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 496.049776][ T991] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 496.087661][ T146] bond0 (unregistering): Released all slaves [ 496.106788][ T991] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 112, changing to 10 [ 496.154214][ T146] bond1 (unregistering): Released all slaves [ 496.168558][ T991] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 10229, setting to 1024 [ 496.217367][ T991] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.242908][ T9247] netlink: 12 bytes leftover after parsing attributes in process `syz.6.817'. [ 496.271838][ T146] bond2 (unregistering): Released all slaves [ 496.310307][ T991] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 496.330285][ T991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.374169][ T991] usb 2-1: Product: syz [ 496.395788][ T9033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.406663][ T991] usb 2-1: Manufacturer: syz [ 496.423269][ T991] usb 2-1: SerialNumber: syz [ 496.727554][ T5748] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 496.840193][ T991] usb 2-1: config 0 descriptor?? [ 496.929191][ T5748] usb 7-1: Using ep0 maxpacket: 8 [ 496.930094][ T9244] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 497.435114][ T9256] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 497.643146][ T5748] usb 7-1: unable to get BOS descriptor or descriptor too short [ 497.663749][ T991] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 497.685241][ T5748] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 497.710175][ T5748] usb 7-1: can't read configurations, error -71 [ 497.749491][ T991] usb 2-1: USB disconnect, device number 22 [ 498.814082][ T9033] team0: Port device team_slave_0 added [ 498.857659][ T9033] team0: Port device team_slave_1 added [ 498.865640][ T9273] loop6: detected capacity change from 0 to 512 [ 498.930123][ T9273] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 498.933346][ T9276] 9p: Bad value for 'rfdno' [ 499.659693][ T5625] ffs_data_put(): freeing [ 499.725182][ T9273] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 500.044985][ T31] audit: type=1800 audit(1785817287.388:63): pid=9284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.824" name="host_addr" dev="configfs" ino=22536 res=0 errno=0 [ 500.769557][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.783268][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.380486][ T9296] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 503.383045][ T9033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.394588][ T9033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.421307][ T9033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.451980][ T9033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.460980][ T9033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.590040][ T9033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.064281][ T9314] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 508.397423][ T9033] hsr_slave_0: entered promiscuous mode [ 508.416127][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 508.440109][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 508.451823][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 508.461886][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 508.469571][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 508.491279][ T9033] hsr_slave_1: entered promiscuous mode [ 508.522130][ T9033] debugfs: 'hsr0' already exists in 'hsr' [ 509.674616][ T9033] Cannot create hsr debugfs directory [ 509.684607][ T31] audit: type=1800 audit(1785817297.018:64): pid=9334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.836" name="host_addr" dev="configfs" ino=22603 res=0 errno=0 [ 509.768863][ T9336] 9p: Bad value for 'rfdno' [ 510.521784][ T5638] Bluetooth: hci1: command tx timeout [ 511.389767][ T146] hsr_slave_0: left promiscuous mode [ 512.187767][ T146] hsr_slave_1: left promiscuous mode [ 512.243742][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.324009][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.375630][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.404193][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.445624][ T5863] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 512.590806][ T146] veth1_macvtap: left promiscuous mode [ 512.599332][ T5638] Bluetooth: hci1: command tx timeout [ 512.607098][ T5863] usb 3-1: Using ep0 maxpacket: 8 [ 512.633306][ T5863] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 512.650060][ T146] veth0_macvtap: left promiscuous mode [ 512.674173][ T5863] usb 3-1: config 0 has no interface number 0 [ 512.684896][ T146] veth1_vlan: left promiscuous mode [ 512.703055][ T146] veth0_vlan: left promiscuous mode [ 512.718297][ T5863] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 512.751490][ T5863] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 512.790456][ T5863] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 512.832662][ T5863] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 512.872357][ T5863] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 512.962399][ T5863] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 512.998852][ T31] audit: type=1800 audit(1785817300.368:65): pid=9371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.842" name="host_addr" dev="configfs" ino=21704 res=0 errno=0 [ 513.022500][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.053709][ T5863] usb 3-1: Product: syz [ 513.103246][ T5863] usb 3-1: Manufacturer: syz [ 513.129601][ T5863] usb 3-1: SerialNumber: syz [ 513.479811][ T5863] usb 3-1: config 0 descriptor?? [ 513.917030][ T5863] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 513.988790][ T5863] usb 3-1: USB disconnect, device number 18 [ 514.445398][ T9377] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 514.677009][ T5638] Bluetooth: hci1: command tx timeout [ 516.378968][ T5640] ffs_data_put(): freeing [ 516.774648][ T5638] Bluetooth: hci1: command tx timeout [ 518.078478][ T9382] syz0: rxe_newlink: already configured on bond_slave_1 [ 520.135036][ T146] team0 (unregistering): Port device team_slave_1 removed [ 520.248933][ T146] team0 (unregistering): Port device team_slave_0 removed [ 521.216191][ T9426] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 521.230617][ T9426] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 521.252628][ T9426] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 521.301667][ T9426] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 521.411013][ T9426] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 526.284113][ T9033] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 526.335694][ T9033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 526.362698][ T9033] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 526.422157][ T9033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 526.449075][ T9033] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 526.499457][ T9033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 526.520161][ T9033] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 526.521059][ T9452] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 526.697628][ T9033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 527.315315][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9 [ 530.800007][ T5863] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 532.104622][ T5863] usb 6-1: Using ep0 maxpacket: 8 [ 532.148616][ T5863] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 532.211957][ T5863] usb 6-1: config 0 has no interface number 0 [ 532.260450][ T5863] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 532.332748][ T5863] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 532.384257][ T5863] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 532.568598][ T5863] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 112, changing to 10 [ 532.580601][ T5863] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 10229, setting to 1024 [ 532.592019][ T5863] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.623975][ T5863] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 533.417682][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.454987][ T5863] usb 6-1: Product: syz [ 533.471515][ T5863] usb 6-1: Manufacturer: syz [ 533.515128][ T5863] usb 6-1: SerialNumber: syz [ 533.609512][ T5863] usb 6-1: config 0 descriptor?? [ 533.650135][ T5636] ffs_data_put(): freeing [ 533.660195][ T5863] usb 6-1: can't set config #0, error -71 [ 533.678364][ T9514] kexec: Could not allocate control_code_buffer [ 533.704889][ T5863] usb 6-1: USB disconnect, device number 23 [ 533.813192][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 533.827727][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 533.836680][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 533.845848][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 533.855808][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 534.012169][ T146] bridge_slave_1: left allmulticast mode [ 534.048742][ T146] bridge_slave_1: left promiscuous mode [ 534.084115][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.135867][ T146] bridge_slave_0: left allmulticast mode [ 534.161602][ T146] bridge_slave_0: left promiscuous mode [ 534.187153][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.769583][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.806559][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.827565][ T146] bond0 (unregistering): Released all slaves [ 536.237174][ T5638] Bluetooth: hci2: command tx timeout [ 536.283738][ T5281] 8021q: adding VLAN 0 to HW filter on device eth10 [ 537.980560][ T9570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.010860][ T9570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.081498][ T9570] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 538.110700][ T9570] bond0 (unregistering): Released all slaves [ 538.284601][ T5638] Bluetooth: hci2: command tx timeout [ 538.308231][ T9576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.340541][ T9576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.401531][ T9576] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 538.419570][ T65] smbdirect: ib_dev[syz1] removed [ 538.488454][ T9576] bond0 (unregistering): Released all slaves [ 539.108597][ T146] hsr_slave_0: left promiscuous mode [ 539.142472][ T146] hsr_slave_1: left promiscuous mode [ 539.321929][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.348525][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.354677][ T5638] Bluetooth: hci2: command tx timeout [ 541.914901][ T9614] netlink: 'syz.5.898': attribute type 10 has an invalid length. [ 541.922858][ T9614] netlink: 40 bytes leftover after parsing attributes in process `syz.5.898'. [ 542.179823][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.6.899'. [ 542.310607][ T146] team0 (unregistering): Port device team_slave_1 removed [ 542.340272][ T146] team0 (unregistering): Port device team_slave_0 removed [ 542.445697][ T5638] Bluetooth: hci2: command tx timeout [ 542.725613][ T29] syz0: Port: 1 Link DOWN [ 542.770858][ T9614] bridge0: port 3(dummy0) entered blocking state [ 542.793069][ T9614] bridge0: port 3(dummy0) entered disabled state [ 542.815941][ T9614] dummy0: entered allmulticast mode [ 542.847979][ T9614] dummy0: entered promiscuous mode [ 542.857703][ T9614] bridge0: port 3(dummy0) entered blocking state [ 542.866733][ T9614] bridge0: port 3(dummy0) entered forwarding state [ 543.101577][ T5281] 8021q: adding VLAN 0 to HW filter on device eth11 [ 543.111789][ T9330] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.144944][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.179547][ T9330] bridge_slave_0: entered allmulticast mode [ 543.351660][ T9633] netlink: 'syz.5.901': attribute type 10 has an invalid length. [ 543.360502][ T9633] netlink: 40 bytes leftover after parsing attributes in process `syz.5.901'. [ 543.633615][ T9330] bridge_slave_0: entered promiscuous mode [ 543.693139][ T9330] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.751314][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.781056][ T9330] bridge_slave_1: entered allmulticast mode [ 543.817856][ T9330] bridge_slave_1: entered promiscuous mode [ 543.993968][ T9330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.191495][ T9330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.340538][ T9330] team0: Port device team_slave_0 added [ 546.454968][ T9330] team0: Port device team_slave_1 added [ 546.678906][ T9330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.722310][ T9330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.775976][ T9640] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 546.916334][ T9330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.963408][ T9330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.974682][ T9330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.039039][ T9330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.046815][ T9330] hsr_slave_0: entered promiscuous mode [ 549.065858][ T9330] hsr_slave_1: entered promiscuous mode [ 549.076050][ T9330] debugfs: 'hsr0' already exists in 'hsr' [ 549.088212][ T9330] Cannot create hsr debugfs directory [ 550.368181][ T9666] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.775109][ T9707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.918'. [ 552.790286][ T9718] vlan2: entered promiscuous mode [ 552.813066][ T9718] hsr0: entered promiscuous mode [ 552.833978][ T9718] vlan2: entered allmulticast mode [ 552.850052][ T9718] hsr0: entered allmulticast mode [ 552.866700][ T9718] hsr_slave_0: entered allmulticast mode [ 552.924633][ T9718] hsr_slave_1: entered allmulticast mode [ 553.254467][ T5281] 8021q: adding VLAN 0 to HW filter on device eth12 [ 553.982407][ T9727] serio: Serial port ptm0 [ 554.867650][ T9730] overlayfs: missing 'lowerdir' [ 555.082007][ T9666] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.370400][ T9739] loop2: detected capacity change from 0 to 512 [ 556.400619][ T9739] EXT4-fs: Ignoring removed nomblk_io_submit option [ 556.414839][ T9739] ext4: Unknown parameter 'fscontext' [ 556.470115][ T9666] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.487461][ T9744] loop6: detected capacity change from 0 to 2048 [ 556.543773][ T9739] loop2: detected capacity change from 0 to 2048 [ 556.560952][ T5638] Bluetooth: hci5: unexpected event for opcode 0x2027 [ 556.615155][ T9744] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 556.933130][ T9666] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.275901][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.335552][ T9768] gadgetfs: bound to dummy_udc driver [ 558.341208][ T9768] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 558.353278][ T9768] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 558.361704][ T9768] CPU: 1 UID: 0 PID: 9768 Comm: syz.6.933 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.372491][ T9768] Tainted: [L]=SOFTLOCKUP [ 558.376818][ T9768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 558.386878][ T9768] RIP: 0010:dummy_udc_start+0xd0/0x1f0 [ 558.392357][ T9768] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 93 00 00 00 e8 15 51 10 fa eb 0c e8 0e 51 10 fa eb 05 e8 07 51 10 fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 11 ea 7d fa 4d 8b 36 4c 89 f7 e8 [ 558.411974][ T9768] RSP: 0018:ffffc900038f7850 EFLAGS: 00010256 [ 558.418044][ T9768] RAX: 0000000000000000 RBX: ffffffff8fa510e0 RCX: 0000000000080000 [ 558.426007][ T9768] RDX: ffffc9001df6a000 RSI: 00000000000040b8 RDI: 00000000000040b9 [ 558.433971][ T9768] RBP: ffff88802b535000 R08: ffff88802eed0000 R09: 0000000000000004 [ 558.441936][ T9768] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 558.449900][ T9768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 558.457866][ T9768] FS: 00007f676d2e66c0(0000) GS:ffff88812504b000(0000) knlGS:0000000000000000 [ 558.466794][ T9768] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 558.473372][ T9768] CR2: 0000000000000000 CR3: 0000000033727000 CR4: 0000000000350ef0 [ 558.481338][ T9768] Call Trace: [ 558.484611][ T9768] [ 558.487530][ T9768] ? __pfx_dummy_udc_start+0x10/0x10 [ 558.492815][ T9768] gadget_bind_driver+0x3a8/0x9e0 [ 558.497852][ T9768] ? __pfx_gadget_bind_driver+0x10/0x10 [ 558.503412][ T9768] really_probe+0x254/0xae0 [ 558.507938][ T9768] __driver_probe_device+0x1e8/0x360 [ 558.513234][ T9768] driver_probe_device+0x4f/0x240 [ 558.518268][ T9768] __driver_attach+0x339/0x600 [ 558.523044][ T9768] bus_for_each_dev+0x23b/0x2c0 [ 558.527889][ T9768] ? __pfx___driver_attach+0x10/0x10 [ 558.533178][ T9768] ? __pfx_bus_for_each_dev+0x10/0x10 [ 558.538545][ T9768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.544179][ T9768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.549812][ T9768] ? do_raw_spin_unlock+0xf5/0x210 [ 558.554930][ T9768] bus_add_driver+0x345/0x670 [ 558.559604][ T9768] driver_register+0x23a/0x320 [ 558.564372][ T9768] usb_gadget_register_driver_owner+0xf9/0x270 [ 558.570573][ T9768] dev_config+0xe3c/0x12a0 [ 558.575004][ T9768] ? __pfx_dev_config+0x10/0x10 [ 558.579865][ T9768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.585499][ T9768] ? __pfx_dev_config+0x10/0x10 [ 558.590355][ T9768] vfs_write+0x296/0xba0 [ 558.594598][ T9768] ? __pfx_vfs_write+0x10/0x10 [ 558.599359][ T9768] ? __fget_files+0x2a/0x420 [ 558.603954][ T9768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.609583][ T9768] ? __fget_files+0x3a2/0x420 [ 558.614262][ T9768] ? __fget_files+0x2a/0x420 [ 558.618858][ T9768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 558.624493][ T9768] ksys_write+0x150/0x270 [ 558.628823][ T9768] ? __pfx_ksys_write+0x10/0x10 [ 558.633668][ T9768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.639730][ T9768] do_syscall_64+0x174/0x580 [ 558.644336][ T9768] ? trace_irq_disable+0x3b/0x140 [ 558.649369][ T9768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.655260][ T9768] RIP: 0033:0x7f676c39e019 [ 558.659669][ T9768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.679273][ T9768] RSP: 002b:00007f676d2e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 558.687692][ T9768] RAX: ffffffffffffffda RBX: 00007f676c626090 RCX: 00007f676c39e019 [ 558.695663][ T9768] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000007 [ 558.703627][ T9768] RBP: 00007f676c43500c R08: 0000000000000000 R09: 0000000000000000 [ 558.711590][ T9768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.719552][ T9768] R13: 00007f676c626128 R14: 00007f676c626090 R15: 00007ffc18b6df78 [ 558.727528][ T9768] [ 558.730547][ T9768] Modules linked in: [ 558.735558][ T9768] ---[ end trace 0000000000000000 ]--- [ 558.741016][ T9768] RIP: 0010:dummy_udc_start+0xd0/0x1f0 [ 558.746543][ T9768] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 93 00 00 00 e8 15 51 10 fa eb 0c e8 0e 51 10 fa eb 05 e8 07 51 10 fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 11 ea 7d fa 4d 8b 36 4c 89 f7 e8 [ 558.766229][ T9768] RSP: 0018:ffffc900038f7850 EFLAGS: 00010256 [ 558.772326][ T9768] RAX: 0000000000000000 RBX: ffffffff8fa510e0 RCX: 0000000000080000 [ 558.780357][ T9768] RDX: ffffc9001df6a000 RSI: 00000000000040b8 RDI: 00000000000040b9 [ 558.788388][ T9768] RBP: ffff88802b535000 R08: ffff88802eed0000 R09: 0000000000000004 [ 558.796437][ T9768] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 558.804427][ T9768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 558.812469][ T9768] FS: 00007f676d2e66c0(0000) GS:ffff88812504b000(0000) knlGS:0000000000000000 [ 558.821679][ T9768] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 558.828318][ T9768] CR2: 0000000000000000 CR3: 0000000033727000 CR4: 0000000000350ef0 [ 558.836726][ T9768] Kernel panic - not syncing: Fatal exception [ 558.843042][ T9768] Kernel Offset: disabled [ 558.847356][ T9768] Rebooting in 86400 seconds..