last executing test programs: 2m20.349015316s ago: executing program 1 (id=4248): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x2, 0x16b, 0xb}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0xe, r6}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000300)={@private2, 0x0}, &(0x7f0000000340)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r11, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000940)={0x2ec, r0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x190, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#-+\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@,!\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x102, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x94, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4c, 0x5, "806e3bd33076dd55e4da3aae695b9b848305720862862f9a54e486b2b9b2f5101169a296f82599653320febec78ac6df7441c22e5137b5a89aafd3e175f87bb1c91058416406e4b4"}, @ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "1dc1157b29d1beaee6929983c9b7624d5047e54e961c9b136433d86e6c223bb44013b2e442e872c5ea79bdf2944f9b817950b3094289f50c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x80}, 0x2) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x0, 0xe, 0x0, &(0x7f0000000540)="db759469e36512be2770717f865d", 0x0, 0x2, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000900)="ffffdd014376ea94fe6f22446ab33726e5de056400000000"}, 0x4c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000000002ffff, 0x0) socket$packet(0x11, 0x3, 0x300) write(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 2m16.604887261s ago: executing program 1 (id=4253): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f40)=ANY=[], 0x234}, 0x1, 0x0, 0x0, 0x40010}, 0x24000050) syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100300000010351212824000010203010902860003010d5003080b00010108209809040000000101200009240106000626006e0c240303010105030251c70011240202"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x840000000002, 0x1, 0xff) sendmsg$inet(r2, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000940)="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", 0x5c6}], 0x1, &(0x7f00000000c0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @private=0xa010101}}}], 0x18}, 0x400c804) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x24, 0x20000) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x1, &(0x7f0000000940)) madvise(&(0x7f000085a000/0x1000)=nil, 0x1000, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect$uac1(0x4, 0x100, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0xa67, 0x5011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x3, 0x1, 0x0, 0x80, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x3e}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x201, 0x4, 0x20, 0x3, 0x5, 0x9}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0x8, "9332c07b"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x307, 0x5, 0x6, 0x6}, @processing_unit={0xa, 0x24, 0x7, 0x3, 0x5, 0x5e, '==('}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x1ff, 0x6, 0x0, 0x2212, 0xff, 0xa7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x2b66, 0x35, 0x2}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x925, 0x101, 0x0, 'x'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x2, 0x3, 0x40}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x7, 0x3, 0x2, 0x1}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0x8, 0xfc, "", "ef1fc3"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0xf5, 0x2, "", '^'}]}, {{0x9, 0x5, 0x1, 0x9, 0x408, 0x0, 0x9, 0x7f, {0x7, 0x25, 0x1, 0x4, 0x3, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x400, 0x9, 0x1, "0dcfa8"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x6, 0xb1, 0x3}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x9, 0x40}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x5, 0xfa, {0x7, 0x25, 0x1, 0x0, 0x3, 0x200}}}}}}}}]}}, &(0x7f00000013c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0x3, 0x8, 0x80, 0x40, 0xfc}, 0x43, &(0x7f0000001440)=ANY=[@ANYBLOB="050f4300030a10030202000700010020100a0725000000000f0f00849dfa270000141004055d67d87142f9161b507123c1d90e64261d2ccb452aeb9c4ecb773c31c70907784d95c3f6f0c024e76edb2e15be7fc6af1645a583b15a8cc217e3401c4b099f534cf3cea2becbb49c67066dae00c5ba02ef895d8a326b7cd5097d983154ebe67fefd9ece91b29792675536b8794e7b93da6db598db8560f67d6b457a3069cdb5b00622996c58ab048fa2d4a9f18e76a16bf20a5fc2d4c6d18bfbadc92d30f1e829fe914dcbafbdbda1422fa0315c1147cefe800000000000000000000000000003e40e228aada914a46beb0e9b5dfc4ee1b0361"], 0x9, [{0x0, 0x0}, {0xc6, &(0x7f0000000700)=@string={0xc6, 0x3, "894f58542499281faf13a5680533c2bfe9fac78977d0d0671180663b6e8bc727108cbce305d208aac576269299aadd6a46563c70aaff17260401dcf82a36c9d29ca5b7d23daf77b682cb7da552f8a2385e0bb21208f93c05c3dd483271144d1f2bc8bde0e0ff032c0907a7a5a27425c746eeb26f24691e16280435239c3e7b3b7c34ed5ebe558b05ddd217a827e831655cef81d93a4ecd15b4b7342798400ffc717641a8c541fe199e0b380c716a6974714fa6058b100c584660aad71badf34ba576bf4d"}}, {0x8a, &(0x7f0000000800)=@string={0x8a, 0x3, "43691dd5dd854094428947fc732fe4961ba11700ab10c9c8ecdd486eee39d89d5ed58954caf14696861486153b7ff44dfd234ddcaa094de777f0bbd3cff1c49976b57a27eb43796cc80e7507fcc0cd1e4ca5ec9cac6c2aac5c8e33eb9dc7213e8c53ada76b7bb5520f3cceaaac7b02eb53f93c3600654a052c8b7afdd29a011214aa267e79a03009"}}, {0x67, &(0x7f0000001200)=@string={0x67, 0x3, "302c20292695f41262724a581215f5ec30180820922c191f7588e54e65a26d8ec4095cbe7014a926b8ecc5728a44f8505175e11e977a1969d2be7ed4b796f33d373fda6de624933601d4c1bfd61636d9c8910074f450272a926a5ee11ed6ab21b0f9f939a5"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x1c01}}, {0x38, &(0x7f00000012c0)=@string={0x38, 0x3, "8d4d77638872e61502dd98beb2e271f6ebc9662bf7e341abeedb9c6395303275ed6c046e8e1d4bb88cfa4e850528f8b5d76c072b3e94"}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x14}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x2409}}]}) r3 = syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x100, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000000906010200000000000000000502ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007000000"], 0x4c}}, 0x4000080) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000000500010007000000"], 0x1c}}, 0x20000090) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) rt_sigqueueinfo(r3, 0x8000023, 0x0) 2m11.90434264s ago: executing program 1 (id=4258): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7ff}) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cp'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) write$sysctl(r4, &(0x7f0000000040)='2\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) r6 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'geneve1\x00', 0x1}) openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x27, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) close_range(r1, 0xffffffffffffffff, 0x0) 2m4.387320961s ago: executing program 1 (id=4262): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r1, &(0x7f00000004c0)='b', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r3 = fsmount(r0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000980)={'team_slave_0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000180), 0x394, 0x101000) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000b00)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x8b, @empty, 0x7}, @in6={0xa, 0x4e03, 0xd, @private2, 0x8}], 0x48) dup(r4) 2m2.998424067s ago: executing program 1 (id=4264): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x2, 0x16b, 0xb}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0xe, r6}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000300)={@private2, 0x0}, &(0x7f0000000340)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r11, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000940)={0x2e8, r0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x190, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#-+\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@,!\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x102, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x94, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4c, 0x5, "806e3bd33076dd55e4da3aae695b9b848305720862862f9a54e486b2b9b2f5101169a296f82599653320febec78ac6df7441c22e5137b5a89aafd3e175f87bb1c91058416406e4b4"}, @ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "1dc1157b29d1beaee6929983c9b7624d5047e54e961c9b136433d86e6c223bb44013b2e442e872c5ea79bdf2944f9b817950b3094289f50c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x80}, 0x2) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x0, 0xe, 0x0, &(0x7f0000000540)="db759469e36512be2770717f865d", 0x0, 0x2, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000900)="ffffdd014376ea94fe6f22446ab33726e5de056400000000"}, 0x4c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000000002ffff, 0x0) socket$packet(0x11, 0x3, 0x300) write(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 2m0.535522434s ago: executing program 1 (id=4267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000001000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000002000)={0x1, 0x0, [{0x1b, 0x0, 0xfee00d00}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000007000)={0x1, 0x0, [{0x834, 0x0, 0x40}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0xd2191188736347e1) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x5e, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_pts(0xffffffffffffffff, 0x600) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) 1m44.864691951s ago: executing program 32 (id=4267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000001000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000002000)={0x1, 0x0, [{0x1b, 0x0, 0xfee00d00}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000007000)={0x1, 0x0, [{0x834, 0x0, 0x40}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0xd2191188736347e1) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x5e, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_pts(0xffffffffffffffff, 0x600) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) 38.80688895s ago: executing program 4 (id=4323): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r2, &(0x7f00000004c0)='b', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r4 = fsmount(r0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000980)={'team_slave_0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000180), 0x394, 0x101000) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000b00)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x8b, @empty, 0x7}, @in6={0xa, 0x4e03, 0xd, @private2, 0x8}], 0x48) dup(r5) 36.146433881s ago: executing program 4 (id=4327): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7ff}) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cp'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) write$sysctl(r4, &(0x7f0000000040)='2\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) r6 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'geneve1\x00', 0x1}) openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x27, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) close_range(r1, 0xffffffffffffffff, 0x0) 34.841224751s ago: executing program 3 (id=4328): r0 = socket(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x14e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%/,c\xbe\xfbL:', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000780)={r8, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x2}, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, &(0x7f0000000180)={0x0, 0x0, 0x0, @raw}) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 30.461914095s ago: executing program 3 (id=4330): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x38) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000040), &(0x7f0000000480)='%pi6 \x00'}, 0x20) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x101}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x40, @mcast2, 0xfff}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[{0xf0, 0x10b, 0x3, "b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3492cb155656387a02c999695975d3d6137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5"}, {0x18, 0x0, 0x800, "c133a12a91872b3730"}, {0x48, 0x112, 0x3ff, "ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b216e5b8cb28d424f1b5ed9793f5167"}, {0x28, 0x10a, 0xa63, "fa08ab919987305c8ad63785f4a4bc842436d5cb79f70a5d76"}, {0xc, 0x113, 0x9}, {0xc, 0x110, 0x4}], 0x190}, 0x4000c010) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38) 30.245639596s ago: executing program 0 (id=4331): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r2, &(0x7f00000004c0)='b', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r4 = fsmount(r0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000980)={'team_slave_0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000180), 0x394, 0x101000) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000b00)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x8b, @empty, 0x7}, @in6={0xa, 0x4e03, 0xd, @private2, 0x8}], 0x48) dup(r5) 27.611519315s ago: executing program 3 (id=4332): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7ff}) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) write$sysctl(r4, &(0x7f0000000040)='2\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) r6 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'geneve1\x00', 0x1}) openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], 0x0, 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) close_range(r1, 0xffffffffffffffff, 0x0) 27.016597013s ago: executing program 0 (id=4334): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x2, 0x16b, 0xb}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0xe, r6}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000300)={@private2, 0x0}, &(0x7f0000000340)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r11, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000940)={0x318, r0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x190, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#-+\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@,!\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x102, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x94, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4c, 0x5, "806e3bd33076dd55e4da3aae695b9b848305720862862f9a54e486b2b9b2f5101169a296f82599653320febec78ac6df7441c22e5137b5a89aafd3e175f87bb1c91058416406e4b4"}, @ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "1dc1157b29d1beaee6929983c9b7624d5047e54e961c9b136433d86e6c223bb44013b2e442e872c5ea79bdf2944f9b817950b3094289f50c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x80}, 0x2) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x0, 0xe, 0x0, &(0x7f0000000540)="db759469e36512be2770717f865d", 0x0, 0x2, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000900)="ffffdd014376ea94fe6f22446ab33726e5de056400000000"}, 0x4c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000000002ffff, 0x0) socket$packet(0x11, 0x3, 0x300) write(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 21.811188863s ago: executing program 4 (id=4335): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xffff}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4}}]}, 0x4c}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_ublk_setup_io_uring(0x3f2d, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x40004, 0x3d9}, 0x0, 0x0, &(0x7f0000000700)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r5 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) r6 = dup(r5) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f045}) poll(&(0x7f0000000180)=[{r5, 0x3}], 0x1, 0x9) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = dup(r7) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x5}}, 0x20040840) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffff8}, 0x1c) syz_io_uring_setup(0xf01, &(0x7f0000000280)={0x0, 0x1a8f, 0x40, 0x2, 0x5e, 0x0, r6}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000540)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="9f", 0x1, 0xfc56c1f633c3f573, &(0x7f0000000040)={0xa, 0x4e21, 0xc, @loopback, 0x4000c5f}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$CEC_DQEVENT(r8, 0xc0506107, &(0x7f0000000340)={0x0, 0x0, 0x0, @lost_msgs}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000001400000000000000ffff020018150000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000070000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400003e000000850000000b00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r13, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 21.638174602s ago: executing program 0 (id=4336): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f40)=ANY=[], 0x234}, 0x1, 0x0, 0x0, 0x40010}, 0x24000050) syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100300000010351212824000010203010902860003010d5003080b00010108209809040000000101200009240106000626006e0c240303010105030251c70011240202"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x840000000002, 0x1, 0xff) sendmsg$inet(r2, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000940)="419c66baa9f459a36438f3340153986bb55d830f0b2c28e443850538a34bfcf2252e824d0601abca03296dbfa6261819e70f5c161d9f8fe01e5729418bd347841319880c8258dfb07600b8e78f69d230630e68d9c7b49c7d85ed55c17f25d6f8e38b030db3379b0f7f29297903cd0b7c88ececedd259c6cf423f7affd7f0a41820899c0a095421f8a06c69972f25e56402849afbe67cc77860296bcc478cc33469660279172b9575a2360ca4d3aa71789afcc8972c65c2148e3d94ff38b8704c6bc22ebb84586ec81f7406bb8dc92cd48bc6ccbe3a733de2d6aea03ce182b8d902b8f3cbc10e601521e7c3f2c0a1d139a776d14375d39b94ae6d1c8975ec9eb7eb0b2e7643292edc8f8a0685b12b5646fb7482ef5da9f1fe51cb531a7ee0ab0ec46acad22c9ac7d534658c5547a1b5b2cae0f5860be70561e1b4d609e70c5d69a1cf315a21976c03012165ee5674d56b39e25989c9a06e0a95df9abcf51129d24132da78ec7661c4eac20010fb878988a6356ec211eeaf5855cdd13680b80d921fe73ad1069a51a62269e7f9e12caad41117ce44990d538ad020e01e90bdf6ab9ea6c63a6f0751a01dfa5a2bf4bd622070c7465c6e062c3ebe73b59a2d678067661405b969ed3b905c303a938139bcd19c3b522838261e6cb5271697ff4745f85d1e4e8475408efcaed632c19c48ec4b36f5c333119e54ebf36fddd605c8345041d212f8a5ccbf3c251d00f6bf465c169e9fa8d0097532ae0c432d985bd29e8c06b235308b1f11ed6d4bbd5da74a0920c31af86a0121cb1fbea856bb71e6ee2eaadb85705c795d367605a73254dff7f23d47db82dda94e9bc67a6e03d6ea101708a09c037e2343d24389139b0f8d7cde30c541e6a4155aa54aeffaa35cf77aafb7298274c4bdb8b281c28c785c99d1f4a17bfe5871957a6ffe4caa73cd28b0beed9a24519d78bdca8a8907708762ed59b9067f8eef0c85d68e72bbda50cbb546ab73d4f9930a15ac68e8edb86738e408535201d71230bc7ecfd63011832551dd5a39465c7c5a1fbed91ebf46bce4ac487df71a35003db9ef2619a3794e5f7c55b2396eda5ea713f621ff14b0817641cf4c096a3e5e67e14d79b91c38ae3093c7d8cc5b2c28773e522312feba6287a62a52d27070a3c801e89b0d879edf5f230bd8b7e6ba796236ec06829b165d432096a47c1efb44f80e0ba4938e1d1ef396e2fe6cbe1eab0b85dd25ccff202f2d300c8b8a8ffaad6f21959d96a4917bbb9c4149fa976e806beb8e0ad644414411aa4590adb08d5cc91e9a6757cc7484ba0272c4d3d61fefdd987b91633a00e7a294eaa14723eef10b8353a92446fd81b0352f8b947e6c0550d06f998f83b661da545c7b1a36e6e742626a7a391f6e7174cb03ef8e23077163d7dfe7b7d0113e2efa62f5297ddf6ad0e4efdfb93c4f03b3904aee4432893d52ded6e980449837b07fec1df896dce18be5d26ad79a411801dda7e351c2d42b99f73d7eb34d9d726b012f032bf5935346e3f37a39a9fe01a8800348a157e6b132c4afbfcdcf23e6cbaa5a009ceaf758cd4d2a5be458a0df92946169b674c3c803343329a58a4d647a0a3482a63cc894deba912053655af3cdba37bec1ba1a19bf5c8fe05bf44bdb84dc605c4164998f4b8ba9376092b628333f5420161e0c07b900959f0e8a21537bad40b99f55b3c83d785ef5006711ebf8ba9c8b3d4ba11134dec6ddbcc0558bfd8f65f5cd7a22825ff51b5e9332e0aedc890b86fd8efaa4a0f4e42d07b17c0742696d7feee6949debd3d52b912b9e3aefede7fc197a1b58279a6f79e729c4b1f00c49506ed22195c2296c49a55a9564edf62b5ff2f129e7f6374dba5890027afc0930f9e529d504e817c714aec5d1c3c4485b68498872ed7205bd12397f66e3adf0fdfb63d657236a22eac863471e8363215d946f77499e6cc46e2a7094d9162061e06bd3f5d22ba950aeed45de387df742e301ddd3653fd330dda41f0dc8e299f80d092e315ee31aa7f79d67fad3aaff8fb51742fcddfbc638912bd277effa48c9e4d03e11620515c4a4282d2ca914ea5eabac78be01bf4e", 0x5c6}], 0x1, &(0x7f00000000c0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @private=0xa010101}}}], 0x18}, 0x400c804) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x24, 0x20000) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x1, &(0x7f0000000940)) madvise(&(0x7f000085a000/0x1000)=nil, 0x1000, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect$uac1(0x4, 0x100, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0xa67, 0x5011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x3, 0x1, 0x0, 0x80, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x3e}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x201, 0x4, 0x20, 0x3, 0x5, 0x9}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0x8, "9332c07b"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x307, 0x5, 0x6, 0x6}, @processing_unit={0xa, 0x24, 0x7, 0x3, 0x5, 0x5e, '==('}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x1ff, 0x6, 0x0, 0x2212, 0xff, 0xa7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x2b66, 0x35, 0x2}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x925, 0x101, 0x0, 'x'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x2, 0x3, 0x40}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x7, 0x3, 0x2, 0x1}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0x8, 0xfc, "", "ef1fc3"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0xf5, 0x2, "", '^'}]}, {{0x9, 0x5, 0x1, 0x9, 0x408, 0x0, 0x9, 0x7f, {0x7, 0x25, 0x1, 0x4, 0x3, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x400, 0x9, 0x1, "0dcfa8"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x6, 0xb1, 0x3}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x9, 0x40}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x5, 0xfa, {0x7, 0x25, 0x1, 0x0, 0x3, 0x200}}}}}}}}]}}, &(0x7f00000013c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0x3, 0x8, 0x80, 0x40, 0xfc}, 0x43, &(0x7f0000001440)=ANY=[@ANYBLOB="050f4300030a10030202000700010020100a0725000000000f0f00849dfa270000141004055d67d87142f9161b507123c1d90e64261d2ccb452aeb9c4ecb773c31c70907784d95c3f6f0c024e76edb2e15be7fc6af1645a583b15a8cc217e3401c4b099f534cf3cea2becbb49c67066dae00c5ba02ef895d8a326b7cd5097d983154ebe67fefd9ece91b29792675536b8794e7b93da6db598db8560f67d6b457a3069cdb5b00622996c58ab048fa2d4a9f18e76a16bf20a5fc2d4c6d18bfbadc92d30f1e829fe914dcbafbdbda1422fa0315c1147cefe800000000000000000000000000003e40e228aada914a46beb0e9b5dfc4ee1b0361"], 0x8, [{0x0, 0x0}, {0xc6, &(0x7f0000000700)=@string={0xc6, 0x3, "894f58542499281faf13a5680533c2bfe9fac78977d0d0671180663b6e8bc727108cbce305d208aac576269299aadd6a46563c70aaff17260401dcf82a36c9d29ca5b7d23daf77b682cb7da552f8a2385e0bb21208f93c05c3dd483271144d1f2bc8bde0e0ff032c0907a7a5a27425c746eeb26f24691e16280435239c3e7b3b7c34ed5ebe558b05ddd217a827e831655cef81d93a4ecd15b4b7342798400ffc717641a8c541fe199e0b380c716a6974714fa6058b100c584660aad71badf34ba576bf4d"}}, {0x8a, &(0x7f0000000800)=@string={0x8a, 0x3, "43691dd5dd854094428947fc732fe4961ba11700ab10c9c8ecdd486eee39d89d5ed58954caf14696861486153b7ff44dfd234ddcaa094de777f0bbd3cff1c49976b57a27eb43796cc80e7507fcc0cd1e4ca5ec9cac6c2aac5c8e33eb9dc7213e8c53ada76b7bb5520f3cceaaac7b02eb53f93c3600654a052c8b7afdd29a011214aa267e79a03009"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x1c01}}, {0x3b, &(0x7f00000012c0)=@string={0x3b, 0x3, "8d4d77638872e61502dd98beb2e271f6ebc9662bf7e341abeedb9c6395303275ed6c046e8e1d4bb88cfa4e850528f8b5d76c072b3e9403f59f"}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x14}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x2409}}]}) r3 = syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x100, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000000906010200000000000000000502ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007000000"], 0x4c}}, 0x4000080) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000000500010007000000"], 0x1c}}, 0x20000090) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) rt_sigqueueinfo(r3, 0x8000023, 0x0) 21.542202928s ago: executing program 2 (id=4337): r0 = socket(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x14e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%/,c\xbe\xfbL:', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000740)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x2}, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, &(0x7f0000000180)={0x0, 0x0, 0x0, @raw}) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19.226898796s ago: executing program 2 (id=4338): r0 = socket(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x14e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%/,c\xbe\xfbL:', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000780)={r8, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x2}, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, &(0x7f0000000180)={0x0, 0x0, 0x0, @raw}) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 18.645930656s ago: executing program 4 (id=4339): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x2, 0x16b, 0xb}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0xe, r6}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000300)={@private2, 0x0}, &(0x7f0000000340)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r11, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000940)={0x318, r0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x190, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#-+\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@,!\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x102, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x94, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4c, 0x5, "806e3bd33076dd55e4da3aae695b9b848305720862862f9a54e486b2b9b2f5101169a296f82599653320febec78ac6df7441c22e5137b5a89aafd3e175f87bb1c91058416406e4b4"}, @ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "1dc1157b29d1beaee6929983c9b7624d5047e54e961c9b136433d86e6c223bb44013b2e442e872c5ea79bdf2944f9b817950b3094289f50c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x44, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x80}, 0x2) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x0, 0xe, 0x0, &(0x7f0000000540)="db759469e36512be2770717f865d", 0x0, 0x2, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000900)="ffffdd014376ea94fe6f22446ab33726e5de056400000000"}, 0x4c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000000002ffff, 0x0) socket$packet(0x11, 0x3, 0x300) write(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 17.222575531s ago: executing program 3 (id=4340): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x101}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) 13.054886724s ago: executing program 0 (id=4341): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r2, &(0x7f00000004c0)='b', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3bf97ff8836d000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r4 = fsmount(r0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000980)={'team_slave_0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000180), 0x394, 0x101000) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000b00)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x8b, @empty, 0x7}, @in6={0xa, 0x4e03, 0xd, @private2, 0x8}], 0x48) dup(r5) 12.503399359s ago: executing program 2 (id=4342): r0 = fsopen(0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r2, &(0x7f00000004c0)='b', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r4 = fsmount(r0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000980)={'team_slave_0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000180), 0x394, 0x101000) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000b00)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x8b, @empty, 0x7}, @in6={0xa, 0x4e03, 0xd, @private2, 0x8}], 0x48) dup(r5) 10.257019811s ago: executing program 4 (id=4343): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7ff}) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cp'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) write$sysctl(r4, &(0x7f0000000040)='2\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) r6 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'geneve1\x00', 0x1}) openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x27, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) close_range(r1, 0xffffffffffffffff, 0x0) 10.089318195s ago: executing program 3 (id=4344): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r1, &(0x7f00000004c0)='b', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3bf97ff8836d000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r3 = fsmount(r0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000980)={'team_slave_0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000180), 0x394, 0x101000) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000b00)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x8b, @empty, 0x7}, @in6={0xa, 0x4e03, 0xd, @private2, 0x8}], 0x48) dup(r4) 9.497995892s ago: executing program 2 (id=4345): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x2, 0x16b, 0xb}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0xe, r6}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000300)={@private2, 0x0}, &(0x7f0000000340)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r11, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000940)={0x324, r0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x190, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#-+\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@,!\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x102, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x94, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4c, 0x5, "806e3bd33076dd55e4da3aae695b9b848305720862862f9a54e486b2b9b2f5101169a296f82599653320febec78ac6df7441c22e5137b5a89aafd3e175f87bb1c91058416406e4b4"}, @ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "1dc1157b29d1beaee6929983c9b7624d5047e54e961c9b136433d86e6c223bb44013b2e442e872c5ea79bdf2944f9b817950b3094289f50c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x3c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}]}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x80}, 0x2) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x0, 0xe, 0x0, &(0x7f0000000540)="db759469e36512be2770717f865d", 0x0, 0x2, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000900)="ffffdd014376ea94fe6f22446ab33726e5de056400000000"}, 0x4c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000000002ffff, 0x0) socket$packet(0x11, 0x3, 0x300) write(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 8.329779708s ago: executing program 3 (id=4346): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0xdf) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='44100,48000,88200,96000,176400,192000,352800,3', 0x2e) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='usbip-vudc.0', 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="fffffffffffffdf9a684a51b86dd600c7a00d8c225ccd109a27f3291082000183afffe800000000000e700000000000000bbfe8000000000000000000000000000aa8800907800000000fe800000"], 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400000, 0x5, 0x0, 0x32525942, 0xc, [{0x6, 0xfffffffe}, {}, {0x2, 0x8}, {0x1, 0xfffffffc}, {0x80}, {}, {0xffffc33a}, {0x200}], 0x3, 0xfe, 0x0, 0x0, 0x5}}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) 8.162285781s ago: executing program 0 (id=4347): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000e3000000000000004e8441", @ANYRES32=0x0, @ANYRES32], 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000d80)={0x0, 0x7fffffff}, &(0x7f0000000dc0)=0x8) open(0x0, 0x18d03e, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x280, 0x78, 0x3f, 0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200, 0x3}) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1ba2"], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) iopl(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=2,proto=udp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 6.441949605s ago: executing program 2 (id=4348): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7ff}) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) write$sysctl(r4, &(0x7f0000000040)='2\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) r6 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'geneve1\x00', 0x1}) openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], 0x0, 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) close_range(r1, 0xffffffffffffffff, 0x0) 3.549097784s ago: executing program 0 (id=4349): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f40)=ANY=[], 0x234}, 0x1, 0x0, 0x0, 0x40010}, 0x24000050) syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100300000010351212824000010203010902860003010d5003080b00010108209809040000000101200009240106000626006e0c240303010105030251c70011240202"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x840000000002, 0x1, 0xff) sendmsg$inet(r2, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000940)="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", 0x5c6}], 0x1, &(0x7f00000000c0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @private=0xa010101}}}], 0x18}, 0x400c804) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x24, 0x20000) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x1, &(0x7f0000000940)) madvise(&(0x7f000085a000/0x1000)=nil, 0x1000, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect$uac1(0x4, 0x100, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0xa67, 0x5011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x3, 0x1, 0x0, 0x80, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x3e}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x201, 0x4, 0x20, 0x3, 0x5, 0x9}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0x8, "9332c07b"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x307, 0x5, 0x6, 0x6}, @processing_unit={0xa, 0x24, 0x7, 0x3, 0x5, 0x5e, '==('}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x1ff, 0x6, 0x0, 0x2212, 0xff, 0xa7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x2b66, 0x35, 0x2}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x925, 0x101, 0x0, 'x'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x2, 0x3, 0x40}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x7, 0x3, 0x2, 0x1}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0x8, 0xfc, "", "ef1fc3"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xd2, 0x2, 0xf5, 0x2, "", '^'}]}, {{0x9, 0x5, 0x1, 0x9, 0x408, 0x0, 0x9, 0x7f, {0x7, 0x25, 0x1, 0x4, 0x3, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x400, 0x9, 0x1, "0dcfa8"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x6, 0xb1, 0x3}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x9, 0x40}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x5, 0xfa, {0x7, 0x25, 0x1, 0x0, 0x3, 0x200}}}}}}}}]}}, &(0x7f00000013c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0x3, 0x8, 0x80, 0x40, 0xfc}, 0x43, &(0x7f0000001440)=ANY=[@ANYBLOB="050f4300030a10030202000700010020100a0725000000000f0f00849dfa270000141004055d67d87142f9161b507123c1d90e64261d2ccb452aeb9c4ecb773c31c70907784d95c3f6f0c024e76edb2e15be7fc6af1645a583b15a8cc217e3401c4b099f534cf3cea2becbb49c67066dae00c5ba02ef895d8a326b7cd5097d983154ebe67fefd9ece91b29792675536b8794e7b93da6db598db8560f67d6b457a3069cdb5b00622996c58ab048fa2d4a9f18e76a16bf20a5fc2d4c6d18bfbadc92d30f1e829fe914dcbafbdbda1422fa0315c1147cefe800000000000000000000000000003e40e228aada914a46beb0e9b5dfc4ee1b0361"], 0x9, [{0x0, 0x0}, {0xc6, &(0x7f0000000700)=@string={0xc6, 0x3, "894f58542499281faf13a5680533c2bfe9fac78977d0d0671180663b6e8bc727108cbce305d208aac576269299aadd6a46563c70aaff17260401dcf82a36c9d29ca5b7d23daf77b682cb7da552f8a2385e0bb21208f93c05c3dd483271144d1f2bc8bde0e0ff032c0907a7a5a27425c746eeb26f24691e16280435239c3e7b3b7c34ed5ebe558b05ddd217a827e831655cef81d93a4ecd15b4b7342798400ffc717641a8c541fe199e0b380c716a6974714fa6058b100c584660aad71badf34ba576bf4d"}}, {0x8a, &(0x7f0000000800)=@string={0x8a, 0x3, "43691dd5dd854094428947fc732fe4961ba11700ab10c9c8ecdd486eee39d89d5ed58954caf14696861486153b7ff44dfd234ddcaa094de777f0bbd3cff1c49976b57a27eb43796cc80e7507fcc0cd1e4ca5ec9cac6c2aac5c8e33eb9dc7213e8c53ada76b7bb5520f3cceaaac7b02eb53f93c3600654a052c8b7afdd29a011214aa267e79a03009"}}, {0x0, 0x0}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x1c01}}, {0x3b, &(0x7f00000012c0)=@string={0x3b, 0x3, "8d4d77638872e61502dd98beb2e271f6ebc9662bf7e341abeedb9c6395303275ed6c046e8e1d4bb88cfa4e850528f8b5d76c072b3e9403f59f"}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x14}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x2409}}]}) r3 = syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x100, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000000906010200000000000000000502ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007000000"], 0x4c}}, 0x4000080) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000000500010007000000"], 0x1c}}, 0x20000090) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) rt_sigqueueinfo(r3, 0x8000023, 0x0) 3.10322605s ago: executing program 4 (id=4350): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r2, &(0x7f00000004c0)='b', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r4 = fsmount(r0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000980)={'team_slave_0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000180), 0x394, 0x101000) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000b00)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x8b, @empty, 0x7}, @in6={0xa, 0x4e03, 0xd, @private2, 0x8}], 0x48) dup(r5) 0s ago: executing program 2 (id=4351): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r2, &(0x7f00000004c0)='b', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r4 = fsmount(r0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000980)={'team_slave_0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000180), 0x394, 0x101000) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000b00)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x8b, @empty, 0x7}, @in6={0xa, 0x4e03, 0xd, @private2, 0x8}], 0x48) dup(r5) kernel console output (not intermixed with test programs): 50 [ 1366.717473][T24229] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1366.931661][T24243] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3788'. [ 1367.454004][ T55] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 1367.614829][ T55] usb 7-1: Using ep0 maxpacket: 16 [ 1367.632030][ T55] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1367.650742][ T55] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.665299][ T55] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1367.688166][ T55] usb 7-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1367.704196][ T55] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.719377][ T55] usb 7-1: Product: syz [ 1367.734653][ T55] usb 7-1: Manufacturer: syz [ 1367.742484][ T55] usb 7-1: SerialNumber: syz [ 1368.262124][T24249] ceph: No mds server is up or the cluster is laggy [ 1368.267833][T24254] erspan0: left promiscuous mode [ 1368.278310][T14866] libceph: connect (1)[c::]:6789 error -101 [ 1368.280947][T14866] libceph: mon0 (1)[c::]:6789 connect error [ 1368.370919][T24261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.403036][T24254] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1368.403647][T24261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.534092][ T24] usb 8-1: new high-speed USB device number 127 using dummy_hcd [ 1368.590326][T24263] kAFS: unable to lookup cell '/,c¾ûL' [ 1368.714231][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 1368.721872][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1368.730596][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1368.740262][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1368.754929][ T24] usb 8-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1368.764630][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.778642][ T24] usb 8-1: Product: syz [ 1368.785854][ T24] usb 8-1: Manufacturer: syz [ 1368.787399][ T24] usb 8-1: SerialNumber: syz [ 1369.280796][ T55] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1369.306346][ T55] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1369.310105][T24271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.331107][T24271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.462333][ T55] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1369.479805][ T55] usb 7-1: USB disconnect, device number 122 [ 1369.544350][T22827] udevd[22827]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1369.965343][ T24] usb 8-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1369.989173][ T24] usb 8-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1370.249236][T24278] fuse: fd is not a fuse device [ 1370.254576][ T24] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1370.263130][ T24] usb 8-1: USB disconnect, device number 127 [ 1370.265966][T22827] udevd[22827]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1370.447274][T24283] kAFS: unable to lookup cell '/,c¾ûL' [ 1370.602688][T24287] binder: 24286:24287 ioctl c0306201 0 returned -14 [ 1370.987744][T24291] kAFS: unable to lookup cell '/,c¾ûL' [ 1370.995141][T24287] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3798'. [ 1371.000822][T24291] binder: 24289:24291 ioctl c0506107 80000180 returned -22 [ 1371.805272][T24287] Console: switching to colour dummy device 80x25 [ 1371.887915][T24296] syz1: rxe_newlink: already configured on lo [ 1371.985258][T24292] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1372.077405][T24292] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1372.093673][T24292] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1372.108065][T24292] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1372.124836][T24292] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1372.159852][T24292] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 34364 usecs [ 1372.269139][T24292] pci 0000:00:01.0: Adding to iommu group 1 [ 1373.216659][T24292] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1373.218811][T24292] pci 0000:00:01.0: vgaarb: bridge control possible [ 1373.220938][T24292] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1373.266664][T24292] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1373.269722][T24301] binder: 24300:24301 ioctl c0506107 80000180 returned -22 [ 1373.290458][T24292] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1373.312286][T24292] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1373.372806][T24292] [drm] Found bochs VGA, ID 0xb0c5. [ 1373.383687][T24292] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1373.497514][T24292] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1373.710432][T24292] Console: switching to colour frame buffer device 160x50 [ 1373.719853][T24292] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1374.139376][T24315] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3813'. [ 1375.885564][T24317] set match dimension is over the limit! [ 1376.735645][T24341] kAFS: unable to lookup cell '/,c¾ûL' [ 1378.101450][T24356] kAFS: unable to lookup cell '/,c¾ûL' [ 1378.346726][T24356] binder: BINDER_SET_CONTEXT_MGR already set [ 1378.372513][T24356] binder: 24352:24356 ioctl 4018620d 80004a80 returned -16 [ 1379.024324][T24359] kAFS: unable to lookup cell '/,c¾ûL' [ 1379.029574][T24359] binder: BINDER_SET_CONTEXT_MGR already set [ 1379.031524][T24359] binder: 24358:24359 ioctl 4018620d 80004a80 returned -16 [ 1379.141517][T24363] binder: 24362:24363 ioctl c0306201 0 returned -14 [ 1379.151895][T24363] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3817'. [ 1379.173509][T24363] Console: switching to colour dummy device 80x25 [ 1379.868656][T24366] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1380.274883][T24366] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1380.277267][T24366] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1380.279666][T24366] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1380.282576][T24366] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1380.290265][T24366] pci 0000:00:01.0: Adding to iommu group 1 [ 1380.296150][T24366] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1380.298401][T24366] pci 0000:00:01.0: vgaarb: bridge control possible [ 1380.300454][T24366] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1380.308319][T24366] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1380.313171][T24366] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1380.317489][T24366] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1380.330359][T24366] [drm] Found bochs VGA, ID 0xb0c5. [ 1380.332108][T24366] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1380.372060][T24366] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1380.542711][T24366] Console: switching to colour frame buffer device 160x50 [ 1380.553145][T24366] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1382.412078][T24397] cgroup: release_agent respecified [ 1382.522411][T24400] random: crng reseeded on system resumption [ 1383.025136][T24410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3825'. [ 1383.037829][T24410] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3825'. [ 1383.252559][T24400] input: syz0 as /devices/virtual/input/input42 [ 1383.564608][T24418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3830'. [ 1384.403765][T24426] kAFS: unable to lookup cell '/,c¾ûL' [ 1384.882959][T24426] binder: BINDER_SET_CONTEXT_MGR already set [ 1384.889827][T24426] binder: 24422:24426 ioctl 4018620d 80004a80 returned -16 [ 1384.980409][T24433] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3834'. [ 1385.829915][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 1385.829929][ T42] audit: type=1800 audit(1786108600.306:1225): pid=24450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3838" name="enable" dev="configfs" ino=88153 res=0 errno=0 [ 1386.557679][T24462] lo speed is unknown, defaulting to 1000 [ 1386.885662][T24480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3842'. [ 1387.471595][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1387.473788][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1387.501561][T24493] ceph: No mds server is up or the cluster is laggy [ 1387.590857][T24496] tipc: Resetting bearer [ 1387.592780][T24496] tipc: Resetting bearer [ 1387.597106][T24496] erspan0: left promiscuous mode [ 1387.605143][T24496] bridge0: left promiscuous mode [ 1387.607600][T24496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1387.610759][T24496] 8021q: adding VLAN 0 to HW filter on device team0 [ 1387.614501][T24496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1387.644602][T24496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1387.651028][T24496] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1387.689924][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.692299][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1387.775834][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.778213][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1387.845151][ T24] lo speed is unknown, defaulting to 1000 [ 1387.849796][ T24] syz1: Port: 1 Link ACTIVE [ 1387.851561][T24260] lo speed is unknown, defaulting to 1000 [ 1388.629332][T24504] binder: 24502:24504 ioctl c0506107 80000180 returned -22 [ 1389.510881][ T42] audit: type=1800 audit(1786108604.006:1226): pid=24507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3850" name="enable" dev="configfs" ino=88329 res=0 errno=0 [ 1389.671897][T24511] kAFS: unable to lookup cell '/,c¾ûL' [ 1389.865324][T24521] netlink: 'syz.1.3854': attribute type 21 has an invalid length. [ 1389.874084][T24521] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3854'. [ 1389.879313][T24521] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3854'. [ 1390.011277][T24525] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 1390.027195][T24527] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3856'. [ 1390.380529][T24524] socket: no more sockets [ 1390.510783][T24525] socket: no more sockets [ 1393.217800][T24549] kAFS: unable to lookup cell '/,c¾ûL' [ 1393.610206][T24547] kAFS: unable to lookup cell '/,c¾ûL' [ 1393.616558][T24547] binder: 24546:24547 ioctl c0506107 80000180 returned -22 [ 1394.055961][T24564] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1394.061419][T24564] gre0: MTU too low for tipc bearer [ 1394.063243][T24564] tipc: Disabling bearer [ 1394.195914][T24260] libceph: connect (1)[c::]:6789 error -101 [ 1394.209325][T24260] libceph: mon0 (1)[c::]:6789 connect error [ 1394.227259][T24567] ceph: No mds server is up or the cluster is laggy [ 1394.276776][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1394.494422][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 1394.516723][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1394.534166][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.978792][T24571] erspan0: left promiscuous mode [ 1394.985634][T24571] 8021q: adding VLAN 0 to HW filter on device team0 [ 1394.989283][T24571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1395.314055][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1395.332005][ T24] usb 8-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1395.335326][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.337654][ T24] usb 8-1: Product: syz [ 1395.351984][ T24] usb 8-1: Manufacturer: syz [ 1395.355972][T24571] bridge_slave_1: entered promiscuous mode [ 1395.365623][T24571] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1395.397075][ T24] usb 8-1: SerialNumber: syz [ 1395.764023][T24556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.770562][T24556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.295306][T24603] kAFS: unable to lookup cell '/,c¾ûL' [ 1396.316108][T24603] binder: 24600:24603 ioctl c0506107 80000180 returned -22 [ 1396.334934][ T24] usb 8-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1396.349589][ T24] usb 8-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1396.393198][ T24] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1396.416400][ T24] usb 8-1: USB disconnect, device number 2 [ 1396.467611][T22827] udevd[22827]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1397.657159][T24608] binder: 24607:24608 ioctl c0506107 80000180 returned -22 [ 1398.982419][ T42] audit: type=1804 audit(1786108613.476:1227): pid=24613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3876" name="/newroot/887/file0" dev="tmpfs" ino=4985 res=1 errno=0 [ 1399.504081][T24630] kAFS: unable to lookup cell '/,c¾ûL' [ 1400.269933][T24629] binder: BINDER_SET_CONTEXT_MGR already set [ 1400.272072][T24629] binder: 24628:24629 ioctl 4018620d 80004a80 returned -16 [ 1401.853175][T24643] binder: 24642:24643 ioctl c0506107 80000180 returned -22 [ 1402.301839][T24653] binder: 24652:24653 ioctl c0306201 0 returned -14 [ 1402.339607][T24653] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3887'. [ 1402.429428][T24653] Console: switching to colour dummy device 80x25 [ 1402.814218][T24654] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1402.914207][T24654] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1402.917506][T24654] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1402.922557][T24654] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1402.927179][T24654] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1402.960821][T24654] pci 0000:00:01.0: Adding to iommu group 1 [ 1402.967946][T24654] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1402.970644][T24654] pci 0000:00:01.0: vgaarb: bridge control possible [ 1402.973463][T24654] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1402.990184][T24654] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1402.993122][T24654] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1402.997969][T24654] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1403.007522][T24654] [drm] Found bochs VGA, ID 0xb0c5. [ 1403.009547][T24654] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1403.026904][T24654] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1403.092618][T24654] Console: switching to colour frame buffer device 160x50 [ 1403.095235][T24654] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1403.744204][T24674] Invalid ELF header magic: != ELF [ 1406.667801][T24701] netlink: 'syz.0.3896': attribute type 10 has an invalid length. [ 1407.462312][T24702] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1408.002963][T24712] binder: 24711:24712 ioctl c0306201 0 returned -14 [ 1408.006126][T24275] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1408.032233][T24712] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3899'. [ 1408.169107][T24712] Console: switching to colour dummy device 80x25 [ 1408.175777][T24275] usb 8-1: Using ep0 maxpacket: 16 [ 1408.178259][T24275] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1408.179331][T24275] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.179353][T24275] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1408.181347][T24275] usb 8-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1408.181371][T24275] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.181388][T24275] usb 8-1: Product: syz [ 1408.181402][T24275] usb 8-1: Manufacturer: syz [ 1408.181416][T24275] usb 8-1: SerialNumber: syz [ 1408.706272][T24725] kAFS: unable to lookup cell '/,c¾ûL' [ 1408.737292][T24723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.757983][T24723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.823530][T24715] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1408.990443][T24715] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1409.009155][T24715] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1409.024989][T24715] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1409.052870][T24715] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1409.072165][T24715] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 25243 usecs [ 1409.143660][T24715] pci 0000:00:01.0: Adding to iommu group 1 [ 1409.166682][T24715] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1409.168864][T24715] pci 0000:00:01.0: vgaarb: bridge control possible [ 1409.170895][T24715] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1409.185830][T24729] lo speed is unknown, defaulting to 1000 [ 1409.191579][T24729] lo speed is unknown, defaulting to 1000 [ 1409.214617][T24715] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1409.221225][T24729] lo speed is unknown, defaulting to 1000 [ 1409.223863][T24715] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1409.238959][T24715] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1409.242442][T24729] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1409.283137][T24729] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1409.299208][T24715] [drm] Found bochs VGA, ID 0xb0c5. [ 1409.306458][T24715] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1409.314773][T24729] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1409.332042][ T24] lo speed is unknown, defaulting to 1000 [ 1409.381397][T24715] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1409.385268][T24729] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1409.500176][T24275] usb 8-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1409.511413][T24275] usb 8-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1409.542263][T24715] Console: switching to colour frame buffer device 160x50 [ 1409.547727][T24715] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1409.565995][T24275] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1409.578102][T24275] usb 8-1: USB disconnect, device number 3 [ 1409.581852][T24729] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1409.618134][T24649] udevd[24649]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1409.692515][T24729] lo speed is unknown, defaulting to 1000 [ 1409.701102][T24729] lo speed is unknown, defaulting to 1000 [ 1409.710127][T24729] lo speed is unknown, defaulting to 1000 [ 1409.721982][T24729] lo speed is unknown, defaulting to 1000 [ 1409.896072][ T9] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 1410.055669][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1410.089602][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1410.108478][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.122897][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1410.138398][ T9] usb 7-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1410.162203][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.189908][ T9] usb 7-1: Product: syz [ 1410.191580][ T9] usb 7-1: Manufacturer: syz [ 1410.201737][ T9] usb 7-1: SerialNumber: syz [ 1410.573643][T24750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.590363][T24750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.929812][ T9] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1411.937970][ T9] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1412.187246][T24769] kAFS: unable to lookup cell '/,c¾ûL' [ 1412.838582][ T9] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1412.990417][ T9] usb 7-1: USB disconnect, device number 123 [ 1413.325664][T24776] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3913'. [ 1413.376797][T24772] udevd[24772]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1414.389816][T24780] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1416.175955][T24812] kAFS: unable to lookup cell '/,c¾ûL' [ 1417.644944][ T24] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 1417.794032][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1417.808402][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1417.813806][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.822540][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1417.836613][ T24] usb 7-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1417.840482][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.847071][ T24] usb 7-1: Product: syz [ 1417.850455][ T24] usb 7-1: Manufacturer: syz [ 1417.857480][ T24] usb 7-1: SerialNumber: syz [ 1418.257446][T24826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.288651][T24826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.784955][T24830] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1418.807267][T24830] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1418.991220][T24830] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1419.007705][T24830] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1419.213064][T24830] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1419.222565][T24830] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1419.312587][ T24] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1419.338280][ T24] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1419.363171][T24830] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1419.377343][T24830] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1419.437934][ T24] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1419.455900][ T24] usb 7-1: USB disconnect, device number 124 [ 1419.491090][T24772] udevd[24772]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1419.694254][T20743] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.702566][T20743] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 1419.714299][T20743] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.725865][T20743] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 1419.736011][T20743] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.747347][T20743] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 1419.760171][T20743] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.771713][T20743] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 1420.234042][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1421.019610][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 1421.056162][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1421.059521][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.062708][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1421.067622][ T24] usb 8-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1421.071136][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.073611][ T24] usb 8-1: Product: syz [ 1421.075334][ T24] usb 8-1: Manufacturer: syz [ 1421.077020][ T24] usb 8-1: SerialNumber: syz [ 1422.161348][T24837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.182751][T24837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.788476][ T10] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 1422.962238][ T24] usb 8-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1422.982902][ T24] usb 8-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1423.019794][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1423.076711][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1423.079775][ T24] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1423.094993][ T24] usb 8-1: USB disconnect, device number 4 [ 1423.107188][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.112921][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1423.121495][T24772] udevd[24772]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1423.876213][ T10] usb 7-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1423.879615][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.882307][ T10] usb 7-1: Product: syz [ 1423.883840][ T10] usb 7-1: Manufacturer: syz [ 1423.886337][ T10] usb 7-1: SerialNumber: syz [ 1425.391691][T24876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.412032][T24876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.476445][T24868] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1425.480134][T24868] overlayfs: failed to set xattr on upper [ 1425.482036][T24868] overlayfs: ...falling back to redirect_dir=nofollow. [ 1425.484343][T24868] overlayfs: ...falling back to index=off. [ 1425.486311][T24868] overlayfs: conflicting lowerdir path [ 1426.501234][ T10] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1426.523631][ T10] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1426.541817][T24888] kAFS: unable to lookup cell '/,c¾ûL' [ 1427.267316][T24886] binder: BINDER_SET_CONTEXT_MGR already set [ 1427.269686][T24886] binder: 24885:24886 ioctl 4018620d 80004a80 returned -16 [ 1427.277571][T24886] binder: 24885:24886 ioctl c0506107 80000180 returned -22 [ 1427.921415][ T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1427.984162][ T10] usb 7-1: USB disconnect, device number 125 [ 1427.993406][T24772] udevd[24772]: setting owner of /dev/bus/usb/007/125 to uid=0, gid=0 failed: No such file or directory [ 1428.046563][T24772] udevd[24772]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1429.852445][ T42] audit: type=1326 audit(1786108644.256:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24909 comm="syz.0.3940" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 1430.475810][ T42] audit: type=1326 audit(1786108644.256:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24909 comm="syz.0.3940" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 1430.482448][ T42] audit: type=1326 audit(1786108644.256:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24909 comm="syz.0.3940" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf72074eb code=0x7ffc0000 [ 1430.488890][ T42] audit: type=1326 audit(1786108644.256:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24909 comm="syz.0.3940" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 1430.495537][ T42] audit: type=1326 audit(1786108644.256:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24909 comm="syz.0.3940" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 1430.502279][ T42] audit: type=1326 audit(1786108644.256:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24909 comm="syz.0.3940" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 1430.509126][ T42] audit: type=1326 audit(1786108644.256:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24909 comm="syz.0.3940" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 1430.515842][ T42] audit: type=1326 audit(1786108644.256:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24909 comm="syz.0.3940" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 1430.522336][ T42] audit: type=1326 audit(1786108644.256:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24909 comm="syz.0.3940" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 1430.529253][ T42] audit: type=1326 audit(1786108644.256:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24909 comm="syz.0.3940" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 1432.085892][T24919] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1433.395885][T24938] CIFS: Attempting to mount //127.0.0.1/share [ 1433.403778][T24940] Invalid ELF header magic: != ELF [ 1433.409585][T24940] overlay: Bad value for 'redirect_dir' [ 1433.832127][T24938] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1433.834596][T24938] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1434.343980][ T24] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 1435.044058][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1435.047548][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1435.052729][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.056373][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1435.061041][ T24] usb 7-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1435.064277][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.066815][ T24] usb 7-1: Product: syz [ 1435.068154][ T24] usb 7-1: Manufacturer: syz [ 1435.069607][ T24] usb 7-1: SerialNumber: syz [ 1435.406540][T24944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.418534][T24944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.818722][ T24] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1435.853714][ T24] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1435.975153][ T24] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1435.987965][ T24] usb 7-1: USB disconnect, device number 126 [ 1436.028897][T24920] udevd[24920]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1436.072682][T24931] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3945'. [ 1436.088955][T24931] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1436.091720][T24931] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1436.095991][T24931] vhci_hcd vhci_hcd.0: Device attached [ 1436.230211][T24964] bond2 (unregistering): Released all slaves [ 1436.364007][T24275] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 1436.502183][T24962] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 3 [ 1436.518550][T12769] vhci_hcd vhci_hcd.0: stop threads [ 1436.525307][T12769] vhci_hcd vhci_hcd.0: release socket [ 1436.537630][T12769] vhci_hcd vhci_hcd.0: disconnect device [ 1437.044017][ T24] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 1438.018436][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1438.480137][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1438.483588][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.487635][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1438.493782][ T24] usb 7-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1438.496953][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.499585][ T24] usb 7-1: Product: syz [ 1438.500950][ T24] usb 7-1: Manufacturer: syz [ 1438.502463][ T24] usb 7-1: SerialNumber: syz [ 1438.858254][T24979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.873561][T24979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.031189][T24982] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1440.152363][T24996] kAFS: unable to lookup cell '/,c¾ûL' [ 1441.015349][T24994] binder: 24993:24994 ioctl c0506107 80000180 returned -22 [ 1441.056534][ T24] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1441.168576][ T24] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1441.239793][ T24] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1441.261626][ T24] usb 7-1: USB disconnect, device number 127 [ 1441.720474][T25012] tunl0: entered promiscuous mode [ 1442.099028][T24275] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1442.315748][T24920] udevd[24920]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1442.351439][T25012] netlink: 'syz.1.3958': attribute type 4 has an invalid length. [ 1442.355795][T25012] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3958'. [ 1443.955942][T25016] binder: 25015:25016 ioctl c0506107 80000180 returned -22 [ 1444.200484][T25023] ªªªªªª: renamed from vlan0 (while UP) [ 1444.757076][T25029] input: syz1 as /devices/virtual/input/input43 [ 1446.109727][T25036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3963'. [ 1446.140969][T25036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3963'. [ 1446.153368][T25036] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 1446.720408][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 1446.720424][ T42] audit: type=1326 audit(1786108661.136:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25034 comm="syz.3.3966" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 1446.757926][ T42] audit: type=1326 audit(1786108661.136:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25034 comm="syz.3.3966" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 1446.805692][ T42] audit: type=1326 audit(1786108661.146:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25034 comm="syz.3.3966" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71274eb code=0x7ffc0000 [ 1446.984498][ T42] audit: type=1326 audit(1786108661.146:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25034 comm="syz.3.3966" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 1447.040139][ T42] audit: type=1326 audit(1786108661.146:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25034 comm="syz.3.3966" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 1447.080811][ T42] audit: type=1326 audit(1786108661.156:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25034 comm="syz.3.3966" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 1447.150731][ T42] audit: type=1326 audit(1786108661.156:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25034 comm="syz.3.3966" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 1447.192055][ T42] audit: type=1326 audit(1786108661.156:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25034 comm="syz.3.3966" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 1447.243400][ T42] audit: type=1326 audit(1786108661.156:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25034 comm="syz.3.3966" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 1447.298408][ T42] audit: type=1326 audit(1786108661.156:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25034 comm="syz.3.3966" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x7ffc0000 [ 1447.503744][T25044] input: syz1 as /devices/virtual/input/input44 [ 1449.692762][T25061] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1449.695275][T25061] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1449.743825][T25061] vhci_hcd vhci_hcd.0: Device attached [ 1450.034645][T24275] usb 44-1: SetAddress Request (39) to port 0 [ 1450.050873][T24275] usb 44-1: new SuperSpeed USB device number 39 using vhci_hcd [ 1451.227351][T25062] vhci_hcd: connection reset by peer [ 1451.244332][T12769] vhci_hcd vhci_hcd.3: stop threads [ 1451.247599][T12769] vhci_hcd vhci_hcd.3: release socket [ 1451.252542][T12769] vhci_hcd vhci_hcd.3: disconnect device [ 1451.333719][T25070] kAFS: unable to lookup cell '/,c¾ûL' [ 1451.382278][T25070] binder: 25069:25070 ioctl c0506107 80000180 returned -22 [ 1451.770597][T25081] kAFS: unable to lookup cell '/,c¾ûL' [ 1451.829456][T25079] netlink: 'syz.2.3974': attribute type 10 has an invalid length. [ 1451.872051][T25079] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1452.654246][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1452.834895][ T24] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 1452.845135][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1452.852622][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1452.867771][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1452.876150][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1453.059867][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1453.730018][T25100] kAFS: unable to lookup cell '/,c¾ûL' [ 1453.912381][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1454.162350][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1454.182433][T25100] binder: 25094:25100 ioctl c0506107 80000180 returned -22 [ 1454.187057][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1454.205690][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1454.220994][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1454.235511][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1454.255975][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1454.267489][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1454.288543][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1454.311504][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1454.327814][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1454.343243][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1454.361929][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1454.376272][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1454.388903][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1454.406399][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1454.413922][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1454.423210][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1454.668346][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1455.127692][T25109] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3986'. [ 1455.150050][ T24] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1455.159165][ T24] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1455.167369][ T24] usb 8-1: Product: syz [ 1455.168771][ T24] usb 8-1: Manufacturer: syz [ 1455.174163][T24275] usb 44-1: device descriptor read/8, error -110 [ 1455.178443][ T24] usb 8-1: SerialNumber: syz [ 1455.185766][ T24] usb 8-1: config 0 descriptor?? [ 1455.321278][ T24] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 1455.488253][ T24] usb 8-1: USB disconnect, device number 5 [ 1455.646151][T24275] usb usb44-port1: attempt power cycle [ 1455.700587][ T24] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 1455.837629][T25119] kAFS: unable to lookup cell '/,c¾ûL' [ 1455.857147][T25119] binder: 25118:25119 ioctl c0506107 80000180 returned -22 [ 1456.340143][T24275] usb usb44-port1: unable to enumerate USB device [ 1457.062435][T25124] binder: 25123:25124 ioctl c0506107 80000180 returned -22 [ 1458.882449][T25140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3988'. [ 1459.818003][T25154] kAFS: unable to lookup cell '/,c¾ûL' [ 1461.461118][T25164] kAFS: unable to lookup cell '/,c¾ûL' [ 1462.399159][T25170] kAFS: unable to lookup cell '/,c¾ûL' [ 1462.448207][T25173] fuse: fd is not a fuse device [ 1462.461214][T25174] binder: BINDER_SET_CONTEXT_MGR already set [ 1462.471724][T25174] binder: 25167:25174 ioctl 4018620d 80004a80 returned -16 [ 1464.181490][T25185] kAFS: unable to lookup cell '/,c¾ûL' [ 1466.048895][T25202] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1466.672694][T25189] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1466.674629][T25189] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1466.676891][T25189] vhci_hcd vhci_hcd.0: Device attached [ 1466.688115][T25203] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4000'. [ 1466.926101][T24275] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1467.128483][T25212] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 1467.136242][ T12] vhci_hcd vhci_hcd.2: stop threads [ 1467.143483][ T12] vhci_hcd vhci_hcd.2: release socket [ 1467.151142][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 1467.270307][T25221] kAFS: unable to lookup cell '/,c¾ûL' [ 1467.612829][T25225] kAFS: unable to lookup cell '/,c¾ûL' [ 1468.023063][T25226] kAFS: unable to lookup cell '/,c¾ûL' [ 1469.416223][T25246] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1469.482721][T25246] overlayfs: failed to set xattr on upper [ 1469.502980][T25246] overlayfs: ...falling back to redirect_dir=nofollow. [ 1469.518207][T25246] overlayfs: ...falling back to index=off. [ 1469.533958][T25246] overlayfs: conflicting lowerdir path [ 1469.997778][T25251] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1470.469337][T25258] kAFS: unable to lookup cell '/,c¾ûL' [ 1472.044129][T24275] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1472.979338][T25274] kAFS: unable to lookup cell '/,c¾ûL' [ 1472.995553][T25274] binder: 25273:25274 ioctl c0506107 80000180 returned -22 [ 1473.284804][T25288] input: syz1 as /devices/virtual/input/input45 [ 1473.434138][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1473.614003][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1473.630033][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1473.649836][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.737662][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1473.757897][ T24] usb 7-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1473.776062][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.789317][ T24] usb 7-1: Product: syz [ 1473.798274][ T24] usb 7-1: Manufacturer: syz [ 1473.806301][ T24] usb 7-1: SerialNumber: syz [ 1474.080372][T25293] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1474.082688][T25293] overlayfs: failed to set xattr on upper [ 1474.084750][T25293] overlayfs: ...falling back to redirect_dir=nofollow. [ 1474.087494][T25293] overlayfs: ...falling back to index=off. [ 1474.089858][T25293] overlayfs: conflicting lowerdir path [ 1474.212022][T25295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.234839][T25295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.282161][T25301] overlayfs: failed to resolve './bus': -2 [ 1476.348519][T25307] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1476.351027][ T24] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1476.386229][ T24] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1476.403218][ T24] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1476.409492][ T24] usb 7-1: USB disconnect, device number 2 [ 1476.433086][T25206] udevd[25206]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1476.507529][T25310] kAFS: unable to lookup cell '/,c¾ûL' [ 1476.552269][T25313] overlay: Unknown parameter '/' [ 1476.568551][T25313] netlink: zone id is out of range [ 1476.570269][T25313] netlink: zone id is out of range [ 1476.571994][T25313] netlink: zone id is out of range [ 1476.751361][T25321] kAFS: unable to lookup cell '/,c¾ûL' [ 1476.783632][T25321] binder: 25311:25321 ioctl c0506107 80000180 returned -22 [ 1481.885395][T25357] kAFS: unable to lookup cell '/,c¾ûL' [ 1481.900246][T25362] overlayfs: failed to resolve './bus': -2 [ 1481.998540][T25356] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1482.000660][T25356] overlayfs: failed to set xattr on upper [ 1482.002336][T25356] overlayfs: ...falling back to redirect_dir=nofollow. [ 1482.004363][T25356] overlayfs: ...falling back to index=off. [ 1482.006063][T25356] overlayfs: conflicting lowerdir path [ 1482.091541][T25366] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1483.116191][T25377] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1483.198437][T25380] kAFS: unable to lookup cell '/,c¾ûL' [ 1483.336706][T25389] kAFS: unable to lookup cell '/,c¾ûL' [ 1483.511082][T25394] kAFS: unable to lookup cell '/,c¾ûL' [ 1483.554047][T24275] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1483.724125][T24275] usb 8-1: Using ep0 maxpacket: 16 [ 1483.728442][T24275] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1483.741352][T24275] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.754977][T24275] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1483.768377][T24275] usb 8-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1483.777085][T24275] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.788490][T24275] usb 8-1: Product: syz [ 1483.792679][T24275] usb 8-1: Manufacturer: syz [ 1483.797682][T24275] usb 8-1: SerialNumber: syz [ 1483.891418][T25397] kAFS: unable to lookup cell '/,c¾ûL' [ 1484.154509][T25400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.173751][T25400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.803335][T24275] usb 8-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1484.818442][T24275] usb 8-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1484.870517][T24275] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1484.883841][T24275] usb 8-1: USB disconnect, device number 6 [ 1484.912766][T25206] udevd[25206]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1485.444234][T25410] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1485.446430][T25410] overlayfs: failed to set xattr on upper [ 1485.448258][T25410] overlayfs: ...falling back to redirect_dir=nofollow. [ 1485.450366][T25410] overlayfs: ...falling back to index=off. [ 1485.452242][T25410] overlayfs: conflicting lowerdir path [ 1485.798016][T25413] kAFS: unable to lookup cell '/,c¾ûL' [ 1486.775725][T25415] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1486.880527][T25418] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1487.237494][T25427] kAFS: unable to lookup cell '/,c¾ûL' [ 1488.804860][T25439] kAFS: unable to lookup cell '/,c¾ûL' [ 1488.810075][T25439] binder: 25438:25439 ioctl c0506107 80000180 returned -22 [ 1489.838808][T25452] kAFS: unable to lookup cell '/,c¾ûL' [ 1490.619874][T25454] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1490.633109][T25454] overlayfs: failed to set xattr on upper [ 1490.636056][T25451] binder: 25450:25451 ioctl c0506107 80000180 returned -22 [ 1490.646534][T25454] overlayfs: ...falling back to redirect_dir=nofollow. [ 1490.651956][T25454] overlayfs: ...falling back to index=off. [ 1490.657224][T25454] overlayfs: conflicting lowerdir path [ 1491.850967][T25458] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1491.853230][T25458] overlayfs: failed to set xattr on upper [ 1491.855124][T25458] overlayfs: ...falling back to redirect_dir=nofollow. [ 1491.857345][T25458] overlayfs: ...falling back to index=off. [ 1491.859241][T25458] overlayfs: conflicting lowerdir path [ 1492.285777][T25465] kAFS: unable to lookup cell '/,c¾ûL' [ 1494.637313][T25482] kAFS: unable to lookup cell '/,c¾ûL' [ 1494.642577][T25483] binder: 25481:25483 ioctl c0306201 0 returned -14 [ 1494.650761][T25483] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4067'. [ 1494.989922][T25483] Console: switching to colour dummy device 80x25 [ 1495.168947][T25484] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1495.281036][T25484] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1495.296121][T25484] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1495.303297][T25484] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1495.316569][T25484] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1495.334045][T25484] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 17199 usecs [ 1495.381414][T25484] pci 0000:00:01.0: Adding to iommu group 1 [ 1495.419191][T25484] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1495.421356][T25484] pci 0000:00:01.0: vgaarb: bridge control possible [ 1495.423406][T25484] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1495.475836][T25484] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1495.481778][T25484] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1495.491782][T25484] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1495.509642][T25484] [drm] Found bochs VGA, ID 0xb0c5. [ 1495.514018][T25484] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1495.658838][T25484] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1495.838811][T25484] Console: switching to colour frame buffer device 160x50 [ 1495.855603][T25484] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1497.084269][T25498] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1497.086499][T25498] overlayfs: failed to set xattr on upper [ 1497.088349][T25498] overlayfs: ...falling back to redirect_dir=nofollow. [ 1497.090502][T25498] overlayfs: ...falling back to index=off. [ 1497.092398][T25498] overlayfs: conflicting lowerdir path [ 1499.614851][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 1499.614865][ T42] audit: type=1800 audit(1786108714.106:1316): pid=25524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4075" name="enable" dev="configfs" ino=90961 res=0 errno=0 [ 1499.899958][T25527] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1500.170962][T25529] kAFS: unable to lookup cell '/,c¾ûL' [ 1501.001517][T25537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4078'. [ 1501.009175][T25537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4078'. [ 1501.014288][T25537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4078'. [ 1501.018832][T25537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4078'. [ 1502.394639][T25555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4074'. [ 1502.411049][T25557] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1502.474255][T24275] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1502.627520][T24275] usb 8-1: Using ep0 maxpacket: 16 [ 1502.637968][T24275] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1502.654880][T24275] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1502.663084][T24275] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1502.675804][T24275] usb 8-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1502.684050][T24275] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.690703][T24275] usb 8-1: Product: syz [ 1502.695725][T24275] usb 8-1: Manufacturer: syz [ 1502.700886][T24275] usb 8-1: SerialNumber: syz [ 1502.872645][ T42] audit: type=1800 audit(1786108717.366:1317): pid=25567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4084" name="enable" dev="configfs" ino=91079 res=0 errno=0 [ 1503.087179][T25551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1503.113306][T25551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1505.333857][T24275] usb 8-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1505.356401][T24275] usb 8-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1505.432979][T24275] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1505.444248][T24275] usb 8-1: USB disconnect, device number 7 [ 1505.493855][T25206] udevd[25206]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1507.280685][T25599] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1507.324064][T25599] overlayfs: failed to set xattr on upper [ 1507.326282][T25599] overlayfs: ...falling back to redirect_dir=nofollow. [ 1507.328802][T25599] overlayfs: ...falling back to index=off. [ 1507.330820][T25599] overlayfs: conflicting lowerdir path [ 1507.487365][T25603] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1507.489738][T25603] overlayfs: failed to set xattr on upper [ 1507.491670][T25603] overlayfs: ...falling back to redirect_dir=nofollow. [ 1507.494192][T25603] overlayfs: ...falling back to index=off. [ 1507.496542][T25603] overlayfs: conflicting lowerdir path [ 1507.678540][T25604] overlayfs: conflicting lowerdir path [ 1508.042745][T25614] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1508.045375][T25614] overlayfs: failed to set xattr on upper [ 1508.047221][T25614] overlayfs: ...falling back to redirect_dir=nofollow. [ 1508.049409][T25614] overlayfs: ...falling back to index=off. [ 1508.051333][T25614] overlayfs: conflicting lowerdir path [ 1511.392109][T25657] overlayfs: failed to resolve './bus': -2 [ 1511.890699][T25660] kAFS: unable to lookup cell '/,c¾ûL' [ 1512.012819][T25662] kAFS: unable to lookup cell '/,c¾ûL' [ 1513.419825][T25666] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1513.422317][T25666] overlayfs: failed to set xattr on upper [ 1513.425986][T25666] overlayfs: ...falling back to redirect_dir=nofollow. [ 1513.428311][T25666] overlayfs: ...falling back to index=off. [ 1513.430606][T25666] overlayfs: conflicting lowerdir path [ 1513.432065][T25665] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1513.435299][T25665] overlayfs: failed to set xattr on upper [ 1513.437592][T25665] overlayfs: ...falling back to redirect_dir=nofollow. [ 1513.440311][T25665] overlayfs: ...falling back to index=off. [ 1513.442669][T25665] overlayfs: conflicting lowerdir path [ 1514.965244][T25681] Mass Storage Function, version: 2009/09/11 [ 1515.036715][T25681] LUN: removable file: (no medium) [ 1516.910651][T25691] kAFS: unable to lookup cell '/,c¾ûL' [ 1517.772532][T25701] kAFS: unable to lookup cell '/,c¾ûL' [ 1517.826770][T25701] binder: 25698:25701 ioctl c0506107 80000180 returned -22 [ 1517.874402][T24275] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1518.047085][T24275] usb 7-1: Using ep0 maxpacket: 16 [ 1518.076041][T24275] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1518.102061][T24275] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.120531][T24275] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1518.142405][T24275] usb 7-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1518.151094][T24275] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.156538][T24275] usb 7-1: Product: syz [ 1518.158247][T24275] usb 7-1: Manufacturer: syz [ 1518.163975][T24275] usb 7-1: SerialNumber: syz [ 1518.421392][T25707] kAFS: unable to lookup cell '/,c¾ûL' [ 1518.798642][T25707] binder: 25705:25707 ioctl c0506107 80000180 returned -22 [ 1519.781436][T25710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1519.822678][T25710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1523.069036][T25716] bond0 (unregistering): Released all slaves [ 1523.160865][T24275] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1523.853998][T24275] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1524.058958][T24275] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1524.091974][T24275] usb 7-1: USB disconnect, device number 3 [ 1524.244985][T25704] udevd[25704]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1524.787733][T25727] netlink: 'syz.1.4114': attribute type 3 has an invalid length. [ 1529.216049][T25734] kAFS: unable to lookup cell '/,c¾ûL' [ 1530.134696][T25734] binder: 25729:25734 ioctl c0506107 80000180 returned -22 [ 1530.594255][T24275] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1530.623542][T25750] kAFS: unable to lookup cell '/,c¾ûL' [ 1530.666693][T25750] binder: 25749:25750 ioctl c0506107 80000180 returned -22 [ 1530.774039][T24275] usb 7-1: Using ep0 maxpacket: 32 [ 1530.792464][T24275] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1530.795945][T24275] usb 7-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 1530.805614][T24275] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1530.809104][T24275] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.824039][T24275] usb 7-1: Product: syz [ 1530.833338][T24275] usb 7-1: Manufacturer: syz [ 1530.842559][T24275] usb 7-1: SerialNumber: syz [ 1531.706106][T25758] kAFS: unable to lookup cell '/,c¾ûL' [ 1532.069870][T25737] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4117'. [ 1532.141114][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.145440][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.149338][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.152256][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.283788][T25758] binder: 25756:25758 ioctl c0506107 80000180 returned -22 [ 1532.304006][T13366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.309184][T13366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.312229][T13366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.315078][T13366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.516735][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.522150][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.672840][T24275] usb 7-1: USB disconnect, device number 4 [ 1533.333448][T24056] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1533.585996][T24056] usb 8-1: Using ep0 maxpacket: 16 [ 1533.667130][T24056] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1533.739882][T24056] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.841069][T24056] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1534.001258][T24056] usb 8-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1534.096113][T24056] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.140742][T24056] usb 8-1: Product: syz [ 1534.176950][T24056] usb 8-1: Manufacturer: syz [ 1534.207168][T24056] usb 8-1: SerialNumber: syz [ 1534.915995][T25767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1535.232725][T25767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1535.809019][T25773] overlayfs: failed to clone upperpath [ 1537.477019][T24056] usb 8-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1537.483440][T24056] usb 8-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1537.899606][ T37] net_ratelimit: 3 callbacks suppressed [ 1537.899622][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1537.904034][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1537.906599][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1537.909203][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1537.928641][T24056] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1537.983861][T24056] usb 8-1: USB disconnect, device number 8 [ 1538.489678][T25786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4127'. [ 1538.612597][T25787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4127'. [ 1538.672629][T25787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4127'. [ 1538.807574][T25787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4127'. [ 1538.882780][T25787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4127'. [ 1539.506755][T25764] udevd[25764]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1539.830731][T25791] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4128'. [ 1540.340016][T24056] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1540.508383][T24056] usb 8-1: Using ep0 maxpacket: 16 [ 1540.582637][T24056] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1540.653813][T24056] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1540.676455][T24056] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1540.743568][T24056] usb 8-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1540.759654][T24056] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.780935][T24056] usb 8-1: Product: syz [ 1540.782494][T24056] usb 8-1: Manufacturer: syz [ 1540.790228][T24056] usb 8-1: SerialNumber: syz [ 1540.947618][T25796] kAFS: unable to lookup cell '/,c¾ûL' [ 1541.462355][T25796] binder: 25794:25796 ioctl c0506107 80000180 returned -22 [ 1542.386244][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.475646][T25799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1542.510817][T25799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1542.783209][T25801] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1543.586998][ T42] audit: type=1800 audit(1786108758.086:1318): pid=25806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4133" name="enable" dev="configfs" ino=91566 res=0 errno=0 [ 1543.673508][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.676180][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.678714][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.681255][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.546560][T24056] usb 8-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1546.589163][T24056] usb 8-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1547.438893][T25822] fuse: fd is not a fuse device [ 1547.443945][ T42] audit: type=1326 audit(1786108761.876:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25817 comm="syz.1.4135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 1547.450927][ T42] audit: type=1326 audit(1786108761.876:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25817 comm="syz.1.4135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 1548.780656][ T42] audit: type=1326 audit(1786108761.886:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25817 comm="syz.1.4135" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704efec code=0x7ffc0000 [ 1548.948990][ T42] audit: type=1326 audit(1786108761.886:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25817 comm="syz.1.4135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 1549.074086][ T42] audit: type=1326 audit(1786108761.886:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25817 comm="syz.1.4135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 1549.082850][ T42] audit: type=1326 audit(1786108761.896:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25817 comm="syz.1.4135" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf704efec code=0x7ffc0000 [ 1549.089894][ T42] audit: type=1326 audit(1786108761.896:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25817 comm="syz.1.4135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 1549.096794][ T42] audit: type=1326 audit(1786108761.896:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25817 comm="syz.1.4135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 1549.341263][ T42] audit: type=1326 audit(1786108761.896:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25817 comm="syz.1.4135" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704efec code=0x7ffc0000 [ 1549.399525][ T42] audit: type=1326 audit(1786108761.906:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25817 comm="syz.1.4135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 1549.414898][T25830] binder: 25829:25830 ioctl c0306201 0 returned -14 [ 1549.415914][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.420796][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.423972][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.426958][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.474859][T25830] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4139'. [ 1549.479716][ T42] audit: type=1326 audit(1786108761.906:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25817 comm="syz.1.4135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 1549.552692][T25830] Console: switching to colour dummy device 80x25 [ 1549.569925][ T42] audit: type=1326 audit(1786108761.916:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25817 comm="syz.1.4135" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf704efec code=0x7ffc0000 [ 1549.726222][T24056] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1549.735856][T24056] usb 8-1: USB disconnect, device number 9 [ 1549.737439][T25831] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1549.861722][T25831] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1549.882080][T25831] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1549.898599][T25831] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1549.916732][T25831] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1550.117951][T25831] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 196636 usecs [ 1550.220370][T25834] fuse: fd is not a fuse device [ 1550.244616][T25831] pci 0000:00:01.0: Adding to iommu group 1 [ 1550.250182][T25831] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1550.252942][T25831] pci 0000:00:01.0: vgaarb: bridge control possible [ 1550.255546][T25831] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1550.801384][T25764] udevd[25764]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1551.426599][T25831] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1551.497333][T25831] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1551.717588][T25831] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1551.842256][T25831] [drm] Found bochs VGA, ID 0xb0c5. [ 1551.868637][T25831] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1551.948663][T25831] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1551.967926][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1552.523768][T25831] Console: switching to colour frame buffer device 160x50 [ 1552.546712][T25831] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1553.279679][T25848] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1555.180154][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.182856][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.185428][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.187978][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.650820][T25870] kAFS: unable to lookup cell '/,c¾ûL' [ 1559.811946][T25870] binder: BINDER_SET_CONTEXT_MGR already set [ 1559.816272][T25870] binder: 25868:25870 ioctl 4018620d 80004a80 returned -16 [ 1559.941318][T25870] binder: 25868:25870 ioctl c0506107 80000180 returned -22 [ 1560.928155][T13366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.931100][T13366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.933959][T13366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.936840][T13366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.666209][T24056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.359200][T13366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.362445][T13366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.365396][T13366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.368278][T13366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.360653][T25907] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1571.175985][T24056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.099188][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.102069][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.105078][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.108031][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.459750][T25933] kAFS: unable to lookup cell '/,c¾ûL' [ 1573.474707][T25933] binder: 25932:25933 ioctl c0506107 80000180 returned -22 [ 1574.753398][T25946] overlayfs: conflicting lowerdir path [ 1575.662075][T25952] kAFS: unable to lookup cell '/,c¾ûL' [ 1575.777688][T25952] binder: 25951:25952 ioctl c0506107 80000180 returned -22 [ 1577.156559][T25958] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1577.260936][T25962] kAFS: unable to lookup cell '/,c¾ûL' [ 1578.126604][T25962] binder: 25959:25962 ioctl c0506107 80000180 returned -22 [ 1578.870752][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.874194][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.877523][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.880812][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1580.848985][T24056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.267009][T26000] kAFS: unable to lookup cell '/,c¾ûL' [ 1584.831925][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1584.834975][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1584.837785][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1584.840546][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.274413][T26011] kAFS: unable to lookup cell '/,c¾ûL' [ 1586.459071][T26017] kAFS: unable to lookup cell '/,c¾ûL' [ 1589.799442][T26033] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1590.371260][T24056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1590.980738][T26040] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1591.102631][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.105585][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.108434][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.111254][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.857306][T26053] kAFS: unable to lookup cell '/,c¾ûL' [ 1596.939618][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1596.942248][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1596.944872][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1596.947457][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.204882][T26065] kAFS: unable to lookup cell '/,c¾ûL' [ 1598.224510][T26065] binder: 26062:26065 ioctl c0506107 80000180 returned -22 [ 1599.982181][T24056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.638828][T26081] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1600.729267][T26079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.735525][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.861110][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.869333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.926092][T26079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.333062][T26090] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1602.516394][T26092] kAFS: unable to lookup cell '/,c¾ûL' [ 1603.025673][T26101] kAFS: unable to lookup cell '/,c¾ûL' [ 1603.047762][T26101] binder: 26100:26101 ioctl c0506107 80000180 returned -22 [ 1603.079877][T26103] kAFS: unable to lookup cell '/,c¾ûL' [ 1603.356890][T26103] binder: BINDER_SET_CONTEXT_MGR already set [ 1603.358864][T26103] binder: 26102:26103 ioctl 4018620d 80004a80 returned -16 [ 1603.483730][T26103] binder: 26102:26103 ioctl c0506107 80000180 returned -22 [ 1603.885850][ T120] net_ratelimit: 1 callbacks suppressed [ 1603.885922][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.894730][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.903861][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.910167][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1605.261804][T26107] binder: 26105:26107 ioctl c0506107 80000180 returned -22 [ 1605.321262][T26111] binder: 26110:26111 ioctl c0306201 0 returned -14 [ 1605.369610][T26111] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4194'. [ 1609.290465][T26120] overlayfs: failed to clone upperpath [ 1609.636660][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.888261][T24275] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1610.866302][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.869249][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.872101][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.874985][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.244032][T24275] usb 7-1: Using ep0 maxpacket: 16 [ 1611.825804][T24275] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1611.867816][T24275] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1611.871187][T24275] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1611.899577][T26142] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1612.005982][T26142] overlayfs: failed to set xattr on upper [ 1612.008670][T26142] overlayfs: ...falling back to redirect_dir=nofollow. [ 1612.037013][T24275] usb 7-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1612.040031][T24275] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.042953][T24275] usb 7-1: Product: syz [ 1612.056177][T24275] usb 7-1: Manufacturer: syz [ 1612.059748][T24275] usb 7-1: SerialNumber: syz [ 1612.081899][T26142] overlayfs: ...falling back to index=off. [ 1612.118704][T26142] overlayfs: conflicting lowerdir path [ 1612.164132][T24275] usb 7-1: can't set config #1, error -71 [ 1612.912202][T24275] usb 7-1: USB disconnect, device number 5 [ 1613.533769][T26151] binder: 26149:26151 ioctl c0506107 80000180 returned -22 [ 1614.456714][T26153] kAFS: unable to lookup cell '/,c¾ûL' [ 1614.499632][T26153] binder: 26152:26153 ioctl c0506107 80000180 returned -22 [ 1614.525077][T26157] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1616.116721][T26167] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4208'. [ 1616.140798][T26167] gretap0: entered promiscuous mode [ 1616.481459][T26173] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4208'. [ 1616.532328][T26173] 0ªî{X¹¦: renamed from gretap0 [ 1617.138120][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.141026][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.144621][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.147530][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.415902][T26173] 0ªî{X¹¦: left promiscuous mode [ 1619.547798][T26173] 0ªî{X¹¦: entered allmulticast mode [ 1619.725795][T26173] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1619.789038][T26178] overlayfs: conflicting lowerdir path [ 1619.838087][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.644122][T24260] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1620.801803][T26190] tmpfs: Unknown parameter '' [ 1620.805659][T24260] usb 7-1: Using ep0 maxpacket: 16 [ 1620.820336][T24260] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1620.837375][T24260] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1620.857585][T24260] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1620.881370][T24260] usb 7-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1620.890080][T24260] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.898328][T24260] usb 7-1: Product: syz [ 1620.899724][T24260] usb 7-1: Manufacturer: syz [ 1620.905138][T24260] usb 7-1: SerialNumber: syz [ 1621.252283][T26199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1621.360433][T26199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1622.177050][T26202] kAFS: unable to lookup cell '/,c¾ûL' [ 1622.378766][T24260] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1622.422714][T24260] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1622.475935][T24260] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1622.486216][T26206] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1622.490271][T24260] usb 7-1: USB disconnect, device number 6 [ 1622.531026][T26183] udevd[26183]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1624.288698][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.292025][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.294846][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.298191][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.964921][T26224] kAFS: unable to lookup cell '/,c¾ûL' [ 1626.971584][T26224] binder: 26222:26224 ioctl c0506107 80000180 returned -22 [ 1627.023094][T26221] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1627.027549][T26221] overlayfs: failed to set xattr on upper [ 1627.029613][T26221] overlayfs: ...falling back to redirect_dir=nofollow. [ 1627.032037][T26221] overlayfs: ...falling back to index=off. [ 1627.034565][T26221] overlayfs: conflicting lowerdir path [ 1627.872332][T26233] kAFS: unable to lookup cell '/,c¾ûL' [ 1627.880173][T26233] binder: 26232:26233 ioctl c0506107 80000180 returned -22 [ 1628.274123][T24260] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1628.864032][T24260] usb 7-1: Using ep0 maxpacket: 16 [ 1628.867885][T24260] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1628.874667][T24260] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.877952][T24260] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1628.900153][T24260] usb 7-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1628.910315][T24260] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.923283][T24260] usb 7-1: Product: syz [ 1628.928891][T24260] usb 7-1: Manufacturer: syz [ 1628.930865][T24260] usb 7-1: SerialNumber: syz [ 1629.409099][T24056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.517579][T26249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1629.530082][T26249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.580588][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.582886][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.585423][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.587985][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.501628][T26254] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1631.399988][T26270] kAFS: unable to lookup cell '/,c¾ûL' [ 1631.409827][T26270] binder: 26267:26270 ioctl c0506107 80000180 returned -22 [ 1631.565579][T24260] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1631.603112][T26268] binder: BINDER_SET_CONTEXT_MGR already set [ 1631.609445][T24260] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1631.614079][T26268] binder: 26266:26268 ioctl 4018620d 80004a80 returned -16 [ 1631.638889][T26268] binder: 26266:26268 ioctl 89fa 80000280 returned -22 [ 1631.768330][T24260] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1631.791653][T24260] usb 7-1: USB disconnect, device number 7 [ 1633.596476][T26183] udevd[26183]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1633.816859][T26280] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1633.896615][T26281] overlayfs: conflicting lowerdir path [ 1634.258922][T26285] kAFS: unable to lookup cell '/,c¾ûL' [ 1634.260977][T26285] binder: BINDER_SET_CONTEXT_MGR already set [ 1634.263335][T26285] binder: 26283:26285 ioctl 4018620d 80000100 returned -16 [ 1634.450053][T26285] binder: BINDER_SET_CONTEXT_MGR already set [ 1634.452026][T26285] binder: 26283:26285 ioctl 4018620d 80004a80 returned -16 [ 1634.455729][T26285] binder: 26283:26285 ioctl c0506107 80000180 returned -22 [ 1635.354789][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.357764][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.360448][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.363029][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.272859][T26290] kAFS: unable to lookup cell '/,c¾ûL' [ 1638.170989][T24056] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1638.396134][T24056] usb 8-1: Using ep0 maxpacket: 16 [ 1638.442138][ T60] Bluetooth: hci4: Frame reassembly failed (-84) [ 1638.649012][T24056] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1638.659660][T24056] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1638.663134][T24056] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1638.690233][T24056] usb 8-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1638.705702][T24056] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.708449][T24056] usb 8-1: Product: syz [ 1638.710155][T24056] usb 8-1: Manufacturer: syz [ 1638.711896][T24056] usb 8-1: SerialNumber: syz [ 1639.006320][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.448775][ T5745] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1640.520450][T26310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1640.602882][T26310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1641.628006][T26315] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1641.682469][T26315] overlayfs: failed to set xattr on upper [ 1641.736571][T26315] overlayfs: ...falling back to redirect_dir=nofollow. [ 1641.779074][T26315] overlayfs: ...falling back to index=off. [ 1641.781368][T26315] overlayfs: conflicting lowerdir path [ 1642.818798][T24056] usb 8-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1642.886876][T24056] usb 8-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1643.282642][T26325] binder: 26323:26325 ioctl c0506107 80000180 returned -22 [ 1644.212717][T24056] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1644.278200][T24056] usb 8-1: USB disconnect, device number 10 [ 1644.538056][T26183] udevd[26183]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1644.587292][T26330] kAFS: unable to lookup cell '/,c¾ûL' [ 1644.601260][T26330] binder: 26329:26330 ioctl c0506107 80000180 returned -22 [ 1645.170105][T26333] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4247'. [ 1645.270039][T26333] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1645.272145][T26333] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1645.319893][T26333] vhci_hcd vhci_hcd.0: Device attached [ 1646.436132][T24056] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1647.697396][T26341] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1647.699522][T26341] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1647.753467][T26341] vhci_hcd vhci_hcd.0: Device attached [ 1647.776159][T26335] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 1647.798934][T12769] vhci_hcd vhci_hcd.3: stop threads [ 1647.813447][T12769] vhci_hcd vhci_hcd.3: release socket [ 1647.820770][T26332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4247'. [ 1647.839513][T12769] vhci_hcd vhci_hcd.3: disconnect device [ 1647.933217][T26344] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1648.670194][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.074682][T24260] usb 42-1: SetAddress Request (38) to port 0 [ 1649.093080][T24260] usb 42-1: new SuperSpeed USB device number 38 using vhci_hcd [ 1650.007592][T26350] overlayfs: conflicting lowerdir path [ 1650.412153][T26360] kAFS: unable to lookup cell '/,c¾ûL' [ 1650.414790][T26360] binder: BINDER_SET_CONTEXT_MGR already set [ 1650.417083][T26360] binder: 26359:26360 ioctl 4018620d 80000100 returned -16 [ 1650.430525][T26360] binder: BINDER_SET_CONTEXT_MGR already set [ 1650.432889][T26360] binder: 26359:26360 ioctl 4018620d 80004a80 returned -16 [ 1650.436908][T26360] binder: 26359:26360 ioctl c0506107 80000180 returned -22 [ 1651.732281][T24056] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1652.799233][T26342] vhci_hcd: connection reset by peer [ 1652.815736][ T5807] vhci_hcd vhci_hcd.2: stop threads [ 1652.823206][ T5807] vhci_hcd vhci_hcd.2: release socket [ 1652.837993][ T5807] vhci_hcd vhci_hcd.2: disconnect device [ 1654.204275][T24260] usb 42-1: device descriptor read/8, error -110 [ 1654.444052][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.446908][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.449637][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.452398][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.727332][T24260] usb usb42-port1: attempt power cycle [ 1655.325163][T24260] usb usb42-port1: unable to enumerate USB device [ 1656.511061][T26394] lo speed is unknown, defaulting to 1000 [ 1658.341108][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.390228][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.393113][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.395968][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.398885][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.441186][T24260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.389939][T26394] lo speed is unknown, defaulting to 1000 [ 1659.572610][T26413] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1659.597337][T26413] overlayfs: failed to set xattr on upper [ 1659.599228][T26413] overlayfs: ...falling back to redirect_dir=nofollow. [ 1659.617901][T26413] overlayfs: ...falling back to index=off. [ 1659.619943][T26413] overlayfs: conflicting lowerdir path [ 1660.179918][ T37] net_ratelimit: 3 callbacks suppressed [ 1660.179936][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.184452][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.187045][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.189586][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.601773][T26425] Cannot find set identified by id 2 to match [ 1663.860635][T26425] ceph: No mds server is up or the cluster is laggy [ 1663.967544][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.970498][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.973313][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.976230][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.993432][T24056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.996412][T24056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.195699][T26430] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1664.198404][T26430] overlayfs: failed to set xattr on upper [ 1664.200602][T26430] overlayfs: ...falling back to redirect_dir=nofollow. [ 1664.203211][T26430] overlayfs: ...falling back to index=off. [ 1664.205907][T26430] overlayfs: conflicting lowerdir path [ 1664.760201][T26439] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1664.786119][T26439] overlayfs: failed to set xattr on upper [ 1664.788186][T26439] overlayfs: ...falling back to redirect_dir=nofollow. [ 1664.852536][T26439] overlayfs: ...falling back to index=off. [ 1664.880133][T26439] overlayfs: conflicting lowerdir path [ 1665.677731][T26442] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1665.906165][ T48] net_ratelimit: 2 callbacks suppressed [ 1665.906215][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.910882][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.913474][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.916293][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.763580][T26454] xt_connbytes: Forcing CT accounting to be enabled [ 1666.766872][T26454] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1666.827695][T26454] ceph: No mds server is up or the cluster is laggy [ 1666.846679][T24260] libceph: connect (1)[c::]:6789 error -101 [ 1666.861633][T24260] libceph: mon0 (1)[c::]:6789 connect error [ 1669.749869][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.752853][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.755765][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.758685][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.930181][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.932832][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.156502][T26463] binder: 26462:26463 ioctl c0306201 0 returned -14 [ 1670.289802][T26463] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4268'. [ 1670.679986][T26463] Console: switching to colour dummy device 80x25 [ 1671.537258][T26468] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1671.681215][ T60] net_ratelimit: 2 callbacks suppressed [ 1671.681248][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.686101][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.688717][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.691234][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.719994][T26468] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1671.730068][T26468] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1671.742525][T26468] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1671.753146][T26468] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1671.772065][T26468] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 18624 usecs [ 1671.813072][T26468] pci 0000:00:01.0: Adding to iommu group 1 [ 1671.837797][T26468] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1671.840063][T26468] pci 0000:00:01.0: vgaarb: bridge control possible [ 1671.842164][T26468] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1671.910623][T26468] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1671.929192][T26468] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1671.944886][T26468] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1671.989266][T26468] [drm] Found bochs VGA, ID 0xb0c5. [ 1671.998955][T26468] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1672.187062][T26468] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1673.242943][T26487] binder: 26485:26487 ioctl c0506107 80000180 returned -22 [ 1673.971412][T26468] Console: switching to colour frame buffer device 160x50 [ 1673.979847][T26468] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1675.102774][T26494] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1675.167077][T26494] overlayfs: failed to set xattr on upper [ 1675.169271][T26494] overlayfs: ...falling back to redirect_dir=nofollow. [ 1675.211217][T26494] overlayfs: ...falling back to index=off. [ 1675.232551][T26494] overlayfs: conflicting lowerdir path [ 1675.508108][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.510728][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.513276][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.515884][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.169784][T26497] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1676.176639][T26497] overlayfs: failed to set xattr on upper [ 1676.178466][T26497] overlayfs: ...falling back to redirect_dir=nofollow. [ 1676.185143][T26497] overlayfs: ...falling back to index=off. [ 1676.187450][T26497] overlayfs: conflicting lowerdir path [ 1676.496123][T24056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.499003][T24056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.752047][T24056] net_ratelimit: 1 callbacks suppressed [ 1676.752103][T24056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.391598][T26502] kAFS: unable to lookup cell '/,c¾ûL' [ 1677.507435][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.511013][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.513962][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.516824][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.662502][T26502] binder: 26500:26502 ioctl c0506107 80000180 returned -22 [ 1679.401446][T26511] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1679.553139][T26511] overlayfs: failed to set xattr on upper [ 1679.675392][T26511] overlayfs: ...falling back to redirect_dir=nofollow. [ 1679.678339][T26511] overlayfs: ...falling back to index=off. [ 1681.211971][T26511] overlayfs: conflicting lowerdir path [ 1682.830841][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.833490][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.836154][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.838739][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.524297][T26521] kAFS: unable to lookup cell '/,c¾ûL' [ 1683.532527][T26521] binder: 26520:26521 ioctl c0506107 80000180 returned -22 [ 1683.548173][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1683.565484][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1683.573164][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1683.579449][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1683.587290][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1685.301666][ T5745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1685.307413][ T5745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1685.310599][ T5745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1685.522416][ T5745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1685.533342][ T5745] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1685.656023][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1685.835509][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1685.845591][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1685.864003][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1685.878692][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1686.586090][ T24] usb 7-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1686.589018][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.591555][ T24] usb 7-1: Product: syz [ 1686.592903][ T24] usb 7-1: Manufacturer: syz [ 1686.597702][ T24] usb 7-1: SerialNumber: syz [ 1686.902174][T26545] binder: 26544:26545 ioctl c0306201 0 returned -14 [ 1686.990819][T26545] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4284'. [ 1686.996352][T26550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1687.015918][T26550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1687.657535][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.804483][ T5745] Bluetooth: hci4: command tx timeout [ 1687.840134][ T24] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1687.864066][ T24] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1687.994258][ T24] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1688.019259][ T24] usb 7-1: USB disconnect, device number 8 [ 1688.048889][T26183] udevd[26183]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1688.300169][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.302857][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.305516][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.308179][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.593146][T26518] lo speed is unknown, defaulting to 1000 [ 1689.885824][ T5745] Bluetooth: hci4: command tx timeout [ 1691.017317][T20743] netdevsim netdevsim10 eth4: set [1, 0] type 2 family 0 port 256 - 0 [ 1691.024977][T20743] netdevsim netdevsim10 eth4: set [1, 1] type 2 family 0 port 6081 - 0 [ 1691.072426][T26518] lo speed is unknown, defaulting to 1000 [ 1691.964398][ T5745] Bluetooth: hci4: command tx timeout [ 1693.982257][T26576] binder: 26575:26576 ioctl c0506107 80000180 returned -22 [ 1694.020592][T26582] overlayfs: conflicting lowerdir path [ 1694.056680][ T5745] Bluetooth: hci4: command tx timeout [ 1694.422356][T26584] kAFS: unable to lookup cell '/,c¾ûL' [ 1694.432433][T26584] binder: 26583:26584 ioctl c0506107 80000180 returned -22 [ 1694.699542][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.702835][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.706078][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.709243][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.506984][T26588] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1695.526354][T26588] overlayfs: failed to set xattr on upper [ 1695.549392][T26588] overlayfs: ...falling back to redirect_dir=nofollow. [ 1695.569503][T26588] overlayfs: ...falling back to index=off. [ 1695.589497][T26588] overlayfs: conflicting lowerdir path [ 1697.249656][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.541036][T26601] binder: 26600:26601 ioctl c0306201 0 returned -14 [ 1697.580593][T26601] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4293'. [ 1697.628339][T26601] Console: switching to colour dummy device 80x25 [ 1697.832217][T26602] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1698.067231][T26602] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1698.073861][T26602] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1698.090398][T26602] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1698.111530][T26602] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1698.123657][T26602] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 12224 usecs [ 1698.446252][T26602] pci 0000:00:01.0: Adding to iommu group 1 [ 1698.486686][T26602] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1698.489332][T26602] pci 0000:00:01.0: vgaarb: bridge control possible [ 1698.491877][T26602] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1698.638161][T26602] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1698.663274][T26602] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1698.691168][T26602] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1698.783063][T26602] [drm] Found bochs VGA, ID 0xb0c5. [ 1698.814119][T26602] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1698.904998][T26602] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1698.959198][T26518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.001330][T26518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.037327][T26518] bridge_slave_0: entered allmulticast mode [ 1699.059467][T26518] bridge_slave_0: entered promiscuous mode [ 1699.136216][T26518] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.162533][T26518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.222537][T26518] bridge_slave_1: entered allmulticast mode [ 1700.232447][T26518] bridge_slave_1: entered promiscuous mode [ 1701.072000][T26518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1701.104014][T26518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1701.123105][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.126177][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.129030][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.131914][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.249590][T26622] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1701.252673][T26622] overlayfs: failed to set xattr on upper [ 1701.255317][T26622] overlayfs: ...falling back to redirect_dir=nofollow. [ 1701.258477][T26622] overlayfs: ...falling back to index=off. [ 1701.261146][T26622] overlayfs: conflicting lowerdir path [ 1701.524590][T26518] team0: Port device team_slave_0 added [ 1701.708572][T26518] team0: Port device team_slave_1 added [ 1701.722057][T26602] Console: switching to colour frame buffer device 160x50 [ 1701.749812][T26602] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1701.896501][T26518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1701.910551][T26518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1701.943137][T26518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1701.968087][T26518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1701.981951][T26518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1702.028602][T26518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1702.468893][T26518] hsr_slave_0: entered promiscuous mode [ 1702.476023][T26518] hsr_slave_1: entered promiscuous mode [ 1705.107815][T26660] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1705.149165][T26660] overlayfs: failed to set xattr on upper [ 1705.189933][T26660] overlayfs: ...falling back to redirect_dir=nofollow. [ 1705.192220][T26660] overlayfs: ...falling back to index=off. [ 1705.273822][T26660] overlayfs: conflicting lowerdir path [ 1706.086495][T26518] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1706.847029][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.899421][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.902540][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.905482][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.908371][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.204306][T26518] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1707.268004][T26518] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1707.379191][T26665] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1707.381876][T26665] overlayfs: failed to set xattr on upper [ 1707.934130][T26665] overlayfs: ...falling back to redirect_dir=nofollow. [ 1707.936580][T26665] overlayfs: ...falling back to index=off. [ 1707.938794][T26665] overlayfs: conflicting lowerdir path [ 1709.480982][T26518] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1709.696992][T26518] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1710.493461][T26518] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1710.619654][T26518] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1711.269989][T26518] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1712.116237][T26518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1712.700913][T26518] 8021q: adding VLAN 0 to HW filter on device team0 [ 1712.843415][ T249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1712.847361][ T249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1713.172506][ T249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1713.174890][ T249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1714.902797][T26690] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1714.915491][T26690] overlayfs: failed to set xattr on upper [ 1714.920720][T26690] overlayfs: ...falling back to redirect_dir=nofollow. [ 1714.923077][T26690] overlayfs: ...falling back to index=off. [ 1714.950473][T26690] overlayfs: conflicting lowerdir path [ 1715.198731][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.201875][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.204857][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.207712][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1716.096437][T26696] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1716.099096][T26696] overlayfs: failed to set xattr on upper [ 1716.207068][T26696] overlayfs: ...falling back to redirect_dir=nofollow. [ 1716.233413][T26696] overlayfs: ...falling back to index=off. [ 1716.259639][T26696] overlayfs: conflicting lowerdir path [ 1716.456766][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.519055][T26702] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1718.795540][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 1718.795582][ T42] audit: type=1800 audit(1786108933.286:1363): pid=26709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4307" name="enable" dev="configfs" ino=95675 res=0 errno=0 [ 1718.957663][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1719.116463][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1719.179444][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1719.216403][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1719.229024][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1719.286334][ T9] usb 7-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1719.291971][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.299116][ T9] usb 7-1: Product: syz [ 1719.302688][ T9] usb 7-1: Manufacturer: syz [ 1719.309107][ T9] usb 7-1: SerialNumber: syz [ 1720.955030][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.957630][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.960208][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.962764][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.813982][T26720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1722.844694][T26720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1723.206925][T26518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1724.654192][T26518] veth0_vlan: entered promiscuous mode [ 1725.055867][T26518] veth1_vlan: entered promiscuous mode [ 1726.290353][ T9] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1726.309389][ T9] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1726.345006][T19735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.699212][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.704415][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.707926][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.711533][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.557905][T26518] veth0_macvtap: entered promiscuous mode [ 1727.949087][ T9] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1728.322612][ T9] usb 7-1: USB disconnect, device number 9 [ 1728.568264][T26518] veth1_macvtap: entered promiscuous mode [ 1730.475078][T26518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1730.656843][T26518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1730.777119][ T5807] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.780541][ T5807] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.784943][ T5807] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.823605][T26699] udevd[26699]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1731.767396][T26749] kAFS: unable to lookup cell '/,c¾ûL' [ 1731.970332][T26749] binder: 26747:26749 ioctl c0306201 0 returned -14 [ 1732.018778][T26749] binder: 26747:26749 ioctl c0506107 80000180 returned -22 [ 1732.449347][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.452293][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.455085][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.457837][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.996849][T26755] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1732.999611][T26755] overlayfs: failed to set xattr on upper [ 1733.001826][T26755] overlayfs: ...falling back to redirect_dir=nofollow. [ 1733.373906][T26755] overlayfs: ...falling back to index=off. [ 1733.376193][T26755] overlayfs: conflicting lowerdir path [ 1734.679615][T26761] overlayfs: conflicting lowerdir path [ 1735.669425][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.496855][ T5807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1738.897504][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1738.900384][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1738.929482][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.932463][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.935482][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.938462][ T226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.791307][ T42] audit: type=1800 audit(1786108954.276:1364): pid=26773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4315" name="enable" dev="configfs" ino=94902 res=0 errno=0 [ 1740.172905][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.236895][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1742.361843][T19735] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1742.565355][T26782] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1742.570545][T19735] usb 7-1: Using ep0 maxpacket: 16 [ 1742.648505][T19735] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1742.680550][T19735] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1742.702342][T19735] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1742.848721][T19735] usb 7-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1742.851739][T19735] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.939063][T19735] usb 7-1: Product: syz [ 1742.940641][T19735] usb 7-1: Manufacturer: syz [ 1742.989566][T19735] usb 7-1: SerialNumber: syz [ 1744.761580][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.764395][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.767149][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.770328][T24343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.988724][T26796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1745.095148][T26796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1745.126430][T26786] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1745.249836][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.769251][T26810] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1747.891807][T26810] overlayfs: failed to set xattr on upper [ 1747.917652][T26810] overlayfs: ...falling back to redirect_dir=nofollow. [ 1747.920676][T26810] overlayfs: ...falling back to index=off. [ 1748.011213][T26810] overlayfs: conflicting lowerdir path [ 1748.406380][T19735] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1748.558684][T19735] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1748.678962][T26815] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1748.716798][T26815] overlayfs: failed to set xattr on upper [ 1748.767296][T26815] overlayfs: ...falling back to redirect_dir=nofollow. [ 1748.773719][T26815] overlayfs: ...falling back to index=off. [ 1748.803095][T26815] overlayfs: conflicting lowerdir path [ 1749.325779][T26822] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1749.328419][T26822] overlayfs: failed to set xattr on upper [ 1749.462155][T26822] overlayfs: ...falling back to redirect_dir=nofollow. [ 1749.815545][T26822] overlayfs: ...falling back to index=off. [ 1750.098440][T26822] overlayfs: conflicting lowerdir path [ 1750.394076][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.396975][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.399877][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.402863][ T249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.901897][T19735] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1750.953316][T19735] usb 7-1: USB disconnect, device number 10 [ 1751.006059][T26765] udevd[26765]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1751.522808][T26833] kAFS: unable to lookup cell '/,c¾ûL' [ 1751.945920][T26833] binder: 26827:26833 ioctl c0506107 80000180 returned -22 [ 1753.369827][T26840] kAFS: unable to lookup cell '/,c¾ûL' [ 1753.384628][T26840] binder: 26836:26840 ioctl c0306201 0 returned -14 [ 1753.403502][T26840] binder: 26836:26840 ioctl c0506107 80000180 returned -22 [ 1755.982403][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.128323][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.131701][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.134679][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.137537][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.428029][T26846] overlayfs: conflicting lowerdir path [ 1758.702959][T26863] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1758.852031][T26863] overlayfs: failed to set xattr on upper [ 1759.027419][T26863] overlayfs: ...falling back to redirect_dir=nofollow. [ 1759.065749][T26863] overlayfs: ...falling back to index=off. [ 1759.075827][T26863] overlayfs: conflicting lowerdir path [ 1762.042337][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.045013][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.047620][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.050177][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.014381][T26880] binder: 26871:26880 ioctl c0506107 80000180 returned -22 [ 1765.793804][T19735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1766.348747][T26894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4335'. [ 1766.952620][T26904] kAFS: unable to lookup cell '/,c¾ûL' [ 1767.897492][T26904] binder: 26899:26904 ioctl c0506107 80000180 returned -22 [ 1770.164561][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.167404][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.170149][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.172789][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.397527][T26916] kAFS: unable to lookup cell '/,c¾ûL' [ 1774.581433][T26923] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1775.457184][T19735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1777.122565][T26934] overlayfs: conflicting lowerdir path [ 1778.289016][T26943] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1778.293541][T26938] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1778.296188][T26938] overlayfs: failed to set xattr on upper [ 1778.298402][T26938] overlayfs: ...falling back to redirect_dir=nofollow. [ 1778.300563][T26938] overlayfs: ...falling back to index=off. [ 1778.303140][T26938] overlayfs: conflicting lowerdir path [ 1784.941054][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.287747][T26969] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1785.379600][T26969] overlayfs: failed to set xattr on upper [ 1785.381798][T26969] overlayfs: ...falling back to redirect_dir=nofollow. [ 1785.471236][T26969] overlayfs: ...falling back to index=off. [ 1785.473665][T26969] overlayfs: conflicting lowerdir path [ 1788.628123][T26948] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1788.901924][T26948] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000ec: 0000 [#1] SMP KASAN NOPTI [ 1788.905634][T26948] KASAN: null-ptr-deref in range [0x0000000000000760-0x0000000000000767] [ 1788.908350][T26948] CPU: 0 UID: 0 PID: 26948 Comm: syz.3.4346 Tainted: G L syzkaller #0 PREEMPT(full) [ 1788.911695][T26948] Tainted: [L]=SOFTLOCKUP [ 1788.913069][T26948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1788.916223][T26948] RIP: 0010:uvcg_video_init.cold+0x5f/0x135 [ 1788.918090][T26948] Code: e0 2a 80 3c 02 00 74 08 48 89 df e8 7a 31 24 01 48 8b 2b b8 ff ff 37 00 48 c1 e0 2a 48 8d bd 60 07 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b1 00 00 00 48 8d bd 90 07 00 00 b8 ff ff 37 00 [ 1788.924006][T26948] RSP: 0000:ffffc900047b7860 EFLAGS: 00010202 [ 1788.925926][T26948] RAX: dffffc0000000000 RBX: ffff888059392840 RCX: ffffc9000cc04000 [ 1788.928392][T26948] RDX: 00000000000000ec RSI: ffffffff81551106 RDI: 0000000000000760 [ 1788.930857][T26948] RBP: 0000000000000000 R08: 0000000000000007 R09: fffffffffffff000 [ 1788.933312][T26948] R10: fffffffffffffffc R11: 0000000000000000 R12: ffff8880593928a0 [ 1788.935769][T26948] R13: 0000000000000008 R14: ffff8880593926a0 R15: ffff888013a86528 [ 1788.938227][T26948] FS: 0000000000000000(0000) GS:ffff888096bf4000(0063) knlGS:00000000f53e6b40 [ 1788.940995][T26948] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1788.943062][T26948] CR2: 00000000f7f655c0 CR3: 0000000058194000 CR4: 0000000000352ef0 [ 1788.945571][T26948] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1788.948046][T26948] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1788.950512][T26948] Call Trace: [ 1788.951570][T26948] [ 1788.952517][T26948] uvc_function_bind+0x136e/0x1939 [ 1788.954134][T26948] ? __pfx_uvc_function_bind+0x10/0x10 [ 1788.955865][T26948] usb_add_function+0x219/0x890 [ 1788.957436][T26948] ? composite_dev_prepare+0x211/0x420 [ 1788.959305][T26948] configfs_composite_bind+0xd83/0x1960 [ 1788.961057][T26948] ? kernfs_create_link+0x1bd/0x240 [ 1788.962767][T26948] gadget_bind_driver+0x28c/0xbf0 [ 1788.964379][T26948] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1788.966192][T26948] really_probe+0x241/0xa60 [ 1788.967671][T26948] __driver_probe_device+0x20e/0x450 [ 1788.969372][T26948] driver_probe_device+0x4a/0x140 [ 1788.970982][T26948] __driver_attach+0x21f/0x5b0 [ 1788.972522][T26948] ? __pfx___driver_attach+0x10/0x10 [ 1788.974213][T26948] bus_for_each_dev+0x13e/0x1d0 [ 1788.976039][T26948] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1788.978101][T26948] ? bus_add_driver+0x2b5/0x5b0 [ 1788.979839][T26948] bus_add_driver+0x305/0x5b0 [ 1788.981378][T26948] driver_register+0x1e2/0x360 [ 1788.982929][T26948] usb_gadget_register_driver_owner+0x132/0x210 [ 1788.984989][T26948] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 1788.986916][T26948] configfs_write_iter+0x302/0x4e0 [ 1788.988682][T26948] vfs_write+0x6ac/0x1050 [ 1788.990076][T26948] ? __pfx_configfs_write_iter+0x10/0x10 [ 1788.991848][T26948] ? __pfx_vfs_write+0x10/0x10 [ 1788.993388][T26948] ? find_held_lock+0x2b/0x80 [ 1788.994901][T26948] ksys_write+0x12a/0x250 [ 1788.996309][T26948] ? __pfx_ksys_write+0x10/0x10 [ 1788.997872][T26948] __do_fast_syscall_32+0xe7/0x970 [ 1788.999518][T26948] do_fast_syscall_32+0x32/0x70 [ 1789.001140][T26948] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1789.003192][T26948] RIP: 0023:0xf7f25fec [ 1789.004506][T26948] Code: Unable to access opcode bytes at 0xf7f25fc2. [ 1789.006646][T26948] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1789.009342][T26948] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000640 [ 1789.011846][T26948] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 1789.014357][T26948] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1789.016885][T26948] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1789.019844][T26948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1789.022632][T26948] [ 1789.023697][T26948] Modules linked in: [ 1789.030360][T26948] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1789.407174][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.410021][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.412773][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.415527][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.588157][T26982] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1789.616566][T26982] overlayfs: failed to set xattr on upper [ 1789.671557][T26982] overlayfs: ...falling back to redirect_dir=nofollow. [ 1789.718770][T26982] overlayfs: ...falling back to index=off. [ 1789.753018][T26982] overlayfs: conflicting lowerdir path [ 1790.230607][T26948] RIP: 0010:uvcg_video_init.cold+0x5f/0x135 [ 1790.256073][T26948] Code: e0 2a 80 3c 02 00 74 08 48 89 df e8 7a 31 24 01 48 8b 2b b8 ff ff 37 00 48 c1 e0 2a 48 8d bd 60 07 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b1 00 00 00 48 8d bd 90 07 00 00 b8 ff ff 37 00 [ 1790.372142][T26948] RSP: 0000:ffffc900047b7860 EFLAGS: 00010202 [ 1790.412186][T26948] RAX: dffffc0000000000 RBX: ffff888059392840 RCX: ffffc9000cc04000 [ 1790.477462][T26948] RDX: 00000000000000ec RSI: ffffffff81551106 RDI: 0000000000000760 [ 1790.495553][T26948] RBP: 0000000000000000 R08: 0000000000000007 R09: fffffffffffff000 [ 1790.513659][T26948] R10: fffffffffffffffc R11: 0000000000000000 R12: ffff8880593928a0 [ 1790.523628][T26948] R13: 0000000000000008 R14: ffff8880593926a0 R15: ffff888013a86528 [ 1790.537762][T26948] FS: 0000000000000000(0000) GS:ffff888096df4000(0063) knlGS:00000000f53e6b40 [ 1790.568998][T26948] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1790.571226][T26948] CR2: 000055e602e87508 CR3: 0000000058194000 CR4: 0000000000352ef0 [ 1790.606929][T26948] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1790.616444][T26948] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1790.624095][T26948] Kernel panic - not syncing: Fatal exception [ 1790.626726][T26948] Kernel Offset: disabled [ 1790.628128][T26948] Rebooting in 86400 seconds..