last executing test programs: 11m29.369238275s ago: executing program 32 (id=158): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') unshare(0x22020600) 11m29.331571973s ago: executing program 33 (id=148): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) creat(&(0x7f0000000000)='./bus\x00', 0x0) lseek(r0, 0x103, 0x1) 10m53.969510702s ago: executing program 34 (id=588): r0 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000d40)={0x2, 0x800000000000003, 0x3, 0x87f, 0x2, 0x4063, "00000000050200310300004c0600c100", 0x0, 0x0, 0x6, 0xf9, 0x5, 0x1, 0x1}) 9m47.917165757s ago: executing program 35 (id=1515): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 9m2.947491987s ago: executing program 36 (id=1881): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/comedi4\x00', 0xa0040, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'ni_at_ao\x00', [0x0, 0x9, 0x6, 0x100, 0x7, 0x8000, 0xffffff43, 0x84c5, 0x281, 0xffff, 0xcd, 0x3, 0x1, 0xfffffffb, 0x8, 0xffffffff, 0x8000, 0x7ff, 0x60000000, 0x98b2, 0x8486, 0xfffffff7, 0xffffff04, 0x0, 0x7da3, 0x2, 0x7, 0x2, 0x4, 0x6, 0x6, 0x4]}) close(r6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) futex(0x0, 0xc, 0xfffffff2, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01012ac17000fefff7ff2b00000008000300", @ANYRES32=r3, @ANYBLOB="05003400c40000000a000600ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x4044014}, 0x48000) r7 = dup(r0) ioctl$KVM_CREATE_VCPU(r7, 0x6410, 0x2) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='anon_inodefs\x00', 0x40, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0xf8, r2, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xff, 0x29}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x103}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cb}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x100}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]]}, 0xf8}, 0x1, 0x0, 0x0, 0x4800}, 0x40088d0) 8m46.650792957s ago: executing program 37 (id=1960): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="64890e284933d7be69cefec1075530", @ANYRES16=0x0, @ANYBLOB="000000000000000000003f0000000c009900000000000000000044005e8008000500000000000800070035010000080009000000000010000100000000000000000000000000080007000000000008000100207200000800070000000000"], 0x64}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={r5, 0x0, 0x0}, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0xa0c0, 0x20) mount$9p_unix(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x10000, &(0x7f0000000580)) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)="f89fcfb587a4792b", 0x8) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000540)={0x0, 0x101, 0x3fb, 0x3, 0x0, 0x1, 0x0, 0x918d, 0x9, 0xfffffffeffffffff, 0x2, 0x3}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)) mount(&(0x7f0000001400)=@sg0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x118404b, 0x0) 8m6.11457997s ago: executing program 38 (id=2172): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8001, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$khugepaged_scan(r3, &(0x7f0000000140), 0x8) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e29, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffc01}, 0x1c) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r8, &(0x7f0000001200)=[{&(0x7f00000000c0)="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", 0x9f9}], 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000400)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 7m4.488843708s ago: executing program 39 (id=2436): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 6m34.991439152s ago: executing program 40 (id=2606): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000440)="0f23ca260f2a53000f38ccaf0d00d07b3b0f01d166b9360200000f3266b8c4c700000f23c80f21f86635000070000f23f80acd0f81910191008ee80f35", 0x3d}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 5m44.015379773s ago: executing program 2 (id=3048): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) mount(&(0x7f00000000c0)=@filename='./file1\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='gadgetfs\x00', 0x828009, &(0x7f0000000200)='\x00') chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5m43.923930932s ago: executing program 2 (id=3049): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'vxcan1\x00', &(0x7f0000000040)=@ethtool_cmd={0x21, 0x1, 0x3, 0x800, 0x9, 0x5, 0x3, 0x75, 0x9, 0x5, 0x86, 0x9, 0x9, 0x43, 0xf, 0x1, [0xa, 0x10001]}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000506000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0xfd7e, 0x8000000000000000, 0x7) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) read$FUSE(r2, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000000c0)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2014120000001b19fabda560da0781c2106a5bd2cb999f14"], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x22052, r0, 0x80722000) fsetxattr$security_ima(r0, &(0x7f00000000c0), &(0x7f0000000100)=@sha1={0x1, "7761df52cf1d21d188597c0171841269868385a4"}, 0x15, 0x2) 5m28.5500819s ago: executing program 41 (id=3049): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'vxcan1\x00', &(0x7f0000000040)=@ethtool_cmd={0x21, 0x1, 0x3, 0x800, 0x9, 0x5, 0x3, 0x75, 0x9, 0x5, 0x86, 0x9, 0x9, 0x43, 0xf, 0x1, [0xa, 0x10001]}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000506000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0xfd7e, 0x8000000000000000, 0x7) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) read$FUSE(r2, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000000c0)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2014120000001b19fabda560da0781c2106a5bd2cb999f14"], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x22052, r0, 0x80722000) fsetxattr$security_ima(r0, &(0x7f00000000c0), &(0x7f0000000100)=@sha1={0x1, "7761df52cf1d21d188597c0171841269868385a4"}, 0x15, 0x2) 5m21.057332545s ago: executing program 3 (id=3193): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5m20.162960905s ago: executing program 3 (id=3197): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5m20.114290336s ago: executing program 3 (id=3199): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c90010d30000000017810800df2c050009000300"], 0x15) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r3, 0xfffffffa) socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000080), 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffb) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000009c4e396f9056d1e8230104ad05beb2454e442d139438e88656799ce3d2a3f4237a88bf52b905b0d914", @ANYRES16=r5, @ANYBLOB="01002cbd7000fedbdf250300000005001400050000007e6696d1529515c7700f17b7ef4b7bd0872c2f48b09ab73ccb5b802f0c3153b2405ab88c81eb5c9e56e1745ff3f5538bbed4930fa24f218d18289f7f3ae09ebf017441b195a2f0237b3b2f496dab959a70cca6ae46c54cc942532ba03da38891bd1b2425f3c63fe35713cadfa0"], 0x1c}, 0x1, 0x0, 0x0, 0x2000cc00}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz1\x00', {0x0, 0x0, 0x0, 0x448}, 0x0, [0xfae0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0x0, 0xffffffe7, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57b07c7d, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x400000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62f1cc38, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c1, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x101, 0x0, 0xfffffffd, 0x0, 0x0, 0xe, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xffffff81, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x5, 0x0, 0x10, 0xbaf4400, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x27, 0x0, 0x0, 0x0, 0xe04, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x3, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x4, 0x2, 0xfffffffc, 0x3ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffff, 0x4003, 0x2, 0x0, 0xfffffffc, 0x1, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000070000000900010073797a30000000000900020073797a320000000038000000080a050000000000000000000200000a0c00034000000000000000020900020073797a32000000000900010073797a30"], 0x8c}}, 0x0) r7 = dup(0xffffffffffffffff) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r9 = gettid() ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000100)={0x2, {0xf2df, 0x0, 0x8, 0x0, 0x3, 0x8}}) wait4(r9, 0x0, 0x8, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SG_GET_ACCESS_COUNT(r8, 0x2289, &(0x7f00000001c0)) 5m19.543732752s ago: executing program 6 (id=3207): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000080)=""/54) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="0001180000001811cd3d2e5f5c0cc129fdba7d0414b00b2c24873113e8b41ff95dbd947e8dc90139ca"], &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000180)={0x20, 0x7, 0x60, "050175c0110a3236ff2755fcef70dfded495786bb0c583f1c5d17cafed4521b585cba744c854e5211b4ac10be909c798758efd295dc512140b3fb80f9a6b813b474d5e973d180b4ac7f946e9c8dab8469150d17e8d7a2c00b5278b64bc94a3fe"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xc8}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4}}) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f00000002c0)=[0x0, 0x7]) 5m16.493927681s ago: executing program 6 (id=3218): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0x3, 0xe2f) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d099010203010902"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x3c}}, 0x10) 5m13.432164738s ago: executing program 6 (id=3238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x13, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0) 5m13.352917288s ago: executing program 6 (id=3239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x2200, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) 5m13.275950099s ago: executing program 6 (id=3241): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000005200", 0x1c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000440)=@ethtool_regs={0x4, 0x0, 0x19, "d7624400000000152a776ad8d85fbe76e63747000000000000"}}) r5 = dup(r2) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5m13.23465077s ago: executing program 6 (id=3243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x22400, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500540e72ffff0300000000000008000300", @ANYRES32=r6, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x25c, r5, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x211, 0xe, {{{}, {}, @device_a, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x1, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x1, 0x0, 0xa, 0x8}}, @void, [{0xdd, 0x56, "5af07df46b6f962527f72ce603737afde6ee28d0933461c29e75ee813b45dc01b238b90fadd85d6f80df88a12f2d26351070aa18a64f5f16f33f086e0b747435d57e7d12be55311d5ceaae7da6a329e8f32d9dc81992"}, {0xdd, 0x6, "da4ac0ce060b"}, {0xdd, 0x59, "9e06f793974858f3127100b2457163682aab9d7f6d139840cb33eea491b2c3792c18e4d0ff8af12e9159847e3edf831aeef1e35b2b4440f1796eaee11a1af812b0697de4659b1dbd12a7e54e8e0cde388d6022abd3974a8490"}, {0xdd, 0x61, "ee77c47ee59f232159bd7247f584382c1c6dd7372b78c39a8456e3c17720ced1f78b8837432d05dca454553effdba27ec699cc0bf3109df2e9d5f6b256ecea2695dc887d3b9d4c1646e2ba0412acd65793ab3a21b7605b04160b84ca4b52396d40"}, {0xdd, 0x31, "859f3c72e1e731546cd18784bdc99ce403c4e0a1358bd7a67a12f58068cef84bda1935a27fb015b2f347e8129f80c9da0b"}, {0xdd, 0x24, "642b28a6f3a74ef3ddfd70af1a3747b49a00d4667a2a413f917a4eb87639ea78143ec233"}, {0xdd, 0x65, "775176193c721c37d9a2546f3c9373366a021924aeddf3c8316a69f471e5138e34777a29abe436751eb92391ebc3908409a74d71ae088dceb069cec6fe5dc2a3f08d3d5f7ea43f671e53c5349bb4f6085da6e342681f17de68075cb52d38d8379d7897b631"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, 'F'}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x25c}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x9, "3c0021ff96e3cb057f2d7f394800000000000000000000000200", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000280)={"2486110284ed000000000000000254fd0a0000e3ff000000000000000100", r8, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r9, 0xc0383e04, &(0x7f0000000340)={""/32, 0x0, 0x0, 0xffffffe6, 0x0, 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) unshare(0x20000400) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r12, &(0x7f0000000100)={{0x3, @default}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r12, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r13 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r13, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r13, 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)) 5m5.028272601s ago: executing program 42 (id=3199): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c90010d30000000017810800df2c050009000300"], 0x15) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r3, 0xfffffffa) socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000080), 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffb) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000009c4e396f9056d1e8230104ad05beb2454e442d139438e88656799ce3d2a3f4237a88bf52b905b0d914", @ANYRES16=r5, @ANYBLOB="01002cbd7000fedbdf250300000005001400050000007e6696d1529515c7700f17b7ef4b7bd0872c2f48b09ab73ccb5b802f0c3153b2405ab88c81eb5c9e56e1745ff3f5538bbed4930fa24f218d18289f7f3ae09ebf017441b195a2f0237b3b2f496dab959a70cca6ae46c54cc942532ba03da38891bd1b2425f3c63fe35713cadfa0"], 0x1c}, 0x1, 0x0, 0x0, 0x2000cc00}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz1\x00', {0x0, 0x0, 0x0, 0x448}, 0x0, [0xfae0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0x0, 0xffffffe7, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57b07c7d, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x400000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62f1cc38, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c1, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x101, 0x0, 0xfffffffd, 0x0, 0x0, 0xe, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xffffff81, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x5, 0x0, 0x10, 0xbaf4400, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x27, 0x0, 0x0, 0x0, 0xe04, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x3, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x4, 0x2, 0xfffffffc, 0x3ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffff, 0x4003, 0x2, 0x0, 0xfffffffc, 0x1, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000070000000900010073797a30000000000900020073797a320000000038000000080a050000000000000000000200000a0c00034000000000000000020900020073797a32000000000900010073797a30"], 0x8c}}, 0x0) r7 = dup(0xffffffffffffffff) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r9 = gettid() ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000100)={0x2, {0xf2df, 0x0, 0x8, 0x0, 0x3, 0x8}}) wait4(r9, 0x0, 0x8, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SG_GET_ACCESS_COUNT(r8, 0x2289, &(0x7f00000001c0)) 4m58.210093849s ago: executing program 43 (id=3243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x22400, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500540e72ffff0300000000000008000300", @ANYRES32=r6, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x25c, r5, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x211, 0xe, {{{}, {}, @device_a, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x1, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x1, 0x0, 0xa, 0x8}}, @void, [{0xdd, 0x56, "5af07df46b6f962527f72ce603737afde6ee28d0933461c29e75ee813b45dc01b238b90fadd85d6f80df88a12f2d26351070aa18a64f5f16f33f086e0b747435d57e7d12be55311d5ceaae7da6a329e8f32d9dc81992"}, {0xdd, 0x6, "da4ac0ce060b"}, {0xdd, 0x59, "9e06f793974858f3127100b2457163682aab9d7f6d139840cb33eea491b2c3792c18e4d0ff8af12e9159847e3edf831aeef1e35b2b4440f1796eaee11a1af812b0697de4659b1dbd12a7e54e8e0cde388d6022abd3974a8490"}, {0xdd, 0x61, "ee77c47ee59f232159bd7247f584382c1c6dd7372b78c39a8456e3c17720ced1f78b8837432d05dca454553effdba27ec699cc0bf3109df2e9d5f6b256ecea2695dc887d3b9d4c1646e2ba0412acd65793ab3a21b7605b04160b84ca4b52396d40"}, {0xdd, 0x31, "859f3c72e1e731546cd18784bdc99ce403c4e0a1358bd7a67a12f58068cef84bda1935a27fb015b2f347e8129f80c9da0b"}, {0xdd, 0x24, "642b28a6f3a74ef3ddfd70af1a3747b49a00d4667a2a413f917a4eb87639ea78143ec233"}, {0xdd, 0x65, "775176193c721c37d9a2546f3c9373366a021924aeddf3c8316a69f471e5138e34777a29abe436751eb92391ebc3908409a74d71ae088dceb069cec6fe5dc2a3f08d3d5f7ea43f671e53c5349bb4f6085da6e342681f17de68075cb52d38d8379d7897b631"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, 'F'}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x25c}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x9, "3c0021ff96e3cb057f2d7f394800000000000000000000000200", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000280)={"2486110284ed000000000000000254fd0a0000e3ff000000000000000100", r8, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r9, 0xc0383e04, &(0x7f0000000340)={""/32, 0x0, 0x0, 0xffffffe6, 0x0, 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) unshare(0x20000400) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r12, &(0x7f0000000100)={{0x3, @default}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r12, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r13 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r13, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r13, 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)) 4m27.663962455s ago: executing program 4 (id=3510): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000004c0)="0f064b0fc71ac441e012e9c4427d257c6402c423f978f50066baf80cb81c07da87ef66bafc0cecf342a60f00d6c7442400f5ff0000c744240203000000c7442406000000000f011424c4415f5c9297e5ffff", 0x52}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0xfffffffffffffcfd}, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}) 4m27.458461881s ago: executing program 4 (id=3516): pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000010000000000000f0000000100f20000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000400000000000a0060", @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc00"/27, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x30, 0x1}}}, 0xb8}}, 0x4000) 4m27.403400323s ago: executing program 4 (id=3517): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'none\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3, 0xcd, 0x2}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xffffff97}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4m27.327927553s ago: executing program 4 (id=3518): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0xa) sendto$packet(r0, &(0x7f0000000480)="3f031c000300140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b6800000ce4", 0x26, 0x24000094, &(0x7f0000000140)={0xc9, 0x0, r1, 0x1, 0x1, 0x6, @local}, 0x14) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x16b183, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000025c0)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r4, 0x29, 0xb, 0x0, &(0x7f0000000140)) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r7, 0x1) shutdown(r7, 0x1) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) listen(r3, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r2, 0xa4717000) 4m27.300116538s ago: executing program 4 (id=3519): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20083, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000080300000301004000"]) 4m27.05056847s ago: executing program 4 (id=3523): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) sendmmsg$inet(r0, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="a915", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000980)="97", 0x1}], 0x1, 0x0, 0x0, 0x41020000}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b40)="9af9e7c3a62bee995791e76fd927d23f32fc74a2e9c3956acece512d8dfe2c6eb51928d50cf8c02a89aaa2d1bbd1378201eab8defcf299776d47142f5556c9", 0x3f}], 0x1}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000e80)="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", 0x1d8}], 0x1}}], 0x4, 0x44000) 4m26.93286924s ago: executing program 44 (id=3523): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) sendmmsg$inet(r0, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="a915", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000980)="97", 0x1}], 0x1, 0x0, 0x0, 0x41020000}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b40)="9af9e7c3a62bee995791e76fd927d23f32fc74a2e9c3956acece512d8dfe2c6eb51928d50cf8c02a89aaa2d1bbd1378201eab8defcf299776d47142f5556c9", 0x3f}], 0x1}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000e80)="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", 0x1d8}], 0x1}}], 0x4, 0x44000) 4m26.792949216s ago: executing program 9 (id=3527): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 4m26.699307213s ago: executing program 9 (id=3528): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x0, @multicast2, 0x4e21, 0x3, 'none\x00', 0x5, 0x0, 0x11}, {@loopback, 0x4e1d, 0x10000, 0xcd, 0x2}}, 0x44) r3 = socket$inet(0x2, 0x802, 0x1) write(r3, &(0x7f0000000440)="08008edf773c8000", 0x8) io_submit(0x0, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)}]) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4m26.455770175s ago: executing program 9 (id=3531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0xfff5, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0) 4m26.455537696s ago: executing program 9 (id=3532): ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='gretap0\x00'}) 4m26.425108454s ago: executing program 9 (id=3533): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = dup(r1) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0x1}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1010814, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES64=0x0, @ANYRES64]) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='<\x00']) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$setstatus(r4, 0x4, 0x4a400) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x1a0, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x1000, 0x3ff, 0x0, r7, 0x4, 0x4}}, {0x1ffffffffffffd, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}, {{0x5, 0x2, 0x1ff, 0x8d, 0x7fff, 0xe9e, {0x0, 0x7f, 0x0, 0x7fffffffffffffff, 0x6, 0x8, 0x7ffffffd, 0x3, 0x5, 0x4000, 0x0, r6, r7, 0x401, 0x3}}, {0x5, 0x2, 0x29, 0x7f, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00'}}]}, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v3={0x3000000, [{0x2, 0x8}, {0x6, 0x1}], r6}, 0x18, 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='c '], 0x45) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="cc000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000ffdbdf25140000000e0001006e657464657673696d0000000fa002006e657464657673696d300000080003000300000008000b0060a9a55806001100933100000800150009000000080001007063690011000200303030303a30303a31302e30001c0000080003000100000008000b000101000006001100050000000800850004000000080001"], 0xcc}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000100)={0x77359400}, 0x10) chdir(&(0x7f0000000000)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 4m26.334199899s ago: executing program 9 (id=3534): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="171abdb5d25446463f74d3740a70f6e0249ca79eab57d2457df5837189a49908837dae500632174cac1efc0e61b9cbcde67b0070c8bb46c63d478881c92de1d95dcc82811ba3e4d049aa70572e323a9b", 0x50}], 0x1, 0x0, 0x0, 0x11}], 0x1, 0x44854) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/88, 0x58}], 0x1, 0x0, 0x0, 0xff8d}, 0x0) 4m11.22334671s ago: executing program 45 (id=3534): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="171abdb5d25446463f74d3740a70f6e0249ca79eab57d2457df5837189a49908837dae500632174cac1efc0e61b9cbcde67b0070c8bb46c63d478881c92de1d95dcc82811ba3e4d049aa70572e323a9b", 0x50}], 0x1, 0x0, 0x0, 0x11}], 0x1, 0x44854) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/88, 0x58}], 0x1, 0x0, 0x0, 0xff8d}, 0x0) 52.489609939s ago: executing program 7 (id=4922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0xf5, 0x0, {0x7}}}, 0xd0}}, 0x0) 52.395971252s ago: executing program 7 (id=4923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="034886dd0100000000001400000060e1fd2800082f00fe88a43de1a400000000000000007d01ff0200000000000000000000000008010000883e"], 0xfdef) 52.359373771s ago: executing program 7 (id=4925): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3, 0x3000}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 52.275964778s ago: executing program 7 (id=4926): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000004c0)="0f064b0fc71ac441e012e9c4427d257c6402c423f978f50066baf80cb81c07da87ef66bafc0cecf342a60f00d6c7442400f5ff0000c744240203000000c7442406000000000f011424c4415f5c9297e5ffff", 0x52}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0xfffffffffffffcfd}, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300"}) 52.247651131s ago: executing program 7 (id=4928): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000180)=0x1e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r1, 0xf678a000) signalfd(r1, &(0x7f0000000000)={[0x7]}, 0x8) 52.003518159s ago: executing program 7 (id=4934): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003083200fe88a43de1a400000000000000007d01ff02000000000000eaff000000000001"], 0xfdef) 36.348268629s ago: executing program 46 (id=4934): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003083200fe88a43de1a400000000000000007d01ff02000000000000eaff000000000001"], 0xfdef) 11.550039111s ago: executing program 8 (id=5199): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000880)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000380)={0x20, 0x16}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000002c0)={0x34, &(0x7f0000000100)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000a80)={0x40}, 0x0, 0x0, 0x0, 0x0}) 9.897294328s ago: executing program 0 (id=5202): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd000905820200020004"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x44040}, 0x4000041) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 8.7469225s ago: executing program 8 (id=5205): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)='7', 0x1}]) 8.615921723s ago: executing program 8 (id=5208): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) 8.593974387s ago: executing program 8 (id=5209): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0xc15f0c76038c45c1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mknodat$loop(0xffffffffffffffff, 0x0, 0x200, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x0) 8.527437205s ago: executing program 8 (id=5212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x29, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$DEVLINK_CMD_RATE_GET(r3, 0x0, 0x0) 8.239925641s ago: executing program 8 (id=5216): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd000905820200020004"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 8.199847257s ago: executing program 47 (id=5216): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd000905820200020004"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 7.816483506s ago: executing program 0 (id=5218): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd70000ddcdf250900020073797a310000000008004100736977001400330073797a5f74756e000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001143b0b"], 0x18}}, 0x9ee9fd74460f2f8e) 7.747744433s ago: executing program 0 (id=5219): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000003480)=""/102379, 0x18feb}], 0x1, 0x0, 0x8) 7.623771427s ago: executing program 0 (id=5220): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0xc15f0c76038c45c1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mknodat$loop(0xffffffffffffffff, 0x0, 0x200, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x0) 7.568174321s ago: executing program 0 (id=5221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000020c0)=ANY=[@ANYBLOB="2400000004060102000000000000000000000001050001000700"], 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) 6.91172635s ago: executing program 0 (id=5226): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.633269272s ago: executing program 48 (id=5226): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.139860458s ago: executing program 1 (id=5261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(0xffffffffffffffff, 0x0) exit(0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x0, 0x800003, 0x4}}, 0x30) 2.630424734s ago: executing program 5 (id=5265): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r0, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) 2.498025333s ago: executing program 2 (id=5217): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xff6ffffd}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) 2.419926781s ago: executing program 5 (id=5266): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 2.338695541s ago: executing program 5 (id=5267): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCFLSH(r0, 0x8910, 0x0) 2.278483902s ago: executing program 1 (id=5268): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x3}}, 0x18) 2.19590401s ago: executing program 2 (id=5269): r0 = socket$rxrpc(0x21, 0x2, 0xa) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0x4) 2.011621776s ago: executing program 5 (id=5270): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 1.302816088s ago: executing program 1 (id=5271): pipe2$9p(&(0x7f0000000240), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = memfd_create(&(0x7f0000000680)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xf2w\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0', 0x0) write(r1, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000032240)=""/102400, 0x19000) 1.115878813s ago: executing program 1 (id=5272): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0xfffffffffffffffb, {0x5, 0x0, 0x0, 0x5, 0xe, 0x1000000, {0x0, 0x0, 0x0, 0x1, 0xfffffffffffffff9, 0xfffffffffffffffd, 0x100, 0xb87, 0x0, 0x1000, 0x21, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000540)={0x50, 0x0, 0xfffffffffffffffe, {0x7, 0x29, 0x1, 0xffffffff80000000, 0x0, 0x2, 0x100000, 0x10000005, 0x0, 0x0, 0x10, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x801881, 0x0) 813.642448ms ago: executing program 2 (id=5273): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x42, 0x80) 678.537659ms ago: executing program 3 (id=5227): open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r0, 0x406, r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000000c0)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080)={0x40000010, 0x300}) 628.096879ms ago: executing program 2 (id=5274): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) writev(r0, &(0x7f0000000680)=[{&(0x7f00000002c0)="2199aa", 0x3}], 0x1) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 596.337112ms ago: executing program 3 (id=5275): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100fcff0000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="2c002580050001"], 0x48}}, 0x0) 533.59877ms ago: executing program 3 (id=5276): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000380)={0x0, 0x2, 0x2000008, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x10, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10}) 203.952908ms ago: executing program 1 (id=5277): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x4d5, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x40000000}, 0x1c) 154.890101ms ago: executing program 5 (id=5278): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd70000000000015000000200020800800010002000000140003800800020001000000060001000200000008000300", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) 53.852595ms ago: executing program 5 (id=5279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 0s ago: executing program 1 (id=5280): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5, 0xfffffffb}}, 0x30) write$FUSE_DIRENTPLUS(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="b000"], 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 666.792893][ T6633] usb 8-1: clie_3_5_startup: get interface number failed: -71 [ 666.800553][ T6633] visor 8-1:0.0: probe with driver visor failed with error -71 [ 666.812205][ T6633] usb 8-1: USB disconnect, device number 61 [ 666.881213][T27127] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 666.889185][T27127] ubi: mtd0 is already attached to ubi0 [ 667.377089][T27146] input: syz0 as /devices/virtual/input/input105 [ 667.641862][T27157] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 667.648439][T27157] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 667.718850][T27157] vhci_hcd vhci_hcd.0: Device attached [ 667.951996][ T2153] usb 47-1: new high-speed USB device number 6 using vhci_hcd [ 667.967012][T27158] vhci_hcd: connection reset by peer [ 667.982446][ T2929] vhci_hcd: stop threads [ 667.988553][ T2929] vhci_hcd: release socket [ 667.995650][ T2929] vhci_hcd: disconnect device [ 668.004433][T27165] FAULT_INJECTION: forcing a failure. [ 668.004433][T27165] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 668.017927][T27165] CPU: 0 UID: 0 PID: 27165 Comm: syz.0.4432 Not tainted syzkaller #0 PREEMPT(full) [ 668.017953][T27165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 668.017960][T27165] Call Trace: [ 668.017965][T27165] [ 668.017970][T27165] dump_stack_lvl+0x189/0x250 [ 668.017992][T27165] ? __pfx____ratelimit+0x10/0x10 [ 668.018006][T27165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 668.018023][T27165] ? __pfx__printk+0x10/0x10 [ 668.018039][T27165] ? lock_acquire+0x5f/0x360 [ 668.018052][T27165] should_fail_ex+0x414/0x560 [ 668.018068][T27165] prepare_alloc_pages+0x213/0x610 [ 668.018082][T27165] __alloc_frozen_pages_noprof+0x123/0x370 [ 668.018094][T27165] ? rcu_is_watching+0x15/0xb0 [ 668.018107][T27165] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 668.018122][T27165] ? policy_nodemask+0x27c/0x720 [ 668.018138][T27165] ? lock_acquire+0x5f/0x360 [ 668.018148][T27165] alloc_pages_mpol+0x232/0x4a0 [ 668.018159][T27165] vma_alloc_folio_noprof+0xe4/0x200 [ 668.018170][T27165] ? rcu_is_watching+0x15/0xb0 [ 668.018182][T27165] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 668.018193][T27165] ? up_write+0x1c4/0x420 [ 668.018205][T27165] ? do_raw_spin_unlock+0x122/0x240 [ 668.018224][T27165] folio_prealloc+0x30/0x180 [ 668.018236][T27165] __handle_mm_fault+0x2a8b/0x5400 [ 668.018254][T27165] ? rcu_is_watching+0x15/0xb0 [ 668.018265][T27165] ? __pfx___handle_mm_fault+0x10/0x10 [ 668.018284][T27165] ? find_vma+0xe7/0x160 [ 668.018298][T27165] ? __pfx_find_vma+0x10/0x10 [ 668.018313][T27165] handle_mm_fault+0x40a/0x8e0 [ 668.018331][T27165] do_user_addr_fault+0x764/0x1390 [ 668.018346][T27165] exc_page_fault+0x82/0x100 [ 668.018360][T27165] asm_exc_page_fault+0x26/0x30 [ 668.018371][T27165] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 668.018384][T27165] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 36 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 668.018394][T27165] RSP: 0018:ffffc90003987ca8 EFLAGS: 00050216 [ 668.018406][T27165] RAX: 0000000000000000 RBX: 0000000000000030 RCX: 0000000000000030 [ 668.018414][T27165] RDX: 0000000000000000 RSI: ffffc90003987e20 RDI: 00002000000001c0 [ 668.018422][T27165] RBP: ffffc90003987ed0 R08: ffffc90003987e4f R09: 1ffff92000730fc9 [ 668.018431][T27165] R10: dffffc0000000000 R11: fffff52000730fca R12: 00002000000001f0 [ 668.018439][T27165] R13: 00007ffffffff000 R14: ffffc90003987e20 R15: 00002000000001c0 [ 668.018451][T27165] _copy_to_user+0x8a/0xb0 [ 668.018465][T27165] __se_sys_shmctl+0x320/0x3e0 [ 668.018488][T27165] ? __pfx___se_sys_shmctl+0x10/0x10 [ 668.018503][T27165] ? __fget_files+0x3a0/0x420 [ 668.018518][T27165] ? fput+0xa0/0xd0 [ 668.018532][T27165] ? ksys_write+0x22a/0x250 [ 668.018544][T27165] ? __pfx_ksys_write+0x10/0x10 [ 668.018555][T27165] ? rcu_is_watching+0x15/0xb0 [ 668.018568][T27165] do_syscall_64+0xfa/0xfa0 [ 668.018582][T27165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.018593][T27165] ? clear_bhb_loop+0x60/0xb0 [ 668.018605][T27165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.018616][T27165] RIP: 0033:0x7f0f9958ebe9 [ 668.018626][T27165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.018635][T27165] RSP: 002b:00007f0f9a327038 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 668.018647][T27165] RAX: ffffffffffffffda RBX: 00007f0f997c5fa0 RCX: 00007f0f9958ebe9 [ 668.018654][T27165] RDX: 00002000000001c0 RSI: 000000000000000e RDI: 0000000000000000 [ 668.018662][T27165] RBP: 00007f0f9a327090 R08: 0000000000000000 R09: 0000000000000000 [ 668.018669][T27165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.018676][T27165] R13: 00007f0f997c6038 R14: 00007f0f997c5fa0 R15: 00007ffcf6565cc8 [ 668.018688][T27165] [ 668.390803][ C0] vkms_vblank_simulate: vblank timer overrun [ 668.406612][T27163] binder: 27162:27163 ioctl 4018f514 0 returned -22 [ 668.419094][T27163] netlink: 'syz.8.4431': attribute type 10 has an invalid length. [ 668.652377][T27180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4435'. [ 668.825936][T27192] binder: 27191:27192 ioctl c00c620f 0 returned -14 [ 669.063296][T27209] input: syz0 as /devices/virtual/input/input106 [ 669.239493][T27230] /dev/rnullb0: Can't open blockdev [ 669.245347][T27220] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 669.255385][T27220] ubi: mtd0 is already attached to ubi0 [ 669.295864][T27232] tipc: Enabling of bearer rejected, already enabled [ 669.431921][ T5936] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 669.543660][T27236] binder: 27234:27236 ioctl 4018f514 0 returned -22 [ 669.556071][T27236] netlink: 'syz.8.4451': attribute type 10 has an invalid length. [ 669.594483][ T5936] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 669.606567][ T5936] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.620221][ T5936] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1808, setting to 1024 [ 669.634956][ T5936] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 669.644167][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.653901][ T5936] usb 1-1: Product: syz [ 669.658069][ T5936] usb 1-1: Manufacturer: syz [ 669.663705][ T5936] usb 1-1: SerialNumber: syz [ 669.670608][T27222] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 669.760609][T27259] FAULT_INJECTION: forcing a failure. [ 669.760609][T27259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.774172][T27259] CPU: 0 UID: 0 PID: 27259 Comm: syz.1.4456 Not tainted syzkaller #0 PREEMPT(full) [ 669.774199][T27259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 669.774211][T27259] Call Trace: [ 669.774219][T27259] [ 669.774226][T27259] dump_stack_lvl+0x189/0x250 [ 669.774267][T27259] ? __pfx____ratelimit+0x10/0x10 [ 669.774291][T27259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 669.774318][T27259] ? __pfx__printk+0x10/0x10 [ 669.774344][T27259] ? rcu_is_watching+0x15/0xb0 [ 669.774367][T27259] should_fail_ex+0x414/0x560 [ 669.774394][T27259] _copy_to_user+0x31/0xb0 [ 669.774414][T27259] simple_read_from_buffer+0xe1/0x170 [ 669.774436][T27259] proc_fail_nth_read+0x1b3/0x220 [ 669.774463][T27259] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 669.774489][T27259] ? rw_verify_area+0x2a6/0x4d0 [ 669.774507][T27259] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 669.774532][T27259] vfs_read+0x200/0xa30 [ 669.774548][T27259] ? fdget_pos+0x247/0x320 [ 669.774571][T27259] ? __pfx___mutex_lock+0x10/0x10 [ 669.774596][T27259] ? __pfx_vfs_read+0x10/0x10 [ 669.774617][T27259] ? __fget_files+0x3a0/0x420 [ 669.774638][T27259] ? __fget_files+0x2a/0x420 [ 669.774662][T27259] ksys_read+0x145/0x250 [ 669.774679][T27259] ? __pfx_ksys_read+0x10/0x10 [ 669.774698][T27259] ? rcu_is_watching+0x15/0xb0 [ 669.774719][T27259] do_syscall_64+0xfa/0xfa0 [ 669.774744][T27259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.774762][T27259] ? clear_bhb_loop+0x60/0xb0 [ 669.774781][T27259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.774798][T27259] RIP: 0033:0x7f5c9cb8d5fc [ 669.774815][T27259] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 669.774829][T27259] RSP: 002b:00007f5c9d929030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 669.774850][T27259] RAX: ffffffffffffffda RBX: 00007f5c9cdc5fa0 RCX: 00007f5c9cb8d5fc [ 669.774865][T27259] RDX: 000000000000000f RSI: 00007f5c9d9290a0 RDI: 0000000000000003 [ 669.774877][T27259] RBP: 00007f5c9d929090 R08: 0000000000000000 R09: 0000000000000000 [ 669.774889][T27259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 669.774901][T27259] R13: 00007f5c9cdc6038 R14: 00007f5c9cdc5fa0 R15: 00007ffdf9ecf418 [ 669.774923][T27259] [ 670.005302][ C0] vkms_vblank_simulate: vblank timer overrun [ 670.087153][T27260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.097163][T27260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.261584][T27274] tipc: Enabling of bearer rejected, already enabled [ 670.440833][T27287] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 670.447418][T27287] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 670.457320][T27287] vhci_hcd vhci_hcd.0: Device attached [ 670.576035][T27299] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4464'. [ 670.903380][T27304] binder: 27303:27304 ioctl 4018f514 0 returned -22 [ 670.917010][T27304] netlink: 'syz.8.4467': attribute type 10 has an invalid length. [ 671.414305][T27308] input: syz0 as /devices/virtual/input/input107 [ 671.486103][T27319] /dev/rnullb0: Can't open blockdev [ 671.521690][T27318] netlink: 'syz.1.4471': attribute type 21 has an invalid length. [ 671.532560][T27318] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4471'. [ 671.611500][ T30] audit: type=1326 audit(1756852492.444:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27327 comm="syz.8.4472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e4e78ebe9 code=0x0 [ 671.633445][ C0] vkms_vblank_simulate: vblank timer overrun [ 671.655712][T27288] vhci_hcd: connection closed [ 671.657382][ T1154] vhci_hcd: stop threads [ 671.670046][ T1154] vhci_hcd: release socket [ 671.674963][ T1154] vhci_hcd: disconnect device [ 671.829041][T27360] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 671.953395][ T5935] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 672.005985][T27388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.017354][T27388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.164318][ T5935] usb 9-1: config 0 has no interfaces? [ 672.172141][ T5935] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 672.181246][ T5935] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.191709][ T5935] usb 9-1: Product: syz [ 672.197626][ T5935] usb 9-1: Manufacturer: syz [ 672.204432][ T5935] usb 9-1: SerialNumber: syz [ 672.211909][T10504] usb 8-1: new full-speed USB device number 62 using dummy_hcd [ 672.224473][ T5935] usb 9-1: config 0 descriptor?? [ 672.226174][ T5936] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 672.250394][ T5936] cdc_ncm 1-1:1.0: bind() failure [ 672.270852][ T5936] usb 1-1: USB disconnect, device number 52 [ 672.387137][T27429] tipc: Enabling of bearer rejected, already enabled [ 672.395920][T10504] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 672.406967][T10504] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.429994][T10504] usb 8-1: Product: syz [ 672.434517][T10504] usb 8-1: Manufacturer: syz [ 672.439178][T10504] usb 8-1: SerialNumber: syz [ 672.454325][T10504] usb 8-1: config 0 descriptor?? [ 672.664930][T10504] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 672.760158][T27460] tipc: Enabling of bearer rejected, already enabled [ 672.805895][T27352] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4472'. [ 672.983536][T27474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4485'. [ 673.060865][T27480] input: syz0 as /devices/virtual/input/input108 [ 673.112330][ T2153] vhci_hcd: vhci_device speed not set [ 673.469770][T10504] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 673.696735][T27519] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 673.703313][T27519] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 673.725027][T27519] vhci_hcd vhci_hcd.0: Device attached [ 673.742954][T27520] vhci_hcd: connection closed [ 673.743268][T16922] vhci_hcd: stop threads [ 673.753729][T16922] vhci_hcd: release socket [ 673.758335][T16922] vhci_hcd: disconnect device [ 674.193743][ T2153] usb 8-1: USB disconnect, device number 62 [ 674.466028][T27556] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 674.578063][ T5936] usb 9-1: USB disconnect, device number 56 [ 674.629309][T27579] tipc: Enabling of bearer rejected, already enabled [ 674.678879][ T30] audit: type=1326 audit(1756852495.514:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27583 comm="syz.8.4501" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e4e78ebe9 code=0x0 [ 674.945928][ T30] audit: type=1326 audit(1756852495.784:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27609 comm="syz.0.4508" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f9958ebe9 code=0x0 [ 674.963049][T27592] binder: 27591:27592 ioctl 4018f514 0 returned -22 [ 674.967795][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.986071][T27592] netlink: 'syz.8.4503': attribute type 10 has an invalid length. [ 675.291987][ T2153] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 675.443469][ T2153] usb 1-1: config 0 has no interfaces? [ 675.450979][ T2153] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 675.460470][ T2153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.469422][ T2153] usb 1-1: Product: syz [ 675.473768][ T2153] usb 1-1: Manufacturer: syz [ 675.478382][ T2153] usb 1-1: SerialNumber: syz [ 675.484359][ T2153] usb 1-1: config 0 descriptor?? [ 675.759333][T27653] input: syz0 as /devices/virtual/input/input109 [ 675.884739][ T2153] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 675.982148][ T5935] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 676.051925][ T2153] usb 9-1: Using ep0 maxpacket: 16 [ 676.058734][ T2153] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 676.071133][ T2153] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 676.084029][ T2153] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 676.093331][ T2153] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.101366][ T2153] usb 9-1: Product: syz [ 676.105645][ T2153] usb 9-1: Manufacturer: syz [ 676.110257][ T2153] usb 9-1: SerialNumber: syz [ 676.123375][ T2153] usb 9-1: config 0 descriptor?? [ 676.131858][ T5935] usb 8-1: Using ep0 maxpacket: 8 [ 676.141366][ T2153] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 676.151989][ T2153] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 676.156794][T27681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4518'. [ 676.159725][ T5935] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.178556][ T5935] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 676.188893][ T5935] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.202338][ T5935] usb 8-1: config 0 descriptor?? [ 676.314559][T27689] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 676.321126][T27689] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 676.331475][T27689] vhci_hcd vhci_hcd.0: Device attached [ 676.561861][T11901] usb 35-1: new high-speed USB device number 9 using vhci_hcd [ 676.570733][T27690] vhci_hcd: connection reset by peer [ 676.581354][ T1154] vhci_hcd: stop threads [ 676.586093][ T2153] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 676.588010][ T1154] vhci_hcd: release socket [ 676.597899][ T1154] vhci_hcd: disconnect device [ 676.603002][ T2153] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 676.610725][ T2153] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 676.625651][ T2153] em28xx 9-1:0.0: No AC97 audio processor [ 676.636488][ T5935] hid-corsair-void 0003:1B1C:1B25.003D: item fetching failed at offset 0/1 [ 676.654084][ T2153] usb 9-1: USB disconnect, device number 57 [ 676.660555][ T5935] hid-corsair-void 0003:1B1C:1B25.003D: parse failed (reason: -22) [ 676.678548][ T2153] em28xx 9-1:0.0: Disconnecting em28xx [ 676.684513][ T5935] hid-corsair-void 0003:1B1C:1B25.003D: probe with driver hid-corsair-void failed with error -22 [ 676.696177][ T2153] em28xx 9-1:0.0: Freeing device [ 676.783673][T27723] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 676.791428][T27723] ubi: mtd0 is already attached to ubi0 [ 676.847903][ T5935] usb 8-1: USB disconnect, device number 63 [ 677.661208][T27779] tipc: Enabling of bearer rejected, already enabled [ 677.718618][T27781] /dev/rnullb0: Can't open blockdev [ 677.928125][ T5935] usb 1-1: USB disconnect, device number 53 [ 678.011295][T27807] binder: 27806:27807 ioctl 4018620d 0 returned -22 [ 678.224250][T27826] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 678.230830][T27826] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 678.256220][T27826] vhci_hcd vhci_hcd.0: Device attached [ 678.473970][ T30] audit: type=1326 audit(1756852499.314:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27838 comm="syz.7.4551" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f304238ebe9 code=0x0 [ 678.511870][ T5868] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 678.531870][ T5936] usb 34-1: SetAddress Request (2) to port 0 [ 678.537939][ T5936] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 678.651955][ T5868] usb 1-1: device descriptor read/64, error -71 [ 678.760925][T27850] binder: 27849:27850 ioctl 4018620d 0 returned -22 [ 678.808410][T27852] syzkaller1: entered promiscuous mode [ 678.814049][ T2153] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 678.824329][T27852] syzkaller1: entered allmulticast mode [ 678.911993][ T5868] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 678.973228][ T2153] usb 8-1: config 0 has no interfaces? [ 678.980328][ T2153] usb 8-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 678.991021][ T2153] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.000242][ T2153] usb 8-1: Product: syz [ 679.004471][ T2153] usb 8-1: Manufacturer: syz [ 679.009058][ T2153] usb 8-1: SerialNumber: syz [ 679.023847][ T2153] usb 8-1: config 0 descriptor?? [ 679.055778][ T5868] usb 1-1: device descriptor read/64, error -71 [ 679.182881][ T5868] usb usb1-port1: attempt power cycle [ 679.461197][T27885] tipc: Enabling of bearer rejected, already enabled [ 679.489761][T27887] binder: 27886:27887 ioctl 4018620d 0 returned -22 [ 679.541972][ T5868] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 679.574534][ T5868] usb 1-1: device descriptor read/8, error -71 [ 679.782003][ T2153] usb 9-1: new full-speed USB device number 58 using dummy_hcd [ 679.811913][ T5868] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 679.843295][ T5868] usb 1-1: device descriptor read/8, error -71 [ 679.911874][ T2153] usb 9-1: device descriptor read/64, error -71 [ 679.952815][ T5868] usb usb1-port1: unable to enumerate USB device [ 680.151899][ T2153] usb 9-1: new full-speed USB device number 59 using dummy_hcd [ 680.302057][ T2153] usb 9-1: device descriptor read/64, error -71 [ 680.423373][ T2153] usb usb9-port1: attempt power cycle [ 680.761936][ T2153] usb 9-1: new full-speed USB device number 60 using dummy_hcd [ 680.782934][ T2153] usb 9-1: device descriptor read/8, error -71 [ 681.032033][ T2153] usb 9-1: new full-speed USB device number 61 using dummy_hcd [ 681.053692][ T2153] usb 9-1: device descriptor read/8, error -71 [ 681.164099][ T2153] usb usb9-port1: unable to enumerate USB device [ 681.223875][T27827] vhci_hcd: connection reset by peer [ 681.236018][ T1154] vhci_hcd: stop threads [ 681.240336][ T1154] vhci_hcd: release socket [ 681.245369][ T1154] vhci_hcd: disconnect device [ 681.441024][ T2153] usb 8-1: USB disconnect, device number 64 [ 681.487282][T27914] binder: 27903:27914 ioctl c018620b 200000000280 returned -14 [ 681.577810][T27924] /dev/rnullb0: Can't open blockdev [ 681.652738][T11901] vhci_hcd: vhci_device speed not set [ 681.762474][ T5915] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 681.903885][ T5915] usb 1-1: device descriptor read/64, error -71 [ 682.005809][T27946] binder: BINDER_SET_CONTEXT_MGR already set [ 682.013694][T27946] binder: 27945:27946 ioctl 4018620d 200000004a80 returned -16 [ 682.145030][ T5915] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 682.292652][ T5915] usb 1-1: device descriptor read/64, error -71 [ 682.402411][ T5915] usb usb1-port1: attempt power cycle [ 682.413172][ T30] audit: type=1326 audit(1756852503.254:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27960 comm="syz.1.4576" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c9cb8ebe9 code=0x0 [ 682.435464][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.742091][ T5915] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 682.773009][ T5915] usb 1-1: device descriptor read/8, error -71 [ 682.877448][T27983] binder: BINDER_SET_CONTEXT_MGR already set [ 682.886153][T27983] binder: 27982:27983 ioctl 4018620d 200000004a80 returned -16 [ 682.934943][T27985] netlink: 248 bytes leftover after parsing attributes in process `syz.7.4582'. [ 683.012293][ T5915] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 683.056692][ T5915] usb 1-1: device descriptor read/8, error -71 [ 683.183447][ T5915] usb usb1-port1: unable to enumerate USB device [ 683.384879][T28003] tipc: Enabling of bearer rejected, already enabled [ 683.584697][ T5936] usb 34-1: device descriptor read/8, error -110 [ 683.631182][T28026] binder: BINDER_SET_CONTEXT_MGR already set [ 683.637866][T28026] binder: 28025:28026 ioctl 4018620d 200000004a80 returned -16 [ 683.739742][T28039] /dev/rnullb0: Can't open blockdev [ 683.845031][T28051] /dev/rnullb0: Can't open blockdev [ 683.957643][T28060] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 683.964251][T28060] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 683.979154][T28060] vhci_hcd vhci_hcd.0: Device attached [ 683.994374][ T5936] usb usb34-port1: attempt power cycle [ 684.211973][T10504] usb 47-1: new high-speed USB device number 7 using vhci_hcd [ 684.220013][T28061] vhci_hcd: connection reset by peer [ 684.228272][ T3539] vhci_hcd: stop threads [ 684.232721][ T3539] vhci_hcd: release socket [ 684.237242][ T3539] vhci_hcd: disconnect device [ 684.453093][T28075] input: syz0 as /devices/virtual/input/input110 [ 684.504739][T28083] binder: 28082:28083 ioctl c0306201 0 returned -14 [ 684.612419][ T5936] usb usb34-port1: unable to enumerate USB device [ 684.905114][T28094] wlan1 speed is unknown, defaulting to 1000 [ 685.136974][T28100] binder: 28099:28100 ioctl 4018f514 0 returned -22 [ 685.155340][T28100] netlink: 'syz.8.4604': attribute type 10 has an invalid length. [ 685.358486][T28126] tipc: Enabling of bearer rejected, already enabled [ 685.440117][T28133] binder: 28132:28133 ioctl c0306201 0 returned -14 [ 685.713580][T28161] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 685.720153][T28161] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 685.742816][T28161] vhci_hcd vhci_hcd.0: Device attached [ 685.823853][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.830211][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.887454][T28177] binder: 28175:28177 ioctl c0306201 0 returned -14 [ 686.349550][T28207] binder: 28206:28207 ioctl 4018f514 0 returned -22 [ 686.361062][T28207] netlink: 'syz.0.4626': attribute type 10 has an invalid length. [ 686.751885][ T5935] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 686.894658][ T5188] Bluetooth: hci4: unexpected event for opcode 0x0c12 [ 686.901863][ T5935] usb 9-1: Using ep0 maxpacket: 16 [ 686.907644][ T5935] usb 9-1: too many configurations: 51, using maximum allowed: 8 [ 686.917272][ T5935] usb 9-1: config index 0 descriptor too short (expected 3074, got 36) [ 686.926705][ T5935] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 2 [ 686.935483][ T5935] usb 9-1: can't read configurations, error -22 [ 686.945837][T28162] vhci_hcd: connection closed [ 686.948541][ T2929] vhci_hcd: stop threads [ 686.958308][ T2929] vhci_hcd: release socket [ 686.963119][ T2929] vhci_hcd: disconnect device [ 687.071906][ T5935] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 687.105615][T28252] bpf: Bad value for 'uid' [ 687.251902][ T5935] usb 9-1: Using ep0 maxpacket: 16 [ 687.257885][ T5935] usb 9-1: too many configurations: 51, using maximum allowed: 8 [ 687.269733][ T5935] usb 9-1: config index 0 descriptor too short (expected 3074, got 36) [ 687.279787][ T5935] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 2 [ 687.288644][ T5935] usb 9-1: can't read configurations, error -22 [ 687.295718][ T5935] usb usb9-port1: attempt power cycle [ 687.333777][T28267] /dev/sg0: Can't lookup blockdev [ 687.637756][T28271] binder: 28270:28271 ioctl 4018f514 0 returned -22 [ 687.652580][T28271] netlink: 'syz.7.4642': attribute type 10 has an invalid length. [ 687.662432][ T5935] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 687.694850][ T5935] usb 9-1: Using ep0 maxpacket: 16 [ 687.700658][ T5935] usb 9-1: too many configurations: 51, using maximum allowed: 8 [ 687.710019][ T5935] usb 9-1: config index 0 descriptor too short (expected 3074, got 36) [ 687.724706][ T5935] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 2 [ 687.735057][ T5935] usb 9-1: can't read configurations, error -22 [ 687.872154][ T5935] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 687.913584][ T5935] usb 9-1: Using ep0 maxpacket: 16 [ 687.919325][ T5935] usb 9-1: too many configurations: 51, using maximum allowed: 8 [ 687.928932][ T5935] usb 9-1: config index 0 descriptor too short (expected 3074, got 36) [ 687.940799][ T5935] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 2 [ 687.950726][ T5935] usb 9-1: can't read configurations, error -22 [ 687.957593][ T5935] usb usb9-port1: unable to enumerate USB device [ 688.050566][T28278] random: crng reseeded on system resumption [ 688.129438][T28284] /dev/rnullb0: Can't open blockdev [ 688.212220][T28287] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 688.218800][T28287] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 688.236364][T28291] /dev/rnullb0: Can't open blockdev [ 688.236915][T28287] vhci_hcd vhci_hcd.0: Device attached [ 688.471912][ T5868] usb 33-1: new high-speed USB device number 7 using vhci_hcd [ 688.483298][T28288] vhci_hcd: connection reset by peer [ 688.497377][ T3539] vhci_hcd: stop threads [ 688.505660][ T3539] vhci_hcd: release socket [ 688.510376][ T3539] vhci_hcd: disconnect device [ 688.520874][T28312] tipc: Enabling of bearer rejected, already enabled [ 688.807314][T28325] binder: 28324:28325 ioctl 4018f514 0 returned -22 [ 688.818985][T28325] netlink: 'syz.1.4658': attribute type 10 has an invalid length. [ 689.331888][T10504] vhci_hcd: vhci_device speed not set [ 689.342172][T11901] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 689.387164][T28340] kvm: apic: phys broadcast and lowest prio [ 689.395092][T28340] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4662'. [ 689.491904][T11901] usb 1-1: device descriptor read/64, error -71 [ 689.772048][T11901] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 689.931866][ T6633] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 689.932255][T11901] usb 1-1: device descriptor read/64, error -71 [ 690.062871][T11901] usb usb1-port1: attempt power cycle [ 690.084631][ T6633] usb 9-1: Using ep0 maxpacket: 16 [ 690.097856][ T6633] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.109962][ T6633] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.120747][ T6633] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 690.133801][ T6633] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 690.142919][ T6633] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.158080][ T6633] usb 9-1: config 0 descriptor?? [ 690.345406][T28361] /dev/rnullb0: Can't open blockdev [ 690.413565][T11901] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 690.442529][T11901] usb 1-1: device descriptor read/8, error -71 [ 690.575838][ T6633] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 690.583989][ T6633] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 690.591222][ T6633] microsoft 0003:045E:07DA.003E: ignoring exceeding usage max [ 690.602178][ T6633] microsoft 0003:045E:07DA.003E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 690.614674][ T6633] microsoft 0003:045E:07DA.003E: no inputs found [ 690.621061][ T6633] microsoft 0003:045E:07DA.003E: could not initialize ff, continuing anyway [ 690.702226][T11901] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 690.724205][T11901] usb 1-1: device descriptor read/8, error -71 [ 690.842466][T11901] usb usb1-port1: unable to enumerate USB device [ 690.871141][ T6633] usb 9-1: USB disconnect, device number 66 [ 690.942875][ T5188] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 690.951297][ T5188] Bluetooth: hci4: Injecting HCI hardware error event [ 690.958583][ T5188] Bluetooth: hci4: hardware error 0x00 [ 691.456451][T28384] netlink: 88 bytes leftover after parsing attributes in process `syz.8.4668'. [ 691.719665][T28397] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4670'. [ 691.733873][T28396] /dev/rnullb0: Can't open blockdev [ 691.743787][ T6633] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 691.901906][ T6633] usb 9-1: Using ep0 maxpacket: 16 [ 691.913400][ T6633] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 691.923524][ T6633] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.935001][T28405] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 691.941539][T28405] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 691.950632][ T6633] usb 9-1: Product: syz [ 691.954307][T28405] vhci_hcd vhci_hcd.0: Device attached [ 691.956500][ T6633] usb 9-1: Manufacturer: syz [ 691.966544][ T6633] usb 9-1: SerialNumber: syz [ 691.973220][ T6633] usb 9-1: config 0 descriptor?? [ 691.980270][ T6633] visor 9-1:0.0: Sony Clie 3.5 converter detected [ 692.191954][T11901] usb 47-1: new high-speed USB device number 8 using vhci_hcd [ 692.216600][T28406] vhci_hcd: connection reset by peer [ 692.224771][ T1105] vhci_hcd: stop threads [ 692.229918][ T1105] vhci_hcd: release socket [ 692.235951][ T1105] vhci_hcd: disconnect device [ 692.409089][ T6633] usb 9-1: clie_3_5_startup: get interface number failed: -71 [ 692.423647][ T6633] visor 9-1:0.0: probe with driver visor failed with error -71 [ 692.434132][ T6633] usb 9-1: USB disconnect, device number 67 [ 692.566621][T28431] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 692.574622][T28431] ubi: mtd0 is already attached to ubi0 [ 693.024301][ T5188] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 693.131256][ T30] audit: type=1326 audit(1756852513.964:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28451 comm="syz.7.4683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f304238ebe9 code=0x0 [ 693.572117][ T5868] vhci_hcd: vhci_device speed not set [ 693.683168][T28520] tipc: Enabling of bearer rejected, already enabled [ 693.698050][T28521] input: syz0 as /devices/virtual/input/input112 [ 693.850176][T28531] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 693.856760][T28531] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 693.873888][T28535] binder: BINDER_SET_CONTEXT_MGR already set [ 693.880359][T28535] binder: 28533:28535 ioctl 4018620d 200000004a80 returned -16 [ 693.902412][T28531] vhci_hcd vhci_hcd.0: Device attached [ 693.979382][T28538] /dev/rnullb0: Can't open blockdev [ 694.072374][T28542] binder: 28541:28542 ioctl 4018620d 0 returned -22 [ 694.131869][ T5936] usb 35-1: new high-speed USB device number 10 using vhci_hcd [ 694.145655][T28532] vhci_hcd: connection reset by peer [ 694.154230][T16922] vhci_hcd: stop threads [ 694.158639][T16922] vhci_hcd: release socket [ 694.163944][T16922] vhci_hcd: disconnect device [ 694.686974][T28548] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20001 [ 695.002619][T28581] binder: 28580:28581 ioctl 4018620d 0 returned -22 [ 695.290664][T28607] tipc: Enabling of bearer rejected, already enabled [ 695.340202][T28612] binder: 28611:28612 ioctl 4018620d 0 returned -22 [ 695.385356][T28615] input: syz0 as /devices/virtual/input/input113 [ 695.466992][T28630] netlink: 'syz.8.4727': attribute type 1 has an invalid length. [ 695.610301][T28642] /dev/rnullb0: Can't open blockdev [ 695.638730][T28642] tipc: Enabling not permitted [ 695.654592][T28642] tipc: Enabling of bearer rejected, failed to enable media [ 695.833311][T28652] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 695.845047][ T30] audit: type=1326 audit(1756852516.684:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28650 comm="syz.0.4730" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f9958ebe9 code=0x0 [ 695.867212][ C1] vkms_vblank_simulate: vblank timer overrun [ 695.902702][T28653] ubi: mtd0 is already attached to ubi0 [ 696.390741][T28672] binder: 28671:28672 ioctl c0306201 0 returned -14 [ 696.708646][T28707] input: syz0 as /devices/virtual/input/input114 [ 696.757771][T28715] random: crng reseeded on system resumption [ 696.783150][T28717] binder: 28716:28717 ioctl c0306201 0 returned -14 [ 696.857115][T28725] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 697.101906][ T2153] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 697.264498][ T2153] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 697.273771][ T2153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.283828][ T2153] usb 1-1: config 0 descriptor?? [ 697.332397][T11901] vhci_hcd: vhci_device speed not set [ 697.501513][ T2153] kaweth 1-1:0.0: Firmware present in device. [ 697.693466][ T2153] kaweth 1-1:0.0: Statistics collection: 0 [ 697.699359][ T2153] kaweth 1-1:0.0: Multicast filter limit: 0 [ 697.705327][ T2153] kaweth 1-1:0.0: MTU: 0 [ 697.709579][ T2153] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 697.953924][T28725] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 697.976605][ T2153] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 697.993829][ T2153] usb 1-1: USB disconnect, device number 66 [ 698.613234][T28774] binder: 28773:28774 ioctl c0306201 0 returned -14 [ 698.647401][T28776] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.698886][T28776] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.747379][T28776] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.816724][T28776] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.875526][ T1105] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.889614][ T3539] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.902048][ T1105] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.916383][ T42] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.931877][T11901] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 699.081993][T11901] usb 1-1: Using ep0 maxpacket: 16 [ 699.088454][T11901] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 699.097406][T11901] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.108119][T11901] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 699.118818][T11901] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 699.127961][T11901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.136089][T11901] usb 1-1: Product: syz [ 699.140265][T11901] usb 1-1: Manufacturer: syz [ 699.144925][T11901] usb 1-1: SerialNumber: syz [ 699.251873][ T5936] vhci_hcd: vhci_device speed not set [ 699.527989][T28807] tipc: Enabling of bearer rejected, already enabled [ 699.568377][T11901] usb 1-1: 0:2 : does not exist [ 699.583445][T11901] usb 1-1: 1:0: cannot get min/max values for control 2 (id 1) [ 699.606794][T11901] usb 1-1: USB disconnect, device number 67 [ 699.692380][T28831] /dev/rnullb0: Can't open blockdev [ 700.269885][ T30] audit: type=1326 audit(1756852521.104:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28874 comm="syz.7.4772" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f304238ebe9 code=0x0 [ 702.263035][T28913] tipc: Enabling of bearer rejected, already enabled [ 702.397215][T28926] IPVS: length: 78 != 8 [ 702.402837][T28926] binder: 28925:28926 ioctl c0306201 200000000080 returned -14 [ 702.793985][T28931] input: syz0 as /devices/virtual/input/input115 [ 702.841554][T28939] rdma_rxe: rxe_newlink: failed to add wlan1 [ 702.850854][T28939] /dev/rnullb0: Can't open blockdev [ 703.261894][T28971] /dev/rnullb0: Can't open blockdev [ 703.305495][T28976] tipc: Enabling of bearer rejected, already enabled [ 706.308171][T11903] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 706.325604][T11903] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 706.342111][T11903] usb 2-1: USB disconnect, device number 76 [ 729.718087][ T30] audit: type=1326 audit(1756852550.554:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28994 comm="syz.1.4805" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c9cb8ebe9 code=0x0 [ 729.825070][T29014] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 729.831635][T29014] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 729.888894][T29014] vhci_hcd vhci_hcd.0: Device attached [ 729.889778][T29025] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 729.933203][T29024] /dev/rnullb0: Can't open blockdev [ 730.055353][T29036] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4813'. [ 730.056128][T29034] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 730.067154][T29036] /dev/rnullb0: Can't open blockdev [ 730.075124][T29034] ubi: mtd0 is already attached to ubi0 [ 730.091913][ T2153] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 730.121832][T11903] usb 33-1: new high-speed USB device number 8 using vhci_hcd [ 730.130087][T29016] vhci_hcd: connection reset by peer [ 730.138635][ T2929] vhci_hcd: stop threads [ 730.143259][ T2929] vhci_hcd: release socket [ 730.149816][ T2929] vhci_hcd: disconnect device [ 730.170737][T29047] netlink: 'syz.8.4815': attribute type 3 has an invalid length. [ 730.178589][T29047] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4815'. [ 730.189669][T29047] /dev/rnullb0: Can't open blockdev [ 730.248821][T29054] input: syz0 as /devices/virtual/input/input116 [ 730.265431][ T2153] usb 2-1: config 0 has no interfaces? [ 730.280476][ T2153] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 730.295460][ T2153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.322604][ T2153] usb 2-1: Product: syz [ 730.327171][ T2153] usb 2-1: Manufacturer: syz [ 730.333682][ T2153] usb 2-1: SerialNumber: syz [ 730.343175][ T2153] usb 2-1: config 0 descriptor?? [ 730.355747][T29065] binder: 29064:29065 ioctl c0306201 0 returned -14 [ 730.411607][T29074] tipc: Enabling of bearer rejected, already enabled [ 730.716355][T29098] /dev/sg0: Can't lookup blockdev [ 731.050820][T29139] tipc: Enabling of bearer rejected, already enabled [ 731.253368][T29149] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 731.259914][T29149] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 731.270545][T29149] vhci_hcd vhci_hcd.0: Device attached [ 731.513146][ T5935] usb 49-1: new high-speed USB device number 5 using vhci_hcd [ 731.522002][T29150] vhci_hcd: connection reset by peer [ 731.527553][ T1105] vhci_hcd: stop threads [ 731.532044][ T1105] vhci_hcd: release socket [ 731.536539][ T1105] vhci_hcd: disconnect device [ 732.667756][T11901] usb 2-1: USB disconnect, device number 77 [ 732.930505][T29207] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 732.939763][T29207] buffer_io_error: 138 callbacks suppressed [ 732.939782][T29207] Buffer I/O error on dev nbd0, logical block 0, async page read [ 732.955534][T29207] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 732.971854][T29207] Buffer I/O error on dev nbd0, logical block 1, async page read [ 732.980327][T29207] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 732.990752][T29207] Buffer I/O error on dev nbd0, logical block 2, async page read [ 733.001194][T29207] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 733.010862][T29207] Buffer I/O error on dev nbd0, logical block 3, async page read [ 733.019234][T29207] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 733.028760][T29207] Buffer I/O error on dev nbd0, logical block 0, async page read [ 733.036889][T29207] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 733.046152][T29207] Buffer I/O error on dev nbd0, logical block 1, async page read [ 733.054115][T29207] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 733.063283][ T2153] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 733.071053][T29207] Buffer I/O error on dev nbd0, logical block 2, async page read [ 733.080349][T29207] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 733.090665][T29207] Buffer I/O error on dev nbd0, logical block 3, async page read [ 733.100109][T29207] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 733.110998][T29207] Buffer I/O error on dev nbd0, logical block 0, async page read [ 733.116803][T29223] /dev/rnullb0: Can't open blockdev [ 733.121005][T29207] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 733.138380][T29207] Buffer I/O error on dev nbd0, logical block 1, async page read [ 733.148675][T29207] ldm_validate_partition_table(): Disk read failed. [ 733.160127][T29225] tipc: Enabling of bearer rejected, already enabled [ 733.160262][T29207] Dev nbd0: unable to read RDB block 0 [ 733.176441][T29207] nbd0: unable to read partition table [ 733.255462][ T2153] usb 9-1: config 241 has an invalid descriptor of length 172, skipping remainder of the config [ 733.267932][ T2153] usb 9-1: config 241 has 0 interfaces, different from the descriptor's value: 1 [ 733.279184][ T2153] usb 9-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 733.288313][ T2153] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.602414][ T2153] usb 9-1: string descriptor 0 read error: -71 [ 733.612470][T29255] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 733.619022][T29255] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 733.638397][T29262] comedi comedi3: comedi_config --init_data is deprecated [ 733.652468][T29255] vhci_hcd vhci_hcd.0: Device attached [ 733.659568][ T2153] usb 9-1: USB disconnect, device number 68 [ 733.683160][T29265] input: syz0 as /devices/virtual/input/input117 [ 733.692648][T29256] vhci_hcd: connection closed [ 733.698482][ T2929] vhci_hcd: stop threads [ 733.709101][ T2929] vhci_hcd: release socket [ 733.714093][ T2929] vhci_hcd: disconnect device [ 733.872700][T29291] /dev/rnullb0: Can't open blockdev [ 734.131828][ T2153] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 734.233726][T29322] tipc: Enabling of bearer rejected, already enabled [ 734.291852][ T2153] usb 2-1: Using ep0 maxpacket: 16 [ 734.301247][ T2153] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 734.316290][ T2153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.325418][T29329] /dev/rnullb0: Can't open blockdev [ 734.331833][ T2153] usb 2-1: Product: syz [ 734.342021][ T2153] usb 2-1: Manufacturer: syz [ 734.352132][ T2153] usb 2-1: SerialNumber: syz [ 734.364954][ T2153] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 734.561122][ T2153] gp8psk: usb in 128 operation failed. [ 734.579015][ T2153] gp8psk: usb in 137 operation failed. [ 734.595631][ T2153] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 734.607457][ T2153] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 734.619668][ T2153] usb 2-1: media controller created [ 734.639608][ T2153] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 734.675111][ T2153] gp8psk_fe: Frontend revision 1 attached [ 734.683236][ T2153] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 734.691416][ T2153] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 734.730638][ T2153] gp8psk: usb in 138 operation failed. [ 734.738268][ T2153] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 734.748619][ T2153] gp8psk: found Genpix USB device pID = 201 (hex) [ 734.762121][ T2153] usb 2-1: USB disconnect, device number 78 [ 734.812926][ T2153] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 734.944345][T29408] dlm: no locking on control device [ 735.060795][T29412] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 735.067362][T29412] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 735.099518][T29412] vhci_hcd vhci_hcd.0: Device attached [ 735.168682][T29413] vhci_hcd: connection closed [ 735.168942][ T1154] vhci_hcd: stop threads [ 735.178213][ T1154] vhci_hcd: release socket [ 735.185463][ T1154] vhci_hcd: disconnect device [ 735.201421][T29419] input: syz0 as /devices/virtual/input/input118 [ 735.252626][T11903] vhci_hcd: vhci_device speed not set [ 735.641835][ T2153] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 735.793494][ T2153] usb 2-1: unable to get BOS descriptor or descriptor too short [ 735.805545][ T2153] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 735.817220][ T2153] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 735.830971][ T2153] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 735.843538][ T2153] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 735.855356][ T2153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.871630][ T2153] usb 2-1: Product: syz [ 735.876235][ T2153] usb 2-1: Manufacturer: syz [ 735.880865][ T2153] usb 2-1: SerialNumber: syz [ 736.171617][ T30] audit: type=1326 audit(1756852557.004:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29481 comm="syz.8.4906" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e4e78ebe9 code=0x0 [ 736.243964][T29486] input: syz0 as /devices/virtual/input/input119 [ 736.520102][T29431] wlan1 speed is unknown, defaulting to 1000 [ 736.611893][ T5935] vhci_hcd: vhci_device speed not set [ 737.498454][T29545] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 737.505023][T29545] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 737.510268][ T2153] usb 2-1: 0:2 : does not exist [ 737.529446][ T2153] usb 2-1: USB disconnect, device number 79 [ 737.545525][T29545] vhci_hcd vhci_hcd.0: Device attached [ 737.576208][T29019] udevd[29019]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 737.782112][ T5935] usb 33-1: new high-speed USB device number 9 using vhci_hcd [ 737.797582][T29546] vhci_hcd: connection reset by peer [ 737.814315][ T42] vhci_hcd: stop threads [ 737.834527][ T42] vhci_hcd: release socket [ 737.839016][ T42] vhci_hcd: disconnect device [ 737.939925][T29569] binder: 29567:29569 ioctl 4018f514 0 returned -22 [ 737.966957][T29569] netlink: 'syz.1.4918': attribute type 10 has an invalid length. [ 738.545411][T29629] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4935'. [ 738.732116][T11903] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 738.912811][T11903] usb 9-1: Using ep0 maxpacket: 16 [ 738.927646][T11903] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 738.946439][T11903] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.977256][T11903] usb 9-1: Product: syz [ 738.981473][T11903] usb 9-1: Manufacturer: syz [ 739.012107][T11903] usb 9-1: SerialNumber: syz [ 739.020568][T11903] usb 9-1: config 0 descriptor?? [ 739.035896][T11903] visor 9-1:0.0: Sony Clie 3.5 converter detected [ 739.455600][T11903] usb 9-1: clie_3_5_startup: get interface number failed: -71 [ 739.462976][T29653] binder: BINDER_SET_CONTEXT_MGR already set [ 739.463558][T11903] visor 9-1:0.0: probe with driver visor failed with error -71 [ 739.469116][T29653] binder: 29651:29653 ioctl 4018620d 200000004a80 returned -16 [ 739.512586][T11903] usb 9-1: USB disconnect, device number 69 [ 739.857144][T29679] tipc: Enabling of bearer rejected, already enabled [ 740.554200][T29711] wlan1 speed is unknown, defaulting to 1000 [ 741.272980][T11901] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 741.401864][T11903] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 741.432706][T11901] usb 9-1: Using ep0 maxpacket: 32 [ 741.439270][T11901] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 741.456319][T11901] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 741.466456][T11901] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 741.476153][T11901] usb 9-1: Product: syz [ 741.480719][T11901] usb 9-1: Manufacturer: syz [ 741.486200][T11901] usb 9-1: SerialNumber: syz [ 741.501104][T11901] usb 9-1: config 0 descriptor?? [ 741.516236][T29749] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 741.565371][T11903] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 741.574638][T11903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.589003][T11903] usb 1-1: config 0 descriptor?? [ 741.596313][T11903] cp210x 1-1:0.0: cp210x converter detected [ 741.638922][T29792] netlink: 'syz.1.4968': attribute type 10 has an invalid length. [ 741.730763][T28639] usb 9-1: USB disconnect, device number 70 [ 742.216297][T11903] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 742.219051][T29814] input: syz0 as /devices/virtual/input/input120 [ 742.239825][T11903] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 742.262511][T11903] usb 1-1: cp210x converter now attached to ttyUSB0 [ 742.292038][T11903] usb 1-1: USB disconnect, device number 68 [ 742.312945][T11903] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 742.330254][T11903] cp210x 1-1:0.0: device disconnected [ 742.591842][T11901] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 742.751837][T11901] usb 2-1: Using ep0 maxpacket: 16 [ 742.766838][T11901] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 742.778584][T11901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=20 [ 742.790066][T11901] usb 2-1: SerialNumber: syz [ 742.804046][T11901] usb 2-1: config 0 descriptor?? [ 742.817322][T11901] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 742.834370][T11901] usb 2-1: Detected FT232A [ 742.844146][T11901] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 742.928399][T29856] tipc: Enabling of bearer rejected, already enabled [ 742.932572][ T5935] vhci_hcd: vhci_device speed not set [ 742.970557][T29858] trusted_key: encrypted_key: insufficient parameters specified [ 742.988107][T29858] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 743.857271][T29875] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 743.863839][T29875] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 743.877392][T29875] vhci_hcd vhci_hcd.0: Device attached [ 744.112461][ T5935] usb 33-1: new high-speed USB device number 10 using vhci_hcd [ 744.120968][T29876] vhci_hcd: connection reset by peer [ 744.129226][T16922] vhci_hcd: stop threads [ 744.137343][T16922] vhci_hcd: release socket [ 744.148668][T16922] vhci_hcd: disconnect device [ 744.374001][T29886] input: syz0 as /devices/virtual/input/input121 [ 744.502953][T29895] /dev/rnullb0: Can't open blockdev [ 744.692923][ T30] audit: type=1326 audit(1756852565.534:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29896 comm="syz.8.4984" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e4e78ebe9 code=0x0 [ 744.899488][ T5936] usb 2-1: USB disconnect, device number 80 [ 744.922549][ T5936] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 744.938242][ T5936] ftdi_sio 2-1:0.0: device disconnected [ 744.950957][T29914] syzkaller1: entered promiscuous mode [ 744.956545][T29914] syzkaller1: entered allmulticast mode [ 745.061847][T28639] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 745.222051][T28639] usb 9-1: config 0 has no interfaces? [ 745.230436][T28639] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 745.241275][T28639] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.249918][T28639] usb 9-1: Product: syz [ 745.255674][T28639] usb 9-1: Manufacturer: syz [ 745.260353][T28639] usb 9-1: SerialNumber: syz [ 745.272503][T28639] usb 9-1: config 0 descriptor?? [ 745.884776][T29934] tipc: Enabling of bearer rejected, already enabled [ 746.148585][T29939] netlink: 'syz.0.4990': attribute type 21 has an invalid length. [ 746.158958][T29939] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4990'. [ 746.541957][T28639] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 746.681859][T28639] usb 2-1: device descriptor read/64, error -71 [ 746.932016][T28639] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 747.074050][T28639] usb 2-1: device descriptor read/64, error -71 [ 747.194846][T28639] usb usb2-port1: attempt power cycle [ 747.267892][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.274589][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.551908][T28639] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 747.582439][T28639] usb 2-1: device descriptor read/8, error -71 [ 747.621957][ T5936] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 747.667535][ T6633] usb 9-1: USB disconnect, device number 71 [ 747.726214][T29977] input: syz0 as /devices/virtual/input/input122 [ 747.810369][T29985] /dev/rnullb0: Can't open blockdev [ 747.823459][T28639] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 747.834429][ T5936] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 747.861817][ T5936] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 747.870480][ T5936] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 747.892053][T28639] usb 2-1: device descriptor read/8, error -71 [ 747.904507][ T5936] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 747.978269][T29988] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 747.984843][T29988] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 747.992804][ T5936] usb 1-1: config 1 has no interface number 0 [ 747.998969][ T5936] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 748.002648][T29988] vhci_hcd vhci_hcd.0: Device attached [ 748.008528][T28639] usb usb2-port1: unable to enumerate USB device [ 748.020105][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.038851][ T5936] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 748.240542][ T5936] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 748.250859][ T5936] snd_usb_pod 1-1:1.1: invalid control EP [ 748.257120][ T5936] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 748.262089][ T2153] usb 49-1: new high-speed USB device number 6 using vhci_hcd [ 748.265209][ T5936] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 748.279245][ T5936] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 748.288299][T29989] vhci_hcd: connection reset by peer [ 748.297273][ T2929] vhci_hcd: stop threads [ 748.302290][ T2929] vhci_hcd: release socket [ 748.314037][ T2929] vhci_hcd: disconnect device [ 748.461138][T29965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.475368][T29965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.686720][T29965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.698551][T29965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.788216][ T5936] usb 1-1: USB disconnect, device number 69 [ 749.251966][ T5935] vhci_hcd: vhci_device speed not set [ 749.264798][T30022] tipc: Enabling of bearer rejected, already enabled [ 749.380514][T30030] FAULT_INJECTION: forcing a failure. [ 749.380514][T30030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.396107][T30030] CPU: 0 UID: 0 PID: 30030 Comm: syz.1.5005 Not tainted syzkaller #0 PREEMPT(full) [ 749.396132][T30030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 749.396143][T30030] Call Trace: [ 749.396151][T30030] [ 749.396159][T30030] dump_stack_lvl+0x189/0x250 [ 749.396191][T30030] ? __pfx____ratelimit+0x10/0x10 [ 749.396214][T30030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 749.396239][T30030] ? __pfx__printk+0x10/0x10 [ 749.396264][T30030] ? __might_fault+0xb0/0x130 [ 749.396294][T30030] ? rcu_is_watching+0x15/0xb0 [ 749.396316][T30030] should_fail_ex+0x414/0x560 [ 749.396341][T30030] _copy_from_user+0x2d/0xb0 [ 749.396363][T30030] binder_ioctl_write_read+0xa61/0xa040 [ 749.396396][T30030] ? is_bpf_text_address+0x26/0x2b0 [ 749.396415][T30030] ? kernel_text_address+0xa5/0xe0 [ 749.396443][T30030] ? unwind_get_return_address+0x4d/0x90 [ 749.396470][T30030] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 749.396496][T30030] ? stack_trace_save+0x9c/0xe0 [ 749.396519][T30030] ? __pfx_stack_trace_save+0x10/0x10 [ 749.396543][T30030] ? stack_depot_save_flags+0x40/0x860 [ 749.396571][T30030] ? kasan_save_track+0x4f/0x80 [ 749.396604][T30030] ? kasan_save_track+0x3e/0x80 [ 749.396626][T30030] ? __kasan_save_free_info+0x46/0x50 [ 749.396646][T30030] ? __kasan_slab_free+0x5b/0x80 [ 749.396670][T30030] ? kfree+0x18e/0x440 [ 749.396692][T30030] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 749.396711][T30030] ? security_file_ioctl+0xcb/0x2d0 [ 749.396728][T30030] ? __se_sys_ioctl+0x47/0x170 [ 749.396753][T30030] ? do_syscall_64+0xfa/0xfa0 [ 749.396775][T30030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.396800][T30030] ? __pfx_binder_debug+0x10/0x10 [ 749.396821][T30030] ? do_raw_spin_lock+0x121/0x290 [ 749.396845][T30030] ? rcu_is_watching+0x15/0xb0 [ 749.396869][T30030] ? _raw_spin_unlock+0x28/0x50 [ 749.396890][T30030] ? binder_get_thread+0x178/0x6d0 [ 749.396916][T30030] binder_ioctl+0x3e0/0x19c0 [ 749.396940][T30030] ? lock_release+0x4b/0x3e0 [ 749.396956][T30030] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 749.396974][T30030] ? kfree+0x18e/0x440 [ 749.396998][T30030] ? do_vfs_ioctl+0xbe8/0x1430 [ 749.397014][T30030] ? __pfx_binder_ioctl+0x10/0x10 [ 749.397039][T30030] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 749.397067][T30030] ? lock_release+0x4b/0x3e0 [ 749.397082][T30030] ? vfs_write+0x956/0xb30 [ 749.397102][T30030] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 749.397139][T30030] ? __fget_files+0x3a0/0x420 [ 749.397159][T30030] ? __fget_files+0x2a/0x420 [ 749.397180][T30030] ? bpf_lsm_file_ioctl+0x9/0x20 [ 749.397205][T30030] ? __pfx_binder_ioctl+0x10/0x10 [ 749.397228][T30030] __se_sys_ioctl+0xf9/0x170 [ 749.397256][T30030] do_syscall_64+0xfa/0xfa0 [ 749.397279][T30030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.397298][T30030] ? clear_bhb_loop+0x60/0xb0 [ 749.397319][T30030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.397335][T30030] RIP: 0033:0x7f5c9cb8ebe9 [ 749.397352][T30030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.397369][T30030] RSP: 002b:00007f5c9d929038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 749.397392][T30030] RAX: ffffffffffffffda RBX: 00007f5c9cdc5fa0 RCX: 00007f5c9cb8ebe9 [ 749.397406][T30030] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 749.397419][T30030] RBP: 00007f5c9d929090 R08: 0000000000000000 R09: 0000000000000000 [ 749.397432][T30030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.397444][T30030] R13: 00007f5c9cdc6038 R14: 00007f5c9cdc5fa0 R15: 00007ffdf9ecf418 [ 749.397463][T30030] [ 749.397544][ T30] audit: type=1326 audit(1756852570.234:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30023 comm="syz.8.5004" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e4e78ebe9 code=0x0 [ 749.453224][T30030] binder: 30029:30030 ioctl c0306201 2000000001c0 returned -14 [ 750.100067][T30055] block device autoloading is deprecated and will be removed. [ 750.539093][T30071] binder: 30070:30071 unknown command 0 [ 750.549359][T30071] binder: 30070:30071 ioctl c0306201 2000000001c0 returned -22 [ 750.968106][T30079] input: syz0 as /devices/virtual/input/input123 [ 751.354155][ T5936] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 751.512645][ T5936] usb 2-1: Using ep0 maxpacket: 32 [ 751.524435][ T5936] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.606389][T30094] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 751.612953][T30094] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 751.622162][ T5936] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 751.632680][T30094] vhci_hcd vhci_hcd.0: Device attached [ 751.638240][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.646545][ T5936] usb 2-1: Product: syz [ 751.650798][ T5936] usb 2-1: Manufacturer: syz [ 751.655516][ T5936] usb 2-1: SerialNumber: syz [ 751.662542][ T5936] usb 2-1: config 0 descriptor?? [ 751.673047][ T5936] usb 2-1: bad CDC descriptors [ 751.679601][ T5936] usb 2-1: unsupported MDLM descriptors [ 751.881878][T28639] usb 33-1: new high-speed USB device number 11 using vhci_hcd [ 751.893015][T30095] vhci_hcd: connection reset by peer [ 751.901189][ T1105] vhci_hcd: stop threads [ 751.909154][ T1105] vhci_hcd: release socket [ 751.913851][ T1105] vhci_hcd: disconnect device [ 752.491423][T30108] binder: 30107:30108 ioctl 941c 0 returned -22 [ 752.564094][T30108] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5022'. [ 752.656567][T30115] tipc: Enabling of bearer rejected, already enabled [ 752.667999][T30116] /dev/rnullb0: Can't open blockdev [ 752.739720][T30118] FAULT_INJECTION: forcing a failure. [ 752.739720][T30118] name failslab, interval 1, probability 0, space 0, times 0 [ 752.756786][T30118] CPU: 0 UID: 0 PID: 30118 Comm: syz.8.5025 Not tainted syzkaller #0 PREEMPT(full) [ 752.756813][T30118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 752.756824][T30118] Call Trace: [ 752.756831][T30118] [ 752.756839][T30118] dump_stack_lvl+0x189/0x250 [ 752.756870][T30118] ? __pfx____ratelimit+0x10/0x10 [ 752.756893][T30118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 752.756919][T30118] ? __pfx__printk+0x10/0x10 [ 752.756946][T30118] ? __pfx___might_resched+0x10/0x10 [ 752.756966][T30118] ? lock_acquire+0x5f/0x360 [ 752.756985][T30118] should_fail_ex+0x414/0x560 [ 752.757012][T30118] should_failslab+0xa8/0x100 [ 752.757031][T30118] __kmalloc_cache_noprof+0x70/0x3a0 [ 752.757058][T30118] ? binder_transaction+0x69c/0x6450 [ 752.757087][T30118] binder_transaction+0x69c/0x6450 [ 752.757114][T30118] ? ima_match_policy+0x20c3/0x2150 [ 752.757134][T30118] ? __kasan_slab_free+0x5b/0x80 [ 752.757165][T30118] ? lock_acquire+0x5f/0x360 [ 752.757182][T30118] ? ima_match_policy+0x10b/0x2150 [ 752.757203][T30118] ? __pfx_binder_transaction+0x10/0x10 [ 752.757227][T30118] ? down_write+0x162/0x1f0 [ 752.757256][T30118] ? rcu_is_watching+0x15/0xb0 [ 752.757281][T30118] ? __might_fault+0xb0/0x130 [ 752.757307][T30118] ? rcu_is_watching+0x15/0xb0 [ 752.757326][T30118] ? lock_acquire+0x5f/0x360 [ 752.757345][T30118] ? rcu_is_watching+0x15/0xb0 [ 752.757364][T30118] ? lock_release+0x4b/0x3e0 [ 752.757380][T30118] ? __might_fault+0xb0/0x130 [ 752.757403][T30118] ? __might_fault+0xcc/0x130 [ 752.757431][T30118] binder_ioctl_write_read+0xd6a/0xa040 [ 752.757461][T30118] ? is_bpf_text_address+0x26/0x2b0 [ 752.757482][T30118] ? kernel_text_address+0xa5/0xe0 [ 752.757510][T30118] ? unwind_get_return_address+0x4d/0x90 [ 752.757537][T30118] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 752.757562][T30118] ? stack_trace_save+0x9c/0xe0 [ 752.757585][T30118] ? __pfx_stack_trace_save+0x10/0x10 [ 752.757609][T30118] ? stack_depot_save_flags+0x40/0x860 [ 752.757636][T30118] ? kasan_save_track+0x4f/0x80 [ 752.757659][T30118] ? kasan_save_track+0x3e/0x80 [ 752.757681][T30118] ? __kasan_save_free_info+0x46/0x50 [ 752.757701][T30118] ? __kasan_slab_free+0x5b/0x80 [ 752.757725][T30118] ? kfree+0x18e/0x440 [ 752.757746][T30118] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 752.757765][T30118] ? security_file_ioctl+0xcb/0x2d0 [ 752.757789][T30118] ? __se_sys_ioctl+0x47/0x170 [ 752.757813][T30118] ? do_syscall_64+0xfa/0xfa0 [ 752.757835][T30118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.757861][T30118] ? __pfx_binder_debug+0x10/0x10 [ 752.757885][T30118] ? do_raw_spin_lock+0x121/0x290 [ 752.757910][T30118] ? rcu_is_watching+0x15/0xb0 [ 752.757933][T30118] ? _raw_spin_unlock+0x28/0x50 [ 752.757954][T30118] ? binder_get_thread+0x178/0x6d0 [ 752.757980][T30118] binder_ioctl+0x3e0/0x19c0 [ 752.758005][T30118] ? lock_release+0x4b/0x3e0 [ 752.758022][T30118] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 752.758041][T30118] ? kfree+0x18e/0x440 [ 752.758066][T30118] ? do_vfs_ioctl+0xbe8/0x1430 [ 752.758082][T30118] ? __pfx_binder_ioctl+0x10/0x10 [ 752.758105][T30118] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 752.758135][T30118] ? lock_release+0x4b/0x3e0 [ 752.758151][T30118] ? vfs_write+0x956/0xb30 [ 752.758171][T30118] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 752.758207][T30118] ? __fget_files+0x3a0/0x420 [ 752.758228][T30118] ? __fget_files+0x2a/0x420 [ 752.758259][T30118] ? bpf_lsm_file_ioctl+0x9/0x20 [ 752.758284][T30118] ? __pfx_binder_ioctl+0x10/0x10 [ 752.758308][T30118] __se_sys_ioctl+0xf9/0x170 [ 752.758336][T30118] do_syscall_64+0xfa/0xfa0 [ 752.758360][T30118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.758379][T30118] ? clear_bhb_loop+0x60/0xb0 [ 752.758399][T30118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.758417][T30118] RIP: 0033:0x7f8e4e78ebe9 [ 752.758434][T30118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.758450][T30118] RSP: 002b:00007f8e4f57f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.758472][T30118] RAX: ffffffffffffffda RBX: 00007f8e4e9c5fa0 RCX: 00007f8e4e78ebe9 [ 752.758485][T30118] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 752.758497][T30118] RBP: 00007f8e4f57f090 R08: 0000000000000000 R09: 0000000000000000 [ 752.758509][T30118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.758521][T30118] R13: 00007f8e4e9c6038 R14: 00007f8e4e9c5fa0 R15: 00007fff60965fa8 [ 752.758542][T30118] [ 753.250705][T30126] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 753.400918][ T30] audit: type=1326 audit(1756852574.234:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30128 comm="syz.8.5028" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e4e78ebe9 code=0x0 [ 753.424515][ T2153] vhci_hcd: vhci_device speed not set [ 753.692019][ T5868] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 753.741839][ T6633] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 753.843326][ T5868] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 753.853071][ T5868] usb 1-1: config 0 has no interface number 0 [ 753.859280][ T5868] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 753.868758][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.884796][ T5868] usb 1-1: config 0 descriptor?? [ 753.893265][ T6633] usb 9-1: config 0 has no interfaces? [ 753.902045][ T6633] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 753.915427][ T6633] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.925797][ T5868] gspca_main: spca561-2.14.0 probing abcd:cdee [ 753.934638][ T6633] usb 9-1: Product: syz [ 753.938881][ T6633] usb 9-1: Manufacturer: syz [ 753.943674][ T6633] usb 9-1: SerialNumber: syz [ 753.958776][ T6633] usb 9-1: config 0 descriptor?? [ 754.071677][ T6633] usb 2-1: USB disconnect, device number 85 [ 754.146244][ T5868] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 754.170066][ T5868] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 754.198138][ T5868] usb 1-1: MIDIStreaming interface descriptor not found [ 754.259781][ T5868] usb 1-1: USB disconnect, device number 70 [ 754.434283][T30190] binder: BINDER_SET_CONTEXT_MGR already set [ 754.440316][T30190] binder: 30189:30190 ioctl 4018620d 200000004a80 returned -16 [ 754.482807][T30190] binder: 30189:30190 unknown command 0 [ 754.488429][T30190] binder: 30189:30190 ioctl c0306201 2000000001c0 returned -22 [ 754.536050][T24457] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 754.545761][T24457] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 754.554151][T24457] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 754.565871][T24457] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 754.575483][T24457] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 754.611295][T30191] wlan1 speed is unknown, defaulting to 1000 [ 754.686137][T30218] input: syz0 as /devices/virtual/input/input124 [ 754.765279][ T1154] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.793525][T30228] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 754.800099][T30228] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 754.826567][T30228] vhci_hcd vhci_hcd.0: Device attached [ 754.887984][ T1154] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.898796][T30229] vhci_hcd: connection closed [ 754.900906][ T2929] vhci_hcd: stop threads [ 754.917056][ T2929] vhci_hcd: release socket [ 754.921662][ T2929] vhci_hcd: disconnect device [ 754.951136][ T1154] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.038800][ T1154] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.074037][T30191] chnl_net:caif_netlink_parms(): no params data found [ 755.153460][T30191] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.160666][T30191] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.168393][T30191] bridge_slave_0: entered allmulticast mode [ 755.175719][T30191] bridge_slave_0: entered promiscuous mode [ 755.186510][T30191] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.195929][T30191] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.206609][T30191] bridge_slave_1: entered allmulticast mode [ 755.214147][T30191] bridge_slave_1: entered promiscuous mode [ 755.277559][T30191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.290694][T30191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.326332][ T1154] bridge_slave_1: left allmulticast mode [ 755.332508][ T1154] bridge_slave_1: left promiscuous mode [ 755.338287][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.347854][ T1154] bridge_slave_0: left allmulticast mode [ 755.353963][ T1154] bridge_slave_0: left promiscuous mode [ 755.359614][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.449053][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.462416][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.473682][ T1154] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 755.482492][ T1154] bond0 (unregistering): Released all slaves [ 755.502790][ T2153] wlan1 speed is unknown, defaulting to 1000 [ 755.515083][T30191] team0: Port device team_slave_0 added [ 755.525079][ T6633] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 755.533963][T30452] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5046'. [ 755.542523][T30191] team0: Port device team_slave_1 added [ 755.578654][ T1154] tipc: Disabling bearer [ 755.584014][ T1154] tipc: Left network mode [ 755.603005][T30191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.619174][T30191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.646438][T30191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.706502][T30191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.715233][T30191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.744089][ T6633] usb 2-1: Using ep0 maxpacket: 16 [ 755.751417][T30191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.776015][ T6633] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 755.801873][ T6633] usb 2-1: config 1 has no interface number 0 [ 755.808676][ T6633] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 755.827498][ T6633] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 755.852029][T16895] smc: removing ib device syz0 [ 755.877369][ T6633] usb 2-1: config 1 interface 105 has no altsetting 0 [ 755.913884][ T6633] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 755.943227][ T6633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.951375][ T6633] usb 2-1: Product: syz [ 755.958628][ T6633] usb 2-1: Manufacturer: syz [ 755.980852][ T6633] usb 2-1: SerialNumber: syz [ 756.005075][T30430] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 756.014335][T30191] hsr_slave_0: entered promiscuous mode [ 756.020906][T30191] hsr_slave_1: entered promiscuous mode [ 756.025210][T30430] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 756.038696][T30191] debugfs: 'hsr0' already exists in 'hsr' [ 756.052601][T30191] Cannot create hsr debugfs directory [ 756.369917][T11903] usb 9-1: USB disconnect, device number 73 [ 756.382912][T30535] infiniband syz1: set active [ 756.401179][T30535] infiniband syz1: added bridge0 [ 756.463909][T30430] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 756.487755][T30430] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 756.516377][T30535] RDS/IB: syz1: added [ 756.520444][T30535] smc: adding ib device syz1 with port count 1 [ 756.552318][T30535] smc: ib device syz1 port 1 has pnetid [ 756.622124][T24457] Bluetooth: hci3: command tx timeout [ 756.804630][T30626] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 756.921571][ T6633] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 757.013849][T28639] vhci_hcd: vhci_device speed not set [ 757.148967][ T6633] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 757.271461][ T6633] aqc111 2-1:1.105 eth7: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 2a:ab:63:de:99:81 [ 757.293165][ T6633] usb 2-1: USB disconnect, device number 86 [ 757.300051][ T6633] aqc111 2-1:1.105 eth7: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 758.480427][T30672] sctp: [Deprecated]: syz.1.5056 (pid 30672) Use of struct sctp_assoc_value in delayed_ack socket option. [ 758.480427][T30672] Use struct sctp_sack_info instead [ 758.711868][T24457] Bluetooth: hci3: command tx timeout [ 759.492232][ T6633] aqc111 2-1:1.105 eth7 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 759.507336][ T6633] aqc111 2-1:1.105 eth7 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 759.518417][ T6633] aqc111 2-1:1.105 eth7 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 759.736454][ T1154] hsr_slave_0: left promiscuous mode [ 759.749100][ T1154] hsr_slave_1: left promiscuous mode [ 759.755979][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.766141][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.774214][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.783892][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.796902][ T1154] veth1_macvtap: left promiscuous mode [ 759.804047][ T1154] veth0_macvtap: left promiscuous mode [ 759.809578][ T1154] veth1_vlan: left promiscuous mode [ 759.815381][ T1154] veth0_vlan: left promiscuous mode [ 759.917903][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 759.933597][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 760.021992][T30191] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 760.037283][T30191] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 760.047684][T30191] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 760.069737][T30191] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 760.160194][T30191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.216079][T30191] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.285373][T16895] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.292571][T16895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.334378][T16895] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.341533][T16895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.470400][T30762] batadv_slave_1: entered promiscuous mode [ 760.512134][T30761] batadv_slave_1: left promiscuous mode [ 760.782101][T24457] Bluetooth: hci3: command tx timeout [ 761.043977][T16922] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.355921][T16922] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.544153][T16922] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.762946][T16922] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.058603][T30191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.168437][T16922] bridge_slave_1: left allmulticast mode [ 762.186257][T16922] bridge_slave_1: left promiscuous mode [ 762.198104][T16922] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.213604][T16922] bridge_slave_0: left allmulticast mode [ 762.221953][T16922] bridge_slave_0: left promiscuous mode [ 762.227701][T16922] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.862946][T24457] Bluetooth: hci3: command tx timeout [ 762.895385][T16922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.013010][ T5935] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 763.019658][T16922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.043788][T16922] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 763.056803][T16922] bond0 (unregistering): Released all slaves [ 763.109080][T16922] tipc: Disabling bearer [ 763.117048][T16922] tipc: Left network mode [ 763.183840][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 763.193702][ T5935] usb 2-1: unable to get BOS descriptor or descriptor too short [ 763.215020][ T5935] usb 2-1: config 16 has an invalid interface number: 37 but max is 0 [ 763.270910][ T5935] usb 2-1: config 16 has no interface number 0 [ 763.290506][ T5935] usb 2-1: config 16 interface 37 altsetting 131 endpoint 0x7 has an invalid bInterval 251, changing to 11 [ 763.313747][ T5935] usb 2-1: config 16 interface 37 has no altsetting 0 [ 763.327757][ T5935] usb 2-1: New USB device found, idVendor=0499, idProduct=5009, bcdDevice=e1.c1 [ 763.355934][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.386114][ T5935] usb 2-1: Product: syz [ 763.412423][ T5935] usb 2-1: Manufacturer: syz [ 763.417070][ T5935] usb 2-1: SerialNumber: syz [ 763.558791][T30191] veth0_vlan: entered promiscuous mode [ 763.575248][T30191] veth1_vlan: entered promiscuous mode [ 763.600570][T16922] hsr_slave_0: left promiscuous mode [ 763.638159][T16922] hsr_slave_1: left promiscuous mode [ 763.776622][T16922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.829821][ T5935] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 763.899781][T16922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.925149][ T5935] usb 2-1: invalid MIDI in EP 0 [ 763.989964][T16922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.054245][T16922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.067194][T16922] veth1_macvtap: left promiscuous mode [ 764.076495][T16922] veth0_macvtap: left promiscuous mode [ 764.087173][T16922] veth1_vlan: left promiscuous mode [ 764.090832][ T5935] snd-usb-audio 2-1:16.37: probe with driver snd-usb-audio failed with error -22 [ 764.098592][T16922] veth0_vlan: left promiscuous mode [ 764.125097][ T5935] usb 2-1: USB disconnect, device number 87 [ 764.176317][T29240] udevd[29240]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:16.37/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 764.476378][T16922] team0 (unregistering): Port device team_slave_1 removed [ 764.487407][T16922] team0 (unregistering): Port device team_slave_0 removed [ 764.625214][T30191] veth0_macvtap: entered promiscuous mode [ 764.638573][T30191] veth1_macvtap: entered promiscuous mode [ 764.679711][T30191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.695046][T30191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.703896][ T5935] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 764.721379][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.738874][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.761014][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.795372][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.859804][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.881266][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.892050][ T5935] usb 9-1: config 0 has an invalid interface number: 11 but max is 0 [ 764.900344][ T5935] usb 9-1: config 0 has no interface number 0 [ 764.922651][ T5935] usb 9-1: config 0 interface 11 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 764.948186][ T5935] usb 9-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 764.967136][T16895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.984729][T16895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.995555][ T5935] usb 9-1: config 0 interface 11 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 765.029013][ T5935] usb 9-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 765.040035][ T5935] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.055893][ T5935] usb 9-1: Product: syz [ 765.060109][ T5935] usb 9-1: Manufacturer: syz [ 765.068307][ T5935] usb 9-1: SerialNumber: syz [ 765.076772][ T5935] usb 9-1: config 0 descriptor?? [ 765.083678][T30907] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 765.091257][T30907] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 765.292765][ T5915] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 765.304302][ T5935] usb 9-1: Error in usbnet_get_endpoints (-71) [ 765.326165][ T5935] usb 9-1: USB disconnect, device number 74 [ 765.401812][ T6633] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 765.461952][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 765.468831][ T5915] usb 2-1: config 0 has an invalid interface number: 145 but max is 0 [ 765.477912][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.501858][ T5915] usb 2-1: config 0 has no interface number 0 [ 765.508448][ T5915] usb 2-1: config 0 interface 145 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 765.523753][ T5915] usb 2-1: New USB device found, idVendor=7d72, idProduct=445f, bcdDevice=98.21 [ 765.533076][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.541179][ T5915] usb 2-1: Product: syz [ 765.549635][ T5915] usb 2-1: Manufacturer: syz [ 765.555814][ T5915] usb 2-1: SerialNumber: syz [ 765.563337][ T6633] usb 6-1: Using ep0 maxpacket: 32 [ 765.572262][ T5915] usb 2-1: config 0 descriptor?? [ 765.578857][ T6633] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 765.593043][ T6633] usb 6-1: config 0 has no interface number 0 [ 765.601502][ T6633] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 765.612330][ T6633] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.620439][ T6633] usb 6-1: Product: syz [ 765.625837][ T6633] usb 6-1: Manufacturer: syz [ 765.630457][ T6633] usb 6-1: SerialNumber: syz [ 765.637859][ T6633] usb 6-1: config 0 descriptor?? [ 765.645226][ T6633] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 765.659857][ T6633] usb 6-1: selecting invalid altsetting 1 [ 765.668513][ T6633] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 765.680773][ T6633] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 765.691913][ T6633] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 765.700253][ T6633] usb 6-1: media controller created [ 765.719617][ T6633] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 765.785712][ T5915] rndis_host 2-1:0.145: skipping garbage [ 765.791412][ T5915] usb 2-1: bad CDC descriptors [ 765.811088][ T5915] usb 2-1: USB disconnect, device number 88 [ 766.515588][ T6633] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 766.541862][ T10] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 766.560185][ T6633] usb 6-1: USB disconnect, device number 74 [ 766.716519][ T10] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 766.734009][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.744089][ T10] usb 9-1: Product: syz [ 766.748288][ T10] usb 9-1: Manufacturer: syz [ 766.753443][ T10] usb 9-1: SerialNumber: syz [ 766.775168][ T10] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 767.284041][T31066] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 767.287176][ T5915] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 767.323789][ T9] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 767.485102][ T9] usb 2-1: config 4 has an invalid interface number: 95 but max is 0 [ 767.493865][ T9] usb 2-1: config 4 has no interface number 0 [ 767.500852][ T9] usb 2-1: config 4 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 767.527158][ T9] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 767.536828][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.546977][ T9] usb 2-1: Product: syz [ 767.551270][ T9] usb 2-1: Manufacturer: syz [ 767.556304][ T9] usb 2-1: SerialNumber: syz [ 767.567517][T31049] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 767.621931][ T5868] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 767.690220][T31094] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5108'. [ 767.717944][T31034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.738422][T31034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.764115][T31034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.775914][T31034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.795794][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 767.811901][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 767.814905][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 767.825024][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 767.852189][ T5868] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 767.861270][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.899205][ T9] usb 2-1: USB disconnect, device number 89 [ 767.906849][ T5868] usb 1-1: config 0 descriptor?? [ 767.978621][T29246] udevd[29246]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 768.160074][ T5868] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 768.542231][ T5915] usb 9-1: Service connection timeout for: 256 [ 768.554431][ T5915] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services [ 768.580871][ T5915] ath9k_htc: Failed to initialize the device [ 768.589727][ T5915] usb 9-1: ath9k_htc: USB layer deinitialized [ 768.620109][T28639] usb 1-1: USB disconnect, device number 71 [ 768.671894][ T5868] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 768.806922][ T6633] usb 9-1: USB disconnect, device number 75 [ 768.843305][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 768.856074][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.891943][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64, setting to 8 [ 768.904437][ T5868] usb 2-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 768.916632][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.932498][ T5868] usb 2-1: config 0 descriptor?? [ 768.947158][T31162] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 769.442120][ T5868] smartjoyplus 0003:6666:8802.003F: hidraw0: USB HID v4.00 Device [HID 6666:8802] on usb-dummy_hcd.1-1/input0 [ 769.465299][ T5868] smartjoyplus 0003:6666:8802.003F: no output reports found [ 769.971539][ T5868] usb 2-1: USB disconnect, device number 90 [ 769.992022][T31263] vivid-001: ================= START STATUS ================= [ 769.999732][T31263] vivid-001: Radio HW Seek Mode: Bounded [ 770.024266][T31263] vivid-001: Radio Programmable HW Seek: false [ 770.030689][T31263] vivid-001: RDS Rx I/O Mode: Block I/O [ 770.052703][T31263] vivid-001: Generate RBDS Instead of RDS: false [ 770.054749][T31246] fido_id[31246]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 770.083028][T31263] vivid-001: RDS Reception: true [ 770.107388][T31263] vivid-001: RDS Program Type: 0 inactive [ 770.141052][T31263] vivid-001: RDS PS Name: inactive [ 770.149295][T31263] vivid-001: RDS Radio Text: inactive [ 770.171596][T31263] vivid-001: RDS Traffic Announcement: false inactive [ 770.192718][T31263] vivid-001: RDS Traffic Program: false inactive [ 770.199156][T31263] vivid-001: RDS Music: false inactive [ 770.207173][T31263] vivid-001: ================== END STATUS ================== [ 770.344918][T31288] ieee802154 phy0 wpan0: encryption failed: -22 [ 770.491812][T11903] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 770.651821][T11903] usb 9-1: Using ep0 maxpacket: 8 [ 770.665253][T11903] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 770.680739][T11903] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.695006][T11903] usb 9-1: Product: syz [ 770.699333][T11903] usb 9-1: Manufacturer: syz [ 770.704364][T11903] usb 9-1: SerialNumber: syz [ 770.710784][T11903] usb 9-1: config 0 descriptor?? [ 770.712341][ T5915] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 770.726758][T11903] gspca_main: se401-2.14.0 probing 047d:5003 [ 770.894838][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.905863][ T5915] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 770.919611][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.930469][ T5915] usb 6-1: config 0 descriptor?? [ 770.992000][ T9] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 771.129697][T11903] gspca_se401: Frame size: 2x0 bayer [ 771.135468][T11903] gspca_se401: Frame size: 0x0 1/16th janggu [ 771.145455][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 771.158763][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 771.175470][ T9] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 771.185941][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.197285][ T9] usb 1-1: Product: syz [ 771.201542][ T9] usb 1-1: Manufacturer: syz [ 771.207869][ T9] usb 1-1: SerialNumber: syz [ 771.334797][T11903] input: se401 as /devices/platform/dummy_hcd.8/usb9/9-1/input/input125 [ 771.360892][T11903] usb 9-1: USB disconnect, device number 76 [ 771.452864][ T9] usb 1-1: USB disconnect, device number 72 [ 771.543794][T31387] syzkaller1: entered promiscuous mode [ 771.549393][T31387] syzkaller1: entered allmulticast mode [ 771.568673][ T5915] usb 6-1: language id specifier not provided by device, defaulting to English [ 771.680197][T31398] program syz.1.5141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 771.975822][ T5915] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0040/input/input126 [ 772.015732][ T5915] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0040/input/input127 [ 772.035783][T31428] siw: device registration error -23 [ 772.074887][ T5915] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0040/input/input128 [ 772.131649][ T5915] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0040/input/input129 [ 772.187280][ T9] usb 9-1: new full-speed USB device number 77 using dummy_hcd [ 772.248133][ T5915] uclogic 0003:256C:006D.0040: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 772.291555][ T5915] usb 6-1: USB disconnect, device number 75 [ 772.336976][T31452] fido_id[31452]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 772.373314][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 772.401510][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 772.430025][ T9] usb 9-1: config 1 has no interface number 0 [ 772.455409][ T9] usb 9-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 772.476376][ T9] usb 9-1: config 1 interface 1 has no altsetting 0 [ 772.489332][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 772.498982][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.508060][ T9] usb 9-1: Product: syz [ 772.513144][ T9] usb 9-1: Manufacturer: syz [ 772.518524][ T9] usb 9-1: SerialNumber: syz [ 772.834847][T31499] tipc: Enabling of bearer rejected, failed to enable media [ 772.905289][T31508] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5154'. [ 772.967446][ T9] usb 9-1: USB disconnect, device number 77 [ 773.332283][ T5868] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 773.343430][T31550] rtc_cmos 00:00: Alarms can be up to one day in the future [ 773.542357][ T5868] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 773.686933][ T5868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.764656][ T5868] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 773.784577][ T5868] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 773.803394][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 773.944436][ T5868] usb 2-1: Product: syz [ 773.948813][ T5868] usb 2-1: Manufacturer: syz [ 773.953995][ T5868] usb 2-1: SerialNumber: syz [ 773.960707][ T5868] usb 2-1: config 0 descriptor?? [ 774.143365][ T10] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 774.336756][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.377877][T31572] usb 2-1: USB disconnect, device number 91 [ 774.440226][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 774.455745][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.470343][ T10] usb 1-1: config 0 descriptor?? [ 774.953546][ T10] keytouch 0003:0926:3333.0041: fixing up Keytouch IEC report descriptor [ 774.978714][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0041/input/input130 [ 775.062308][ T10] keytouch 0003:0926:3333.0041: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 775.079747][T31631] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 775.079747][T31631] The task syz.8.5178 (31631) triggered the difference, watch for misbehavior. [ 775.281837][T31014] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 775.370234][ T10] usb 1-1: USB disconnect, device number 73 [ 775.437198][T31014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.450155][T31014] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 775.459951][T31014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.470571][T31014] usb 2-1: config 0 descriptor?? [ 775.682223][T31014] usbhid 2-1:0.0: can't add hid device: -71 [ 775.688399][T31014] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 775.698947][T31014] usb 2-1: USB disconnect, device number 92 [ 776.131965][ T5868] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 776.152259][ T49] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 776.181934][T31014] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 776.211919][T28639] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 776.282112][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 776.288746][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.299727][ T5868] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 776.309042][ T49] usb 9-1: Using ep0 maxpacket: 32 [ 776.314273][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.324361][ T49] usb 9-1: config 0 has an invalid interface number: 182 but max is 0 [ 776.333305][ T5868] usb 2-1: config 0 descriptor?? [ 776.338291][ T49] usb 9-1: config 0 has no interface number 0 [ 776.346597][ T5868] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 776.353518][T31014] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 776.356038][ T49] usb 9-1: config 0 interface 182 has no altsetting 0 [ 776.367933][T31014] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 776.372644][T28639] usb 1-1: Using ep0 maxpacket: 8 [ 776.387883][T31014] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 776.392190][ T5868] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 776.400816][T31014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.419375][T28639] usb 1-1: config 0 has an invalid interface number: 60 but max is 0 [ 776.427851][ T49] usb 9-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=ec.e3 [ 776.437591][T28639] usb 1-1: config 0 has no interface number 0 [ 776.443981][ T49] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.452128][T28639] usb 1-1: config 0 interface 60 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 776.464286][ T49] usb 9-1: Product: syz [ 776.468473][ T49] usb 9-1: Manufacturer: syz [ 776.473399][T28639] usb 1-1: config 0 interface 60 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 776.483206][ T49] usb 9-1: SerialNumber: syz [ 776.490468][T28639] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=68.09 [ 776.499953][ T49] usb 9-1: config 0 descriptor?? [ 776.505096][T28639] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.513551][T28639] usb 1-1: Product: syz [ 776.519233][ T49] imon_raw 9-1:0.182: IR endpoint missing [ 776.525062][T28639] usb 1-1: Manufacturer: syz [ 776.529673][T28639] usb 1-1: SerialNumber: syz [ 776.543150][T28639] usb 1-1: config 0 descriptor?? [ 776.555544][T28639] as10x_usb: device has been detected [ 776.561286][T28639] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 776.579399][T28639] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 776.590839][T28639] as10x_usb: error during firmware upload part1 [ 776.598049][T28639] Registered device Abilis Systems DVB-Titan [ 776.632985][T31014] usb 6-1: usb_control_msg returned -32 [ 776.646094][T31014] usbtmc 6-1:16.0: can't read capabilities [ 776.725959][T11903] usb 9-1: USB disconnect, device number 78 [ 776.761074][T10504] usb 1-1: USB disconnect, device number 74 [ 776.782341][T10504] Unregistered device Abilis Systems DVB-Titan [ 776.783302][T10504] as10x_usb: device has been disconnected [ 777.070075][T31014] usb 2-1: USB disconnect, device number 93 [ 777.077180][T31014] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 777.551874][T10504] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 777.649998][T31765] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.703956][T10504] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.714052][T10504] usb 9-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 777.724316][T10504] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.734247][T31765] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.735437][T10504] usb 9-1: config 0 descriptor?? [ 777.788684][T31765] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.866187][T31765] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.920621][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.948956][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.957784][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.966677][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.176696][T10504] itetech 0003:258A:6A88.0042: unknown main item tag 0x0 [ 778.191940][T10504] itetech 0003:258A:6A88.0042: unknown main item tag 0x0 [ 778.207617][T10504] itetech 0003:258A:6A88.0042: unknown main item tag 0x0 [ 778.226066][T10504] itetech 0003:258A:6A88.0042: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.8-1/input0 [ 778.257818][ T5188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 778.266311][ T5188] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 778.274140][ T5188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 778.282063][ T5188] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 778.289673][ T5188] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 778.376568][ T5915] usb 9-1: USB disconnect, device number 79 [ 778.685867][T31789] chnl_net:caif_netlink_parms(): no params data found [ 778.765806][T31789] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.774481][T31789] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.781987][T31789] bridge_slave_0: entered allmulticast mode [ 778.789089][T31789] bridge_slave_0: entered promiscuous mode [ 778.796938][T31789] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.804419][T31789] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.811604][T31789] bridge_slave_1: entered allmulticast mode [ 778.818394][T31789] bridge_slave_1: entered promiscuous mode [ 778.846506][T31789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.858750][T31789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.887597][T31789] team0: Port device team_slave_0 added [ 778.898434][T31789] team0: Port device team_slave_1 added [ 778.961402][T11903] usb 6-1: USB disconnect, device number 76 [ 778.963536][T31789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.984467][T31789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.016534][T31789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.030732][T31789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.038099][T31789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.066176][T31789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.105978][T31789] hsr_slave_0: entered promiscuous mode [ 779.112862][T31789] hsr_slave_1: entered promiscuous mode [ 779.189655][T31789] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.199835][ T5868] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 779.213331][ T5915] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 779.234659][T31789] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.296366][T31789] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.334991][T31789] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.351980][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 779.358553][ T5868] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 779.370258][ T5868] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 779.379593][ T5868] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 779.382587][ T5915] usb 9-1: Using ep0 maxpacket: 32 [ 779.387959][ T5868] usb 1-1: Product: syz [ 779.397204][T11903] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 779.405964][ T5868] usb 1-1: Manufacturer: syz [ 779.409416][ T5915] usb 9-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 779.410611][ T5868] usb 1-1: SerialNumber: syz [ 779.421363][ T5915] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.435728][ T5915] usb 9-1: Product: syz [ 779.439926][ T5915] usb 9-1: Manufacturer: syz [ 779.445355][ T5915] usb 9-1: SerialNumber: syz [ 779.455248][ T5915] usb 9-1: config 0 descriptor?? [ 779.585190][T11903] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 779.593872][T11903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.614332][T11903] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 779.623570][T11903] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 779.631624][T11903] usb 6-1: Manufacturer: syz [ 779.637769][ T5868] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 779.647050][T11903] usb 6-1: config 0 descriptor?? [ 779.652666][ T5868] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 779.660548][ T5868] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 779.670303][ T5868] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 779.724222][T11903] rc_core: IR keymap rc-hauppauge not found [ 779.730225][T11903] Registered IR keymap rc-empty [ 779.736083][T11903] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 779.748861][T11903] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input131 [ 779.837082][ T5868] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 779.848062][ T5868] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 779.860235][ T5868] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 779.866985][ T5915] airspy 9-1:0.0: Board ID: 00 [ 779.880648][ T5915] airspy 9-1:0.0: Firmware version: [ 780.044363][ T5868] usb 1-1: USB disconnect, device number 75 [ 780.057484][ T5868] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 780.071481][ T5868] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 780.085018][ C1] igorplugusb 6-1:0.0: receive overflow, at least 23 lost [ 780.093700][ T5868] visor 1-1:1.0: device disconnected [ 780.286369][ T5868] usb 6-1: USB disconnect, device number 77 [ 780.381901][T24457] Bluetooth: hci0: command tx timeout [ 780.812070][ T2153] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 780.923969][ T5915] airspy 9-1:0.0: Registered as swradio24 [ 780.929816][ T5915] airspy 9-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 781.169080][T11903] usb 9-1: USB disconnect, device number 80 [ 781.415173][ T2153] usb 1-1: Using ep0 maxpacket: 32 [ 781.429801][ T2153] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 781.438479][ T2153] usb 1-1: config 0 has no interface number 0 [ 781.447190][ T2153] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 781.456354][ T2153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.464397][ T2153] usb 1-1: Product: syz [ 781.468566][ T2153] usb 1-1: Manufacturer: syz [ 781.473249][ T2153] usb 1-1: SerialNumber: syz [ 781.479086][ T2153] usb 1-1: config 0 descriptor?? [ 781.485956][ T2153] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 781.752238][ T2153] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 781.766496][ T2153] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 781.889012][T32263] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 781.906055][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 782.106491][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 782.114617][ T2153] usb 1-1: USB disconnect, device number 76 [ 782.122960][ T2153] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 782.136771][ T2153] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 782.149606][ T2153] quatech2 1-1:0.51: device disconnected [ 782.370360][ T5188] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 782.377779][ T5188] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 782.385175][ T5188] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 782.395616][ T5188] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 782.403426][ T5188] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 782.462945][ T5188] Bluetooth: hci0: command tx timeout [ 782.501635][T31789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 782.512437][T31789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 782.528383][T31789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 782.544430][T31789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 782.656959][T32408] siw: device registration error -23 [ 782.714133][T32292] chnl_net:caif_netlink_parms(): no params data found [ 782.740332][T31789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.815974][T32449] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 782.869116][T31789] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.908157][T32292] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.924490][T32292] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.931911][T32292] bridge_slave_0: entered allmulticast mode [ 782.939592][T32292] bridge_slave_0: entered promiscuous mode [ 782.950595][T32292] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.961126][T32292] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.968487][T32292] bridge_slave_1: entered allmulticast mode [ 782.976676][T32292] bridge_slave_1: entered promiscuous mode [ 783.264826][T16895] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.271945][T16895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.288812][T16895] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.295982][T16895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.338131][T32292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.365362][T32292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.433711][T32292] team0: Port device team_slave_0 added [ 783.441488][T32292] team0: Port device team_slave_1 added [ 783.524532][T32566] rtc_cmos 00:00: Alarms can be up to one day in the future [ 783.562652][T32292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.581133][T32292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.646611][T32292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.661490][T32292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.668762][T32292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.696392][T32292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.781000][T32292] hsr_slave_0: entered promiscuous mode [ 783.802310][T32292] hsr_slave_1: entered promiscuous mode [ 783.808486][T32292] debugfs: 'hsr0' already exists in 'hsr' [ 783.834457][T32292] Cannot create hsr debugfs directory [ 784.167206][T31789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.224524][T24457] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 784.232830][T24457] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 784.240090][T24457] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 784.251984][T24457] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 784.262011][T24457] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 784.352122][T31789] veth0_vlan: entered promiscuous mode [ 784.369429][T31789] veth1_vlan: entered promiscuous mode [ 784.428084][T31789] veth0_macvtap: entered promiscuous mode [ 784.443968][T31789] veth1_macvtap: entered promiscuous mode [ 784.462312][T24457] Bluetooth: hci1: command tx timeout [ 784.513662][T31789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.538505][T31789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.552064][T24457] Bluetooth: hci0: command tx timeout [ 784.563899][ T1105] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.575121][ T1105] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.598184][ T1105] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.607597][ T1105] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.678716][T32292] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 784.705366][T32292] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 784.747587][T32292] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 784.781130][T32292] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 784.818648][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.830476][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.986718][T16922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.010986][T16922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.047055][T32681] chnl_net:caif_netlink_parms(): no params data found [ 785.119900][T32694] block nbd5: shutting down sockets [ 785.241630][ T420] sp0: Synchronizing with TNC [ 785.287153][T32681] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.296611][T32681] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.322396][T32681] bridge_slave_0: entered allmulticast mode [ 785.329461][T32681] bridge_slave_0: entered promiscuous mode [ 785.372395][T32681] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.388219][T32681] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.397305][T32681] bridge_slave_1: entered allmulticast mode [ 785.412919][T32681] bridge_slave_1: entered promiscuous mode [ 786.015440][T32292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.030497][T32681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.054226][T32681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.135317][T32681] team0: Port device team_slave_0 added [ 786.150936][T32681] team0: Port device team_slave_1 added [ 786.217604][T32292] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.270998][T32681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.295353][T32681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.304873][ T5188] Bluetooth: hci2: command tx timeout [ 786.368363][T32681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.382843][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.390024][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.422293][T32681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.429283][T32681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.459213][T32681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.476995][T16922] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.484244][T16922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.525292][T32292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 786.545345][ T5188] Bluetooth: hci1: command tx timeout [ 786.623338][ T5188] Bluetooth: hci0: command tx timeout [ 786.636066][T32681] hsr_slave_0: entered promiscuous mode [ 786.646268][T32681] hsr_slave_1: entered promiscuous mode [ 786.652812][T32681] debugfs: 'hsr0' already exists in 'hsr' [ 786.658582][T32681] Cannot create hsr debugfs directory [ 786.689351][ T605] dvmrp8: entered allmulticast mode [ 786.877426][ T652] sp0: Synchronizing with TNC [ 787.070862][T32292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.207763][T32292] veth0_vlan: entered promiscuous mode [ 787.261529][T32292] veth1_vlan: entered promiscuous mode [ 787.315515][T32292] veth0_macvtap: entered promiscuous mode [ 787.342790][T32292] veth1_macvtap: entered promiscuous mode [ 787.405115][T32292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.435825][T32292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.466916][T16895] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.488369][T16895] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.503914][T32681] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 787.525928][T32681] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 787.544299][T16895] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.565845][T16895] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.624167][T32681] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 787.637805][T32681] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 787.730710][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.820659][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.891607][ T3539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.909113][ T3539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.981041][T32681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.029625][T32681] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.076110][T16922] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.083308][T16922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.097670][T16922] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.104823][T16922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.209494][ T801] sp0: Synchronizing with TNC [ 788.401982][ T5188] Bluetooth: hci2: command tx timeout [ 788.481146][T32681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.622617][ T5188] Bluetooth: hci1: command tx timeout [ 789.027197][T32681] veth0_vlan: entered promiscuous mode [ 789.064309][T32681] veth1_vlan: entered promiscuous mode [ 789.146461][T32681] veth0_macvtap: entered promiscuous mode [ 789.197082][T32681] veth1_macvtap: entered promiscuous mode [ 789.257196][T32681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.307664][T32681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.339940][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.360057][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.430383][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.460916][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.567718][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.601523][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.698428][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.743005][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.894317][ T870] netlink: 'syz.3.5275': attribute type 37 has an invalid length. [ 790.551913][ T5188] Bluetooth: hci2: command tx timeout [ 790.585910][ T913] ------------[ cut here ]------------ [ 790.591511][ T913] UBSAN: shift-out-of-bounds in fs/9p/vfs_super.c:57:22 [ 790.600034][ T913] shift exponent 32 is too large for 32-bit type 'int' [ 790.608898][ T913] CPU: 1 UID: 0 PID: 913 Comm: syz.1.5280 Not tainted syzkaller #0 PREEMPT(full) [ 790.608925][ T913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 790.608938][ T913] Call Trace: [ 790.608946][ T913] [ 790.608954][ T913] dump_stack_lvl+0x189/0x250 [ 790.608990][ T913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 790.609021][ T913] ? __pfx__printk+0x10/0x10 [ 790.609054][ T913] ubsan_epilogue+0xa/0x40 [ 790.609077][ T913] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 790.609107][ T913] ? __pfx_v9fs_set_super+0x10/0x10 [ 790.609130][ T913] v9fs_get_tree+0x957/0xa90 [ 790.609155][ T913] ? __pfx_v9fs_get_tree+0x10/0x10 [ 790.609182][ T913] vfs_get_tree+0x8f/0x2b0 [ 790.609211][ T913] do_new_mount+0x2a2/0xa30 [ 790.609235][ T913] ? ns_capable+0x8a/0xf0 [ 790.609256][ T913] ? __pfx_do_new_mount+0x10/0x10 [ 790.609278][ T913] ? path_mount+0x61c/0xfe0 [ 790.609296][ T913] ? user_path_at+0x44/0x60 [ 790.609325][ T913] __se_sys_mount+0x317/0x410 [ 790.609350][ T913] ? __pfx___se_sys_mount+0x10/0x10 [ 790.609375][ T913] ? rcu_is_watching+0x15/0xb0 [ 790.609396][ T913] ? __x64_sys_mount+0x20/0xc0 [ 790.609419][ T913] do_syscall_64+0xfa/0xfa0 [ 790.609447][ T913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.609467][ T913] ? clear_bhb_loop+0x60/0xb0 [ 790.609488][ T913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.609507][ T913] RIP: 0033:0x7f62fc98ebe9 [ 790.609525][ T913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.609543][ T913] RSP: 002b:00007f62fabee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 790.609567][ T913] RAX: ffffffffffffffda RBX: 00007f62fcbc5fa0 RCX: 00007f62fc98ebe9 [ 790.609582][ T913] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 790.609596][ T913] RBP: 00007f62fca11e19 R08: 0000200000000580 R09: 0000000000000000 [ 790.609609][ T913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 790.609622][ T913] R13: 00007f62fcbc6038 R14: 00007f62fcbc5fa0 R15: 00007ffe65f2cca8 [ 790.609645][ T913] [ 790.609815][ T913] ---[ end trace ]--- [ 790.705651][ T5188] Bluetooth: hci1: command tx timeout [ 790.734676][ T913] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 790.734702][ T913] CPU: 1 UID: 0 PID: 913 Comm: syz.1.5280 Not tainted syzkaller #0 PREEMPT(full) [ 790.734723][ T913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 790.734735][ T913] Call Trace: [ 790.734744][ T913] [ 790.734752][ T913] dump_stack_lvl+0x99/0x250 [ 790.734784][ T913] ? __asan_memcpy+0x40/0x70 [ 790.734807][ T913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 790.734834][ T913] ? __pfx__printk+0x10/0x10 [ 790.734865][ T913] vpanic+0x281/0x750 [ 790.734887][ T913] ? __pfx_vpanic+0x10/0x10 [ 790.734912][ T913] panic+0xb9/0xc0 [ 790.734931][ T913] ? __pfx_panic+0x10/0x10 [ 790.734953][ T913] ? __pfx__printk+0x10/0x10 [ 790.734979][ T913] check_panic_on_warn+0x89/0xb0 [ 790.735006][ T913] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 790.735031][ T913] ? __pfx_v9fs_set_super+0x10/0x10 [ 790.735062][ T913] v9fs_get_tree+0x957/0xa90 [ 790.735084][ T913] ? __pfx_v9fs_get_tree+0x10/0x10 [ 790.735108][ T913] vfs_get_tree+0x8f/0x2b0 [ 790.735128][ T913] do_new_mount+0x2a2/0xa30 [ 790.735157][ T913] ? ns_capable+0x8a/0xf0 [ 790.735176][ T913] ? __pfx_do_new_mount+0x10/0x10 [ 790.735195][ T913] ? path_mount+0x61c/0xfe0 [ 790.735213][ T913] ? user_path_at+0x44/0x60 [ 790.735240][ T913] __se_sys_mount+0x317/0x410 [ 790.735263][ T913] ? __pfx___se_sys_mount+0x10/0x10 [ 790.735284][ T913] ? rcu_is_watching+0x15/0xb0 [ 790.735303][ T913] ? __x64_sys_mount+0x20/0xc0 [ 790.735325][ T913] do_syscall_64+0xfa/0xfa0 [ 790.735350][ T913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.735367][ T913] ? clear_bhb_loop+0x60/0xb0 [ 790.735387][ T913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.735404][ T913] RIP: 0033:0x7f62fc98ebe9 [ 790.735420][ T913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.735436][ T913] RSP: 002b:00007f62fabee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 790.735458][ T913] RAX: ffffffffffffffda RBX: 00007f62fcbc5fa0 RCX: 00007f62fc98ebe9 [ 790.735472][ T913] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 790.735485][ T913] RBP: 00007f62fca11e19 R08: 0000200000000580 R09: 0000000000000000 [ 790.735498][ T913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 790.735510][ T913] R13: 00007f62fcbc6038 R14: 00007f62fcbc5fa0 R15: 00007ffe65f2cca8 [ 790.735529][ T913] [ 790.736505][ T913] Kernel Offset: disabled