last executing test programs: 8.50635874s ago: executing program 0 (id=204): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100fce377576dbc4414a90ab8eabccfbae90bbf164548343e4358489eb757c92073182da304b7a4854579f095813929dfab79b8db0131df9e0349e914a8a86a4e9dfa2a4c0d3da7722154be6477d61c8ec2882988fc44d7d21a6cbd4c0ea5de21e6e893c139"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(0x0, 0x13b) socket$inet6(0xa, 0x80001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000940)='dummy_udc.0', 0xb) 7.566946232s ago: executing program 3 (id=206): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) 7.488464504s ago: executing program 2 (id=207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x51}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0x7, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, 0xffffffffffffffff, 0xb}) syz_open_dev$swradio(0x0, 0x1, 0x2) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) io_submit(0x0, 0x1c, &(0x7f0000000000)) 7.24688951s ago: executing program 3 (id=209): r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000000)=0xe9, 0x4) 7.159840581s ago: executing program 3 (id=210): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x50440, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="f7a5ba777a8879895b5cd59d93fcad93"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b01, 0x0) read(r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) chdir(0x0) prlimit64(0x0, 0x3, &(0x7f0000000200)={0x8, 0x100}, 0x0) r6 = getpid() r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r8 = syz_io_uring_setup(0x126b, &(0x7f0000000640)={0x0, 0x200072db, 0x0, 0x8001, 0x27f}, &(0x7f00000006c0)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000500)=0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r8, 0x2, 0x0, 0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000440)={0x2e, 0x41, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x3, 0xc5e, 0x0, 0x0, 0x1000, 0x8000, 0x0, 0x0, 0x10}}}, &(0x7f00000004c0)) sched_setscheduler(r6, 0x0, &(0x7f0000000240)=0x7) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sync() sync() sync() ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netpci0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x5, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0x7}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0xae0, 0x7fffffff, 0xd03, 0x8, 0x20076f1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008851}, 0x0) 5.899199171s ago: executing program 1 (id=213): syz_io_uring_setup(0x50d1, &(0x7f00000001c0)={0x0, 0xfe50, 0x8, 0x0, 0x259}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) r0 = syz_open_dev$video(&(0x7f0000000000), 0xa8384043, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0x2, 0x0, 0x55595659, 0x0, 0x0, 0x0, 0x9, 0x1}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x9b5825, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0x1, 0x3f, 0xa, 0x70, 0x67}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000002700)={0x2020}, 0x2020) 5.735788735s ago: executing program 0 (id=214): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x505043, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) syz_open_dev$vim2m(&(0x7f00000003c0), 0x6, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socket$inet(0x2, 0x4000000000000001, 0x0) getpid() r1 = syz_usbip_server_init(0x1) write$usbip_server(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000003"], 0x35) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000100)) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000440)={0x7, "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"}) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r5], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x8000) 5.665819767s ago: executing program 2 (id=215): syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) syz_open_dev$mouse(&(0x7f0000000d00), 0x0, 0x2042) pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x8000000000000001}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0xc, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 5.630083948s ago: executing program 1 (id=216): mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='stm32g0-typec 0x3', 0x11) 5.495997621s ago: executing program 1 (id=217): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) 5.136098489s ago: executing program 3 (id=218): mkdir(&(0x7f0000000000)='./mydebug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydebug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mydebug/dynamic_debug/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='file amd5536udc_pci.c +p\n', 0x19) 4.66564679s ago: executing program 2 (id=219): write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x7) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x66dbf000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) pselect6(0x40, &(0x7f0000000040)={0x9, 0x800, 0x2, 0x300, 0x0, 0x10000000, 0x0, 0x4}, 0x0, &(0x7f0000000100)={0xf2, 0x3, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x13f) openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') 4.612068392s ago: executing program 3 (id=220): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0}, 0x1f}], 0x0, 0x0, 0x0}) 4.609840832s ago: executing program 0 (id=221): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0xfffc, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0xfffffffe}}}, 0x32) 4.046981705s ago: executing program 3 (id=222): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100fce377576dbc4414a90ab8eabccfbae90bbf164548343e4358489eb757c92073182da304b7a4854579f095813929dfab79b8db0131df9e0349e914a8a86a4e9dfa2a4c0d3da7722154be6477d61c8ec2882988fc44d7d21a6cbd4c0ea5de21e6e893c139"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(0x0, 0x13b) socket$inet6(0xa, 0x80001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000940)='dummy_udc.0', 0xb) 3.707327533s ago: executing program 0 (id=223): socket$key(0xf, 0x3, 0x2) r0 = socket(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r2) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r3 = syz_open_pts(r2, 0x80) dup3(r3, r2, 0x80000) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000180)={0xffff, 0xd4, 0x3, 0x400c, 0x5, "73309be7b71700", 0x70000000, 0x1ff}) read(r2, &(0x7f00000002c0)=""/228, 0xe4) sendmsg$key(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0216090602f6ff0029bd7000fddbdf25176f1484a9b58f2f7b6f624ae5566357c260dfeaa3944784ea88ff00af77347ebea548fff45401e2bfadc37acdf643f471cf06146a65e89a"], 0x10}}, 0x804) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x1b8, 0x12, 0x600, 0x0, 0x202, 0x388, 0x2e8, 0x2e8, 0x388, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000050000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x4}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1776b4318bae1944}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:fuse_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0xfffffffe}]}, 0x30}}, 0x0) 3.706813663s ago: executing program 1 (id=224): syz_io_uring_setup(0x50d1, &(0x7f00000001c0)={0x0, 0xfe50, 0x8, 0x0, 0x259}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) r0 = syz_open_dev$video(&(0x7f0000000000), 0xa8384043, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0x2, 0x0, 0x55595659, 0x0, 0x0, 0x0, 0x9, 0x1}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x9b5825, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0x1, 0x3f, 0xa, 0x70, 0x67}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000002700)={0x2020}, 0x2020) 3.655908474s ago: executing program 2 (id=225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x51}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0x7, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, 0xffffffffffffffff, 0xb}) r7 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) io_submit(0x0, 0x1c, &(0x7f0000000000)) 1.424543956s ago: executing program 0 (id=226): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01042ebdb26afcdbdf251600000018000180140002006e657464657673696d30000000000000050002"], 0x34}}, 0x14008080) 1.407841427s ago: executing program 1 (id=227): syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) syz_open_dev$mouse(&(0x7f0000000d00), 0x0, 0x2042) pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x8000000000000001}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0xc, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 347.991172ms ago: executing program 0 (id=228): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r0, &(0x7f00000004c0)='\n', 0x1) 224.833625ms ago: executing program 2 (id=229): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000300)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[], 0x88) 220.723105ms ago: executing program 1 (id=230): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x505043, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) syz_open_dev$vim2m(&(0x7f00000003c0), 0x6, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socket$inet(0x2, 0x4000000000000001, 0x0) getpid() r1 = syz_usbip_server_init(0x1) write$usbip_server(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000003"], 0x35) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000100)) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000440)={0x7, "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"}) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r5], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x8000) 0s ago: executing program 2 (id=231): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0}, 0x1f}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts. [ 66.775988][ T5756] cgroup: Unknown subsys name 'net' [ 66.906818][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.340079][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.103017][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.111570][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.130361][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.133642][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.138469][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.146643][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.152429][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.160430][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.167023][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.173902][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.179907][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.190895][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.194241][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.202257][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.208729][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.222459][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.222496][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.236856][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.236879][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.251647][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.252168][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.266634][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.274244][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.293789][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.676016][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 70.779629][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 70.804775][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 70.871768][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.878948][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.889012][ T5771] bridge_slave_0: entered allmulticast mode [ 70.896445][ T5771] bridge_slave_0: entered promiscuous mode [ 70.912873][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 70.926534][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.933800][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.941082][ T5771] bridge_slave_1: entered allmulticast mode [ 70.947746][ T5771] bridge_slave_1: entered promiscuous mode [ 71.041232][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.048417][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.055798][ T5769] bridge_slave_0: entered allmulticast mode [ 71.062585][ T5769] bridge_slave_0: entered promiscuous mode [ 71.079947][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.087267][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.094530][ T5769] bridge_slave_1: entered allmulticast mode [ 71.101824][ T5769] bridge_slave_1: entered promiscuous mode [ 71.111901][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.131751][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.138902][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.146817][ T5770] bridge_slave_0: entered allmulticast mode [ 71.154324][ T5770] bridge_slave_0: entered promiscuous mode [ 71.183773][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.206777][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.214096][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.221635][ T5770] bridge_slave_1: entered allmulticast mode [ 71.228285][ T5770] bridge_slave_1: entered promiscuous mode [ 71.247247][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.259562][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.305226][ T5771] team0: Port device team_slave_0 added [ 71.314384][ T5771] team0: Port device team_slave_1 added [ 71.340927][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.358912][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.366210][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.373935][ T5768] bridge_slave_0: entered allmulticast mode [ 71.380925][ T5768] bridge_slave_0: entered promiscuous mode [ 71.388339][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.395630][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.402976][ T5768] bridge_slave_1: entered allmulticast mode [ 71.409639][ T5768] bridge_slave_1: entered promiscuous mode [ 71.425600][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.437306][ T5769] team0: Port device team_slave_0 added [ 71.455277][ T5769] team0: Port device team_slave_1 added [ 71.462256][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.469212][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.495350][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.509778][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.516794][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.537467][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.542813][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.549278][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.614856][ T5770] team0: Port device team_slave_0 added [ 71.622868][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.634671][ T5770] team0: Port device team_slave_1 added [ 71.657718][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.685584][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.692752][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.718998][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.740065][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.747106][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.778262][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.804950][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.812005][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.837993][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.859441][ T5768] team0: Port device team_slave_0 added [ 71.874724][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.881917][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.908213][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.921930][ T5768] team0: Port device team_slave_1 added [ 71.939784][ T5771] hsr_slave_0: entered promiscuous mode [ 71.946927][ T5771] hsr_slave_1: entered promiscuous mode [ 72.013388][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.020626][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.046790][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.060149][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.067206][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.093405][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.132541][ T5769] hsr_slave_0: entered promiscuous mode [ 72.138750][ T5769] hsr_slave_1: entered promiscuous mode [ 72.144958][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.152840][ T5769] Cannot create hsr debugfs directory [ 72.180972][ T5770] hsr_slave_0: entered promiscuous mode [ 72.187193][ T5770] hsr_slave_1: entered promiscuous mode [ 72.193583][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.202126][ T5770] Cannot create hsr debugfs directory [ 72.311814][ T5768] hsr_slave_0: entered promiscuous mode [ 72.318138][ T5768] hsr_slave_1: entered promiscuous mode [ 72.324658][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.333034][ T5768] Cannot create hsr debugfs directory [ 72.333157][ T51] Bluetooth: hci0: command tx timeout [ 72.344030][ T5783] Bluetooth: hci2: command tx timeout [ 72.344197][ T5783] Bluetooth: hci3: command tx timeout [ 72.350046][ T5782] Bluetooth: hci1: command tx timeout [ 72.615522][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.627864][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.638748][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.651334][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.721473][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.736705][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.749318][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.760847][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.833216][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.857745][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.868196][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.877720][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.968230][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.992414][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.000182][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.032918][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.042382][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.075094][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.103675][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.111101][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.146959][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.154235][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.199010][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.231151][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.248515][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.286685][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.294277][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.316994][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.324188][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.349337][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.413910][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.421108][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.446381][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.475819][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.483062][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.509057][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.559862][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.567030][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.589754][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.596974][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.715999][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.785969][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.902897][ T5771] veth0_vlan: entered promiscuous mode [ 73.956685][ T5771] veth1_vlan: entered promiscuous mode [ 74.016933][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.078972][ T5771] veth0_macvtap: entered promiscuous mode [ 74.119525][ T5771] veth1_macvtap: entered promiscuous mode [ 74.154849][ T5768] veth0_vlan: entered promiscuous mode [ 74.174163][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.189294][ T5768] veth1_vlan: entered promiscuous mode [ 74.203927][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.213356][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.239969][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.254747][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.264737][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.275698][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.284478][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.393575][ T5770] veth0_vlan: entered promiscuous mode [ 74.403282][ T5768] veth0_macvtap: entered promiscuous mode [ 74.410707][ T5782] Bluetooth: hci1: command tx timeout [ 74.410787][ T5084] Bluetooth: hci3: command tx timeout [ 74.416112][ T5782] Bluetooth: hci2: command tx timeout [ 74.422395][ T51] Bluetooth: hci0: command tx timeout [ 74.462424][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.472130][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.489392][ T5770] veth1_vlan: entered promiscuous mode [ 74.497674][ T5768] veth1_macvtap: entered promiscuous mode [ 74.529489][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.541982][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.553741][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.572199][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.583037][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.594226][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.614923][ T5769] veth0_vlan: entered promiscuous mode [ 74.629251][ T5769] veth1_vlan: entered promiscuous mode [ 74.641965][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.652304][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.662975][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.672005][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.688351][ T5770] veth0_macvtap: entered promiscuous mode [ 74.694278][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.706540][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.738188][ T5770] veth1_macvtap: entered promiscuous mode [ 74.804575][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.820800][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.831578][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.842450][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.854255][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.867998][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.879435][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.891842][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.904098][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.916047][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.926748][ T5769] veth0_macvtap: entered promiscuous mode [ 74.948157][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.978869][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.991781][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.001832][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.024950][ T5769] veth1_macvtap: entered promiscuous mode [ 75.080134][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.097839][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.109235][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.125079][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.144891][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.155855][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.172056][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.186840][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.199943][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.302440][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.321236][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.334461][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.345737][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.360375][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.372477][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.390741][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.420729][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.428681][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.453122][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.467694][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.476877][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.485983][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.564344][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.604660][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.646000][ T5834] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 75.736978][ T5834] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.789184][ T5030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.808974][ T5030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.910468][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.918424][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.028658][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.062136][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.490528][ T51] Bluetooth: hci0: command tx timeout [ 76.496071][ T51] Bluetooth: hci3: command tx timeout [ 76.501843][ T5084] Bluetooth: hci1: command tx timeout [ 76.502033][ T5782] Bluetooth: hci2: command tx timeout [ 77.263302][ T5849] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.395141][ T5856] kvm: kvm [5853]: vcpu0, guest rIP: 0x1a2 Unhandled WRMSR(0xc1) = 0xffff1af0000f010e [ 78.415358][ T5856] kvm: kvm [5853]: vcpu0, guest rIP: 0x1a2 Unhandled WRMSR(0xc1) = 0xffffdff0000f010e [ 78.570874][ T5782] Bluetooth: hci2: command tx timeout [ 78.570905][ T51] Bluetooth: hci0: command tx timeout [ 78.581764][ T5782] Bluetooth: hci3: command tx timeout [ 78.581792][ T5782] Bluetooth: hci1: command tx timeout [ 81.775450][ T5861] syz.3.8 (5861): drop_caches: 2 [ 84.167887][ T5889] ucsi-stm32g0-i2c 0-0003: i2c read 03, 00 error: 0 [ 84.200724][ T5889] ucsi-stm32g0-i2c: probe of 0-0003 failed with error -5 [ 84.232543][ T5889] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x03 [ 84.548470][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 84.562913][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 84.574562][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 84.584854][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 84.602780][ T5904] 9pnet_virtio: no channels available for device syz [ 85.428142][ T5910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23'. [ 85.460659][ T5776] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.707828][ T5776] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.349940][ T5776] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 87.360773][ T27] cfg80211: failed to load regulatory.db [ 87.380284][ T5776] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.389622][ T5776] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 87.426260][ T5776] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.452853][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.479661][ T5776] usb 4-1: Product: syz [ 87.495892][ T5776] usb 4-1: Manufacturer: syz [ 89.048617][ T5776] usb 4-1: can't set config #1, error -71 [ 89.117781][ T5776] usb 4-1: USB disconnect, device number 2 [ 90.753393][ T5944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.32'. [ 92.742371][ T5955] tipc: Started in network mode [ 92.777785][ T5955] tipc: Node identity 0a8b7342c557, cluster identity 4711 [ 92.842439][ T5955] tipc: Enabled bearer , priority 0 [ 92.905871][ T5954] tipc: Disabling bearer [ 93.456343][ T5969] Zero length message leads to an empty skb [ 94.439775][ T5969] Config c/1 of g1 needs at least one function. [ 94.448167][ T5969] udc dummy_udc.0: failed to start g1: -22 [ 94.455725][ T5969] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 94.466178][ T5969] UDC core: g1: couldn't find an available UDC or it's busy [ 94.555822][ T5978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.44'. [ 97.045638][ T5991] tipc: Started in network mode [ 97.095683][ T5991] tipc: Node identity e24da8c376b5, cluster identity 4711 [ 97.141869][ T5991] tipc: Enabled bearer , priority 0 [ 97.221925][ T5996] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 97.234577][ T5990] tipc: Disabling bearer [ 97.337476][ T6000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.621960][ T6011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.56'. [ 100.462678][ T6024] veth1_vlan: entered allmulticast mode [ 101.170570][ T6036] tipc: Enabled bearer , priority 0 [ 101.188935][ T6036] syzkaller0: entered promiscuous mode [ 101.210997][ T6036] syzkaller0: entered allmulticast mode [ 101.219958][ T6034] Config c/1 of g1 needs at least one function. [ 101.227475][ T6034] udc dummy_udc.0: failed to start g1: -22 [ 101.239103][ T6034] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 101.259331][ T6037] tipc: Resetting bearer [ 101.273037][ T6035] tipc: Resetting bearer [ 101.288163][ T6035] tipc: Disabling bearer [ 101.296548][ T6034] UDC core: g1: couldn't find an available UDC or it's busy [ 101.334341][ T6039] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 101.471231][ T6042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.65'. [ 101.593709][ T6047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.480903][ T6057] i2c i2c-0: Failed to register i2c client stm32g0-typec at 0x03 (-16) [ 103.572350][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'. [ 103.609392][ T6055] veth1_vlan: entered allmulticast mode [ 104.240756][ T6070] tipc: Enabled bearer , priority 0 [ 104.289385][ T6070] syzkaller0: entered promiscuous mode [ 104.317801][ T6070] syzkaller0: entered allmulticast mode [ 104.393685][ T6070] tipc: Resetting bearer [ 104.409689][ T6067] tipc: Resetting bearer [ 104.511464][ T6067] tipc: Disabling bearer [ 104.593385][ T6083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.731676][ T6087] i2c i2c-0: Failed to register i2c client stm32g0-typec at 0x03 (-16) [ 107.316636][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'. [ 107.338219][ T6097] geneve0: entered promiscuous mode [ 107.347506][ T6097] geneve0: entered allmulticast mode [ 108.613664][ T6129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.680740][ T6131] tipc: Enabled bearer , priority 0 [ 108.689200][ T6131] syzkaller0: entered promiscuous mode [ 108.695845][ T6131] syzkaller0: entered allmulticast mode [ 108.745991][ T6131] tipc: Resetting bearer [ 108.960944][ T6130] tipc: Resetting bearer [ 109.064974][ T6130] tipc: Disabling bearer [ 110.033436][ T6143] process 'syz.1.95' launched './file2' with NULL argv: empty string added [ 110.996733][ T6151] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 112.670526][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.97'. [ 112.728430][ T6155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.740009][ T6168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.784045][ T6160] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.866082][ T6170] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 112.874607][ T6170] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 112.884725][ T6170] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 112.892765][ T6170] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 113.560135][ T6160] bond1: (slave team0): Enslaving as an active interface with an up link [ 113.665696][ T6160] bond1: entered promiscuous mode [ 113.690113][ T6160] team0: entered promiscuous mode [ 113.700929][ T6160] team_slave_0: entered promiscuous mode [ 113.706869][ T6160] team_slave_1: entered promiscuous mode [ 113.725921][ T6160] bond1: entered allmulticast mode [ 113.735568][ T6160] team0: entered allmulticast mode [ 113.740862][ T6160] team_slave_0: entered allmulticast mode [ 113.752067][ T28] audit: type=1800 audit(1785000859.913:2): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.102" name="bcdDevice" dev="configfs" ino=9237 res=0 errno=0 [ 113.760133][ T6160] team_slave_1: entered allmulticast mode [ 115.891324][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 115.969613][ T6202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.159959][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.116'. [ 122.209878][ T6214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.227596][ T6214] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.241043][ T6214] bond1: (slave team0): Enslaving as an active interface with an up link [ 122.298110][ T6214] bond1: entered promiscuous mode [ 122.313880][ T6214] team0: entered promiscuous mode [ 122.318972][ T6214] team_slave_0: entered promiscuous mode [ 122.325612][ T6214] team_slave_1: entered promiscuous mode [ 122.331750][ T6214] bond1: entered allmulticast mode [ 122.336889][ T6214] team0: entered allmulticast mode [ 122.342297][ T6214] team_slave_0: entered allmulticast mode [ 122.373324][ T6214] team_slave_1: entered allmulticast mode [ 123.274339][ T6234] netlink: 28 bytes leftover after parsing attributes in process `syz.2.123'. [ 123.356821][ T6238] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 123.363732][ T6238] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 123.374977][ T6238] vhci_hcd vhci_hcd.0: Device attached [ 123.382534][ T6239] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 0 [ 123.419011][ T59] vhci_hcd: stop threads [ 123.431068][ T6238] netlink: 'syz.1.124': attribute type 1 has an invalid length. [ 123.458596][ T59] vhci_hcd: release socket [ 123.468361][ T59] vhci_hcd: disconnect device [ 123.526772][ T6249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.552610][ T6238] bond1: option mode: invalid value (18) [ 123.563921][ T6238] bond1 (unregistering): Released all slaves [ 123.611533][ T6247] tipc: Enabled bearer , priority 0 [ 123.645234][ T6247] syzkaller0: entered promiscuous mode [ 123.654266][ T6247] syzkaller0: entered allmulticast mode [ 123.673009][ T6247] tipc: Resetting bearer [ 123.701291][ T6246] tipc: Resetting bearer [ 123.739312][ T6246] tipc: Disabling bearer [ 124.770438][ T6256] binder_alloc: 6255: binder_alloc_buf, no vma [ 125.304789][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.132'. [ 125.918311][ T6273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.133'. [ 126.582913][ T6267] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.606041][ T6260] bond1: (slave team0): Releasing backup interface [ 126.655825][ T6260] team0: left promiscuous mode [ 126.693175][ T6260] team_slave_0: left promiscuous mode [ 126.720738][ T6260] team_slave_1: left promiscuous mode [ 126.744643][ T6260] team0: left allmulticast mode [ 126.763998][ T6260] team_slave_0: left allmulticast mode [ 126.781131][ T6260] team_slave_1: left allmulticast mode [ 126.833346][ T6260] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.883902][ T6260] bond2: (slave team0): Enslaving as an active interface with an up link [ 126.918194][ T6260] syz.3.132 (6260) used greatest stack depth: 20808 bytes left [ 126.991781][ T6270] bond2: entered promiscuous mode [ 127.015568][ T6270] team0: entered promiscuous mode [ 127.037134][ T6270] team_slave_0: entered promiscuous mode [ 127.059497][ T6270] team_slave_1: entered promiscuous mode [ 127.084539][ T6270] bond2: entered allmulticast mode [ 127.105849][ T6270] team0: entered allmulticast mode [ 127.122512][ T6270] team_slave_0: entered allmulticast mode [ 127.136955][ T6270] team_slave_1: entered allmulticast mode [ 127.184140][ T6272] netlink: 'syz.2.133': attribute type 3 has an invalid length. [ 127.569990][ T6281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.136'. [ 127.682842][ T6286] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 127.689519][ T6286] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 127.704599][ T6290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.726818][ T6286] vhci_hcd vhci_hcd.0: Device attached [ 127.757170][ T6286] netlink: 'syz.0.138': attribute type 1 has an invalid length. [ 127.795476][ T6294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.844641][ T6286] bond1: option mode: invalid value (18) [ 127.859070][ T6286] bond1 (unregistering): Released all slaves [ 127.863200][ T6294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.922411][ T6294] syz.1.139 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 128.010814][ T173] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 128.538088][ T6287] vhci_hcd: connection reset by peer [ 128.581341][ T42] vhci_hcd: stop threads [ 128.635908][ T42] vhci_hcd: release socket [ 128.692547][ T42] vhci_hcd: disconnect device [ 128.746744][ T6295] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 128.834767][ T6304] binder_alloc: 6303: binder_alloc_buf, no vma [ 128.863484][ T6295] bond2 (unregistering): Released all slaves [ 129.174582][ T6315] netlink: 'syz.3.145': attribute type 3 has an invalid length. [ 129.186646][ T6315] netlink: 20 bytes leftover after parsing attributes in process `syz.3.145'. [ 129.271396][ T6311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.144'. [ 129.530567][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 130.487568][ T6311] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.875530][ T6316] bond1: (slave team0): Releasing backup interface [ 130.948761][ T6316] team0: left promiscuous mode [ 130.975289][ T6316] team_slave_0: left promiscuous mode [ 131.037852][ T6316] team_slave_1: left promiscuous mode [ 131.087880][ T6316] team0: left allmulticast mode [ 131.139966][ T6316] team_slave_0: left allmulticast mode [ 131.183713][ T6316] team_slave_1: left allmulticast mode [ 131.284144][ T6316] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.386269][ T6316] bond2: (slave team0): Enslaving as an active interface with an up link [ 131.465776][ T6318] bond2: entered promiscuous mode [ 131.473437][ T6318] team0: entered promiscuous mode [ 131.478932][ T6318] team_slave_0: entered promiscuous mode [ 131.500768][ T6318] team_slave_1: entered promiscuous mode [ 131.548140][ T6318] bond2: entered allmulticast mode [ 131.584508][ T6318] team0: entered allmulticast mode [ 131.613406][ T6318] team_slave_0: entered allmulticast mode [ 131.628831][ T6318] team_slave_1: entered allmulticast mode [ 131.744648][ T6331] binder: BINDER_SET_CONTEXT_MGR already set [ 131.758346][ T6331] binder: 6330:6331 ioctl 4018620d 2000000002c0 returned -16 [ 133.001080][ T6341] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 133.007743][ T6341] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 133.034576][ T6341] vhci_hcd vhci_hcd.0: Device attached [ 133.041245][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.047835][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.105335][ T6344] vhci_hcd: connection closed [ 133.106479][ T42] vhci_hcd: stop threads [ 133.118070][ T42] vhci_hcd: release socket [ 133.134383][ T42] vhci_hcd: disconnect device [ 133.210646][ T173] vhci_hcd: vhci_device speed not set [ 133.291185][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.158'. [ 133.338790][ T6357] 8021q: adding VLAN 0 to HW filter on device bond3 [ 133.607772][ T6357] bond2: (slave team0): Releasing backup interface [ 133.708039][ T6357] team0: left promiscuous mode [ 133.731245][ T6357] team_slave_0: left promiscuous mode [ 133.777744][ T6357] team_slave_1: left promiscuous mode [ 133.834076][ T6357] team0: left allmulticast mode [ 133.884670][ T6357] team_slave_0: left allmulticast mode [ 133.933533][ T6357] team_slave_1: left allmulticast mode [ 134.054086][ T6357] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.212263][ T6357] bond3: (slave team0): Enslaving as an active interface with an up link [ 134.293734][ T6368] bond3: entered promiscuous mode [ 134.298869][ T6368] team0: entered promiscuous mode [ 134.324424][ T6368] team_slave_0: entered promiscuous mode [ 134.336286][ T6368] team_slave_1: entered promiscuous mode [ 134.343705][ T6368] bond3: entered allmulticast mode [ 134.348863][ T6368] team0: entered allmulticast mode [ 134.358298][ T6368] team_slave_0: entered allmulticast mode [ 134.366001][ T6368] team_slave_1: entered allmulticast mode [ 134.660416][ T5828] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 134.850605][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 134.869910][ T6393] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 134.876569][ T6393] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 134.884960][ T5828] usb 4-1: config index 0 descriptor too short (expected 15270, got 18) [ 134.901682][ T5828] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 134.905974][ T6393] vhci_hcd vhci_hcd.0: Device attached [ 134.925885][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.930130][ T6394] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 0 [ 134.960412][ T5828] usb 4-1: Product: syz [ 134.964643][ T5828] usb 4-1: Manufacturer: syz [ 134.976380][ T59] vhci_hcd: stop threads [ 134.985394][ T5828] usb 4-1: SerialNumber: syz [ 134.993894][ T59] vhci_hcd: release socket [ 135.020549][ T59] vhci_hcd: disconnect device [ 135.352444][ T5828] usb 4-1: config 0 descriptor?? [ 135.823480][ T5828] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 135.842397][ T5828] dvb-usb: bulk message failed: -22 (4/0) [ 135.848472][ T5828] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 135.875055][ T5828] dvb-usb: bulk message failed: -22 (5/0) [ 135.881689][ T5828] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 135.922710][ T5828] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 135.934403][ T5828] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 135.944176][ T5828] usb 4-1: media controller created [ 135.971515][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.012026][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.175'. [ 136.115244][ T6372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.235368][ T6372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.410317][ T5783] Bluetooth: hci1: command tx timeout [ 136.540533][ T789] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 136.840463][ T789] usb 3-1: Using ep0 maxpacket: 32 [ 136.936253][ T789] usb 3-1: config 0 has no interfaces? [ 136.972288][ T6402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.005311][ T789] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 137.091673][ T789] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 138.068539][ T5828] usb 4-1: selecting invalid altsetting 3 [ 138.223294][ T5828] ttusb2: set interface to alts=3 failed [ 138.232297][ T789] usb 3-1: Product: syz [ 138.233171][ T6403] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.236483][ T789] usb 3-1: Manufacturer: syz [ 138.236528][ T789] usb 3-1: SerialNumber: syz [ 138.245144][ T6403] bond1: (slave team0): Enslaving as an active interface with an up link [ 138.307991][ T789] usb 3-1: config 0 descriptor?? [ 138.335077][ T6415] bond1: entered promiscuous mode [ 138.351619][ T6415] team0: entered promiscuous mode [ 138.358005][ T6415] team_slave_0: entered promiscuous mode [ 138.367928][ T6415] team_slave_1: entered promiscuous mode [ 138.374040][ T6415] bond1: entered allmulticast mode [ 138.380902][ T5828] DVB: Unable to find symbol tda10086_attach() [ 138.383908][ T6415] team0: entered allmulticast mode [ 138.387151][ T5828] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 138.392957][ T6415] team_slave_0: entered allmulticast mode [ 138.408801][ T6415] team_slave_1: entered allmulticast mode [ 138.507407][ T5828] dvb-usb: bulk message failed: -22 (4/0) [ 138.540360][ T5828] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 138.592599][ T5828] dvb-usb: bulk message failed: -22 (5/0) [ 138.624163][ T5828] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 138.670404][ T5828] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 138.753651][ T5828] usb 4-1: USB disconnect, device number 3 [ 138.879904][ T5828] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 139.869754][ T789] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 140.629596][ T5776] usb 3-1: USB disconnect, device number 2 [ 140.714174][ T6440] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 140.720839][ T6440] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 140.733862][ T6440] vhci_hcd vhci_hcd.0: Device attached [ 140.749598][ T6441] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 0 [ 140.764286][ T42] vhci_hcd: stop threads [ 140.774696][ T42] vhci_hcd: release socket [ 140.779251][ T42] vhci_hcd: disconnect device [ 140.819705][ T789] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.850367][ T789] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 140.874279][ T789] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.909774][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.939076][ T789] usb 1-1: Product: syz [ 140.953614][ T789] usb 1-1: Manufacturer: syz [ 140.965570][ T789] usb 1-1: SerialNumber: syz [ 141.012034][ T789] cdc_mbim 1-1:1.0: skipping garbage [ 141.087963][ T28] audit: type=1800 audit(1785000887.243:3): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.186" name="file0" dev="overlay" ino=256 res=0 errno=0 [ 141.228103][ T6427] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 141.519815][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.189'. [ 141.594851][ T6473] binder: BINDER_SET_CONTEXT_MGR already set [ 141.600842][ T6465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.604400][ T6473] binder: 6472:6473 ioctl 4018620d 2000000002c0 returned -16 [ 141.660148][ T6478] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.722468][ T6478] bond1: (slave team0): Enslaving as an active interface with an up link [ 141.781215][ T6465] bond1: entered promiscuous mode [ 141.796542][ T6465] team0: entered promiscuous mode [ 141.806679][ T6465] team_slave_0: entered promiscuous mode [ 141.819402][ T6465] team_slave_1: entered promiscuous mode [ 141.825794][ T6465] bond1: entered allmulticast mode [ 141.843990][ T6427] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 141.919679][ T789] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 142.057193][ T6465] team0: entered allmulticast mode [ 142.092800][ T789] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 142.219471][ T6465] team_slave_0: entered allmulticast mode [ 142.356499][ T6465] team_slave_1: entered allmulticast mode [ 142.388952][ T6427] libceph: resolve '400' (ret=-3): failed [ 142.506895][ T789] wwan wwan0: port wwan0mbim0 attached [ 143.341145][ T789] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, ee:3c:54:e4:2d:eb [ 143.480618][ T789] usb 1-1: USB disconnect, device number 2 [ 143.487905][ T789] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 143.527803][ T6494] mac80211_hwsim hwsim8 »»»»»»: renamed from wlan0 (while UP) [ 143.777085][ T6499] netlink: 16 bytes leftover after parsing attributes in process `syz.1.197'. [ 143.801265][ T6499] netlink: 16 bytes leftover after parsing attributes in process `syz.1.197'. [ 143.857861][ T789] wwan wwan0: port wwan0mbim0 disconnected [ 143.895767][ T6503] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 143.902430][ T6503] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 143.930822][ T6503] vhci_hcd vhci_hcd.0: Device attached [ 143.951359][ T6509] binder: BINDER_SET_CONTEXT_MGR already set [ 143.957733][ T6509] binder: 6507:6509 ioctl 4018620d 2000000002c0 returned -16 [ 143.969867][ T6506] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 0 [ 144.030351][ T6499] syz.1.197 (6499) used greatest stack depth: 18864 bytes left [ 144.053611][ T42] vhci_hcd: stop threads [ 144.057901][ T42] vhci_hcd: release socket [ 144.090547][ T42] vhci_hcd: disconnect device [ 144.140527][ T5828] vhci_hcd: vhci_device speed not set [ 145.219605][ T6525] netlink: 'syz.3.206': attribute type 1 has an invalid length. [ 145.409644][ T6525] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.703095][ T6540] binder: BINDER_SET_CONTEXT_MGR already set [ 146.278052][ T6540] binder: 6539:6540 ioctl 4018620d 2000000002c0 returned -16 [ 147.075201][ T6559] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 147.081884][ T6559] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 147.108341][ T6559] vhci_hcd vhci_hcd.0: Device attached [ 147.115837][ T6560] vhci_hcd: cannot find a urb of seqnum 796289135 max seqnum 1 [ 147.123731][ T12] vhci_hcd: stop threads [ 147.123759][ T12] vhci_hcd: release socket [ 147.123777][ T12] vhci_hcd: disconnect device [ 147.833984][ T6569] netlink: 'syz.1.217': attribute type 1 has an invalid length. [ 148.363496][ T6580] netlink: 20 bytes leftover after parsing attributes in process `syz.0.221'. [ 148.380968][ T6569] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.040404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 152.729571][ T6609] general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] PREEMPT SMP KASAN [ 152.741312][ T6609] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 152.749731][ T6609] CPU: 1 PID: 6609 Comm: syz.0.228 Not tainted syzkaller #0 [ 152.757012][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.767068][ T6609] RIP: 0010:f_midi2_free_ep+0x52/0x2e0 [ 152.772539][ T6609] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 63 fc 0a fb 41 bc 30 07 00 00 4d 03 26 4c 89 e0 48 c1 e8 03 48 89 44 24 30 <0f> b6 04 28 84 c0 0f 85 50 02 00 00 41 8b 1c 24 31 ff 89 de e8 65 [ 152.792142][ T6609] RSP: 0018:ffffc900107df9c8 EFLAGS: 00010202 [ 152.798226][ T6609] RAX: 00000000000000e6 RBX: ffff88802be98000 RCX: 0000000000080000 [ 152.806191][ T6609] RDX: ffffc9000e5ae000 RSI: 000000000005fb11 RDI: 000000000005fb12 [ 152.814157][ T6609] RBP: dffffc0000000000 R08: ffffffff911eb61f R09: 1ffffffff223d6c3 [ 152.822215][ T6609] R10: dffffc0000000000 R11: fffffbfff223d6c4 R12: 0000000000000730 [ 152.830175][ T6609] R13: dffffc0000000000 R14: ffff88802be98128 R15: dffffc0000000000 [ 152.838145][ T6609] FS: 00007fb6526526c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 152.847091][ T6609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.853782][ T6609] CR2: 000000110c257017 CR3: 000000002fb84000 CR4: 00000000003506e0 [ 152.861766][ T6609] Call Trace: [ 152.865057][ T6609] [ 152.868071][ T6609] f_midi2_unbind+0x9b/0x330 [ 152.872661][ T6609] purge_configs_funcs+0x241/0x3a0 [ 152.877783][ T6609] configfs_composite_unbind+0xa4/0x1c0 [ 152.883318][ T6609] gadget_unbind_driver+0x1bf/0x3e0 [ 152.888509][ T6609] ? gadget_bind_driver+0x770/0x770 [ 152.893715][ T6609] device_release_driver_internal+0x408/0x6f0 [ 152.899777][ T6609] driver_detach+0x1f3/0x2d0 [ 152.904359][ T6609] bus_remove_driver+0x221/0x2f0 [ 152.909299][ T6609] usb_gadget_unregister_driver+0x4e/0x70 [ 152.915007][ T6609] gadget_dev_desc_UDC_store+0x178/0x2e0 [ 152.920637][ T6609] configfs_write_iter+0x312/0x400 [ 152.925736][ T6609] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 152.931265][ T6609] vfs_write+0x474/0x9a0 [ 152.935497][ T6609] ? file_end_write+0x250/0x250 [ 152.940349][ T6609] ? __fget_files+0x3fc/0x460 [ 152.945015][ T6609] ? __fdget_pos+0x2a3/0x330 [ 152.949587][ T6609] ? ksys_write+0x74/0x260 [ 152.953987][ T6609] ksys_write+0x151/0x260 [ 152.958320][ T6609] ? __ia32_sys_read+0x90/0x90 [ 152.963076][ T6609] ? lockdep_hardirqs_on+0x98/0x150 [ 152.968258][ T6609] do_syscall_64+0x55/0xb0 [ 152.972672][ T6609] ? clear_bhb_loop+0x40/0x90 [ 152.977421][ T6609] ? clear_bhb_loop+0x40/0x90 [ 152.982086][ T6609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.987965][ T6609] RIP: 0033:0x7fb65179de99 [ 152.992372][ T6609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.012076][ T6609] RSP: 002b:00007fb652652028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 153.020485][ T6609] RAX: ffffffffffffffda RBX: 00007fb651a26090 RCX: 00007fb65179de99 [ 153.028459][ T6609] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 153.036413][ T6609] RBP: 00007fb651833eaf R08: 0000000000000000 R09: 0000000000000000 [ 153.044369][ T6609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.052323][ T6609] R13: 00007fb651a26128 R14: 00007fb651a26090 R15: 00007ffca5cd5448 [ 153.060289][ T6609] [ 153.063318][ T6609] Modules linked in: [ 153.105789][ T6609] ---[ end trace 0000000000000000 ]--- [ 153.114979][ T6609] RIP: 0010:f_midi2_free_ep+0x52/0x2e0 [ 153.127030][ T6609] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 63 fc 0a fb 41 bc 30 07 00 00 4d 03 26 4c 89 e0 48 c1 e8 03 48 89 44 24 30 <0f> b6 04 28 84 c0 0f 85 50 02 00 00 41 8b 1c 24 31 ff 89 de e8 65 [ 153.148100][ T6613] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 153.154706][ T6613] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 153.173097][ T6613] vhci_hcd vhci_hcd.0: Device attached [ 153.183075][ T6609] RSP: 0018:ffffc900107df9c8 EFLAGS: 00010202 [ 153.197334][ T6609] RAX: 00000000000000e6 RBX: ffff88802be98000 RCX: 0000000000080000 [ 153.206405][ T6617] vhci_hcd: connection closed [ 153.207669][ T79] vhci_hcd: stop threads [ 153.215782][ T6609] RDX: ffffc9000e5ae000 RSI: 000000000005fb11 RDI: 000000000005fb12 [ 153.220070][ T79] vhci_hcd: release socket [ 153.225629][ T6609] RBP: dffffc0000000000 R08: ffffffff911eb61f R09: 1ffffffff223d6c3 [ 153.229981][ T79] vhci_hcd: disconnect device [ 153.243555][ T6609] R10: dffffc0000000000 R11: fffffbfff223d6c4 R12: 0000000000000730 [ 153.252875][ T6609] R13: dffffc0000000000 R14: ffff88802be98128 R15: dffffc0000000000 [ 153.260897][ T6609] FS: 00007fb6526526c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 153.269832][ T6609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.276597][ T6609] CR2: 00007fed899ed2f8 CR3: 000000002fb84000 CR4: 00000000003506e0 [ 153.284617][ T6609] Kernel panic - not syncing: Fatal exception [ 153.290913][ T6609] Kernel Offset: disabled [ 153.295320][ T6609] Rebooting in 86400 seconds..