last executing test programs: 12m44.477666963s ago: executing program 3 (id=1198): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc259, 0xf8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xb4, 0x84, 0xfe}}}}}]}}]}}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)={0x24, r2, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x6) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000002c0), &(0x7f0000000300)=0x8) setxattr$incfs_metadata(&(0x7f0000000380)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x2) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x55f6b815daa49c7}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0x0, 0x410, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x20004080) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000a00)={0xf, {"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", 0x1000}}, 0x1006) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') r7 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0xc3) pipe2$watch_queue(&(0x7f0000000680), 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0xffffffffffffffff) r9 = request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='-', 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, 0x0, r9}, &(0x7f0000000200)=""/60, 0x3c, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="202336000000360583efb930f0187ff0478fa22a61a54607b71ea9e43d359c479ca3000000001fef7c7b08fc0a59a737f52509e38bf7914077366b481362342dc3580b4ead3bc4b3ddd953e7186552daccafdee340aaf72478c8747991e247070985d8ede5afdd1bb2d1e16b3e35a67ea755ba9f401cd7fd67aefe8ac92a7a000bc00d60359ed3000000000000000000b5844e7645dbc849a5f7340bb6a02f1c60119e8c84002b612b92795cac9173f3f6d353315881dc00667c8e44ec6498ce15dca337595fe3b6af807d4fdfd14cbf111dd2f8038450caa6b9606ef3cb0d0ebb9d7a221a"], 0x0, 0x0, 0x0, 0x0}, 0x0) 12m42.094233827s ago: executing program 3 (id=1208): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x20040880) 12m41.866851204s ago: executing program 3 (id=1210): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000940)=ANY=[@ANYBLOB="ffffffffffff00000000ca789bf71fe7ca8700482f00fe800000000000000000000000000021ff02000000000000000000000000000104206558000000000003000900000800000086dd080088be00000004100000000100000000000000080022eb00000000200080100200000000000008000100000800655800000000f169e1955e3003f155934d0f926691b72818b9e1c37d93fbac3d7968"], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x59000, &(0x7f00000008c0)={[{@quota}, {@max_dir_size_kb}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpquota}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$eJzs3M1vG0UbAPBnN3H6tmnfhFI++gEECiLiI2nSAr2CQOIAEhIcyjEkaVXqNqgJEq0qKAiVI6rEHXFE4i/gBBcEnJC4wh1VqlAvLZwWrb3bOK6d1q5dF/z7SZvM7I4183h37JmdbAIYWlP5jyRie0T8FhET9ezGAlP1X9eunFv868q5xSSy7M0/k1q5q1fOLZZFy9eNF5npNCL9NIm9LepdPXP2xEK1uny6yM+unXxvdvXM2WePn1w4tnxs+dT84cOHDs698Pz8cz2JM2/T1T0fruzb/erbF19fPHLxnZ++Scr4m+LokanNDj6RZT2ubrB2NKST0QE2hI6MRER+uiq1/j8RI7F+8ibilU8G2jigr7Isy8bbHz6fAf9hSQy6BcBglF/0+fy33O7Q0OOucPnF+gQoj/tasdWPjEZalKk0zW97aSoijpz/+8t8i/7chwAA2OC7fPzzTKvxXxr3N5T7f7E2NBkR90TEzoi4NyJ2RcR9EbWyD0TEgx3W37xIcuP4J73UVWC3KB//jaf1ta2N479y9BeTI0VuRy3+SnL0eHX5QPGeTEdlS56f26SO71/+9fN2xxrHf/mW11+OBYt2XBrdsvE1SwtrC7cTc6PLH0fsGW0Vf3J9JSCJiN0RsafLOo4/9fW+dsduHv8merDOlH0V8WR9bfN8NMVfSjZfn5z9X1SXD8yWV8WNfv7lwhvt6r+t+HsgP//bovX5L0wmjeu1q53XceH3z9rOabq9/seSt2rpsWLfBwtra6fnIsaS1+qNbtw/v/7aMl+Wz+Of3t+6/++M9Xdib0TkF/FDEfFwRDxStP3RiHgsIvZvEv+PLz3+bvfx91ce/1JH5389MRbNe1onRk788O2GSic7iT8//4dqqeliz618/t1Ku7q7mgEAAODfJ42I7ZGkM9fTaTozU/97+V2xLa2urK49fXTl/VNL9WcEJqOSlne6Jhruh84V0/oyP9+UP1jcN/5iZGstP7O4Ul0adPAw5Mbb9P/cHyODbh3Qd57XguGl/8Pw0v9heOn/MLxa9P+tg2gHcOe1+v7/aADtAO68pv5v2Q+GiPk/DC/9H4aX/g9DaXVr3Pwh+YEnyg+ou6U9XSSyLKLfdVU6+McHt52I9C54VyX6lhjwBxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECP/BMAAP//qlXhwA==") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000040)={0x5, 0xc, 0x16, 0x3, 0x1, 0x0, 0x3, 0x56, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x239f, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x401}, 0x1c) writev(r5, &(0x7f0000000080), 0x0) 12m39.970021971s ago: executing program 3 (id=1212): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0xe, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private0, @in=@broadcast}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_x_sec_ctx={0x1, 0x18, 0x2, 0x3f}]}, 0xa8}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$midi(0x2, 0x56, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x8b, 0x70, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x30, 0x5, [], [{{0x9, 0x5, 0x5, 0xe, 0x8d026bda17bf10e8, 0x7f, 0xf7, 0x40, {0x5, 0x25, 0x1, 0x1, 'r'}}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0x7, 0x40, 0x5, {0x5, 0x25, 0x1, 0x1, "de"}}}, {{0x9, 0x5, 0x87, 0x52f828ab2ca3a53b, 0x20, 0x3, 0x9, 0x8, {0xd, 0x25, 0x1, 0x9, "186088c0c672e65b1f"}}}]}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000840)={0x1c, &(0x7f0000000300)={0x40, 0x14, 0x49, "d6f353e73d82cc512d0e25bfb86950325bfe9388c0cb59ef78600c335207537467c646e05e766b112c2cd22b7a539d4290cf8c36ecd9ed633396e46dea3e342667686d0871c0e99045"}, 0x0, 0x0}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x1}) ppoll(&(0x7f0000000200)=[{r3, 0x311}], 0x1, 0x0, 0x0, 0x0) 12m36.334571483s ago: executing program 3 (id=1227): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_setup_io_uring(0x31cf, &(0x7f0000000040)={0x0, 0x5000, 0x400, 0x0, 0x1005}, 0x0, 0x0, &(0x7f0000000140)) close(0x3) openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x0, 0x10d10}}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x0) 12m35.283373114s ago: executing program 3 (id=1232): syz_read_part_table(0x5e9, &(0x7f0000000000)="$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") 12m19.659804113s ago: executing program 32 (id=1232): syz_read_part_table(0x5e9, &(0x7f0000000000)="$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") 5m57.216634348s ago: executing program 4 (id=2740): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_SMBUS(r0, 0x720, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r4 = socket$netlink(0x10, 0x3, 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c6000000", 0x4c}], 0x1) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") sendfile(r6, r6, &(0x7f0000000000)=0x2eb4, 0x6) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r7 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x2a6c}], 0x1, 0x2000, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4008053, r8, 0x80000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e45451870f05bc3323fff441abf20ec979657e03dd9d01284d1e064b524e36686fb3de9a1649d08264ed39abd6a95b5b8b832d51f76db4058e8f623d5b38e8463639f3a2e7499e2ba9b3a777f4e3cf28af8df8e043318c89eb61d7c8b5f98815f4123dbd0f2284af4a88b6542b8e3f6b9cca466278e208ad4c58d370f9989fad78a256adeb3ffaa6588abac776b393867d6318e80e9129df67dfb06ef41d95cfc74c319d4eec99fecc0b5a498048d897da0017f51785e673d2709"], 0x2d, 0x443f, &(0x7f00000088c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) setresuid(0x0, 0xee01, 0x0) 5m56.005791279s ago: executing program 4 (id=2743): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/10/smp_affinity\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) socket$l2tp6(0xa, 0x2, 0x73) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r4, 0x80506409, &(0x7f0000000180)={0x1, 0x0, 0x80, 0xa, 0x4, 0xfffffed8, 0x2, 0xfffffffd, 0x20, 0x1, 0x20, 0x2, &(0x7f00000002c0)=[0x4], 0x1, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 5m53.48271297s ago: executing program 4 (id=2745): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x4f834c58, 0x3, 0x101, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x1, 0x7, 0x8}}, 0x28) 5m53.187209075s ago: executing program 4 (id=2749): syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) 5m49.37864565s ago: executing program 4 (id=2756): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000380)={'enc=', 'oaep', ' hash=', {'cbcmac-aes-neon\x00'}}, &(0x7f0000000400)="bf9e9014b97efb7cdd465f6584f32f0c9749b395fa8f398903e4494d4008efb413ee053491d49a1e4994", 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 5m47.183048949s ago: executing program 4 (id=2761): syz_open_dev$tty1(0xc, 0x4, 0x1) connect$x25(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c80010000c00010003020800400040"], 0x15) 5m30.901546931s ago: executing program 33 (id=2761): syz_open_dev$tty1(0xc, 0x4, 0x1) connect$x25(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c80010000c00010003020800400040"], 0x15) 55.933982643s ago: executing program 0 (id=3313): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0xa8860) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r5 = socket(0x10, 0x3, 0x0) write(r5, 0x0, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r6, 0xb00}], 0x1, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) r8 = dup2(r5, r0) getsockopt$sock_buf(r8, 0x1, 0x1a, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES16=r7], 0x4c}, 0x2, 0x34005}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) 51.825198645s ago: executing program 0 (id=3319): openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r5, 0x89a3, &(0x7f0000000200)='bridge0\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '^', 0x3a, './file0', 0x3a, [0x43, 0x43, 0x4f, 0x43, 0x43]}, 0x38) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10b200, 0x2d) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x98, 0xc0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) 50.958686931s ago: executing program 0 (id=3321): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 50.485748293s ago: executing program 0 (id=3326): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x6) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) ptrace(0x10, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000580)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @device_b, @from_mac=@device_b, {0x3, 0x800}, "", @void, @value=@ver_80211n={0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @random="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"}, 0x3) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) 39.257517754s ago: executing program 0 (id=3350): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r3, &(0x7f0000000180), 0x1000) 35.916025565s ago: executing program 0 (id=3354): openat$nullb(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) unshare(0x6a060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$nvme_fabrics(0xffffff9c, 0x0, 0x1, 0x0) 20.635303961s ago: executing program 34 (id=3354): openat$nullb(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) unshare(0x6a060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$nvme_fabrics(0xffffff9c, 0x0, 0x1, 0x0) 20.622630616s ago: executing program 2 (id=3388): openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r5, 0x89a3, &(0x7f0000000200)='bridge0\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '^', 0x3a, './file0', 0x3a, [0x43, 0x43, 0x4f, 0x43, 0x43]}, 0x38) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10b200, 0x2d) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x98, 0xc0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) 19.390388154s ago: executing program 2 (id=3391): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x400, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0xe}, {0xfff2, 0x10}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x92}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 19.022362108s ago: executing program 6 (id=3393): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(r0, &(0x7f0000000b80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002bc0)={0xa0, 0x0, r1, {{0x3, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)='}', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000100000001000000a5847f16d1f1941a05db2c9a7f1173adbf7fd7a67a150364b1f157b24ae4bae3d48ad0cce5eb930b8356", @ANYRES32=r4, @ANYRES32=r5], 0x30, 0x4048080}}], 0x1, 0x4) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) write$uinput_user_dev(r6, &(0x7f0000000300)={'syz0\x00', {0xb, 0x5f93, 0x8, 0x671}, 0x3, [0x2955, 0x2, 0x1000, 0x80000001, 0x8, 0xfa5, 0x6, 0x0, 0x2d, 0x7, 0x6, 0x7, 0x2, 0x1, 0x6, 0x5, 0xe, 0xe93, 0x3, 0xe, 0x12, 0x9, 0x2, 0x3, 0x40000, 0xff, 0x2, 0x1, 0x9, 0xfffffffb, 0xfffffffe, 0x10, 0x13d, 0x5, 0xfffffff8, 0x4, 0xb, 0x9, 0x3, 0x4, 0x9, 0x6, 0x3, 0x2a12, 0x2, 0x8, 0x7, 0x2, 0x7, 0x2, 0x3, 0x4, 0x8, 0x1, 0x1, 0x3325, 0x51, 0x28ba, 0x2, 0xaa, 0x9, 0xfffffffd, 0x2, 0x6], [0xf, 0x1, 0x5fd, 0x0, 0x5, 0x2f3, 0x8000, 0x5000, 0x85, 0x0, 0x1fda, 0x1, 0x7fffffff, 0x0, 0xa, 0x80000000, 0x4, 0x1ff, 0x8, 0x300000, 0x9, 0x84d, 0x5fdb3133, 0x40, 0x3, 0x8, 0x6, 0x9, 0x9ef, 0x2, 0x0, 0x401, 0x3, 0x1, 0x2, 0x7, 0x8, 0x9, 0x3, 0x35, 0x8001, 0x80009, 0x4, 0x0, 0x0, 0x101, 0x1, 0x0, 0x412, 0x3, 0xfffffffc, 0x8, 0x27bb, 0x3, 0xfff, 0x7, 0x36, 0x20009, 0x7, 0x8, 0x312, 0x5, 0x7, 0x1], [0x58a4, 0x80000000, 0x10, 0xffff, 0x3, 0x9, 0x3, 0x0, 0x9e, 0x4e0aea88, 0x4bea, 0xfff, 0x6, 0x3, 0x10, 0xa0c2, 0xfff, 0xc, 0x1, 0x8, 0x7fff, 0x4, 0x7, 0x3, 0x7f, 0x1, 0x80000001, 0x7, 0x8001, 0x3, 0x6, 0x3, 0x9, 0x3, 0x5a7, 0x44, 0x1, 0x27, 0x2, 0x7, 0x1, 0x10100, 0xe6c, 0x2, 0x4, 0x7, 0x76, 0x2, 0xe7a5, 0x1, 0x7, 0x694e1c44, 0x3, 0x800, 0x7, 0x401, 0xdee, 0x1, 0x7, 0x4, 0x2, 0xd9, 0x1, 0x7fff], [0x3, 0x9, 0x400003, 0x3, 0xfffff800, 0x0, 0x0, 0x627, 0x7, 0xa6ea7521, 0x3, 0x8, 0xeeb6, 0xf, 0x0, 0x100, 0x5, 0x800, 0x9, 0x6, 0x800, 0xcb8a, 0x1, 0x3, 0x8, 0x4, 0x8, 0xf, 0xfffffffd, 0xfffffff3, 0x3ff, 0x7, 0xfffffffc, 0x336, 0x4, 0x4d, 0x0, 0x7623d9cc, 0xf8, 0x1, 0x100, 0x7, 0xfffffff9, 0x17b8, 0xea2, 0x81, 0x1000, 0x3, 0x7f95, 0x7, 0x7fffffff, 0x4, 0x7fffffff, 0x6, 0x8, 0x6, 0x1, 0x200, 0x8, 0xfffffff7, 0x4, 0xc, 0x2, 0x9]}, 0x45c) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r7, 0xb) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040061}, 0x10) socket(0x11, 0x3, 0x2) 16.295298398s ago: executing program 2 (id=3394): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x6) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) ptrace(0x10, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000580)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @device_b, @from_mac=@device_b, {0x3, 0x800}, "", @void, @value=@ver_80211n={0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @random="5caf570de0f9dc9e77716bdbf3a720ea1e7ebe423ffbf35640a8601690b55e3992a7c038392074cd9569fdc2556d510a8fd8f656c49758b065e54a8d6d56eaa9b07a5497f4dcb8da5f52ea0b4a08a5ba70bbd28ba1f18bdfff3e5d158310c9fc272722705c3140bda7d83c0a830ae9945328a081ef47ce9a9127a68f695cffc8dab6ea8482a83e0f60de762b7aad5da99fa654ecc5f6fe1c77926e0f3b915ca472678d25bea24ac62b65d5869c1a7c7b36380544c7e3d9afec2923692df8ce8e18fcf575dbecaecd419f65ff9c7c0141db373818e1453eccb3a5f0b7ea57bef2b55eab93b066fc12eb69ac3165651bf75b887dee81c262cd2bcabc37809233d8d3dcec33f5c395cdcc16918132d085a1113de35d1c0e2dcf4ce9eb969682881e9f34a45037b8c748d0f509c8e5f3f2a2570d0b1cf950d8f0efc3c4f02371271a0fdd481d1dab162626c13b79d011f51620a2a036fe73158a7b1b81cbf923b57d8e5b7db16c13a2c0fa7d817625c121ffd12e5f53e04ef9a21d4a3b8b6df62c6339c0a8840c5855b42610441942b798992c702fcb128dd4472f3535cfdf126becb1"}, 0x3) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) 15.270579055s ago: executing program 7 (id=3396): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r3, &(0x7f0000000180), 0x1000) 14.966163243s ago: executing program 6 (id=3398): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000a00)={[{@noquota}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffff00}}, {@errors_remount}, {@commit={'commit', 0x3d, 0x7}}, {@orlov}], [{@subj_role={'subj_role', 0x3d, 'commit'}}]}, 0xfc, 0x587, &(0x7f0000000440)="$eJzs3d9rU2cfAPDvSdP689UKIu/7XgzBizmcqW33w8Fg7nJsMmG7d6GNRZoaaVKxnaBezJvdDBmMMWHsD9j9LmX/wP4KYRNkSNkuxiDjpCc1tknTdtFE8/nA0efJOSfP+eY539PnyUlIAEPrePpPLuJ/EfFVEnG4ZV0+spXH17ZbfXxjJl2SqNc/+T2JJHusuX2S/X8gq/w3In7+IuJUbnO71eWV+WK5XFrM6hO1hasT1eWV05cXinOludKVqenps29OT73z9ls9i/W1C39++/H9D85+eWL1mx8fHrmbxLk4mK1rjeNfuNVaOV78OyuNxrkNG072oLFBkvT7ANiVkSzPRyO9BhyOkSzrgZffzYioA0Mqkf8wpJrjgObcvkfz4BfGo/fXJkCN2Mda48+vvTcSextzo/2ryVMzo3S+O96D9tM2fvrt3t10ia3fh9jXpQ6wI7duR8SZfH7z9T/Jrn+7d6bx5vHWNrYxbH9/oJ/up+Of19uN/3Lr459oM/450CZ3d6N7/uce9qCZjtLx37ttx7/rl67xkaz2n8aYbzS5dLlcOhMRhyLiZNS73vo4u/qg3mld6/gvXdL2m2PB7Dge5vc8vc9ssVaMiLFdhvyUR7cj/p9vF3+y3v9Jm/5PX48L22zjWOneK53WdY//2ar/EPFq2/5/0q3J1vcnJxrnw0TzrNjsjzvHfunU/pbx7+15uJuk/b9/6/jHk9b7tdWdt/H93r9Kndbt9vwfSz5tlJtJcL1Yqy1ORowlH21+fOrJvs16c/s0/pMntr7+tTv/08nXZ9uM/87ROx037ff5n8Y/u6P+33nhwYeff5c9182dx5/2/xuN0snskez61152rmz3AHvxGgIAAAAAAMCgyEXEwUhyhfVyLlcorH2+42jsz5Ur1dqpS5WlK7PR+K7seIzmmne6D7d8HmIy+zxssz61oT4dEUci4uuRfY16YaZSnu138AAAAAAAAAAAAAAAAAAAADAgDnT4/n/q15F+Hx3wzDV+2GBPv48C6IeuP/nfi196AgZS1/wHXlryH4aX/IfhJf9heMl/GF7yH4aX/IfhJf8BAAAAAAAAAAAAAAAAAAAAAAAAAACgpy6cP58u9dXHN2bS+uy15aX5yrXTs6XqfGFhaaYwU1m8WpirVObKpcJMZaHb85UrlauTU7F0faJWqtYmqssrFxcqS1dqFy8vFOdKF0ujzyUqAAAAAAAAAAAAAAAAAAAAeLFUl1fmi+VyaVGhY+G9GIjDeJYBrtnV7vlBiWJ7hUMRMQCH8VwKe9b69HbWvTvbvY8XJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY4J8AAAD//3TNLqg=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000086}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xf0f, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0xfc}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x8001, 0x7, 0x2582}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x0) 13.614339401s ago: executing program 6 (id=3400): syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 13.274611428s ago: executing program 6 (id=3401): openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000013014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000776782ec0500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c000440000000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 12.969262687s ago: executing program 1 (id=3403): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/10/smp_affinity\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) socket$l2tp6(0xa, 0x2, 0x73) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r4, 0x80506409, &(0x7f0000000180)={0x1, 0x0, 0x80, 0xa, 0x4, 0xfffffed8, 0x2, 0xfffffffd, 0x20, 0x1, 0x20, 0x2, &(0x7f00000002c0)=[0x4], 0x1, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) 12.199756764s ago: executing program 6 (id=3405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0x4000}]) 12.088918708s ago: executing program 1 (id=3406): writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10", 0x11}], 0x1) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b0f, &(0x7f0000000000)={'wlan1\x00'}) 9.968865076s ago: executing program 6 (id=3407): unshare(0x6a060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$nvme_fabrics(0xffffff9c, 0x0, 0x1, 0x0) 9.541675583s ago: executing program 1 (id=3408): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r2, @ANYBLOB="02000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x4800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 9.310637437s ago: executing program 5 (id=3409): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 9.002643848s ago: executing program 2 (id=3410): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8.924369467s ago: executing program 1 (id=3411): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000a00)={[{@noquota}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffff00}}, {@errors_remount}, {@commit={'commit', 0x3d, 0x7}}, {@orlov}], [{@subj_role={'subj_role', 0x3d, 'commit'}}]}, 0xfc, 0x587, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000086}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xf0f, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0xfc}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x8001, 0x7, 0x2582}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x0) 8.766812836s ago: executing program 5 (id=3412): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x8, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x5, 0x800, 0x6, 0xa512, 0x3, "4ebdaed43bb30000000000d1188400"}) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 8.437540609s ago: executing program 7 (id=3413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0286dd60cb653e00283afffe800000000000000000000000000000ff020000000000000000000000000001"], 0x0) 8.027965123s ago: executing program 1 (id=3414): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) ioctl$FS_IOC_FSSETXATTR(r0, 0xc00c4d03, 0x0) openat$ptp0(0xffffff9c, &(0x7f00000003c0), 0x8402, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000e40)={0x24, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) r8 = userfaultfd(0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) 7.873124274s ago: executing program 5 (id=3415): syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 7.738520257s ago: executing program 7 (id=3416): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, r1}, 0x10) 7.545882142s ago: executing program 2 (id=3417): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000a00)={[{@noquota}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffff00}}, {@errors_remount}, {@commit={'commit', 0x3d, 0x7}}, {@orlov}], [{@subj_role={'subj_role', 0x3d, 'commit'}}]}, 0xfc, 0x587, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000086}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xf0f, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0xfc}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r5}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x0) 7.544288524s ago: executing program 5 (id=3418): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x4, {0x0, 0x0, 0x0, r2, 0x504c3, 0xc401}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @broadcast}}}], 0x20}, 0x200000e0) 6.75470412s ago: executing program 5 (id=3419): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) fstat(r3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x8, 0x0) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x2) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) 3.612385041s ago: executing program 7 (id=3420): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.738826369s ago: executing program 5 (id=3421): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x6) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) ptrace(0x10, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000580)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @device_b, @from_mac=@device_b, {0x3, 0x800}, "", @void, @value=@ver_80211n={0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @random="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"}, 0x3) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) 2.733476444s ago: executing program 2 (id=3422): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r2, @ANYBLOB="02000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x4800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 2.054757153s ago: executing program 7 (id=3423): r0 = syz_open_dev$cec(0x0, 0x0, 0xe8c00) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) 1.258756015s ago: executing program 7 (id=3424): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r3, &(0x7f0000000180), 0x1000) 0s ago: executing program 1 (id=3425): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1/block.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.usb0/ep.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/midi2.usb0/ep.2/block.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.usb0/ep.3\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/midi2.usb0/ep.3/block.0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc) close(r4) kernel console output (not intermixed with test programs): eft promiscuous mode [ 733.309312][T14374] bridge0: port 2(erspan0) entered disabled state [ 733.342372][ T5768] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 733.464020][T13848] usb 3-1: USB disconnect, device number 49 [ 733.551544][ T5768] usb 6-1: Using ep0 maxpacket: 16 [ 733.576238][ T5768] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.625233][ T5768] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 733.653772][T14399] loop0: detected capacity change from 0 to 1024 [ 733.668004][ T5768] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 733.698756][ T5768] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 733.726566][ T5768] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 733.766795][ T5768] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 733.817367][T14399] EXT4-fs: Invalid want_extra_isize 7 [ 733.846260][ T5768] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 733.885737][ T5768] usb 6-1: Manufacturer: syz [ 734.281899][T14411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2494'. [ 734.802102][ T5768] usb 6-1: config 0 descriptor?? [ 735.630751][ T5768] rc_core: IR keymap rc-hauppauge not found [ 735.643674][ T5768] Registered IR keymap rc-empty [ 735.648756][ T5768] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 735.675872][ T5768] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 735.734991][ T5768] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 735.754239][ T5768] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input50 [ 735.780359][ T5768] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 735.853080][ T5768] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 735.894009][ T5768] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 735.956025][ T5768] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 736.001754][ T5768] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 736.038144][ T5768] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 736.081839][ T5768] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 736.134487][ T5768] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 736.194025][ T5768] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 736.231905][ T5768] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 736.256474][T14446] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2504'. [ 736.280580][ T5768] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 736.311669][ T5768] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 736.334546][ T5768] usb 6-1: USB disconnect, device number 39 [ 736.513026][ T5734] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 736.634288][ T5754] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 736.731362][ T5734] usb 7-1: Using ep0 maxpacket: 8 [ 736.802708][ T5734] usb 7-1: config 0 has no interfaces? [ 736.865810][ T5734] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 736.881166][ T5754] usb 1-1: Using ep0 maxpacket: 8 [ 736.990169][ T5754] usb 1-1: config 0 has no interfaces? [ 737.018506][ T5734] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.079155][ T5754] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 737.239575][ T5754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.302255][ T5734] usb 7-1: config 0 descriptor?? [ 737.749708][ T5768] usb 7-1: USB disconnect, device number 30 [ 737.791449][ T5754] usb 1-1: config 0 descriptor?? [ 738.399021][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2510'. [ 738.425703][T14473] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.747784][T14473] bridge_slave_1 (unregistering): left allmulticast mode [ 738.754946][T14473] bridge_slave_1 (unregistering): left promiscuous mode [ 738.762083][T14473] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.105529][T10056] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 739.151639][ T5768] usb 1-1: USB disconnect, device number 52 [ 740.714349][T14490] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2518'. [ 742.098432][T14507] loop6: detected capacity change from 0 to 1024 [ 742.273487][T14507] EXT4-fs: Invalid want_extra_isize 7 [ 743.001545][T10056] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 743.528255][T14542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2529'. [ 743.834273][T14541] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2534'. [ 744.811782][T14555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2537'. [ 745.504594][ T5754] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 745.664665][ T5754] usb 5-1: Using ep0 maxpacket: 8 [ 745.674233][ T5754] usb 5-1: config 0 has no interfaces? [ 745.680183][ T5754] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 745.690091][ T5754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.704340][T13961] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 745.814826][ T5754] usb 5-1: config 0 descriptor?? [ 745.891344][T13961] usb 3-1: Using ep0 maxpacket: 8 [ 745.903009][T13961] usb 3-1: config 0 has no interfaces? [ 746.033757][T13961] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 746.048070][T13961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.062173][ T5734] usb 5-1: USB disconnect, device number 38 [ 746.076976][T13961] usb 3-1: config 0 descriptor?? [ 746.304751][ T5734] usb 3-1: USB disconnect, device number 50 [ 746.352833][T14593] netlink: 'syz.0.2549': attribute type 3 has an invalid length. [ 746.484621][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.500168][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.796805][T14602] xt_hashlimit: size too large, truncated to 1048576 [ 747.123326][T14604] macsec1: entered allmulticast mode [ 747.142374][T14604] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 747.230635][T14604] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 747.296468][T14604] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 747.627308][T14613] openvswitch: netlink: Flow key attr not present in new flow. [ 747.893048][T13961] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 748.327686][T13961] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 748.351832][T13961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.389987][T13961] usb 6-1: Product: syz [ 748.416728][T13961] usb 6-1: Manufacturer: syz [ 748.427837][T13961] usb 6-1: SerialNumber: syz [ 748.555316][T14642] netlink: 'syz.1.2566': attribute type 3 has an invalid length. [ 749.305451][T13961] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 750.028412][T13961] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 750.175720][T14661] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 750.278567][T14664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2571'. [ 750.301399][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2571'. [ 750.463560][T14663] IPVS: stopping backup sync thread 14661 ... [ 750.701805][T13961] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 750.714971][T14665] netlink: 'syz.4.2574': attribute type 1 has an invalid length. [ 750.732803][T13961] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 751.057421][T14665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 751.101784][T13961] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 751.300679][T13961] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 751.434376][T13961] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 751.585068][T13961] usb 7-1: config 1 has no interface number 0 [ 751.705060][T13961] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 751.895957][T13961] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 752.033296][T13961] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 752.092572][T13961] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 752.110985][T13848] usb 6-1: USB disconnect, device number 40 [ 752.215175][T13961] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 752.244641][T13961] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.263485][T13961] usb 7-1: Product: syz [ 752.270284][T14688] netlink: 'syz.1.2580': attribute type 3 has an invalid length. [ 752.273166][T13961] usb 7-1: Manufacturer: syz [ 752.294398][T13961] usb 7-1: SerialNumber: syz [ 752.310775][T14674] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 752.521442][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2583'. [ 752.758372][T14674] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 753.077599][T13961] cdc_ncm 7-1:1.1: failed GET_NTB_PARAMETERS [ 753.125910][T13961] cdc_ncm 7-1:1.1: bind() failure [ 753.145961][ T5734] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 753.729119][ T5734] usb 6-1: unable to get BOS descriptor or descriptor too short [ 753.883191][ T5734] usb 6-1: not running at top speed; connect to a high speed hub [ 753.920782][ T5734] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 753.936079][ T5734] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 753.945689][ T5734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.953890][ T5734] usb 6-1: Product: syz [ 753.958318][ T5734] usb 6-1: Manufacturer: syz [ 753.963036][ T5734] usb 6-1: SerialNumber: syz [ 754.002069][T14701] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 754.209288][T13961] usb 7-1: USB disconnect, device number 31 [ 754.279556][T14701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.327532][T14701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.538023][ T5734] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 754.620456][ T5734] usb 6-1: MIDIStreaming interface descriptor not found [ 756.662408][T14735] netlink: 'syz.1.2595': attribute type 1 has an invalid length. [ 757.316400][ T5734] usb 6-1: USB disconnect, device number 41 [ 757.343769][T14735] 8021q: adding VLAN 0 to HW filter on device bond5 [ 757.582324][T14749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2600'. [ 757.606320][T11551] udevd[11551]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 759.201371][ T5768] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 759.221726][ T5776] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 759.394537][ T5776] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.408983][ T5776] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 759.419035][ T5734] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 759.456348][ T5776] usb 3-1: config 1 has no interface number 0 [ 759.477096][ T5776] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 759.514880][ T5776] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 759.555713][ T5776] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 759.578352][ T5768] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.589505][ T5768] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.600285][ T5768] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 759.609479][ T5768] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.622762][ T5768] usb 7-1: config 0 descriptor?? [ 759.624548][ T5734] usb 1-1: unable to get BOS descriptor or descriptor too short [ 759.637627][ T5776] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 759.652574][ T5734] usb 1-1: not running at top speed; connect to a high speed hub [ 759.672786][ T5776] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 759.715333][T14783] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5625] was attempted by ""[14783] [ 759.739594][T14783] netlink: 'syz.1.2612': attribute type 29 has an invalid length. [ 759.772307][T14783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 759.928985][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.067619][ T5734] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 760.221444][ T5776] usb 3-1: Product: syz [ 760.227743][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.238964][ T5776] usb 3-1: Manufacturer: syz [ 760.245707][ T5776] usb 3-1: SerialNumber: syz [ 760.248983][T14785] netlink: 'syz.4.2614': attribute type 1 has an invalid length. [ 760.250547][ T5734] usb 1-1: Product: syz [ 760.267583][ T5734] usb 1-1: Manufacturer: syz [ 760.274001][T14762] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 760.298000][ T5734] usb 1-1: SerialNumber: syz [ 760.347479][T14785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 760.426228][ T5768] hid-thrustmaster 0003:044F:B65D.0024: unknown main item tag 0x0 [ 760.447736][ T5768] hid-thrustmaster 0003:044F:B65D.0024: unknown main item tag 0x0 [ 760.467477][ T5768] hid-thrustmaster 0003:044F:B65D.0024: unknown main item tag 0x0 [ 760.484990][ T5768] hid-thrustmaster 0003:044F:B65D.0024: unknown main item tag 0x0 [ 760.501629][ T5768] hid-thrustmaster 0003:044F:B65D.0024: unknown main item tag 0x0 [ 760.513262][ T5768] hid-thrustmaster 0003:044F:B65D.0024: unknown main item tag 0x0 [ 760.523445][ T5768] hid-thrustmaster 0003:044F:B65D.0024: unknown main item tag 0x0 [ 760.543682][ T5768] hid-thrustmaster 0003:044F:B65D.0024: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 760.591847][ T5768] hid-thrustmaster 0003:044F:B65D.0024: Wrong number of endpoints? [ 760.719920][ C1] hid-thrustmaster 0003:044F:B65D.0024: URB to get model id failed with error -32 [ 761.021113][T14773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.045939][T14801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2619'. [ 761.085664][T14773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.129961][ T5734] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 761.146287][ T5734] usb 1-1: MIDIStreaming interface descriptor not found [ 761.270171][T14762] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 761.289656][ T5734] usb 1-1: USB disconnect, device number 53 [ 761.441735][ T31] audit: type=1800 audit(1785527135.007:28): pid=14813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2624" name="UDC" dev="configfs" ino=42479 res=0 errno=0 [ 761.472328][T13961] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 761.484624][ T5776] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 761.493640][ T5776] cdc_ncm 3-1:1.1: bind() failure [ 761.834710][T13961] usb 6-1: Using ep0 maxpacket: 16 [ 761.849332][T13961] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.872278][T13961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 761.902828][T13961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 761.941085][T13961] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 761.984367][T13961] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 762.043740][T13961] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 762.076994][T13961] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 762.095022][T13961] usb 6-1: Manufacturer: syz [ 762.121592][T13961] usb 6-1: config 0 descriptor?? [ 762.481310][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout [ 762.513194][T10056] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 763.091230][T14829] netlink: 'syz.6.2629': attribute type 1 has an invalid length. [ 763.147120][T13848] usb 3-1: USB disconnect, device number 51 [ 763.201319][T13961] rc_core: IR keymap rc-hauppauge not found [ 763.220526][T13961] Registered IR keymap rc-empty [ 763.231726][T13961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 763.271872][T13961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 763.302585][T13961] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 763.313330][T14829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 763.363433][T13961] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input51 [ 763.427823][T13961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 763.468232][T13961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 763.521415][T13961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 763.559974][T14839] netlink: 'syz.0.2631': attribute type 1 has an invalid length. [ 763.573425][T13961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 763.677279][T14846] fuse: Invalid rootmode [ 763.711366][T13961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 764.067925][T13961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 764.132852][T13961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 764.268168][T13961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 764.395673][T13961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 764.542320][T13961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 765.011915][T13961] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 765.225808][T13961] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 765.468018][ T24] usb 7-1: USB disconnect, device number 32 [ 765.539788][T13961] usb 6-1: USB disconnect, device number 42 [ 765.645683][T14853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2634'. [ 767.129015][T14863] syzkaller0: entered promiscuous mode [ 767.170041][T14863] syzkaller0: entered allmulticast mode [ 767.461548][ T5734] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 767.633920][ T5734] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 767.667845][ T5734] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 767.691329][ T5734] usb 6-1: config 1 has no interface number 0 [ 767.707766][ T5734] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 767.740704][ T5734] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 767.770235][ T5734] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 767.779985][ T5734] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 767.787973][T10056] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 767.796585][ T5734] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 767.816589][ T5734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.841315][ T5734] usb 6-1: Product: syz [ 767.850750][ T5734] usb 6-1: Manufacturer: syz [ 767.873725][ T5734] usb 6-1: SerialNumber: syz [ 767.887701][T14879] netlink: 'syz.1.2645': attribute type 1 has an invalid length. [ 767.909316][T14872] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 768.060713][T14884] loop6: detected capacity change from 0 to 1024 [ 768.070624][T14879] 8021q: adding VLAN 0 to HW filter on device bond6 [ 768.085080][T14884] EXT4-fs: Invalid want_extra_isize 7 [ 768.328836][ T5776] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 768.342780][T14891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2648'. [ 768.423780][T14872] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 769.273311][ T5734] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 769.288769][ T5734] cdc_ncm 6-1:1.1: bind() failure [ 769.392768][ T5776] usb 5-1: Using ep0 maxpacket: 16 [ 769.413579][ T5776] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.643430][ T5776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 769.655612][ T5776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 769.665582][ T5776] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 769.675684][ T5776] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 769.690730][ T5776] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 769.705045][ T5776] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 769.713776][ T5776] usb 5-1: Manufacturer: syz [ 769.729171][ T5776] usb 5-1: config 0 descriptor?? [ 770.695097][ T24] usb 6-1: USB disconnect, device number 43 [ 770.881453][ T5776] rc_core: IR keymap rc-hauppauge not found [ 770.904582][ T5776] Registered IR keymap rc-empty [ 770.937952][ T5776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 770.956256][ T5734] IPVS: starting estimator thread 0... [ 770.991543][ T5776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 771.033745][ T5776] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 771.061523][T14924] IPVS: using max 25 ests per chain, 60000 per kthread [ 771.073265][ T5776] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input52 [ 771.121681][ T5776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 771.151631][ T5776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 771.191483][ T5776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 771.199176][T14929] netlink: 'syz.2.2662': attribute type 1 has an invalid length. [ 771.221614][ T5776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 771.251476][ T5776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 771.281642][ T5776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 771.296432][T14929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 771.311545][ T5776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 771.341386][ T5776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 771.371661][ T5776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 771.401379][ T5776] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 771.434629][ T5776] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 771.469037][ T5776] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 771.508519][ T5776] usb 5-1: USB disconnect, device number 39 [ 771.691786][T14919] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 771.769925][T14938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2665'. [ 772.070636][T14944] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2666'. [ 772.463593][T14947] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 772.477770][T14947] bond2 (unregistering): Released all slaves [ 772.611630][ T24] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 772.988753][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 773.008754][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 773.019188][ T24] usb 7-1: config 1 has no interface number 0 [ 773.026596][ T24] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 773.046662][ T24] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 773.058277][ T24] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 773.068217][ T24] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 773.088876][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 773.110737][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.140391][ T24] usb 7-1: Product: syz [ 773.178975][ T24] usb 7-1: Manufacturer: syz [ 773.426047][ T5734] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 773.427594][ T24] usb 7-1: SerialNumber: syz [ 773.624046][T14955] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 774.171364][ T5734] usb 1-1: Using ep0 maxpacket: 32 [ 774.182514][ T5734] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 774.196456][ T5734] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 774.211763][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 774.230336][ T5734] usb 1-1: Product: syz [ 774.248148][ T5734] usb 1-1: Manufacturer: syz [ 774.262538][ T5734] usb 1-1: SerialNumber: syz [ 774.293648][ T5734] usb 1-1: config 0 descriptor?? [ 774.309736][T14950] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 774.351699][T14955] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 774.430896][T14980] netlink: 'syz.4.2677': attribute type 1 has an invalid length. [ 774.582264][ T24] cdc_ncm 7-1:1.1: failed GET_NTB_PARAMETERS [ 774.600444][ T24] cdc_ncm 7-1:1.1: bind() failure [ 775.652565][ T5768] usb 7-1: USB disconnect, device number 33 [ 775.836777][ T5850] usb 1-1: USB disconnect, device number 54 [ 775.888260][T14993] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2681'. [ 776.489390][T15009] loop0: detected capacity change from 0 to 64 [ 776.557408][T15009] loop0: detected capacity change from 0 to 256 [ 776.589240][T15014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2688'. [ 776.597166][T15009] exfat: Bad value for 'uid' [ 776.622413][T15009] exfat: Bad value for 'uid' [ 777.129226][T15017] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 777.214236][T15017] bond7 (unregistering): Released all slaves [ 777.494157][T15020] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 777.516942][T15020] bond7 (unregistering): Released all slaves [ 777.714834][T15014] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 777.889239][T15031] netlink: 'syz.4.2691': attribute type 1 has an invalid length. [ 778.073256][T15043] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2696'. [ 778.161353][ T5734] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 778.323128][ T5734] usb 2-1: Using ep0 maxpacket: 16 [ 778.333830][ T5734] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.356510][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 778.385013][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 778.411553][ T5850] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 778.413288][ T5734] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 778.456717][ T5734] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 778.494402][ T5734] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 778.511229][ T5734] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 778.528642][ T5734] usb 2-1: Manufacturer: syz [ 778.574539][ T5734] usb 2-1: config 0 descriptor?? [ 778.585459][ T5850] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.608351][ T5850] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 778.629463][ T5850] usb 3-1: config 1 has no interface number 0 [ 778.645025][ T5850] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 778.689770][ T5850] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 778.713087][ T5850] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 778.742933][ T5850] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 778.792919][ T5850] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 778.829569][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.874980][ T5850] usb 3-1: Product: syz [ 778.893431][ T5850] usb 3-1: Manufacturer: syz [ 778.909824][ T5850] usb 3-1: SerialNumber: syz [ 778.959970][T15038] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 779.684508][ T5734] rc_core: IR keymap rc-hauppauge not found [ 779.699022][ T5734] Registered IR keymap rc-empty [ 779.710723][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 779.742594][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 779.803226][ T5734] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 779.917689][ T5734] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input53 [ 779.959922][T15071] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 780.074363][ T5776] IPVS: starting estimator thread 0... [ 780.176351][T15038] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 780.331788][T15072] IPVS: using max 25 ests per chain, 60000 per kthread [ 780.443747][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 780.688717][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 780.847829][ T5850] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 780.854101][ T5850] cdc_ncm 3-1:1.1: bind() failure [ 780.886336][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 780.961860][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 781.001383][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 781.041426][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 781.071949][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 781.102787][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 781.133400][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 781.171736][ T5734] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 781.343668][ T5734] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 781.483078][ T5734] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 782.045034][ T5734] usb 2-1: USB disconnect, device number 50 [ 782.162335][T15085] netlink: 'syz.1.2708': attribute type 1 has an invalid length. [ 782.163693][ T5775] usb 3-1: USB disconnect, device number 52 [ 782.334298][T15090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2710'. [ 782.576114][ T31] audit: type=1804 audit(1785527156.137:29): pid=15091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2709" name="/newroot/472/file0" dev="fuse" ino=1 res=1 errno=0 [ 784.286770][T15111] loop6: detected capacity change from 0 to 64 [ 785.491779][T15123] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 785.501097][T15123] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 786.619220][ T5734] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 786.928273][ T5734] usb 7-1: Using ep0 maxpacket: 16 [ 787.129827][ T5734] usb 7-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 787.231807][ T5776] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 787.318989][ T5734] usb 7-1: config 0 interface 0 has no altsetting 0 [ 787.368675][ T5734] usb 7-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 787.377170][T15137] netlink: 'syz.5.2723': attribute type 1 has an invalid length. [ 787.426919][ T5734] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.478678][ T5734] usb 7-1: config 0 descriptor?? [ 787.483848][ T5776] usb 2-1: Using ep0 maxpacket: 16 [ 787.525176][ T5776] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.573903][ T5776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 787.613900][ T5776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 787.829340][ T5850] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 787.863484][ T5776] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 787.899544][ T5776] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 787.943382][ T5776] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 787.986438][ T5776] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 787.993246][ T5850] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 788.029897][ T5850] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 788.050362][ T5850] usb 1-1: config 1 has no interface number 0 [ 788.063443][ T5850] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 788.096405][ T5850] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 788.123101][ T5850] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 788.137091][ T5776] usb 2-1: Manufacturer: syz [ 788.161642][ T5850] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 788.165791][ T5850] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 788.165821][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.165847][ T5850] usb 1-1: Product: syz [ 788.165866][ T5850] usb 1-1: Manufacturer: syz [ 788.165883][ T5850] usb 1-1: SerialNumber: syz [ 788.177988][T15139] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 788.194767][ T5776] usb 2-1: config 0 descriptor?? [ 788.250549][ T5734] bigben 0003:146B:0902.0025: unexpected rdesc, please submit for review [ 788.251152][ T5734] bigben 0003:146B:0902.0025: ignoring exceeding usage max [ 788.258174][ T5734] bigben 0003:146B:0902.0025: unknown main item tag 0x0 [ 788.258208][ T5734] bigben 0003:146B:0902.0025: unknown main item tag 0x0 [ 788.258233][ T5734] bigben 0003:146B:0902.0025: item fetching failed at offset 37/40 [ 788.259097][ T5734] bigben 0003:146B:0902.0025: parse failed [ 788.270137][ T5734] bigben 0003:146B:0902.0025: probe with driver bigben failed with error -22 [ 788.607409][T15139] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 788.731392][ T5776] rc_core: IR keymap rc-hauppauge not found [ 788.731415][ T5776] Registered IR keymap rc-empty [ 788.731553][ T5776] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 788.751732][ T5776] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 788.782688][ T5776] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 788.828955][ T5776] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input54 [ 788.844488][ T5776] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 788.885229][ T5776] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 788.899850][ T5850] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 788.899898][ T5850] cdc_ncm 1-1:1.1: bind() failure [ 788.903070][ T5776] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 788.931443][ T5776] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 788.966797][ T5776] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 788.981745][ T5776] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 789.001436][ T5776] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 789.021571][ T5776] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 789.041493][ T5776] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 789.071978][ T5776] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 789.166389][ T5776] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 789.218978][T15152] evm: overlay not supported [ 789.699672][ T5776] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 789.775265][ T5776] usb 2-1: USB disconnect, device number 51 [ 789.832638][ T5734] usb 7-1: USB disconnect, device number 34 [ 791.177148][ T5850] usb 1-1: USB disconnect, device number 55 [ 791.379231][T15157] smpboot: CPU 1 is now offline [ 791.444012][T15157] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 791.577295][T15169] loop0: detected capacity change from 0 to 64 [ 791.740661][T15169] loop0: detected capacity change from 0 to 256 [ 791.809871][T15169] exfat: Bad value for 'uid' [ 791.856487][T15169] exfat: Bad value for 'uid' [ 794.654927][T15189] bridge0: port 2(erspan0) entered blocking state [ 794.661483][T15189] bridge0: port 2(erspan0) entered disabled state [ 794.668058][T15189] erspan0: entered allmulticast mode [ 794.674800][T15189] erspan0: entered promiscuous mode [ 794.680468][T15189] bridge0: port 2(erspan0) entered blocking state [ 794.686965][T15189] bridge0: port 2(erspan0) entered forwarding state [ 794.821488][T15189] erspan0: left allmulticast mode [ 794.826541][T15189] erspan0: left promiscuous mode [ 794.831723][T15189] bridge0: port 2(erspan0) entered disabled state [ 800.676507][T15206] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 800.971909][ T5754] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 801.201401][ T5754] usb 6-1: Using ep0 maxpacket: 8 [ 801.404580][ T5754] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 801.453532][ T5754] usb 6-1: config 0 has no interface number 0 [ 801.527931][ T5754] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 801.643295][ T5754] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 801.768578][ T5754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.911126][ T5754] usb 6-1: config 0 descriptor?? [ 802.003707][ T5754] usb 6-1: can't set config #0, error -71 [ 802.128221][ T5754] usb 6-1: USB disconnect, device number 44 [ 807.916144][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.106045][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.884852][T15278] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 809.924526][ T5775] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 810.132175][ T5775] usb 7-1: Using ep0 maxpacket: 8 [ 810.179561][ T5775] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 810.227686][ T5776] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 810.265029][ T5775] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 810.348260][ T5775] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 810.433166][ T5775] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 810.458530][ T5776] usb 3-1: Using ep0 maxpacket: 8 [ 810.518991][ T5776] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 810.558259][ T5775] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 810.606933][ T5776] usb 3-1: config 0 has no interface number 0 [ 810.668296][ T5776] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 810.700991][ T5775] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 810.784777][ T5776] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 810.798576][ T5775] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.886351][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.999079][ T5776] usb 3-1: config 0 descriptor?? [ 811.096170][T10056] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 811.123793][ T5776] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 814.120258][ T5775] usb 7-1: USB disconnect, device number 35 [ 814.296075][ T5734] usb 3-1: USB disconnect, device number 53 [ 814.579138][T15302] dyndbg: bad flag-op , at start of cÕ!¡A’Í'í@7? [ 814.620629][T15298] zram0: detected capacity change from 0 to 8 [ 814.678464][T15302] dyndbg: flags parse failed [ 820.010554][ T31] audit: type=1804 audit(1785527193.577:30): pid=15325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2778" name="/newroot/190/file0" dev="fuse" ino=1 res=1 errno=0 [ 823.475441][T15340] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 823.861906][ T5775] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 825.982003][ T5775] usb 6-1: Using ep0 maxpacket: 8 [ 827.835729][ T5775] usb 6-1: device descriptor read/all, error -71 [ 828.100373][ T4935] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 828.113797][ T4935] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 828.127125][ T4935] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 828.147820][ T4935] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 828.171852][ T4935] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 830.765852][ T4935] Bluetooth: hci6: command tx timeout [ 832.791563][ T4935] Bluetooth: hci6: command tx timeout [ 834.512461][T15396] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 835.683708][ T4935] Bluetooth: hci6: command tx timeout [ 836.929824][T15416] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2805'. [ 837.917968][ T4935] Bluetooth: hci6: command tx timeout [ 839.137516][ T5754] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 839.822554][T15449] loop6: detected capacity change from 0 to 2048 [ 839.861443][ T5754] usb 1-1: Using ep0 maxpacket: 8 [ 839.872993][T15449] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 839.934880][ T5754] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 839.995326][ T5754] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 840.064574][ T5754] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 840.262696][ T5754] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 840.372691][ T5754] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 840.489463][ T5754] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 840.574571][ T5754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.657402][T15460] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2817'. [ 840.748606][T15460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2817'. [ 841.996580][T15460] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2817'. [ 843.107185][T15473] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2819'. [ 845.255175][ T5754] usb 1-1: USB disconnect, device number 56 [ 845.571577][T15488] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2822'. [ 845.652240][T15489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2822'. [ 845.684947][T15362] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.742228][T15362] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.971033][T15362] bridge_slave_0: entered allmulticast mode [ 846.346759][T15362] bridge_slave_0: entered promiscuous mode [ 846.545282][T15498] loop0: detected capacity change from 0 to 64 [ 846.730961][T15498] loop0: detected capacity change from 0 to 256 [ 846.769752][T15362] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.795681][T15498] exfat: Bad value for 'uid' [ 846.831983][T15362] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.841413][T15498] exfat: Bad value for 'uid' [ 846.877455][T15362] bridge_slave_1: entered allmulticast mode [ 846.930401][T15362] bridge_slave_1: entered promiscuous mode [ 847.196664][T15362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.248218][T15362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.424100][T15362] team0: Port device team_slave_0 added [ 847.502081][T15362] team0: Port device team_slave_1 added [ 847.644962][T15362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.684563][T15362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.320235][T15362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.409342][T15362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.442186][T15362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.669748][T15362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.846349][T15534] dlm: no local IP address has been set [ 850.935928][T15534] dlm: cannot start dlm midcomms -107 [ 851.110927][T15362] hsr_slave_0: entered promiscuous mode [ 851.174417][T15362] hsr_slave_1: entered promiscuous mode [ 851.216329][T15538] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2836'. [ 851.242496][T15362] debugfs: 'hsr0' already exists in 'hsr' [ 851.283272][T15543] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2836'. [ 851.318962][T15362] Cannot create hsr debugfs directory [ 852.311758][ T9] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 852.436790][T15564] loop0: detected capacity change from 0 to 164 [ 852.513841][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 852.594909][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 852.668954][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 852.778416][ T9] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 852.849985][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.914734][ T9] usb 3-1: Product: syz [ 852.942319][ T9] usb 3-1: Manufacturer: syz [ 852.979395][ T9] usb 3-1: SerialNumber: syz [ 853.040920][T15555] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 853.378698][T15555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.668638][T15555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.056920][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 856.141927][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 856.513298][ T9] usb 3-1: USB disconnect, device number 54 [ 858.555683][T15599] udevd[15599]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 858.626232][T15362] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 858.743830][T15362] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 858.761219][T15603] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2855'. [ 858.809428][T15362] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 858.879171][T15362] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 858.956238][T15362] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 858.999277][T15610] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2857'. [ 859.038514][T15362] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 859.085754][T15362] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 859.149769][T15362] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 862.046745][ T5775] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 863.899045][T15362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.115155][T15362] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.367941][T14546] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.375982][T14546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.574429][T15660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2869'. [ 865.910619][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.917841][ T5806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.127146][T15671] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2870'. [ 866.522235][ T5775] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 866.744015][ T5775] usb 1-1: Using ep0 maxpacket: 16 [ 866.778503][T15688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2875'. [ 866.818357][ T5775] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 868.839198][ T5775] usb 1-1: config 0 interface 0 has no altsetting 0 [ 868.915108][ T5775] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 869.017523][ T5775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.124959][ T5775] usb 1-1: config 0 descriptor?? [ 869.365442][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.596748][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.716282][ T5775] usb 1-1: can't set config #0, error -71 [ 872.857363][ T5775] usb 1-1: USB disconnect, device number 57 [ 874.442252][ T5775] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 874.640342][T15736] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2884'. [ 874.668798][ T5775] usb 1-1: unable to get BOS descriptor or descriptor too short [ 874.720139][ T5775] usb 1-1: not running at top speed; connect to a high speed hub [ 874.775514][ T5775] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 874.862540][ T5775] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 874.941894][ T5775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.997388][ T5775] usb 1-1: Product: syz [ 875.027875][ T5775] usb 1-1: Manufacturer: syz [ 875.045790][T15742] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2885'. [ 875.067513][ T5775] usb 1-1: SerialNumber: syz [ 875.126454][T15719] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 875.397009][T15719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.476161][T15719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.580585][ T5775] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 875.640822][ T5775] usb 1-1: MIDIStreaming interface descriptor not found [ 875.708899][T15362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.785061][T15759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2889'. [ 876.045006][ T5775] usb 1-1: USB disconnect, device number 58 [ 876.699627][ T5734] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 878.404521][T15601] udevd[15601]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 878.583640][ T5734] usb 3-1: Using ep0 maxpacket: 16 [ 878.601193][T15778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2893'. [ 878.995519][ T5734] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 880.650677][ T5734] usb 3-1: config 0 interface 0 has no altsetting 0 [ 880.743068][ T5734] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 880.809891][T15788] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2896'. [ 880.837402][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.940971][ T5734] usb 3-1: config 0 descriptor?? [ 881.010687][ T5734] usb 3-1: can't set config #0, error -71 [ 881.107069][ T5734] usb 3-1: USB disconnect, device number 55 [ 881.655471][T15804] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5624] was attempted by ""[15804] [ 881.666865][T15804] netlink: 'syz.5.2898': attribute type 29 has an invalid length. [ 881.678317][T15804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 882.233726][T15816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2902'. [ 882.296276][T15362] veth0_vlan: entered promiscuous mode [ 882.393770][T15362] veth1_vlan: entered promiscuous mode [ 882.794568][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888053a62800: rx timeout, send abort [ 883.302958][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888053a62800: abort rx timeout. Force session deactivation [ 883.389055][T15362] veth0_macvtap: entered promiscuous mode [ 883.442407][T15832] loop0: detected capacity change from 0 to 64 [ 883.498724][T15362] veth1_macvtap: entered promiscuous mode [ 883.578574][T15832] loop0: detected capacity change from 0 to 256 [ 883.650435][T15832] exfat: Bad value for 'uid' [ 883.710409][T15832] exfat: Bad value for 'uid' [ 883.973044][ T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 885.716873][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 886.041675][ T9] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 886.170823][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 886.210145][T15846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2911'. [ 886.259456][ T9] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 886.364296][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.502821][ T9] usb 2-1: config 0 descriptor?? [ 886.667618][T15849] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2912'. [ 886.700176][ T9] usb 2-1: can't set config #0, error -71 [ 886.783812][ T9] usb 2-1: USB disconnect, device number 53 [ 886.951684][T10056] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 886.967469][T10056] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 886.981547][T10056] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 886.999988][T10056] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 887.024017][T10056] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 887.429715][T15867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2917'. [ 887.557088][T15870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2918'. [ 887.697181][T15867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2917'. [ 887.706724][ T58] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.823716][ T5963] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.914770][ T5963] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.003429][ T58] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.023070][T15879] fuse: Bad value for 'group_id' [ 888.084099][T15879] fuse: Bad value for 'group_id' [ 888.994431][T15888] fuse: Unknown parameter '0x0000000000000008' [ 889.113149][T10056] Bluetooth: hci5: command tx timeout [ 890.544098][T15896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2924'. [ 890.767940][T15904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2927'. [ 890.912058][T13961] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 891.122459][T13961] usb 7-1: Using ep0 maxpacket: 16 [ 891.176683][T13961] usb 7-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 891.195973][T10056] Bluetooth: hci5: command tx timeout [ 891.212687][T15911] loop0: detected capacity change from 0 to 64 [ 891.277913][T13961] usb 7-1: config 0 interface 0 has no altsetting 0 [ 891.355513][T13961] usb 7-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 891.396379][T15911] loop0: detected capacity change from 0 to 256 [ 891.458292][T15911] exfat: Bad value for 'uid' [ 891.463342][T13961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.529589][T15911] exfat: Bad value for 'uid' [ 891.554610][T13961] usb 7-1: config 0 descriptor?? [ 893.271704][T10056] Bluetooth: hci5: command tx timeout [ 894.202111][T13961] bigben 0003:146B:0902.0026: unexpected rdesc, please submit for review [ 894.202504][T13961] bigben 0003:146B:0902.0026: ignoring exceeding usage max [ 894.484043][T13961] bigben 0003:146B:0902.0026: unknown main item tag 0x0 [ 894.484077][T13961] bigben 0003:146B:0902.0026: unknown main item tag 0x0 [ 894.484095][T13961] bigben 0003:146B:0902.0026: item fetching failed at offset 37/40 [ 894.506418][T13961] bigben 0003:146B:0902.0026: parse failed [ 894.506526][T13961] bigben 0003:146B:0902.0026: probe with driver bigben failed with error -22 [ 895.240977][T13961] usb 7-1: USB disconnect, device number 36 [ 895.351780][T10056] Bluetooth: hci5: command tx timeout [ 898.221561][T15959] fuse: Unknown parameter '0x0000000000000008' [ 899.540753][T15963] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2941'. [ 902.292881][ T5734] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 902.436385][ T764] bridge_slave_0: left allmulticast mode [ 902.497809][ T764] bridge_slave_0: left promiscuous mode [ 902.527993][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 902.566222][ T764] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.630763][ T5734] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 902.730931][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.830140][ T5734] usb 3-1: config 0 descriptor?? [ 902.909070][T15975] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 903.445044][ T5734] kye 0003:0458:5015.0027: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 903.499325][ T5734] kye 0003:0458:5015.0027: unknown main item tag 0x0 [ 903.537102][ T5734] kye 0003:0458:5015.0027: unknown main item tag 0x0 [ 903.590146][ T5734] kye 0003:0458:5015.0027: unknown main item tag 0x0 [ 903.658751][ T5734] kye 0003:0458:5015.0027: unknown main item tag 0x0 [ 903.705248][ T5734] kye 0003:0458:5015.0027: unknown main item tag 0x0 [ 903.754474][ T5734] kye 0003:0458:5015.0027: unknown main item tag 0x0 [ 903.795821][ T5734] kye 0003:0458:5015.0027: unknown main item tag 0x0 [ 903.836091][ T5734] kye 0003:0458:5015.0027: unknown main item tag 0x0 [ 903.849050][ T764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.878948][ T5734] kye 0003:0458:5015.0027: unknown main item tag 0x0 [ 903.907845][ T764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 903.927281][ T5734] kye 0003:0458:5015.0027: unknown main item tag 0x0 [ 903.969166][ T764] bond0 (unregistering): Released all slaves [ 904.000872][ T5734] kye 0003:0458:5015.0027: hidraw0: USB HID v9.42 Device [HID 0458:5015] on usb-dummy_hcd.2-1/input0 [ 904.089454][ T764] bond1 (unregistering): Released all slaves [ 904.097685][ T5734] kye 0003:0458:5015.0027: tablet-enabling feature report not found [ 904.185500][ T5734] kye 0003:0458:5015.0027: tablet enabling failed [ 904.259950][ T764] bond2 (unregistering): Released all slaves [ 904.289962][ T5734] usb 3-1: USB disconnect, device number 56 [ 904.414955][ T764] bond3 (unregistering): Released all slaves [ 904.638178][ T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 904.665632][T16008] fido_id[16008]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 905.151690][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 905.208854][ T10] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 905.314894][ T5734] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 905.360080][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 905.419556][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 905.440625][ T10] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 905.474569][T16020] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2954'. [ 905.519360][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.534934][T16022] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2955'. [ 905.556111][ T5734] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 905.612573][ T10] usb 1-1: config 0 descriptor?? [ 905.631988][ T5734] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 905.729427][T16020] macsec1: entered allmulticast mode [ 905.743823][ T5734] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.768319][T16020] dummy0: entered allmulticast mode [ 905.801906][ T5734] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 905.829785][T16020] dummy0: entered promiscuous mode [ 905.878769][ T5734] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 905.949762][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 906.031078][ T5734] usb 3-1: SerialNumber: syz [ 906.129461][ T5734] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 906.202338][ T5734] usb-storage 3-1:1.0: USB Mass Storage device detected [ 907.777623][T16029] loop6: detected capacity change from 0 to 512 [ 907.824406][ T10] bigben 0003:146B:0902.0028: unexpected rdesc, please submit for review [ 907.824852][ T10] bigben 0003:146B:0902.0028: ignoring exceeding usage max [ 907.842196][T16029] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 907.842924][T16029] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 907.952487][ T10] bigben 0003:146B:0902.0028: item fetching failed at offset 37/40 [ 907.953049][ T10] bigben 0003:146B:0902.0028: parse failed [ 907.953127][ T10] bigben 0003:146B:0902.0028: probe with driver bigben failed with error -22 [ 908.007186][T10691] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.025881][ T5734] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 908.458411][ T764] hsr_slave_0: left promiscuous mode [ 908.474709][ T764] hsr_slave_1: left promiscuous mode [ 908.475356][ T764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 908.496918][ T764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.847657][ T5734] usb 3-1: USB disconnect, device number 57 [ 909.643710][ T10] usb 1-1: USB disconnect, device number 59 [ 910.793154][T16067] sock: sock_timestamping_bind_phc: sock not bind to device [ 911.014205][ T764] team0 (unregistering): Port device team_slave_1 removed [ 911.277271][ T764] team0 (unregistering): Port device team_slave_0 removed [ 911.396387][T16082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2967'. [ 912.424063][T16091] netlink: 'syz.2.2968': attribute type 29 has an invalid length. [ 912.436674][T16091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 912.929228][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 913.089549][T15854] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.141004][T15854] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.181729][T15854] bridge_slave_0: entered allmulticast mode [ 913.329287][T15854] bridge_slave_0: entered promiscuous mode [ 913.360098][T16100] loop0: detected capacity change from 0 to 1024 [ 913.417011][T15854] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.428178][T16100] EXT4-fs: Ignoring removed bh option [ 913.497021][T15854] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.573805][T15854] bridge_slave_1: entered allmulticast mode [ 913.841116][T16100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 914.434652][T15854] bridge_slave_1: entered promiscuous mode [ 914.691894][T16114] fuse: Unknown parameter '0xffffffffffffffff' [ 915.905099][T15854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.050712][T15854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.243400][ T5635] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.254111][T16116] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 916.437329][T15854] team0: Port device team_slave_0 added [ 916.548021][T15854] team0: Port device team_slave_1 added [ 916.699653][T16128] loop0: detected capacity change from 0 to 64 [ 916.772201][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 916.864070][T16128] loop0: detected capacity change from 0 to 256 [ 916.920606][T15854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.961402][T16128] exfat: Bad value for 'uid' [ 916.986755][T16128] exfat: Bad value for 'uid' [ 916.995276][T15854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.043034][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 917.401771][ T10] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 917.492578][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 917.547051][ T10] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 917.560274][T15854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.647960][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.696650][T16135] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 917.750207][ T10] usb 3-1: config 0 descriptor?? [ 918.332564][T16143] loop6: detected capacity change from 0 to 2048 [ 918.369248][T16143] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 918.689582][T15854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.791044][T15854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.079983][T16151] xt_hashlimit: size too large, truncated to 1048576 [ 919.158501][T15854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.321052][ T10] bigben 0003:146B:0902.0029: unexpected rdesc, please submit for review [ 919.330930][ T10] bigben 0003:146B:0902.0029: ignoring exceeding usage max [ 919.353207][ T10] hid_parser_main: 32 callbacks suppressed [ 919.353226][ T10] bigben 0003:146B:0902.0029: unknown main item tag 0x0 [ 919.353252][ T10] bigben 0003:146B:0902.0029: unknown main item tag 0x0 [ 919.353270][ T10] bigben 0003:146B:0902.0029: item fetching failed at offset 37/40 [ 919.353833][ T10] bigben 0003:146B:0902.0029: parse failed [ 919.353911][ T10] bigben 0003:146B:0902.0029: probe with driver bigben failed with error -22 [ 920.172370][T16170] netlink: 'syz.1.2982': attribute type 29 has an invalid length. [ 920.175240][T16170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 920.795439][ T10] usb 3-1: USB disconnect, device number 58 [ 921.162538][T15854] hsr_slave_0: entered promiscuous mode [ 921.234507][T15854] hsr_slave_1: entered promiscuous mode [ 921.289035][T16185] loop6: detected capacity change from 0 to 64 [ 921.309294][T15854] debugfs: 'hsr0' already exists in 'hsr' [ 922.145371][T16190] fuse: Unknown parameter '0x0000000000000008' [ 922.167167][T15854] Cannot create hsr debugfs directory [ 922.700678][T16185] loop6: detected capacity change from 0 to 256 [ 923.426828][T16185] exfat: Bad value for 'uid' [ 923.468949][T16185] exfat: Bad value for 'uid' [ 923.865935][T16196] fuse: Bad value for 'fd' [ 923.928397][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7 [ 928.822130][ T5775] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 928.938552][T16212] bridge0: port 2(erspan0) entered blocking state [ 928.945971][T16212] bridge0: port 2(erspan0) entered disabled state [ 928.953092][T16212] erspan0: entered allmulticast mode [ 928.959723][T16212] erspan0: entered promiscuous mode [ 928.965594][T16212] bridge0: port 2(erspan0) entered blocking state [ 928.972112][T16212] bridge0: port 2(erspan0) entered forwarding state [ 929.151830][ T5775] usb 1-1: Using ep0 maxpacket: 16 [ 929.208502][ T5775] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 929.744003][T16232] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[10691] was attempted by ""[16232] [ 929.756757][T16232] netlink: 'syz.6.2999': attribute type 29 has an invalid length. [ 929.767462][T16232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 929.801894][ T5775] usb 1-1: config 0 interface 0 has no altsetting 0 [ 929.884472][ T5775] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 929.964020][ T5775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.036869][T16237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3000'. [ 930.075931][ T5775] usb 1-1: config 0 descriptor?? [ 930.159450][T16240] kAFS: unable to lookup cell 'ÿ' [ 930.980219][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.987198][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.602469][T16256] fuse: Unknown parameter '0x0000000000000008' [ 933.524152][ T5775] bigben 0003:146B:0902.002A: unexpected rdesc, please submit for review [ 933.540731][ T5775] bigben 0003:146B:0902.002A: ignoring exceeding usage max [ 933.553119][ T5775] bigben 0003:146B:0902.002A: unknown main item tag 0x0 [ 933.553157][ T5775] bigben 0003:146B:0902.002A: unknown main item tag 0x0 [ 933.553182][ T5775] bigben 0003:146B:0902.002A: item fetching failed at offset 37/40 [ 933.553747][ T5775] bigben 0003:146B:0902.002A: parse failed [ 933.553842][ T5775] bigben 0003:146B:0902.002A: probe with driver bigben failed with error -22 [ 934.622725][ T764] bridge_slave_1: left allmulticast mode [ 934.680444][ T764] bridge_slave_1: left promiscuous mode [ 934.699125][ T5734] usb 1-1: USB disconnect, device number 60 [ 934.759993][ T764] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.018840][ T764] bridge_slave_0: left allmulticast mode [ 935.074216][ T764] bridge_slave_0: left promiscuous mode [ 935.123741][ T764] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.259241][T10056] Bluetooth: hci4: unexpected event 0x03 length: 12 > 11 [ 938.724533][ T764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.789965][ T764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.836922][ T764] bond0 (unregistering): Released all slaves [ 938.986677][ T5280] 8021q: adding VLAN 0 to HW filter on device eth8 [ 939.028127][T16290] bridge0: port 2(erspan0) entered blocking state [ 939.036521][T16290] bridge0: port 2(erspan0) entered disabled state [ 939.043099][T16290] erspan0: entered allmulticast mode [ 939.049746][T16290] erspan0: entered promiscuous mode [ 939.055446][T16290] bridge0: port 2(erspan0) entered blocking state [ 939.061962][T16290] bridge0: port 2(erspan0) entered forwarding state [ 939.424125][T16300] loop6: detected capacity change from 0 to 1024 [ 939.465816][T16300] EXT4-fs: Invalid want_extra_isize 7 [ 940.237708][ T764] hsr_slave_0: left promiscuous mode [ 940.274269][ T764] hsr_slave_1: left promiscuous mode [ 940.304010][ T764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.316605][ T764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.335627][ T764] veth1_macvtap: left promiscuous mode [ 940.341231][ T764] veth0_macvtap: left promiscuous mode [ 940.350944][ T764] veth1_vlan: left promiscuous mode [ 940.356599][ T764] veth0_vlan: left promiscuous mode [ 940.371523][ T5776] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 940.531817][ T5734] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 940.541055][ T5776] usb 3-1: Using ep0 maxpacket: 8 [ 940.560485][ T5776] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 940.577852][ T5776] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 940.602231][ T5776] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 940.631553][ T5776] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 940.656829][ T5776] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 940.693214][ T5776] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 940.704637][ T5734] usb 1-1: Using ep0 maxpacket: 16 [ 940.719635][ T5734] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 940.736253][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.753408][ T5734] usb 1-1: config 0 interface 0 has no altsetting 0 [ 940.764018][ T764] team0 (unregistering): Port device team_slave_1 removed [ 940.779979][ T5734] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 940.809386][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.826540][ T764] team0 (unregistering): Port device team_slave_0 removed [ 940.838325][ T5734] usb 1-1: config 0 descriptor?? [ 941.492174][ T5734] bigben 0003:146B:0902.002B: unexpected rdesc, please submit for review [ 941.492546][ T5734] bigben 0003:146B:0902.002B: ignoring exceeding usage max [ 941.526011][ T5734] bigben 0003:146B:0902.002B: unknown main item tag 0x0 [ 941.526037][ T5734] bigben 0003:146B:0902.002B: unknown main item tag 0x0 [ 941.526055][ T5734] bigben 0003:146B:0902.002B: item fetching failed at offset 37/40 [ 941.539601][ T5734] bigben 0003:146B:0902.002B: parse failed [ 941.539687][ T5734] bigben 0003:146B:0902.002B: probe with driver bigben failed with error -22 [ 941.779894][T16315] usbtmc 3-1:16.0: simple control status returned b3 [ 942.123277][ T10] usb 3-1: USB disconnect, device number 59 [ 942.868532][T16319] fuse: Unknown parameter '0xffffffffffffffff' [ 944.837987][ T5776] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 944.986470][ T9] usb 1-1: USB disconnect, device number 61 [ 944.996222][T16334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3023'. [ 945.075896][ T5776] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 945.210056][ T5776] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.255968][T16335] kAFS: unable to lookup cell 'ÿ' [ 945.343049][ T5776] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 946.306844][ T5776] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 947.200033][T16344] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 947.213941][T16344] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 947.237896][T16344] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 947.261085][T16344] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 947.270676][T16344] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 947.337395][ T5776] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 947.455666][ T5776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.814906][ T5776] usb 6-1: can't set config #1, error -71 [ 947.927031][ T5776] usb 6-1: USB disconnect, device number 47 [ 948.586949][T16370] loop6: detected capacity change from 0 to 64 [ 949.229972][T16376] netlink: 'syz.5.3030': attribute type 1 has an invalid length. [ 949.351659][T10056] Bluetooth: hci6: command tx timeout [ 949.816040][T16376] 8021q: adding VLAN 0 to HW filter on device bond2 [ 949.964114][T10196] bridge_slave_1: left allmulticast mode [ 950.030287][T10196] bridge_slave_1: left promiscuous mode [ 950.110797][T10196] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.225790][T10196] bridge_slave_0: left allmulticast mode [ 950.338255][T10196] bridge_slave_0: left promiscuous mode [ 950.416636][T10196] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.915613][T10196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 950.966871][T10196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.009200][T10196] bond0 (unregistering): Released all slaves [ 951.355390][T10196] hsr_slave_0: left promiscuous mode [ 951.426730][T10196] hsr_slave_1: left promiscuous mode [ 951.432375][T10056] Bluetooth: hci6: command tx timeout [ 951.498446][T10196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 951.592940][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 951.618432][T10196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.812333][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 952.476769][T16422] fuse: Unknown parameter 'fd0x0000000000000008' [ 953.172183][ T9] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 953.516138][T10056] Bluetooth: hci6: command tx timeout [ 953.790459][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 954.002992][ T9] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 954.048472][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.118012][ T9] usb 2-1: config 0 descriptor?? [ 954.160929][T16427] fuse: Unknown parameter 'grou00000000000000000000' [ 954.400496][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 954.449162][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 954.535949][ T9] usb 2-1: USB disconnect, device number 54 [ 954.716516][T10196] team0 (unregistering): Port device team_slave_1 removed [ 954.843121][T10196] team0 (unregistering): Port device team_slave_0 removed [ 954.959960][T16438] loop0: detected capacity change from 0 to 64 [ 955.408468][T16441] netlink: 'syz.1.3044': attribute type 1 has an invalid length. [ 955.592020][T10056] Bluetooth: hci6: command tx timeout [ 956.064706][T16441] 8021q: adding VLAN 0 to HW filter on device bond7 [ 956.462326][ T5734] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 956.568980][T16456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3046'. [ 956.672314][ T5734] usb 3-1: Using ep0 maxpacket: 8 [ 956.704341][T16459] kAFS: unable to lookup cell 'ÿ' [ 956.734436][ T5734] usb 3-1: config 0 has no interfaces? [ 956.780063][ T5734] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 956.865717][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.989254][ T5734] usb 3-1: config 0 descriptor?? [ 957.253145][ T5734] usb 3-1: USB disconnect, device number 60 [ 957.575791][T16465] syzkaller0: entered promiscuous mode [ 957.607829][T16465] syzkaller0: entered allmulticast mode [ 958.258733][T16482] fuse: Unknown parameter 'grou00000000000000000000' [ 961.722833][T16504] fuse: Unknown parameter 'fd0x0000000000000008' [ 963.869173][T16513] loop6: detected capacity change from 0 to 64 [ 964.811586][T16513] loop6: detected capacity change from 0 to 256 [ 964.896638][T16513] exfat: Bad value for 'uid' [ 964.937773][T16513] exfat: Bad value for 'uid' [ 965.183526][T16338] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.250546][T16338] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.414141][T16338] bridge_slave_0: entered allmulticast mode [ 965.493147][T16338] bridge_slave_0: entered promiscuous mode [ 965.576683][T16338] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.668979][T16338] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.692577][T16527] netlink: 'syz.0.3058': attribute type 1 has an invalid length. [ 965.727204][T16338] bridge_slave_1: entered allmulticast mode [ 965.799668][T16338] bridge_slave_1: entered promiscuous mode [ 967.626060][T16527] 8021q: adding VLAN 0 to HW filter on device bond3 [ 967.790183][T16535] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 967.850382][T16545] fuse: Unknown parameter 'grou00000000000000000000' [ 968.173572][T16338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.324809][T16338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.375791][T16338] team0: Port device team_slave_0 added [ 969.437053][T16338] team0: Port device team_slave_1 added [ 969.692583][T16572] binder: 16570:16572 ioctl 4018620d 0 returned -22 [ 969.928865][T16338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.616577][T16338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.786748][T16338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.870622][T16579] bridge0: port 2(erspan0) entered blocking state [ 971.877315][T16579] bridge0: port 2(erspan0) entered disabled state [ 971.883926][T16579] erspan0: entered allmulticast mode [ 971.890574][T16579] erspan0: entered promiscuous mode [ 971.898567][T16579] bridge0: port 2(erspan0) entered blocking state [ 971.905056][T16579] bridge0: port 2(erspan0) entered forwarding state [ 972.041127][T16338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.076351][T16338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.128913][T16583] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3069'. [ 972.359596][T16587] kAFS: unable to lookup cell 'ÿ' [ 972.366437][T16338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.818830][T16338] hsr_slave_0: entered promiscuous mode [ 972.849089][T16338] hsr_slave_1: entered promiscuous mode [ 972.867006][T16338] debugfs: 'hsr0' already exists in 'hsr' [ 972.876363][T16338] Cannot create hsr debugfs directory [ 972.911704][ T5734] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 973.471453][ T5734] usb 2-1: Using ep0 maxpacket: 8 [ 977.577357][ T5734] usb 2-1: device descriptor read/all, error -71 [ 978.026245][T16613] netlink: 'syz.5.3074': attribute type 1 has an invalid length. [ 978.170643][T16618] fuse: Unknown parameter 'group_i00000000000000000000' [ 978.622451][T16613] 8021q: adding VLAN 0 to HW filter on device bond3 [ 979.187036][T16637] binder: 16636:16637 ioctl 4018620d 0 returned -22 [ 981.403351][T16648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3083'. [ 981.490202][T16654] kAFS: unable to lookup cell 'ÿ' [ 982.851618][T16677] fuse: Unknown parameter 'group_i00000000000000000000' [ 983.086722][T16338] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 983.224311][T16338] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 983.866767][T16338] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 984.215172][T16688] fuse: Bad value for 'fd' [ 985.279429][T16338] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 985.428248][T16338] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 985.497189][T16338] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 985.554024][T16338] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 985.607296][T16693] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3093'. [ 985.627702][T16338] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 985.775270][T16697] fuse: Bad value for 'fd' [ 986.029507][T16703] binder: 16702:16703 ioctl 4018620d 0 returned -22 [ 988.091952][ T5776] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 988.336353][ T5776] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 988.433619][ T5776] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.494368][T16721] loop6: detected capacity change from 0 to 64 [ 988.522542][ T5776] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 988.572571][T16722] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3098'. [ 988.619756][T16721] loop6: detected capacity change from 0 to 256 [ 988.635997][T16338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.645266][ T5776] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 988.677075][T16723] kAFS: unable to lookup cell 'ÿ' [ 988.695917][T16721] exfat: Bad value for 'uid' [ 988.746671][T16721] exfat: Bad value for 'uid' [ 988.759890][ T5776] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 989.006077][T16338] 8021q: adding VLAN 0 to HW filter on device team0 [ 989.016831][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.117149][ T5776] opticon 1-1:1.0: opticon converter detected [ 989.126900][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.134106][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.219431][ T5776] usb 1-1: opticon converter now attached to ttyUSB0 [ 989.405860][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.413051][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.477954][ T5776] usb 1-1: USB disconnect, device number 62 [ 989.746563][T16739] fuse: Unknown parameter 'group_i00000000000000000000' [ 989.866463][ T5776] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 989.930835][ T5776] opticon 1-1:1.0: device disconnected [ 989.947692][T16740] netlink: 'syz.2.3103': attribute type 1 has an invalid length. [ 992.393592][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.413031][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.536456][T16755] fuse: Bad value for 'fd' [ 992.784280][T16763] binder: 16762:16763 ioctl c0306201 0 returned -14 [ 996.252889][T16778] loop6: detected capacity change from 0 to 64 [ 997.233481][T16778] loop6: detected capacity change from 0 to 256 [ 997.290710][T16778] exfat: Bad value for 'uid' [ 997.331171][T16776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3111'. [ 997.370947][T16776] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 997.381828][T16776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 997.425453][T16778] exfat: Bad value for 'uid' [ 998.496135][T16794] fuse: Unknown parameter 'group_id00000000000000000000' [ 998.661959][T16805] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3117'. [ 998.759862][T16806] kAFS: unable to lookup cell 'ÿ' [ 998.896185][T16803] netlink: 'syz.5.3119': attribute type 1 has an invalid length. [ 999.847804][T16338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.850585][T16840] binder: 16839:16840 ioctl c0306201 0 returned -14 [ 1001.880710][ T5775] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1002.341425][ T5775] usb 1-1: Using ep0 maxpacket: 8 [ 1004.513259][ T5775] usb 1-1: device descriptor read/all, error -71 [ 1005.410372][T16864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3129'. [ 1006.650787][T16344] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1006.665599][T16344] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1006.676194][T16874] fuse: Unknown parameter 'group_id00000000000000000000' [ 1006.689858][T16344] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1006.707921][T16344] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1006.719567][T16344] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1007.985275][T16892] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3134'. [ 1009.174142][T16344] Bluetooth: hci5: command tx timeout [ 1009.909054][T16891] netlink: 'syz.5.3135': attribute type 1 has an invalid length. [ 1009.930780][T16897] kAFS: unable to lookup cell 'ÿ' [ 1010.323287][T16906] binder: BINDER_SET_CONTEXT_MGR already set [ 1010.386724][T16909] binder: 16905:16909 ioctl c0306201 0 returned -14 [ 1010.404379][T16906] binder: 16905:16906 ioctl 4018620d 200000004a80 returned -16 [ 1011.191384][T16344] Bluetooth: hci5: command tx timeout [ 1012.849910][T16926] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3142'. [ 1013.395836][T16344] Bluetooth: hci5: command tx timeout [ 1013.642193][T16933] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3143'. [ 1015.431676][T16344] Bluetooth: hci5: command tx timeout [ 1015.906140][T16943] fuse: Unknown parameter 'group_id00000000000000000000' [ 1019.164547][T16965] binder_alloc: 16964: binder_alloc_buf, no vma [ 1022.604298][T16989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3155'. [ 1022.859863][T16990] kAFS: unable to lookup cell 'ÿ' [ 1023.388723][T17001] fuse: Bad value for 'user_id' [ 1023.538373][T17001] fuse: Bad value for 'user_id' [ 1024.983353][T17017] fuse: Bad value for 'fd' [ 1025.407528][T17013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3161'. [ 1026.562788][ T9] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 1027.811661][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1028.550060][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 1028.722327][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 1028.806233][ T9] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1028.869865][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.894041][T15063] bridge_slave_1: left allmulticast mode [ 1029.214490][T15063] bridge_slave_1: left promiscuous mode [ 1029.705614][ T9] usb 2-1: Product: syz [ 1031.053380][T15063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.163608][ T9] usb 2-1: Manufacturer: syz [ 1031.215060][ T9] usb 2-1: SerialNumber: syz [ 1031.305873][ T9] usb 2-1: can't set config #1, error -71 [ 1031.370361][ T9] usb 2-1: USB disconnect, device number 57 [ 1031.396995][T15063] bridge_slave_0: left allmulticast mode [ 1031.468838][T15063] bridge_slave_0: left promiscuous mode [ 1031.522844][T15063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.822809][T17061] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3171'. [ 1031.877066][T17063] fuse: Bad value for 'user_id' [ 1031.927556][T17063] fuse: Bad value for 'user_id' [ 1031.947646][T17061] kAFS: unable to lookup cell 'ÿ' [ 1032.333905][T17071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3176'. [ 1034.807379][T15063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1034.846111][T15063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1034.896831][T15063] bond0 (unregistering): Released all slaves [ 1035.154256][T15063] hsr_slave_0: left promiscuous mode [ 1035.213266][T15063] hsr_slave_1: left promiscuous mode [ 1035.260873][T15063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.332955][T15063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.423244][T17113] fuse: Bad value for 'user_id' [ 1040.446173][T17113] fuse: Bad value for 'user_id' [ 1040.462759][ T5776] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 1041.039350][T15063] team0 (unregistering): Port device team_slave_1 removed [ 1041.083838][ T5776] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1041.110326][T15063] team0 (unregistering): Port device team_slave_0 removed [ 1041.133705][ T5776] usb 7-1: not running at top speed; connect to a high speed hub [ 1042.097190][ T5776] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 1043.483958][T17129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3191'. [ 1043.520938][ T5776] usb 7-1: string descriptor 0 read error: -71 [ 1043.545675][T17131] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3192'. [ 1043.568168][ T5776] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1043.628139][ T5776] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.720575][ T5776] usb 7-1: can't set config #1, error -71 [ 1043.782896][ T5776] usb 7-1: USB disconnect, device number 37 [ 1044.374585][T17142] binder: 17141:17142 ioctl c0306201 200000000680 returned -14 [ 1044.834093][T17154] binder: BINDER_SET_CONTEXT_MGR already set [ 1046.610561][T17154] binder: 17148:17154 ioctl 4018620d 200000004a80 returned -16 [ 1046.855668][T16873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.930157][T16873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.259655][T17164] SET target dimension over the limit! [ 1047.289063][T16873] bridge_slave_0: entered allmulticast mode [ 1047.349334][T16873] bridge_slave_0: entered promiscuous mode [ 1047.394849][T17174] loop6: detected capacity change from 0 to 64 [ 1047.415105][T16873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.494324][T17177] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3200'. [ 1047.505563][T16873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.740512][T17174] loop6: detected capacity change from 0 to 256 [ 1048.724994][T16873] bridge_slave_1: entered allmulticast mode [ 1048.753229][T17177] kAFS: unable to lookup cell 'ÿ' [ 1049.503520][T17174] exfat: Bad value for 'uid' [ 1049.545747][T16873] bridge_slave_1: entered promiscuous mode [ 1049.570667][T17174] exfat: Bad value for 'uid' [ 1050.571360][ T9] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1052.456354][T17193] erspan0: left allmulticast mode [ 1052.461534][T17193] erspan0: left promiscuous mode [ 1052.466736][T17193] bridge0: port 2(erspan0) entered disabled state [ 1052.577634][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1052.936937][T16873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.008736][T17200] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3207'. [ 1053.061869][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1053.107857][T16873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.148612][ T9] usb 3-1: can't read configurations, error -71 [ 1053.212924][T17204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3208'. [ 1053.547381][T16873] team0: Port device team_slave_0 added [ 1053.627278][T16873] team0: Port device team_slave_1 added [ 1053.680748][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.696822][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.953080][T16873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.044009][T16873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.251194][T16873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.368606][T16873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.423751][T16873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.590147][T16873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.910121][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1055.810048][T16873] hsr_slave_0: entered promiscuous mode [ 1055.859434][T16873] hsr_slave_1: entered promiscuous mode [ 1055.893718][T16873] debugfs: 'hsr0' already exists in 'hsr' [ 1055.925392][T16873] Cannot create hsr debugfs directory [ 1056.241438][ T9] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1056.345007][T17237] xt_hashlimit: size too large, truncated to 1048576 [ 1056.452458][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1056.489133][ T9] usb 7-1: config 0 has no interfaces? [ 1056.530502][ T9] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1056.579002][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.660892][ T9] usb 7-1: config 0 descriptor?? [ 1057.028960][ T9] usb 7-1: USB disconnect, device number 38 [ 1057.366825][T17249] xt_hashlimit: size too large, truncated to 1048576 [ 1059.430587][T17257] loop0: detected capacity change from 0 to 64 [ 1059.613620][T17257] loop0: detected capacity change from 0 to 256 [ 1059.700424][T17257] exfat: Bad value for 'uid' [ 1059.765160][T17257] exfat: Bad value for 'uid' [ 1061.216132][T17274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3221'. [ 1061.234091][T13961] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 1061.314759][T17280] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3223'. [ 1061.379050][T17267] erspan0: left allmulticast mode [ 1061.385889][T17267] erspan0: left promiscuous mode [ 1061.391207][T17267] bridge0: port 2(erspan0) entered disabled state [ 1061.533288][T13961] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1061.639473][T13961] usb 1-1: not running at top speed; connect to a high speed hub [ 1061.732712][T13961] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 1062.572490][T13961] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1063.919648][T13961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.919694][T13961] usb 1-1: Product: syz [ 1063.919708][T13961] usb 1-1: Manufacturer: syz [ 1063.919723][T13961] usb 1-1: SerialNumber: syz [ 1064.283169][T13961] usb 1-1: can't set config #1, error -71 [ 1064.298498][T13961] usb 1-1: USB disconnect, device number 65 [ 1064.373748][T17300] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3226'. [ 1064.433406][T17300] kAFS: unable to lookup cell 'ÿ' [ 1065.911854][T17311] SET target dimension over the limit! [ 1066.665994][T10056] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1066.688069][T10056] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1067.008859][T10056] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1067.024535][T10056] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1067.042903][T10056] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1067.374971][T17327] xt_hashlimit: size too large, truncated to 1048576 [ 1068.410001][T17343] bridge0: port 2(erspan0) entered blocking state [ 1068.418517][T17343] bridge0: port 2(erspan0) entered disabled state [ 1068.425418][T17343] erspan0: entered allmulticast mode [ 1068.432509][T17343] erspan0: entered promiscuous mode [ 1068.440740][T17343] bridge0: port 2(erspan0) entered blocking state [ 1068.447335][T17343] bridge0: port 2(erspan0) entered forwarding state [ 1068.457049][T17343] erspan0: left allmulticast mode [ 1068.462269][T17343] erspan0: left promiscuous mode [ 1068.468279][T17343] bridge0: port 2(erspan0) entered disabled state [ 1069.121368][T16344] Bluetooth: hci6: command tx timeout [ 1069.594337][T17354] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3238'. [ 1069.739825][ T764] bridge_slave_1: left allmulticast mode [ 1069.784043][ T764] bridge_slave_1: left promiscuous mode [ 1069.812561][T17358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3239'. [ 1069.848887][ T764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.939650][ T764] bridge_slave_0: left allmulticast mode [ 1070.003284][ T764] bridge_slave_0: left promiscuous mode [ 1070.056269][ T764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.086952][T16344] Bluetooth: hci6: command tx timeout [ 1072.094604][ T5775] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1073.753856][T17378] fuse: Bad value for 'fd' [ 1074.155179][T16344] Bluetooth: hci6: command tx timeout [ 1074.608179][ T764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1075.384497][ T764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1075.447735][ T764] bond0 (unregistering): Released all slaves [ 1075.549366][T17372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1075.557549][T17372] ip6gre1: left promiscuous mode [ 1075.562801][T17372] ip6gre1: left allmulticast mode [ 1076.076941][ T764] hsr_slave_0: left promiscuous mode [ 1076.169982][ T764] hsr_slave_1: left promiscuous mode [ 1076.220517][ T764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.231675][T16344] Bluetooth: hci6: command tx timeout [ 1076.298067][ T764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.404264][ T764] team0 (unregistering): Port device team_slave_1 removed [ 1078.446045][ T764] team0 (unregistering): Port device team_slave_0 removed [ 1078.819095][T17412] bridge0: port 2(erspan0) entered blocking state [ 1078.825783][T17412] bridge0: port 2(erspan0) entered disabled state [ 1078.832539][T17412] erspan0: entered allmulticast mode [ 1078.839327][T17412] erspan0: entered promiscuous mode [ 1078.847412][T17412] bridge0: port 2(erspan0) entered blocking state [ 1078.853944][T17412] bridge0: port 2(erspan0) entered forwarding state [ 1078.862301][T17413] erspan0: left allmulticast mode [ 1078.867338][T17413] erspan0: left promiscuous mode [ 1078.872713][T17413] bridge0: port 2(erspan0) entered disabled state [ 1079.313929][T17420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3252'. [ 1079.877520][T17431] kAFS: unable to lookup cell 'ÿ' [ 1080.561766][T17440] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3256'. [ 1082.367818][T17463] fuse: Bad value for 'fd' [ 1084.386184][T17321] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.435692][T17321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.479466][T17321] bridge_slave_0: entered allmulticast mode [ 1084.524512][T17321] bridge_slave_0: entered promiscuous mode [ 1084.869551][T17321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.919360][T17321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.983374][T17321] bridge_slave_1: entered allmulticast mode [ 1085.026413][T17321] bridge_slave_1: entered promiscuous mode [ 1085.376243][T17321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.675092][T17321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.687884][T17481] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3263'. [ 1085.735711][T17482] bridge0: port 2(erspan0) entered blocking state [ 1085.742409][T17482] bridge0: port 2(erspan0) entered disabled state [ 1085.751671][T17482] erspan0: entered allmulticast mode [ 1085.758538][T17482] erspan0: entered promiscuous mode [ 1085.764282][T17482] bridge0: port 2(erspan0) entered blocking state [ 1085.770828][T17482] bridge0: port 2(erspan0) entered forwarding state [ 1085.780862][T17484] erspan0: left allmulticast mode [ 1085.786034][T17484] erspan0: left promiscuous mode [ 1085.791136][T17484] bridge0: port 2(erspan0) entered disabled state [ 1086.013667][T17321] team0: Port device team_slave_0 added [ 1086.074695][T17321] team0: Port device team_slave_1 added [ 1086.169573][T17493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3266'. [ 1086.612410][T17321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.647626][T17321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.762664][T17321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.832970][T17321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.860356][T17321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.976160][T17321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1088.050313][T17321] hsr_slave_0: entered promiscuous mode [ 1088.113306][T17321] hsr_slave_1: entered promiscuous mode [ 1088.149848][T17321] debugfs: 'hsr0' already exists in 'hsr' [ 1088.179634][T17321] Cannot create hsr debugfs directory [ 1088.398076][T17531] kAFS: unable to lookup cell 'ÿ' [ 1088.876925][ T24] kworker/1:0 (24) used greatest stack depth: 16616 bytes left [ 1089.253465][T17541] fuse: Bad value for 'group_id' [ 1089.288141][T17541] fuse: Bad value for 'group_id' [ 1089.308488][T13961] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1089.498656][T17544] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3278'. [ 1089.526592][T13961] usb 7-1: Using ep0 maxpacket: 8 [ 1089.560962][T13961] usb 7-1: config 0 has no interfaces? [ 1089.590499][T13961] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1089.813754][T13961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.891086][T13961] usb 7-1: config 0 descriptor?? [ 1089.931058][T17547] bridge0: port 2(erspan0) entered blocking state [ 1089.938181][T17547] bridge0: port 2(erspan0) entered disabled state [ 1089.944846][T17547] erspan0: entered allmulticast mode [ 1089.951547][T17547] erspan0: entered promiscuous mode [ 1089.959442][T17547] bridge0: port 2(erspan0) entered blocking state [ 1089.965926][T17547] bridge0: port 2(erspan0) entered forwarding state [ 1089.975496][T17548] erspan0: left allmulticast mode [ 1089.980529][T17548] erspan0: left promiscuous mode [ 1089.985669][T17548] bridge0: port 2(erspan0) entered disabled state [ 1090.097382][T17550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3280'. [ 1090.123555][T17321] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1090.173498][T17321] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1090.199865][T17321] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1090.223610][T13961] usb 7-1: USB disconnect, device number 40 [ 1090.278268][T17321] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1090.326271][T17321] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1090.395220][T17321] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1090.554579][T17321] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1090.609558][T17321] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1091.281750][ T10] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1091.484863][ T10] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1091.552901][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1091.587681][T17321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1091.619255][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1091.705838][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1091.722363][T17321] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.737236][T17580] fuse: Bad value for 'group_id' [ 1091.907709][T17573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3287'. [ 1091.933720][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1091.943288][T17580] fuse: Bad value for 'group_id' [ 1092.695366][T15716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.702566][T15716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.724272][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1092.765448][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1092.816554][T15716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.823787][T15716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.851774][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1092.896993][T17589] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3291'. [ 1092.918747][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1092.987207][T17591] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3292'. [ 1093.008581][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1093.062954][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1093.547093][T17594] bridge0: port 2(erspan0) entered blocking state [ 1093.554591][T17594] bridge0: port 2(erspan0) entered disabled state [ 1093.561121][T17594] erspan0: entered allmulticast mode [ 1093.567822][T17594] erspan0: entered promiscuous mode [ 1093.573524][T17594] bridge0: port 2(erspan0) entered blocking state [ 1093.579989][T17594] bridge0: port 2(erspan0) entered forwarding state [ 1093.589298][T17594] erspan0: left allmulticast mode [ 1093.594479][T17594] erspan0: left promiscuous mode [ 1093.599555][T17594] bridge0: port 2(erspan0) entered disabled state [ 1093.650319][T17321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1093.676897][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1093.840479][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1093.906570][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1093.958281][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1094.045337][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1094.102978][ T10] usb 1-1: unable to read config index 5 descriptor/start: -71 [ 1094.163843][ T10] usb 1-1: can't read configurations, error -71 [ 1094.314023][T17608] kAFS: unable to lookup cell 'ÿ' [ 1096.437504][T17629] fuse: Bad value for 'group_id' [ 1096.483971][T17629] fuse: Bad value for 'group_id' [ 1096.588707][T17631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3304'. [ 1096.715867][T17638] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3305'. [ 1097.328487][T17642] bridge0: port 2(erspan0) entered blocking state [ 1097.335040][T17642] bridge0: port 2(erspan0) entered disabled state [ 1097.342438][T17642] erspan0: entered allmulticast mode [ 1097.349044][T17642] erspan0: entered promiscuous mode [ 1097.357579][T17642] bridge0: port 2(erspan0) entered blocking state [ 1097.364061][T17642] bridge0: port 2(erspan0) entered forwarding state [ 1097.372936][T17642] erspan0: left allmulticast mode [ 1097.377950][T17642] erspan0: left promiscuous mode [ 1097.383144][T17642] bridge0: port 2(erspan0) entered disabled state [ 1097.668569][T17644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3307'. [ 1097.792014][T17650] netlink: 'syz.0.3309': attribute type 4 has an invalid length. [ 1099.147189][T17321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1101.102748][T17664] efs: cannot read volume header [ 1103.146220][T17686] bridge0: port 2(erspan0) entered blocking state [ 1103.152803][T17686] bridge0: port 2(erspan0) entered disabled state [ 1103.159447][T17686] erspan0: entered allmulticast mode [ 1103.166159][T17686] erspan0: entered promiscuous mode [ 1103.174388][T17686] bridge0: port 2(erspan0) entered blocking state [ 1103.181020][T17686] bridge0: port 2(erspan0) entered forwarding state [ 1103.191242][T17686] erspan0: left allmulticast mode [ 1103.197374][T17686] erspan0: left promiscuous mode [ 1103.202813][T17686] bridge0: port 2(erspan0) entered disabled state [ 1103.223976][T17685] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3320'. [ 1103.645931][T17690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3321'. [ 1105.747686][T17714] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5635] was attempted by ""[17714] [ 1105.774499][T17714] netlink: 'syz.0.3326': attribute type 29 has an invalid length. [ 1105.786678][T17714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.733577][T17718] kAFS: unable to lookup cell 'ÿ' [ 1107.017812][T17321] veth0_vlan: entered promiscuous mode [ 1107.121203][T17321] veth1_vlan: entered promiscuous mode [ 1107.330706][T17726] bridge0: port 2(erspan0) entered blocking state [ 1107.337499][T17726] bridge0: port 2(erspan0) entered disabled state [ 1107.344085][T17726] erspan0: entered allmulticast mode [ 1107.350713][T17726] erspan0: entered promiscuous mode [ 1107.356678][T17726] bridge0: port 2(erspan0) entered blocking state [ 1107.363174][T17726] bridge0: port 2(erspan0) entered forwarding state [ 1107.371981][T17726] erspan0: left allmulticast mode [ 1107.377861][T17726] erspan0: left promiscuous mode [ 1107.382983][T17726] bridge0: port 2(erspan0) entered disabled state [ 1107.666574][T17321] veth0_macvtap: entered promiscuous mode [ 1107.746499][T17321] veth1_macvtap: entered promiscuous mode [ 1107.914550][T17321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.012593][T17321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.121621][ T37] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.512091][ T37] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.637007][T13961] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1108.681719][ T5963] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.830282][T17742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3337'. [ 1108.840171][ T6015] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.872758][T13961] usb 7-1: Using ep0 maxpacket: 8 [ 1108.917281][T13961] usb 7-1: config 0 has no interfaces? [ 1108.944161][T13961] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1109.024338][T13961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.110169][T13961] usb 7-1: config 0 descriptor?? [ 1109.217500][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.283211][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.310343][T13961] usb 7-1: can't set config #0, error -71 [ 1109.383491][T13961] usb 7-1: USB disconnect, device number 41 [ 1112.276563][ T5963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.369571][ T5963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.021426][T17767] netlink: 277 bytes leftover after parsing attributes in process `syz.6.3343'. [ 1114.402805][T17764] bridge0: port 2(erspan0) entered blocking state [ 1114.402906][T17764] bridge0: port 2(erspan0) entered disabled state [ 1114.403037][T17764] erspan0: entered allmulticast mode [ 1114.404386][T17764] erspan0: entered promiscuous mode [ 1114.404773][T17764] bridge0: port 2(erspan0) entered blocking state [ 1114.404851][T17764] bridge0: port 2(erspan0) entered forwarding state [ 1114.406544][T17764] erspan0: left allmulticast mode [ 1114.406561][T17764] erspan0: left promiscuous mode [ 1114.406694][T17764] bridge0: port 2(erspan0) entered disabled state [ 1115.117924][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.130699][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.229390][T17776] syzkaller0: entered promiscuous mode [ 1115.271941][T17776] syzkaller0: entered allmulticast mode [ 1115.296778][T17781] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3349'. [ 1119.166283][T17809] erspan0: left allmulticast mode [ 1119.171628][T17809] erspan0: left promiscuous mode [ 1119.176732][T17809] bridge0: port 2(erspan0) entered disabled state [ 1120.286389][T17821] kAFS: unable to lookup cell 'ÿ' [ 1120.700163][T17828] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5625] was attempted by ""[17828] [ 1120.714315][T17828] netlink: 'syz.1.3362': attribute type 29 has an invalid length. [ 1120.726991][T17828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1120.989410][T17830] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3364'. [ 1121.462178][ T10] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1121.737496][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1121.775484][ T10] usb 1-1: config 0 has no interfaces? [ 1121.793945][ T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1123.546911][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.707244][ T10] usb 1-1: config 0 descriptor?? [ 1124.932026][T17846] netlink: 'syz.5.3369': attribute type 1 has an invalid length. [ 1125.155655][T17846] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1125.725278][ T5734] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1125.967975][ T5734] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.076594][ T5734] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1126.104090][T17862] bridge0: port 2(erspan0) entered blocking state [ 1126.110622][T17862] bridge0: port 2(erspan0) entered disabled state [ 1126.118522][T17862] erspan0: entered allmulticast mode [ 1126.125396][T17862] erspan0: entered promiscuous mode [ 1126.135699][T17862] bridge0: port 2(erspan0) entered blocking state [ 1126.142206][T17862] bridge0: port 2(erspan0) entered forwarding state [ 1126.151807][T17862] erspan0: left allmulticast mode [ 1126.156856][T17862] erspan0: left promiscuous mode [ 1126.162033][T17862] bridge0: port 2(erspan0) entered disabled state [ 1126.306828][ T5734] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 1126.419555][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.516311][ T5734] opticon 3-1:1.0: opticon converter detected [ 1126.617501][ T5734] usb 3-1: opticon converter now attached to ttyUSB0 [ 1128.969343][ T10] usb 1-1: can't set config #0, error -110 [ 1129.008782][ T5776] usb 3-1: USB disconnect, device number 63 [ 1130.137546][ T5776] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 1130.150169][T17880] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3377'. [ 1130.195215][ T5776] opticon 3-1:1.0: device disconnected [ 1132.689071][T17890] netlink: 'syz.6.3383': attribute type 1 has an invalid length. [ 1133.213337][ T5776] usb 1-1: USB disconnect, device number 68 [ 1133.386746][T17890] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1133.888974][T17912] kAFS: unable to lookup cell 'ÿ' [ 1134.845701][T17919] bridge0: port 2(erspan0) entered blocking state [ 1134.852271][T17919] bridge0: port 2(erspan0) entered disabled state [ 1134.858805][T17919] erspan0: entered allmulticast mode [ 1134.865582][T17919] erspan0: entered promiscuous mode [ 1134.871161][T17919] bridge0: port 2(erspan0) entered blocking state [ 1134.877661][T17919] bridge0: port 2(erspan0) entered forwarding state [ 1134.885728][T17923] erspan0: left allmulticast mode [ 1134.890742][T17923] erspan0: left promiscuous mode [ 1134.895856][T17923] bridge0: port 2(erspan0) entered disabled state [ 1135.417733][T10056] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1135.435994][T10056] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1135.446335][T10056] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1135.456230][T10056] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1135.471974][T10056] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1137.592534][T10056] Bluetooth: hci5: command tx timeout [ 1138.127841][ T5734] libceph: connect (1)[c::]:6789 error -101 [ 1138.255041][ T5734] libceph: mon0 (1)[c::]:6789 connect error [ 1138.535865][T17937] ceph: No mds server is up or the cluster is laggy [ 1138.608487][ T5734] libceph: connect (1)[c::]:6789 error -101 [ 1138.653677][T17951] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[11129] was attempted by ""[17951] [ 1138.666729][T17951] netlink: 'syz.2.3394': attribute type 29 has an invalid length. [ 1138.677412][T17951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1138.722923][ T5734] libceph: mon0 (1)[c::]:6789 connect error [ 1138.869471][T17955] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3395'. [ 1139.675026][T10056] Bluetooth: hci5: command tx timeout [ 1139.870774][T17967] loop6: detected capacity change from 0 to 1024 [ 1139.908358][T15708] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.943718][T17967] EXT4-fs: Invalid want_extra_isize 7 [ 1141.296007][T15708] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.332370][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3401'. [ 1141.391873][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3401'. [ 1141.751773][T10056] Bluetooth: hci5: command tx timeout [ 1141.763237][T15708] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.113733][ T5776] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1142.229525][T15708] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 1142.490078][ T5776] usb 6-1: Using ep0 maxpacket: 16 [ 1142.522493][ T5776] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 1144.219732][T17990] workqueue: Failed to create a rescuer kthread for wq "dio/overlay": -EINTR [ 1144.222537][T10056] Bluetooth: hci5: command tx timeout [ 1144.265668][ T5776] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1144.390965][T15708] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.428958][ T5776] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1144.499651][ T5776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.613168][ T5776] usb 6-1: config 0 descriptor?? [ 1144.961219][ T5776] usbhid 6-1:0.0: can't add hid device: -71 [ 1145.017175][ T5776] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1145.052270][T18000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3408'. [ 1145.116416][ T5776] usb 6-1: USB disconnect, device number 48 [ 1145.575954][T18008] netlink: 'syz.2.3410': attribute type 1 has an invalid length. [ 1146.532917][T18008] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1146.752721][T18026] kAFS: unable to lookup cell 'ÿ' [ 1146.983993][T13961] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1147.215668][T13961] usb 7-1: Using ep0 maxpacket: 8 [ 1147.449203][T13961] usb 7-1: config 0 has no interfaces? [ 1147.477560][T13961] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1147.528088][T15708] bridge_slave_0: left allmulticast mode [ 1147.548616][T13961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.569687][T15708] bridge_slave_0: left promiscuous mode [ 1147.597644][T15708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.624515][T13961] usb 7-1: config 0 descriptor?? [ 1151.885888][T18049] binder: BINDER_SET_CONTEXT_MGR already set [ 1151.925831][T18052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3422'. [ 1151.935042][T18049] binder: 18048:18049 ioctl 4018620d 200000004a80 returned -16 [ 1152.313285][T18061] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5624] was attempted by ""[18061] [ 1152.326125][T18061] netlink: 'syz.5.3421': attribute type 29 has an invalid length. [ 1152.338009][T18061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.715773][T18079] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 1154.763046][T18079] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 1154.841216][T18079] ================================================================== [ 1154.849294][T18079] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x3f/0x80 [ 1154.856999][T18079] Read of size 8 at addr ffff888022368df0 by task syz.1.3425/18079 [ 1154.864864][T18079] [ 1154.867174][T18079] CPU: 0 UID: 0 PID: 18079 Comm: syz.1.3425 Tainted: G L syzkaller #0 PREEMPT(full) [ 1154.867199][T18079] Tainted: [L]=SOFTLOCKUP [ 1154.867207][T18079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1154.867219][T18079] Call Trace: [ 1154.867228][T18079] [ 1154.867237][T18079] dump_stack_lvl+0xe8/0x150 [ 1154.867271][T18079] print_address_description+0x55/0x1e0 [ 1154.867299][T18079] ? dummy_free_request+0x3f/0x80 [ 1154.867321][T18079] print_report+0x58/0x70 [ 1154.867346][T18079] kasan_report+0x117/0x150 [ 1154.867376][T18079] ? dummy_free_request+0x3f/0x80 [ 1154.867402][T18079] dummy_free_request+0x3f/0x80 [ 1154.867424][T18079] uvc_function_bind+0xe5d/0x15a0 [ 1154.867455][T18079] usb_add_function+0x2e1/0x9f0 [ 1154.867476][T18079] configfs_composite_bind+0xde0/0x1410 [ 1154.867502][T18079] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1154.867521][T18079] gadget_bind_driver+0x2ca/0x9e0 [ 1154.867552][T18079] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1154.867577][T18079] really_probe+0x254/0xae0 [ 1154.867604][T18079] __driver_probe_device+0x1e8/0x360 [ 1154.867630][T18079] driver_probe_device+0x4f/0x240 [ 1154.867656][T18079] __driver_attach+0x339/0x600 [ 1154.867681][T18079] bus_for_each_dev+0x23b/0x2c0 [ 1154.867710][T18079] ? __pfx___driver_attach+0x10/0x10 [ 1154.867734][T18079] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1154.867765][T18079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.867787][T18079] ? do_raw_spin_unlock+0xf5/0x210 [ 1154.867812][T18079] bus_add_driver+0x345/0x670 [ 1154.867846][T18079] driver_register+0x23a/0x320 [ 1154.867873][T18079] usb_gadget_register_driver_owner+0xf9/0x270 [ 1154.867901][T18079] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1154.867929][T18079] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1154.867957][T18079] configfs_write_iter+0x337/0x430 [ 1154.867988][T18079] vfs_write+0x612/0xba0 [ 1154.868011][T18079] ? __pfx_vfs_write+0x10/0x10 [ 1154.868034][T18079] ? __fget_files+0x2a/0x420 [ 1154.868063][T18079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1154.868087][T18079] ksys_write+0x150/0x270 [ 1154.868106][T18079] ? __pfx_ksys_write+0x10/0x10 [ 1154.868129][T18079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.868149][T18079] do_syscall_64+0x174/0x580 [ 1154.868172][T18079] ? trace_irq_disable+0x3b/0x140 [ 1154.868200][T18079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.868220][T18079] RIP: 0033:0x7f4aeb59e019 [ 1154.868237][T18079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1154.868257][T18079] RSP: 002b:00007f4aec4c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1154.868276][T18079] RAX: ffffffffffffffda RBX: 00007f4aeb825fa0 RCX: 00007f4aeb59e019 [ 1154.868291][T18079] RDX: 000000000000000c RSI: 0000200000000680 RDI: 0000000000000003 [ 1154.868303][T18079] RBP: 00007f4aeb63500c R08: 0000000000000000 R09: 0000000000000000 [ 1154.868315][T18079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1154.868327][T18079] R13: 00007f4aeb826038 R14: 00007f4aeb825fa0 R15: 00007ffc1927c5c8 [ 1154.868350][T18079] [ 1154.868357][T18079] [ 1155.169574][T18079] Allocated by task 11228: [ 1155.173965][T18079] kasan_save_track+0x3e/0x80 [ 1155.178629][T18079] __kasan_kmalloc+0x93/0xb0 [ 1155.183205][T18079] __kmalloc_cache_noprof+0x32d/0x660 [ 1155.188560][T18079] kthread_create_worker_on_node+0x112/0x3b0 [ 1155.194523][T18079] uvcg_video_init+0x232/0x630 [ 1155.199281][T18079] uvc_function_bind+0x1076/0x15a0 [ 1155.204376][T18079] usb_add_function+0x2e1/0x9f0 [ 1155.209222][T18079] configfs_composite_bind+0xde0/0x1410 [ 1155.214750][T18079] gadget_bind_driver+0x2ca/0x9e0 [ 1155.219757][T18079] really_probe+0x254/0xae0 [ 1155.224244][T18079] __driver_probe_device+0x1e8/0x360 [ 1155.229519][T18079] driver_probe_device+0x4f/0x240 [ 1155.234525][T18079] __driver_attach+0x339/0x600 [ 1155.239270][T18079] bus_for_each_dev+0x23b/0x2c0 [ 1155.244106][T18079] bus_add_driver+0x345/0x670 [ 1155.248769][T18079] driver_register+0x23a/0x320 [ 1155.253517][T18079] usb_gadget_register_driver_owner+0xf9/0x270 [ 1155.259672][T18079] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1155.265295][T18079] configfs_write_iter+0x337/0x430 [ 1155.270394][T18079] vfs_write+0x612/0xba0 [ 1155.274612][T18079] ksys_write+0x150/0x270 [ 1155.278920][T18079] do_syscall_64+0x174/0x580 [ 1155.283496][T18079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.289394][T18079] [ 1155.291715][T18079] The buggy address belongs to the object at ffff888022368d00 [ 1155.291715][T18079] which belongs to the cache kmalloc-128 of size 128 [ 1155.305762][T18079] The buggy address is located 120 bytes to the right of [ 1155.305762][T18079] allocated 120-byte region [ffff888022368d00, ffff888022368d78) [ 1155.320411][T18079] [ 1155.322716][T18079] The buggy address belongs to the physical page: [ 1155.329099][T18079] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22368 [ 1155.337839][T18079] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1155.344942][T18079] page_type: f5(slab) [ 1155.348901][T18079] raw: 00fff00000000000 ffff88801b001a00 dead000000000100 dead000000000122 [ 1155.357460][T18079] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1155.366013][T18079] page dumped because: kasan: bad access detected [ 1155.372399][T18079] page_owner tracks the page as allocated [ 1155.378110][T18079] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10700, tgid 10700 (udevd), ts 504486867293, free_ts 504442588844 [ 1155.398598][T18079] post_alloc_hook+0x1f9/0x250 [ 1155.403353][T18079] get_page_from_freelist+0x21fa/0x2270 [ 1155.408900][T18079] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1155.414693][T18079] allocate_slab+0x79/0x5e0 [ 1155.419191][T18079] refill_objects+0x2d5/0x350 [ 1155.423851][T18079] __pcs_replace_empty_main+0x2bf/0x6b0 [ 1155.429373][T18079] __kmalloc_cache_noprof+0x3a7/0x660 [ 1155.434738][T18079] kernfs_fop_open+0x7e6/0xce0 [ 1155.439485][T18079] do_dentry_open+0x816/0x1380 [ 1155.444229][T18079] vfs_open+0x3b/0x340 [ 1155.448279][T18079] path_openat+0x2e44/0x3830 [ 1155.452845][T18079] do_file_open+0x23e/0x4a0 [ 1155.457323][T18079] do_sys_openat2+0x115/0x200 [ 1155.461984][T18079] __x64_sys_openat+0x138/0x170 [ 1155.466816][T18079] do_syscall_64+0x174/0x580 [ 1155.471387][T18079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.477273][T18079] page last free pid 4985 tgid 4985 stack trace: [ 1155.483586][T18079] __free_frozen_pages+0xc1e/0xd10 [ 1155.488682][T18079] tlb_remove_table_rcu+0x85/0x100 [ 1155.493799][T18079] rcu_core+0x78b/0x10a0 [ 1155.498030][T18079] handle_softirqs+0x225/0x840 [ 1155.502776][T18079] __irq_exit_rcu+0xca/0x220 [ 1155.507346][T18079] irq_exit_rcu+0x9/0x30 [ 1155.511566][T18079] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1155.517178][T18079] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1155.523136][T18079] [ 1155.525438][T18079] Memory state around the buggy address: [ 1155.531065][T18079] ffff888022368c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1155.539101][T18079] ffff888022368d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 1155.547136][T18079] >ffff888022368d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1155.555167][T18079] ^ [ 1155.562854][T18079] ffff888022368e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1155.570890][T18079] ffff888022368e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1155.578924][T18079] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1156.206338][T16715] usb 7-1: USB disconnect, device number 42 [ 1156.644899][T15708] bond3 (unregistering): (slave geneve2): Releasing backup interface [ 1157.215500][T15708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1157.247611][T15708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1157.261879][T15708] bond0 (unregistering): Released all slaves [ 1157.304702][T15708] bond1 (unregistering): Released all slaves [ 1157.345791][T15708] bond2 (unregistering): Released all slaves [ 1157.354082][T18079] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1157.361271][T18079] CPU: 0 UID: 0 PID: 18079 Comm: syz.1.3425 Tainted: G L syzkaller #0 PREEMPT(full) [ 1157.372187][T18079] Tainted: [L]=SOFTLOCKUP [ 1157.376511][T18079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1157.386549][T18079] Call Trace: [ 1157.389808][T18079] [ 1157.392717][T18079] vpanic+0x56c/0xa60 [ 1157.396694][T18079] ? __pfx_vpanic+0x10/0x10 [ 1157.401185][T18079] ? __pfx___schedule+0x10/0x10 [ 1157.406023][T18079] panic+0xc5/0xd0 [ 1157.409752][T18079] ? __pfx_panic+0x10/0x10 [ 1157.414154][T18079] ? preempt_schedule_thunk+0x16/0x40 [ 1157.419508][T18079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1157.425127][T18079] ? dummy_free_request+0x3f/0x80 [ 1157.430132][T18079] check_panic_on_warn+0x89/0xb0 [ 1157.435060][T18079] ? dummy_free_request+0x3f/0x80 [ 1157.440065][T18079] end_report+0x73/0x170 [ 1157.444295][T18079] ? dummy_free_request+0x3f/0x80 [ 1157.449298][T18079] kasan_report+0x128/0x150 [ 1157.453789][T18079] ? dummy_free_request+0x3f/0x80 [ 1157.458795][T18079] dummy_free_request+0x3f/0x80 [ 1157.463627][T18079] uvc_function_bind+0xe5d/0x15a0 [ 1157.468642][T18079] usb_add_function+0x2e1/0x9f0 [ 1157.473474][T18079] configfs_composite_bind+0xde0/0x1410 [ 1157.479003][T18079] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1157.484966][T18079] gadget_bind_driver+0x2ca/0x9e0 [ 1157.490002][T18079] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1157.495543][T18079] really_probe+0x254/0xae0 [ 1157.500035][T18079] __driver_probe_device+0x1e8/0x360 [ 1157.505306][T18079] driver_probe_device+0x4f/0x240 [ 1157.510315][T18079] __driver_attach+0x339/0x600 [ 1157.515064][T18079] bus_for_each_dev+0x23b/0x2c0 [ 1157.519905][T18079] ? __pfx___driver_attach+0x10/0x10 [ 1157.525171][T18079] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1157.530534][T18079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1157.536150][T18079] ? do_raw_spin_unlock+0xf5/0x210 [ 1157.541245][T18079] bus_add_driver+0x345/0x670 [ 1157.545920][T18079] driver_register+0x23a/0x320 [ 1157.550668][T18079] usb_gadget_register_driver_owner+0xf9/0x270 [ 1157.556809][T18079] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1157.562427][T18079] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1157.568578][T18079] configfs_write_iter+0x337/0x430 [ 1157.573685][T18079] vfs_write+0x612/0xba0 [ 1157.577924][T18079] ? __pfx_vfs_write+0x10/0x10 [ 1157.582668][T18079] ? __fget_files+0x2a/0x420 [ 1157.587249][T18079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1157.592910][T18079] ksys_write+0x150/0x270 [ 1157.597223][T18079] ? __pfx_ksys_write+0x10/0x10 [ 1157.602077][T18079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.608137][T18079] do_syscall_64+0x174/0x580 [ 1157.612711][T18079] ? trace_irq_disable+0x3b/0x140 [ 1157.617723][T18079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.623595][T18079] RIP: 0033:0x7f4aeb59e019 [ 1157.627988][T18079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.647575][T18079] RSP: 002b:00007f4aec4c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1157.655975][T18079] RAX: ffffffffffffffda RBX: 00007f4aeb825fa0 RCX: 00007f4aeb59e019 [ 1157.663928][T18079] RDX: 000000000000000c RSI: 0000200000000680 RDI: 0000000000000003 [ 1157.671873][T18079] RBP: 00007f4aeb63500c R08: 0000000000000000 R09: 0000000000000000 [ 1157.679821][T18079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1157.687766][T18079] R13: 00007f4aeb826038 R14: 00007f4aeb825fa0 R15: 00007ffc1927c5c8 [ 1157.695727][T18079] [ 1157.698767][T18079] Kernel Offset: disabled [ 1157.703069][T18079] Rebooting in 86400 seconds..