last executing test programs: 14m28.290045383s ago: executing program 4 (id=595): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 14m27.259949298s ago: executing program 4 (id=596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod$loop(&(0x7f0000000380)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') r3 = openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000480)={r0, 0x6, 0x9, 0x5}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x400000, 0x114) move_mount(r4, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000440)='./file0\x00', 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, 0x0, 0x20008000) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000300)={0x2, 0x1, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @empty}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x88, 0x5, "a30d33"}, @timestamp_prespec={0x44, 0xc, 0xbc, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x44}, 0x4}]}]}}}], 0x48}, 0x20002880) r7 = syz_open_dev$vbi(&(0x7f0000000a00), 0x3, 0x2) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000000)=0x800) ioctl$VIDIOC_G_SLICED_VBI_CAP(r7, 0xc0745645, &(0x7f0000000100)={0xfff7, [0x7, 0x0, 0x1, 0x4, 0x1, 0x0, 0x9, 0x281, 0x2, 0x7f, 0x4, 0xf, 0x8, 0xf1, 0xd, 0xffff, 0xfbed, 0x0, 0x250, 0x9, 0x31, 0x7fff, 0xbb, 0x7ff, 0x7, 0x5, 0x0, 0x5, 0x8, 0x3, 0x1000, 0x3, 0x81, 0x8, 0x9, 0x9c6, 0x7, 0x202, 0x8, 0x4, 0x9, 0xe, 0x7, 0x6, 0x1001, 0x359, 0x8000, 0x100], 0x7}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0xf8, 0x10, 0x7, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x60, 0xa0, 0x2, 0x0, 0xee00}, {@in=@local, 0x0, 0xff}, @in6=@private0, {0x3, 0x4, 0x2, 0x0, 0x80010000000, 0x1, 0x10000000000000}, {0x0, 0x200000, 0x3}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@tfcpad={0x8, 0x16, 0x40}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40041}, 0x0) 14m23.542302309s ago: executing program 4 (id=604): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x90}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 14m22.417634507s ago: executing program 4 (id=609): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r3, 0x400c4d01, &(0x7f0000000a00)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6c, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0x4}]}}}}}}}, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r4, 0x0, 0xffffffff000) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6(0xa, 0x4, 0xff) 14m20.979530582s ago: executing program 4 (id=611): msgget$private(0x0, 0x230) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) process_vm_readv(r2, &(0x7f0000000800)=[{&(0x7f0000000540)=""/7, 0x7}, {0x0}], 0x2, &(0x7f0000002d40)=[{&(0x7f0000000840)=""/216, 0xd8}, {&(0x7f0000000a40)=""/7, 0x7}, {&(0x7f0000000a80)=""/4096, 0x1000}, {0x0}, {0x0}], 0x5, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, 0x0) fadvise64(r4, 0xc, 0xc35, 0x3) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "261fbabd4e"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) 14m18.300095428s ago: executing program 4 (id=613): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_INPUT(r2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='1', 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x8e8, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11, 0x1}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x0, 0x1}], [], 0x9}, {[], [{}, {}, {}, {}, {}, {0x1}, {0x0, 0x8}]}, {}, {}, {[], [{}, {0xffffffff}]}, {[], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}, {[], [{}, {}, {0x0, 0x1}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}, {}, {[{0x0, 0x2}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@setlink={0x34, 0x13, 0x5, 0x3, 0x25dfdbfc, {0x0, 0x0, 0x0, r7}, [@IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x34}}, 0x40080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x9}]}}}]}, 0x3c}}, 0x0) 14m2.677981082s ago: executing program 32 (id=613): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_INPUT(r2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='1', 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x8e8, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11, 0x1}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x0, 0x1}], [], 0x9}, {[], [{}, {}, {}, {}, {}, {0x1}, {0x0, 0x8}]}, {}, {}, {[], [{}, {0xffffffff}]}, {[], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}, {[], [{}, {}, {0x0, 0x1}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}, {}, {[{0x0, 0x2}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@setlink={0x34, 0x13, 0x5, 0x3, 0x25dfdbfc, {0x0, 0x0, 0x0, r7}, [@IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x34}}, 0x40080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x9}]}}}]}, 0x3c}}, 0x0) 11m24.675030967s ago: executing program 2 (id=830): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xfffffffd}, 0x1c) pread64(r0, &(0x7f0000000340)=""/177, 0xffffffffffffff6f, 0x131) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) pipe2(&(0x7f0000000040), 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a00000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 11m24.175948719s ago: executing program 2 (id=832): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="280158d3ab51110000000000"], 0x128}, 0x40440c0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, &(0x7f00000000c0)=0x80, 0xe, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') read(r5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x3be9, &(0x7f0000000040)={0x0, 0x2b28, 0x20, 0x2, 0x50, 0x0, r4}, &(0x7f00000000c0)=0x0, &(0x7f0000000140), &(0x7f00000001c0)) syz_ublk_add_dev(0xffffffffffffffff, r6, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) mmap$IORING_OFF_SQ_RING(0x0, 0x40, 0xa, 0x40010, r3, 0x0) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdbf2, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r10 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_DQEVENT(r10, 0xc0506107, 0x0) close(r10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_STATION(r11, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044080}, 0x20040890) 11m21.70446457s ago: executing program 2 (id=834): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x408a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = mq_open(&(0x7f00000006c0)='!sel\x00ZKs\xc6\a\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00\"$\x1f#\xf5f\x93\xab\x97\xd4\xb1>\a\x1bMpGr\xeaz\x86\'\xcd\x9f\'o\xe9\xe2\x9a\x12?#G}]\x9b\xefy\xc5(\x95v\xbc\x8e\xc9a\xad\xc4\xd4\t\xa63x\x861\xc4\x1a\xe8\xbc\x12\xd5.\x98\xfd\xdc\xee\xe7\xb1\x83\x91\xa7\xc8hsL\x1c\xaa\xc1\xdf|\x0ex\xa9fC\xf4\xd9T\xbcf\xa8\xc6\xb2\x15\x85\x17w\xa9\xf5\x9c\x1d\x8ae\n\x80\xb1\xa1K\xcf\x9d\x17\xe9\x93\xcf\xce\x84U\fvw\xec\xb5o\\^@\x11@\x1eH\xc8\xda\xf1\xad\xd3\xe6_\xea\xbe \x01E\xbdPt\x82\xdb\xb8\xa7IO)X+\x9f@+\f\x14\x0f\x90\x7fC6\xc7\xdc\xeb/\xde\xea\xaf\xc9>\t\'\xf0\xd8\xde*\x958\xfe\xa2\xa4\xd3A^\xf5\xfe%~w\xf2\xe4.k\x89\xc7\x92\xb2J\xe8\xdc\xb3*\x17L\xc21e\x8e\x19i\xceV\xdd\xc0\xab\xf8\xf26\x14F\t\xc02\x00\xe7\xb4\n', 0x6e93ebbbcc088cf2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r2, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x9, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x9, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/257], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) unshare(0x22020600) readv(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) preadv(r4, &(0x7f0000001c40)=[{&(0x7f0000000600)=""/247, 0xf7}], 0x1, 0xffff, 0x7a1) 11m16.901642718s ago: executing program 2 (id=840): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r3, 0x400c4d01, &(0x7f0000000a00)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6c, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0x4}]}}}}}}}, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r4, 0x0, 0xffffffff000) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6(0xa, 0x4, 0xff) 11m12.480035766s ago: executing program 2 (id=845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getrlimit(0x6, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a3100"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 11m7.313613724s ago: executing program 2 (id=853): sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 10m51.960403571s ago: executing program 33 (id=853): sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 14.475724414s ago: executing program 0 (id=2264): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r4 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') r8 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r10, &(0x7f0000000200)=[{&(0x7f0000000280)}], 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x3009, 0x4, 0xc, 0x0, 0x5, 0x4}}) read(0xffffffffffffffff, &(0x7f0000000800)=""/217, 0xd9) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write$UHID_INPUT(r2, &(0x7f0000000900)={0x9, {"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", 0x1000}}, 0x1006) 14.404467867s ago: executing program 1 (id=2265): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/my_zoned_dev/zoned\x00', 0x2, 0xb96e0453b2f36300) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f8", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280080001001e0000000800030005000000080001001c0000000800"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000080)=""/240, 0xfffffffffffffcea, 0x10020, 0x0, 0x0) write(r0, &(0x7f0000000240)='1\x00', 0x1) r3 = syz_open_procfs(0x0, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x100000000000002a) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x8946, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/my_zoned_dev/zoned\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000000)="9c", 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/my_zoned_dev\x00', 0x2, 0x110) read(r6, &(0x7f0000000400), 0x200) 14.307671389s ago: executing program 5 (id=2267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) mount(0x0, &(0x7f0000001000)='./dev\x00', &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.187338972s ago: executing program 1 (id=2268): lstat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./config/cluster/mycluster/heartbeat/reg0/blocks\x00', 0x1, 0x0) write(r0, &(0x7f0000001300)='8\n', 0x2) 13.162870218s ago: executing program 0 (id=2269): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x8, r5) wait4(0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) syz_open_dev$video4linux(&(0x7f0000000080), 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x1f, 0x6, 0x730, 0x548, 0x548, 0x0, 0x448, 0x548, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, &(0x7f0000000300), {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x2f}, [0xff, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], 'bond0\x00', 'bridge_slave_0\x00', {}, {}, 0xc, 0x6, 0x7, 0x8}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, [0x0, 0xff000000, 0xff, 0xffffff00], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0xff, 0xffffff00, 0xff000000], @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffffff, 0xffffffff, 0xff000000], @ipv6=@private1, [0xffffff00], 0x1000, 0xffffffc0, 0x8, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x1040, 0xc}, 0x1, 0x47}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}, 0x38, 0x2e, 0x7}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [0xffffffff, 0xff, 0x7f800000, 0xff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff], 'veth1_to_team\x00', 'vcan0\x00', {}, {0xff}, 0x4, 0xe, 0x0, 0x1b}, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@hbh={{0x48}, {0x3, 0x7, 0x0, [0xc8, 0x341, 0x10, 0x8, 0x7, 0x800, 0x5, 0x80, 0x4, 0x2, 0x8, 0x2, 0x1, 0x3, 0xfffc, 0x3], 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@multicast2, 0x16, 0x1e, 0x81}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@rand_addr=0x64010100, 0x25, 0xf, 0x1}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x2, 0x1}, {0x1, 0x5, 0x3}, 0xfffffff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@remote, 0x9, 0x3a, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) 13.158619748s ago: executing program 3 (id=2270): r0 = socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20c03, 0x0) r2 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="7c2f0aec9d222ea5ee20e6b25cf191669d6293d87d67cbc22a8dca55b40c545d1439d9ab278a279afd807e25e3c9aacca664836fec718e063c9b06cd66442b6407fec5c3e5cd9d0f1001c90a801c4fadce8e13a5e0209edf5c5693acccefa24d4f5a2ef062e701d054d19e9e6340a1651e05fd87b70942c679234426f9b19c0723563d0e38ec970aec02a6154ab61081aae03050d00192bd9d59977bb2f1297a7cd0571a0dfc5688a8e3d5f4a226b7e397b43c186967c74821bc70005059ab5606c70045a6a9915285c8215b9abd839f50530dde8ad500d70d8f7c1a0093293e6d632f8e8939f3199ab4ec92caed14c26975b57578c8ea666a2e4253ca9516f3c07bdc5ad27c2ff29e1569795f9dfbd1b92919432e423ff4f9a35b77419d6a8540fc9431ca78e05e278bef5a21b1423a3c9f7c1e2bd16a1ecdfde51cfa4aef38e6afb92770bcefb5fcb277ccede1ddc8647db538661b3d10effa1b6f705ef1b74e5bea20b4f98421b7b4be4c5c6be101f5503a4ecaffae335ef565920d678ed5b41031122b21f9d9b7f270b95f94624a7ddc657c83d3722a8d01f321fd7f685fc74d61a4e1914dda6df4be639c4910c56a84c24a41b9ef07eee4083dd9a30a53a58b50186c12180da4186fe5845b6b325fd112378a82d53bee449bc9d4c2d4331a1323c69c99c778560fc2142d138b23000c5403156cd8223f07a73811ab5b81e287bd6ad95c2fefce002ac77a1ac74d5e868870f29277da69987652b0055b3072efab2fe56fe0fe287f7d51aa772b2e3ae77954a938be2792442e1ab2e6fc078d821c70222142568b6db9609f1db23e8a4a460b9fbbeb48469e6bf0acffd85af86e69535a95c02c30d5ad776002c48e19e134688780bbafaf81097358b0c8f63bcefb61d8f29aacb3dc1a485bb7343539387f1e83b9283674bdc0d7fe8bf86948439f4b4a20e2832c560c743e4c2d37eddbf341c47f71a93101a08a533e96601f98752531428944d88c836c7d7a082859a3120721afd99130e83f689720638e889ddf4a23228dc23e955ae67fe5447e134b63f4c72e5664d2ed8a7406568e08f3582661006cf5800615fc4a5ec88ef3361ea027d2a1a550ac3e017a212570cd145fcc2e1984e4fca28bf4110f33a5ac847fcd3605e546ee8ea49a7de5d4b599926a76028e9d5259db7fd6f908c7a8657d42f895380c88ac85cdc183f6b61172b966a41888ceae895eaf18cb8da8d1918411b297959a8abacf8c4cee15ca87048aae13ffe068dee23a9edc2b259aeb0595b7ed2633431067a999f915934aef1be5f360f0db726f24e8eb89adb8db535de6fd7c06678831d17e47c67cd22f047b92d8fba83a49a1285def4dfdf634408cb05ae73f24df76e7393d1e90d40c50bd388bb53e281b889084a1a19efdfa6be16aed1a621d964c1ac332b65765e7440ccc75ef44851409c458905127bd161bf98cb6a3681af073e3650f52d5ee691c347e86360c3aebae4a691b2485d68c57d09e269656b1efbfd3413d54c8d3e467c0bfa84669d0cc5e9cfd50b9c79171f8b6a5e66e8c6f66c0916083b8e8a464498aed3badd2f267fb56adb0953b9ebd0370f941d796abffa81722d502c8d1e9d844802f4197067598b2394dddf76641f9c2ec0403bd379e8f712668b98e1121a27888b227104875999cd562fa9833458879652bfeffabc6bbb5c354dc36ad91354ccb5050d69b28b562a72bbf277f96bd1d5dc6408329f6f850a96762a6aebf2a7b5bacbbc032be8b29c453867a47094289f6b8aa38f85051fc4d4478a02af664b3250a396583001a7971cfa6f5a4931e32e7bfb7b4c3f7be3bc5f91ba46554773b9102dbd4aba4344c6fe87bd050f79175d7918d57bc137cde33a884bba63a1adf6e7e71ba783eb1fe689b23d3ad18627b0b229c0d982631308a88c4bf1e2079eb0fcc486ef864e7c6a75cce17b133577fa88d62807398b8a795ae2bb7610f8b17cfc56ff11b8ffc4aa316e612fc76955dc44e66467c4d632657d4cac3cc1bda8c2c6207915a89f76bf1fd61c156ba8720bb8048601cd1221f6996e6f04e44b842e00a4487cd59501a65db1f6ade7f22ba5d7ee8e67125e284eef41ad5f2069a48cc71c621eb08d832ef8592874199c5c03249d3ee03422535c2be6919c43724277d56a885ab67753ae8d7f1317b7e534bb1a111a0edb5d298c1374c7824a80fb00ae268f2fd641f1b2a12f712d9a5e027957941ffb4218c6d8a8e7950dca0b4c9018dcfb67244a30080d54781b5111c85cd89e08f51c55975301ff389baf2242ef0fb662122a2eb89c1dcaf82d6391906a1b235635e6c484cd5fa32bc80ce68d505df9a9c6b21e222c3b9330243b8e02a3e661c20e0da633d88f7debaf6643654050ab73613dbea6176109b5c35c4d280739aee77f81a1b58efa9e606259f45745b69523bc81828cfcfffd185ad51b4b183b7a1ef86757172ef67a4f153b7c3a3e99f15ef5b09d81cd1ccec8016ecc9864ccf2efdbf7a79ff9ba814a4a9e3124d735a591c649cdefa98bd569c5f4db18a537c55544c671d398ec50d9fc2b1ca1f9b0278acc9a21779c3815fcb0ee1c66c774b6591e8f6b5c9828db8a5d104213cd4513974be404a50c11009c15a1e2aaa81abc6c706c341f145f975717819c4429007ee648f6c3fca45d714981cd9240beea8b02a19e0ddb083dc8115d64d75ab087c87e00792b8b83551ca82b311444067923656b0e70015ca4775da3d5e984ea8af20955f92d9cbd9acca8cd258df4276a118505d440b74e93bd0b97caeb0e24dbb09e7dbdfe0c3b4bdc0983a7d1eee02bee9c5d381bfbd7dfbb6329539698477f3a8bc7f82c01588d679a167e91487f150e5923cbf3030f09c8fb89cf178f5e953618887b7e56afdfd6a6b5e3003cecdbcba76ed86bc48907fada5e0178f9194970323ae9c818215ae2feb1ee56b289d83e8e9d2ab27056ede5651d2a92a93dd3d6c519ac128a44f1414f93e96c55485a73f3cb7e4750d0f2a2acef87e46a7012a30712f7cfe2ac9372af0efcb6475e3a1a8db1961040002915038412b892eee569aae8f38fb07c27aef5bbab7750a244a7c3b0193004246afa1a72368db45cd3649a89b54e880ea12c92beb59e366d7893f725bb8080aebcd35857ff686d03eddc33af248cecc5198bda6f395b55294821f6853232cb5bde67a4166a35224cd9c5b54e6b5a38376b1fdfaeb7563a8ea93148997e2bf490c67916f059e3e1992a986f96d2720a6418cf8c57d6e72eb90d7ca59a3a20fd414e404900aa4a45f381ff7828e15558b4862055bf795c9134836878999200e71e9ba9f83a2e28955c7b37244f3abc8f9d15a5e6c3d9b2f76620b3b2bcb13c0c44c63b9bddd51e339aedfc3a4d995df0eca66c6891ca9099923577e7cd84cb58cf0d6d6eda2baeb00775c4e717e31dbc881615d5f1a0898017954e882a444017e947b1fc05fdcf4495c5dbe3b7b4ce4c1535070fbc64d135df094fe4f6cdd452e7a5f844145af9b746dc5eecede9a834de1ff65525ea3017478ee08dc1bcff852a9d2ad94f46840bdcf1b6226fb0cdb620787692e52aae3b9b703f30b3ce6ca6dcaeb8b3a5884c30c570b29741c70ad99f5d7f463c7e5e1b4bbaafae33e789c0ae1114674732d50c0a799bfa6388365c392d47c3e0d2992a61d21e4", @ANYRES64=r1]) sendmmsg$inet(r0, 0x0, 0x0, 0x4880) 13.07211191s ago: executing program 1 (id=2271): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) gettid() openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111, 0x6}}, 0x20) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) 11.859881171s ago: executing program 5 (id=2272): syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6, [{0x5, 0x1, "c89600000500"}]}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000500)=0x8, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sigaltstack(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0xaf) syz_open_dev$usbmon(0x0, 0x0, 0x20120) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) 11.813346422s ago: executing program 1 (id=2273): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xff, 0x0, 0x2, 0x9e93, 0x17, "9006a2c205000000800000000d080000000056"}) unshare(0x22020400) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)=ANY=[@ANYBLOB], 0x34}}, 0x2004c000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000100)={0x40, 0x7d, 0x6, 0xb, 0x81, 0x81}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"]) 10.828154807s ago: executing program 1 (id=2274): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0xcb) mount(&(0x7f00000000c0)=@filename='./lower\x00', &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)='ecryptfs\x00', 0x0, &(0x7f0000000180)='ecryptfs_sig=0123456789abcdef\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) 10.271646491s ago: executing program 5 (id=2275): write(0xffffffffffffffff, &(0x7f0000000140), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = syz_io_uring_setup(0x134b8, &(0x7f0000000740)={0x0, 0x2730, 0x20000, 0x10000802, 0x86}, &(0x7f0000000180)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x94) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c92012000e00050014010a0023004000000500"], 0x17) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0xea) 7.735968745s ago: executing program 3 (id=2278): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/my_zoned_dev/zoned\x00', 0x2, 0xb96e0453b2f36300) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f8", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280080001001e0000000800030005000000080001001c0000000800"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000080)=""/240, 0xfffffffffffffcea, 0x10020, 0x0, 0x0) write(r0, &(0x7f0000000240)='1\x00', 0x1) r3 = syz_open_procfs(0x0, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x100000000000002a) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x8946, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/my_zoned_dev/zoned\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000000)="9c", 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/my_zoned_dev\x00', 0x2, 0x110) read(r6, &(0x7f0000000400), 0x200) 7.614304028s ago: executing program 6 (id=2279): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'comedi_bond\x00', [0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) gettid() r2 = memfd_create(&(0x7f0000000f80)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x03n\x0f\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x06\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3\x00\x00\x00\x00\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t\x8a/\x90\xd8\xb7\x80<\xef\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\x89\x9e\v\x9f\xa3\x03hSq\x95\x8f\xe1J\xd3#/f4\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00;\x90$\xab\xfd\x92\xb0\xde\xfb\x91b0T\x87\xdd\x00\x1b4\xbb\x13^\xb1~\x02\xc0\xd7\x8e\xdc:8y\xb2\xb7i<[C`\\\x98T\xca\xb4N\xe3@\xa2\xa0\xae&\xde\xa2\xbc\x00'/1188, 0x5) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r2, 0x0) timer_create(0x7, 0x0, &(0x7f0000bbdffc)) fcntl$getown(r1, 0x9) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mprotect(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', &(0x7f0000000240)={0x2000, 0xe7, 0x8}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r5, 0x545c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, "43e6323cce19dc42a867c4e745c80552a700"}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)=0x8001) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NFT_BATCH(r4, 0x0, 0x24000000) mkdirat(r3, &(0x7f0000000280)='./dev\x00', 0x24) 7.429547662s ago: executing program 5 (id=2280): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r4 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') r8 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r10, &(0x7f0000000200)=[{&(0x7f0000000280)}], 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x3009, 0x4, 0xc, 0x0, 0x5, 0x4}}) read(0xffffffffffffffff, &(0x7f0000000800)=""/217, 0xd9) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write$UHID_INPUT(r2, &(0x7f0000000900)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34383a6d1a0890e0878f0e1ac6e7049b073c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33340d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286520449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2f4d160e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 7.12412886s ago: executing program 3 (id=2281): lstat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000001300)='8\n', 0x2) 7.077360271s ago: executing program 6 (id=2282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r3, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x44}}, 0x0) r4 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x35, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0) write(r8, &(0x7f00000000c0)='mydomain / 64\n', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x80) write(r9, &(0x7f00000000c0)='mydomain / 64\n', 0xe) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x10}) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b4552202743442043617074757265"], 0xaf) r11 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, 0x0) 6.912423645s ago: executing program 3 (id=2283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) mount(0x0, &(0x7f0000001000)='./dev\x00', &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.863958812s ago: executing program 6 (id=2284): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xff, 0x0, 0x2, 0x9e93, 0x17, "9006a2c205000000800000000d080000000056"}) unshare(0x22020400) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)=ANY=[@ANYBLOB], 0x34}}, 0x2004c000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000100)={0x40, 0x7d, 0x6, 0xb, 0x81, 0x81}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"]) 5.359847605s ago: executing program 5 (id=2285): syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6, [{0x5, 0x1, "c89600000500"}]}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000500)=0x8, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sigaltstack(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0xaf) syz_open_dev$usbmon(0x0, 0x0, 0x20120) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) 5.18503058s ago: executing program 0 (id=2286): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'veth0_vlan\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 5.13232608s ago: executing program 6 (id=2287): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffffff, 0x0, 0x1a0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x13, r3, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 5.015231924s ago: executing program 3 (id=2288): r0 = socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20c03, 0x0) r2 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r1]) sendmmsg$inet(r0, 0x0, 0x0, 0x4880) 3.454451623s ago: executing program 5 (id=2289): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x4, 0x20}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f00000000c0)=0x40, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vim2m(&(0x7f0000000080), 0x100000001, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) close(0x3) recvmsg(r6, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x40000102) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x10000000000, 0x300}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) mmap(&(0x7f00003f2000/0x3000)=nil, 0x3000, 0x3000004, 0x80010, r7, 0xa01b3000) unshare(0x64000600) 3.016030104s ago: executing program 0 (id=2290): write(0xffffffffffffffff, &(0x7f0000000140), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = syz_io_uring_setup(0x134b8, &(0x7f0000000740)={0x0, 0x2730, 0x20000, 0x10000802, 0x86}, &(0x7f0000000180)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x94) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c92012000e00050014010a0023004000000500"], 0x17) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0xea) 1.302396557s ago: executing program 3 (id=2291): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/my_zoned_dev/zoned\x00', 0x2, 0xb96e0453b2f36300) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f8", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280080001001e0000000800030005000000080001001c0000000800"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000080)=""/240, 0xfffffffffffffcea, 0x10020, 0x0, 0x0) write(r0, &(0x7f0000000240)='1\x00', 0x1) r3 = syz_open_procfs(0x0, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x100000000000002a) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x8946, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/my_zoned_dev/zoned\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000000)="9c", 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/my_zoned_dev\x00', 0x2, 0x110) read(r6, &(0x7f0000000400), 0x200) 1.254363309s ago: executing program 0 (id=2292): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x4004000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x8, 0xfffffffffffffffc, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x400c050) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r1, &(0x7f0000003e40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x4001c90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r3 = userfaultfd(0x80001) socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000040)={'team0\x00', 0xd}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xb0}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.19468712s ago: executing program 6 (id=2293): lstat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000001300)='8\n', 0x2) 237.295934ms ago: executing program 1 (id=2294): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000040300000000000000000000100c"], 0x0, 0x56, 0x0, 0x0, 0x4}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000003c0)) 93.740488ms ago: executing program 0 (id=2295): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x10) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000200)) ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60) 0s ago: executing program 6 (id=2296): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r4 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') r8 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r10, &(0x7f0000000200)=[{&(0x7f0000000280)="503bfde51b257f", 0x7}], 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x3009, 0x4, 0xc, 0x0, 0x5, 0x4}}) read(0xffffffffffffffff, &(0x7f0000000800)=""/217, 0xd9) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write$UHID_INPUT(r2, &(0x7f0000000900)={0x9, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): tes in process `syz.0.1204'. [ 747.842465][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 747.883100][ T4320] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 747.922711][ T4320] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 747.962964][ T4320] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 747.980975][ T4320] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input18 [ 747.997802][ T4320] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 748.032569][ T4320] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 748.083609][ T9338] netdevsim netdevsim1: Direct firmware load for ¹ failed with error -2 [ 748.092053][ T9338] netdevsim netdevsim1: Falling back to sysfs fallback for: ¹ [ 748.105538][ T4320] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 748.152575][ T4320] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 748.202553][ T4320] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 748.267612][ T4320] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 748.323722][ T4320] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 748.366561][ T4320] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 748.383189][ T9350] comedi comedi3: board detection failed [ 748.412963][ T4320] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 748.459531][ T9354] netlink: 'syz.6.1197': attribute type 10 has an invalid length. [ 748.564841][ T9354] bridge0: port 3(netdevsim0) entered disabled state [ 748.571810][ T9354] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.579170][ T9354] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.605676][ T4320] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 748.873525][ T4320] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 749.067033][ T4320] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 749.222059][ T4320] usb 7-1: USB disconnect, device number 4 [ 749.449523][ T9377] 9pnet_fd: Insufficient options for proto=fd [ 749.525773][ T9370] block device autoloading is deprecated and will be removed. [ 749.628566][ T4284] Bluetooth: Wrong link type (-71) [ 749.633131][ T9370] syz.6.1201: attempt to access beyond end of device [ 749.633131][ T9370] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 749.922462][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 752.073228][ T9370] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 752.137062][ T9402] CIFS mount error: No usable UNC path provided in device string! [ 752.137062][ T9402] [ 752.147348][ T9402] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 752.209035][ T9370] device-mapper: ioctl: error adding target to table [ 752.322580][ T5052] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 752.522767][ T5052] usb 2-1: Using ep0 maxpacket: 16 [ 752.792531][ T5052] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.813173][ T5052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 752.842447][ T5052] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 752.894900][ T5052] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 752.943739][ T5052] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 753.006959][ T5052] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 753.052620][ T5052] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 753.070983][ T5052] usb 2-1: Manufacturer: syz [ 753.086359][ T5052] usb 2-1: config 0 descriptor?? [ 753.129700][ T9410] device wlan0 entered promiscuous mode [ 753.429723][ T9421] netdevsim netdevsim6: Direct firmware load for ¹ failed with error -2 [ 753.438368][ T9421] netdevsim netdevsim6: Falling back to sysfs fallback for: ¹ [ 754.474015][ T9417] comedi comedi3: board detection failed [ 754.483362][ T5052] rc_core: IR keymap rc-hauppauge not found [ 754.489453][ T5052] Registered IR keymap rc-empty [ 754.500567][ T5052] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 754.605749][ T5052] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 754.614633][ T9419] netlink: 'syz.3.1213': attribute type 10 has an invalid length. [ 754.643110][ T5052] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 754.808943][ T5052] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19 [ 754.911877][ T5052] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 754.982713][ T5052] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 755.053113][ T5052] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 755.081781][ T9434] 9pnet_fd: Insufficient options for proto=fd [ 755.093535][ T5052] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 755.100213][ T9436] Invalid option length (1048314) for dns_resolver key [ 755.133335][ T5052] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 755.175080][ T5052] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 755.188393][ T9436] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1216'. [ 755.253388][ T5052] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 755.532886][ T5052] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 755.683243][ T5052] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 755.723230][ T5052] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 755.794484][ T5052] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 755.829725][ T5052] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 756.027022][ T5052] usb 2-1: USB disconnect, device number 9 [ 756.311377][ T7403] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 757.282072][ T7403] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 758.697724][ T9452] fido_id[9452]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 758.952030][ T9465] CIFS mount error: No usable UNC path provided in device string! [ 758.952030][ T9465] [ 758.962396][ T9465] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 759.783455][ T9468] syz.0.1224: attempt to access beyond end of device [ 759.783455][ T9468] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 759.993894][ T9468] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 760.014293][ T9468] device-mapper: ioctl: error adding target to table [ 761.002164][ T9493] 9pnet_fd: Insufficient options for proto=fd [ 761.313709][ T27] audit: type=1800 audit(1791123375.028:58): pid=9505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1234" name="memory_backed" dev="configfs" ino=53201 res=0 errno=0 [ 762.452482][ T9128] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 762.529578][ T27] audit: type=1800 audit(1791123376.098:59): pid=9508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1235" name=80 dev="sda1" ino=2047 res=0 errno=0 [ 762.651804][ T27] audit: type=1800 audit(1791123376.108:60): pid=9504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1234" name="zoned" dev="configfs" ino=53527 res=0 errno=0 [ 762.702698][ T9128] usb 4-1: Using ep0 maxpacket: 16 [ 762.711012][ T9128] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.731705][ T27] audit: type=1800 audit(1791123376.238:61): pid=9504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1234" name="power" dev="configfs" ino=54293 res=0 errno=0 [ 762.770783][ T9128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 762.801371][ T9128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 762.821791][ T9128] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 762.951721][ T9128] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 762.967140][ T9128] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 762.984875][ T9128] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 763.016937][ T9128] usb 4-1: Manufacturer: syz [ 763.840947][ T7403] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 763.878607][ T9128] usb 4-1: config 0 descriptor?? [ 763.920269][ T7403] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 764.304122][ T9531] CIFS mount error: No usable UNC path provided in device string! [ 764.304122][ T9531] [ 764.314435][ T9531] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 765.161875][ T9534] device-mapper: table: 248:0: integrity: Cannot allocate workqueue (-ENOMEM) [ 765.236582][ T9534] device-mapper: ioctl: error adding target to table [ 765.245576][ T9525] fido_id[9525]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 765.432617][ T9128] rc_core: IR keymap rc-hauppauge not found [ 765.439810][ T9128] Registered IR keymap rc-empty [ 765.459034][ T9128] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 765.502565][ T9128] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 765.543053][ T9128] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 765.580909][ T9128] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input20 [ 766.472728][ T9128] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 766.480326][ T9554] device wlan0 entered promiscuous mode [ 766.502544][ T9128] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 766.532496][ T9128] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 766.547861][ T27] audit: type=1800 audit(1791123380.258:62): pid=9564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1249" name="memory_backed" dev="configfs" ino=54370 res=0 errno=0 [ 766.834517][ T9128] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 766.914232][ T9128] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 766.942579][ T9128] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 766.991434][ T27] audit: type=1800 audit(1791123380.698:63): pid=9564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1249" name="power" dev="configfs" ino=53604 res=0 errno=0 [ 767.025241][ T9128] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 767.082520][ T9128] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 767.122949][ T9128] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 767.172793][ T9128] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 767.210170][ T9128] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 767.232873][ T9128] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 767.303858][ T9128] usb 4-1: USB disconnect, device number 10 [ 767.391708][ T9587] CIFS mount error: No usable UNC path provided in device string! [ 767.391708][ T9587] [ 767.402084][ T9587] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 768.210426][ T9588] 9pnet_fd: Insufficient options for proto=fd [ 770.719222][ T9604] comedi comedi3: board detection failed [ 770.762471][ T9128] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 770.785977][ T9608] bridge0: port 3(netdevsim0) entered blocking state [ 770.793286][ T9608] bridge0: port 3(netdevsim0) entered disabled state [ 770.810219][ T9608] device netdevsim0 entered promiscuous mode [ 770.817952][ T9608] bridge0: port 3(netdevsim0) entered blocking state [ 770.824844][ T9608] bridge0: port 3(netdevsim0) entered forwarding state [ 770.844477][ T9608] netlink: 'syz.5.1259': attribute type 10 has an invalid length. [ 771.150033][ T9608] bridge0: port 3(netdevsim0) entered disabled state [ 771.157015][ T9608] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.164613][ T9608] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.189630][ T9608] bridge0: port 3(netdevsim0) entered blocking state [ 771.196558][ T9608] bridge0: port 3(netdevsim0) entered forwarding state [ 771.203748][ T9608] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.210948][ T9608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.218597][ T9608] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.225832][ T9608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.768214][ T9621] loop9: detected capacity change from 0 to 7 [ 772.498483][ T9621] Dev loop9: unable to read RDB block 7 [ 772.504198][ T9621] loop9: unable to read partition table [ 772.510072][ T9621] loop9: partition table beyond EOD, truncated [ 772.516378][ T9621] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 774.100273][ T9608] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 774.194401][ T27] audit: type=1800 audit(1791123387.908:64): pid=9626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1265" name="memory_backed" dev="configfs" ino=54454 res=0 errno=0 [ 774.274073][ T27] audit: type=1800 audit(1791123387.938:65): pid=9626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1265" name="zoned" dev="configfs" ino=54455 res=0 errno=0 [ 774.400797][ T27] audit: type=1800 audit(1791123387.978:66): pid=9626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1265" name="power" dev="configfs" ino=53691 res=0 errno=0 [ 775.812719][ T9128] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 776.342527][ T9128] usb 2-1: Using ep0 maxpacket: 16 [ 776.349644][ T9128] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.387177][ T9128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 776.428789][ T9128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 776.460213][ T9128] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 776.969583][ T9659] process 'syz.6.1277' launched './file0' with NULL argv: empty string added [ 777.933300][ T9128] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 777.986729][ T9128] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 778.029754][ T9128] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 778.102580][ T9128] usb 2-1: Manufacturer: syz [ 778.131819][ T9664] loop9: detected capacity change from 0 to 7 [ 778.144046][ T9664] Dev loop9: unable to read RDB block 7 [ 778.149706][ T9664] loop9: unable to read partition table [ 778.155678][ T9664] loop9: partition table beyond EOD, truncated [ 778.161958][ T9664] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 778.977763][ T9128] usb 2-1: config 0 descriptor?? [ 779.007733][ T9668] 9pnet_fd: Insufficient options for proto=fd [ 779.068011][ T9128] usb 2-1: can't set config #0, error -71 [ 779.110340][ T9128] usb 2-1: USB disconnect, device number 10 [ 779.202932][ T9671] comedi comedi3: board detection failed [ 779.314704][ T9674] netlink: 'syz.0.1280': attribute type 10 has an invalid length. [ 780.357212][ T9685] device-mapper: table: 248:0: zero-length target [ 780.461586][ T9685] device-mapper: ioctl: error adding target to table [ 782.748345][ T9721] 9pnet_fd: Insufficient options for proto=fd [ 783.023684][ T7963] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 783.110876][ T9732] comedi comedi3: board detection failed [ 783.180037][ T9738] netlink: 'syz.3.1295': attribute type 10 has an invalid length. [ 783.232496][ T7963] usb 6-1: Using ep0 maxpacket: 16 [ 783.315739][ T7963] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.881820][ T9743] syz.0.1297: attempt to access beyond end of device [ 783.881820][ T9743] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 783.941894][ T7963] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 783.953039][ T7963] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 783.963039][ T7963] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 783.972868][ T7963] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 784.010338][ T7963] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 784.029854][ T7963] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 784.072443][ T7963] usb 6-1: Manufacturer: syz [ 784.083433][ T7963] usb 6-1: config 0 descriptor?? [ 784.173353][ T9743] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 784.182214][ T9743] device-mapper: ioctl: error adding target to table [ 786.811504][ T7963] rc_core: IR keymap rc-hauppauge not found [ 786.822385][ T7963] Registered IR keymap rc-empty [ 786.827400][ T7963] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 786.882989][ T7963] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 786.933198][ T7963] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 786.957516][ T7963] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input21 [ 787.007463][ T7963] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 787.062557][ T7963] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 787.092647][ T7963] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 787.116023][ T9778] 9pnet_fd: Insufficient options for proto=fd [ 787.915323][ T7963] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 787.952706][ T7963] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 787.982578][ T7963] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 788.012498][ T7963] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 788.042527][ T7963] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 788.083428][ T7963] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 788.122564][ T7963] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 788.157442][ T7963] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 788.200936][ T7963] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 788.254876][ T7963] usb 6-1: USB disconnect, device number 7 [ 788.843906][ T9791] file system registered [ 789.149806][ T9791] unloading [ 789.238218][ T9791] ffs_data_put(): freeing [ 789.730321][ T4284] Bluetooth: Wrong link type (-71) [ 792.378587][ T9808] loop9: detected capacity change from 0 to 7 [ 792.429488][ T9808] Dev loop9: unable to read RDB block 7 [ 792.472598][ T9808] loop9: unable to read partition table [ 792.488778][ T9808] loop9: partition table beyond EOD, truncated [ 792.513025][ T9808] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 792.883511][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1318'. [ 795.854996][ T9835] 9pnet_fd: Insufficient options for proto=fd [ 796.765354][ T9840] xt_TPROXY: Can be used only with -p tcp or -p udp [ 797.042575][ T7963] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 798.035036][ T7963] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.076080][ T7963] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 799.085967][ T7963] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 799.097438][ T7963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.109179][ T7963] usb 2-1: config 0 descriptor?? [ 799.125803][ T7963] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 799.134773][ T7963] dvb-usb: bulk message failed: -22 (3/0) [ 799.149638][ T7963] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 799.160707][ T7963] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 799.168910][ T7963] usb 2-1: media controller created [ 799.177994][ T7963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 799.210480][ T7963] dvb-usb: bulk message failed: -22 (6/0) [ 799.216895][ T7963] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 799.244390][ T7963] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 799.265178][ T7963] dvb-usb: schedule remote query interval to 150 msecs. [ 799.282442][ T7963] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 799.444038][ T7963] dvb-usb: bulk message failed: -22 (1/0) [ 799.450211][ T7963] dvb-usb: error while querying for an remote control event. [ 799.664120][ T4264] dvb-usb: bulk message failed: -22 (1/0) [ 799.670081][ T4264] dvb-usb: error while querying for an remote control event. [ 799.785859][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1331'. [ 799.932767][ T130] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 800.152566][ T130] usb 6-1: Using ep0 maxpacket: 16 [ 800.177534][ T130] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.652012][ T130] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 800.682559][ T4264] dvb-usb: bulk message failed: -22 (1/0) [ 800.689890][ T4264] dvb-usb: error while querying for an remote control event. [ 800.774454][ T130] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 800.785138][ T130] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 800.795212][ T130] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 800.852664][ T4264] dvb-usb: bulk message failed: -22 (1/0) [ 800.871153][ T130] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 800.880328][ T130] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 800.888517][ T130] usb 6-1: Manufacturer: syz [ 800.896397][ T130] usb 6-1: config 0 descriptor?? [ 800.907209][ T4264] dvb-usb: error while querying for an remote control event. [ 800.932072][ T9860] zero sized request [ 801.011810][ T7403] usb 2-1: USB disconnect, device number 11 [ 801.161828][ T7403] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 801.292100][ T9886] 9pnet_fd: Insufficient options for proto=fd [ 801.472432][ T130] rc_core: IR keymap rc-hauppauge not found [ 801.478442][ T130] Registered IR keymap rc-empty [ 801.502737][ T130] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 801.539287][ T130] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 802.002880][ T130] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 802.450860][ T130] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input23 [ 802.473312][ T130] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 802.502611][ T130] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 802.553454][ T130] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 802.592679][ T130] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 802.624091][ T130] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 802.678463][ T130] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 802.792503][ T130] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 802.822483][ T130] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 802.872749][ T130] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 802.924806][ T130] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 803.350538][ T130] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 803.779864][ T130] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 803.807307][ T130] usb 6-1: USB disconnect, device number 8 [ 805.869781][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'. [ 806.462903][ T9936] zero sized request [ 806.504065][ T9942] rnbd_client L600: Mapping device /d on session s+, (access_mode: rw, nr_poll_queues: 0) [ 806.514485][ T9942] rnbd_client L1255: Session s+ not found, and path parameter not given [ 806.632472][ T5052] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 806.904385][ T5052] usb 4-1: Using ep0 maxpacket: 16 [ 806.927854][ T5052] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.992413][ T5052] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 807.054453][ T5052] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 807.095445][ T5052] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 807.125826][ T5052] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 807.217838][ T5052] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 807.262785][ T5052] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 807.291826][ T5052] usb 4-1: Manufacturer: syz [ 807.310596][ T5052] usb 4-1: config 0 descriptor?? [ 807.453059][ T9954] comedi comedi3: board detection failed [ 807.523748][ T9956] netlink: 'syz.0.1350': attribute type 10 has an invalid length. [ 808.472501][ T5052] rc_core: IR keymap rc-hauppauge not found [ 808.478542][ T5052] Registered IR keymap rc-empty [ 808.523752][ T5052] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 808.566962][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.573411][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.612611][ T5052] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 808.644622][ T5052] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 808.718235][ T5052] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input24 [ 808.812986][ T5052] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 808.872624][ T5052] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 808.932587][ T5052] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 809.005159][ T5052] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 809.073569][ T5052] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 809.122643][ T5052] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 809.162524][ T5052] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 809.258726][ T5052] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 809.443260][ T5052] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 809.492472][ T5052] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 809.524347][ T5052] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 809.538731][ T5052] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 809.578234][ T5052] usb 4-1: USB disconnect, device number 12 [ 809.990859][ T9985] loop9: detected capacity change from 0 to 7 [ 810.742862][ T9985] Dev loop9: unable to read RDB block 7 [ 810.748608][ T9985] loop9: unable to read partition table [ 810.754516][ T9985] loop9: partition table beyond EOD, truncated [ 810.760792][ T9985] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 810.933562][ T9990] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1357'. [ 811.953870][ T9994] rnbd_client L600: Mapping device /d on session s+, (access_mode: rw, nr_poll_queues: 0) [ 811.964042][ T9994] rnbd_client L1255: Session s+ not found, and path parameter not given [ 812.281531][ T9999] zero sized request [ 812.589247][T10015] device wlan0 entered promiscuous mode [ 812.939562][T10021] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 813.146309][T10024] xt_TPROXY: Can be used only with -p tcp or -p udp [ 814.262426][ T130] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 814.378162][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1372'. [ 814.468801][ T130] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.546613][ T130] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 814.673952][ T130] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 814.780787][ T130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.947638][ T130] usb 6-1: config 0 descriptor?? [ 815.103744][ T130] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 815.110453][ T130] dvb-usb: bulk message failed: -22 (3/0) [ 816.122465][ T4291] Bluetooth: hci1: command 0x0406 tx timeout [ 816.176800][ T130] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 816.194368][ T130] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 816.202866][ T130] usb 6-1: media controller created [ 816.209303][ T130] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 816.228524][ T130] dvb-usb: bulk message failed: -22 (6/0) [ 816.234467][ T130] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 816.253624][ T130] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input25 [ 816.307179][ T130] dvb-usb: schedule remote query interval to 150 msecs. [ 816.332439][ T130] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 816.357219][ T130] usb 6-1: USB disconnect, device number 9 [ 816.373412][T10048] rnbd_client L600: Mapping device /d on session s+, (access_mode: rw, nr_poll_queues: 0) [ 816.493435][T10048] rnbd_client L1255: Session s+ not found, and path parameter not given [ 816.500970][ T130] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 818.052739][ T4322] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 818.252883][ T4322] usb 2-1: Using ep0 maxpacket: 16 [ 818.268715][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.309626][ T4322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 818.371341][ T4322] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 818.392736][ T4322] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 818.401857][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.612191][ T4322] usb 2-1: config 0 descriptor?? [ 819.840033][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1385'. [ 819.927989][T10091] xt_TPROXY: Can be used only with -p tcp or -p udp [ 820.155526][ T4322] hid-generic 0003:057E:2019.0006: hidraw0: USB HID v0.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 820.329623][T10106] rnbd_client L600: Mapping device /d on session s+, (access_mode: rw, nr_poll_queues: 0) [ 820.372547][T10106] rnbd_client L1255: Session s+ not found, and path parameter not given [ 821.292881][T10110] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1393'. [ 821.724421][T10126] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 821.987308][T10114] usb 2-1: USB disconnect, device number 12 [ 827.116862][T10168] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1406'. [ 831.019773][T10210] zero sized request [ 831.170100][T10212] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.1424'. [ 839.388565][T10285] zero sized request [ 841.655068][T10302] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 841.663469][T10302] Error parsing options; rc = [-22] [ 842.583723][T10302] device vlan0 entered promiscuous mode [ 842.599628][T10302] team0: Port device vlan0 added [ 848.532992][T10350] comedi comedi3: board detection failed [ 849.410827][T10355] netlink: 'syz.3.1455': attribute type 10 has an invalid length. [ 852.462465][T10373] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 852.470275][T10373] Error parsing options; rc = [-22] [ 852.794502][T10373] device vlan0 entered promiscuous mode [ 852.833095][T10373] team0: Port device vlan0 added [ 855.398038][T10392] loop9: detected capacity change from 0 to 7 [ 855.817670][ T27] audit: type=1800 audit(1791123469.528:67): pid=10388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1465" name="memory_backed" dev="configfs" ino=55742 res=0 errno=0 [ 855.872796][ T27] audit: type=1800 audit(1791123469.558:68): pid=10388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1465" name="zoned" dev="configfs" ino=55743 res=0 errno=0 [ 855.946553][ T27] audit: type=1800 audit(1791123469.648:69): pid=10388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1465" name="power" dev="configfs" ino=55749 res=0 errno=0 [ 856.152561][T10392] Dev loop9: unable to read RDB block 7 [ 856.158289][T10392] loop9: unable to read partition table [ 856.164295][T10392] loop9: partition table beyond EOD, truncated [ 856.170518][T10392] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 856.849617][T10404] comedi comedi3: board detection failed [ 856.921172][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1467'. [ 857.801820][T10404] netlink: 'syz.0.1469': attribute type 10 has an invalid length. [ 858.417140][T10431] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 858.425288][T10431] Error parsing options; rc = [-22] [ 859.208663][T10431] device vlan0 entered promiscuous mode [ 859.224006][T10431] team0: Port device vlan0 added [ 859.236349][ T27] audit: type=1800 audit(1791123472.948:70): pid=10434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1477" name="memory_backed" dev="configfs" ino=55795 res=0 errno=0 [ 859.373038][ T27] audit: type=1800 audit(1791123472.998:71): pid=10434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1477" name="zoned" dev="configfs" ino=55796 res=0 errno=0 [ 859.428298][ T27] audit: type=1800 audit(1791123473.048:72): pid=10436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1477" name="power" dev="configfs" ino=55806 res=0 errno=0 [ 862.707709][T10463] comedi comedi3: board detection failed [ 863.134837][T10463] netlink: 'syz.3.1485': attribute type 10 has an invalid length. [ 864.151540][ T27] audit: type=1800 audit(1791123477.858:73): pid=10480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1493" name="memory_backed" dev="configfs" ino=56635 res=0 errno=0 [ 864.232862][ T27] audit: type=1800 audit(1791123477.898:74): pid=10480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1493" name="zoned" dev="configfs" ino=56636 res=0 errno=0 [ 864.317593][ T27] audit: type=1800 audit(1791123477.968:75): pid=10486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1493" name="power" dev="configfs" ino=56647 res=0 errno=0 [ 864.450093][T10491] loop9: detected capacity change from 0 to 7 [ 864.457463][T10491] Dev loop9: unable to read RDB block 7 [ 864.463218][T10491] loop9: unable to read partition table [ 864.469094][T10491] loop9: partition table beyond EOD, truncated [ 864.475473][T10491] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 865.703505][T10503] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 869.198210][T10533] comedi comedi3: board detection failed [ 869.538918][T10533] netlink: 'syz.1.1505': attribute type 10 has an invalid length. [ 869.883343][ T27] audit: type=1800 audit(1791123483.598:76): pid=10545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1507" name="memory_backed" dev="configfs" ino=56723 res=0 errno=0 [ 869.947173][ T27] audit: type=1800 audit(1791123483.608:77): pid=10545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1507" name="zoned" dev="configfs" ino=56724 res=0 errno=0 [ 869.975916][T10548] jffs2: notice: (10548) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 870.006170][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.012696][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.060665][ T27] audit: type=1800 audit(1791123483.698:78): pid=10549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1507" name="power" dev="configfs" ino=56730 res=0 errno=0 [ 876.850693][ T27] audit: type=1800 audit(1791123490.558:79): pid=10604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1521" name="memory_backed" dev="configfs" ino=56795 res=0 errno=0 [ 876.931709][ T27] audit: type=1800 audit(1791123490.588:80): pid=10604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1521" name="zoned" dev="configfs" ino=56796 res=0 errno=0 [ 877.397392][T10614] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 877.405627][T10614] Error parsing options; rc = [-22] [ 878.018186][ T27] audit: type=1800 audit(1791123490.628:81): pid=10604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1521" name="power" dev="configfs" ino=56807 res=0 errno=0 [ 883.794433][ T27] audit: type=1800 audit(1791123497.508:82): pid=10653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1536" name="memory_backed" dev="configfs" ino=56882 res=0 errno=0 [ 883.835191][T10655] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 884.024626][ T27] audit: type=1800 audit(1791123497.528:83): pid=10653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1536" name="zoned" dev="configfs" ino=56883 res=0 errno=0 [ 884.045444][ T27] audit: type=1800 audit(1791123497.648:84): pid=10653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1536" name="power" dev="configfs" ino=56889 res=0 errno=0 [ 885.332421][ T4320] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 885.734378][ T4320] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 885.829145][ T4320] usb 4-1: config 0 has no interface number 0 [ 885.947871][ T4320] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 886.057533][ T4320] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.117290][ T4320] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 886.179574][ T4320] usb 4-1: config 0 interface 1 has no altsetting 0 [ 886.229832][ T4320] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 886.319571][ T4320] usb 4-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 886.438432][ T4320] usb 4-1: Manufacturer: syz [ 886.592072][ T4320] usb 4-1: config 0 descriptor?? [ 887.429293][ T4320] uclogic 0003:145F:0212.0007: pen parameters not found [ 887.776992][ T4320] uclogic 0003:145F:0212.0007: interface is invalid, ignoring [ 888.125097][ T4320] usb 4-1: USB disconnect, device number 13 [ 889.917656][ T27] audit: type=1800 audit(1791123503.628:85): pid=10695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1548" name="memory_backed" dev="configfs" ino=56934 res=0 errno=0 [ 889.947470][T10698] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 890.002630][ T27] audit: type=1800 audit(1791123503.628:86): pid=10695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1548" name="zoned" dev="configfs" ino=56935 res=0 errno=0 [ 890.026128][T10698] Error parsing options; rc = [-22] [ 890.232413][ T27] audit: type=1800 audit(1791123503.748:87): pid=10695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1548" name="power" dev="configfs" ino=56944 res=0 errno=0 [ 890.974305][T10711] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 891.782761][T10727] ieee802154 phy0 wpan0: encryption failed: -22 [ 892.000469][T10732] loop9: detected capacity change from 0 to 7 [ 892.013925][T10732] Dev loop9: unable to read RDB block 7 [ 892.019841][T10732] loop9: unable to read partition table [ 892.026369][T10732] loop9: partition table beyond EOD, truncated [ 892.032708][T10732] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 895.090017][T10749] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 895.097865][T10749] Error parsing options; rc = [-22] [ 895.179337][ T27] audit: type=1800 audit(1791123508.888:88): pid=10754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1562" name="memory_backed" dev="configfs" ino=57009 res=0 errno=0 [ 895.339600][ T27] audit: type=1800 audit(1791123508.888:89): pid=10754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1562" name="zoned" dev="configfs" ino=57010 res=0 errno=0 [ 895.706414][ T27] audit: type=1800 audit(1791123508.918:90): pid=10754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1562" name="power" dev="configfs" ino=57015 res=0 errno=0 [ 902.134917][T10780] device wlan0 entered promiscuous mode [ 907.760851][T10828] ieee802154 phy0 wpan0: encryption failed: -22 [ 908.154744][ T4284] Bluetooth: Wrong link type (-71) [ 909.770973][T10849] netlink: 'syz.6.1585': attribute type 10 has an invalid length. [ 911.282671][T10868] xt_TPROXY: Can be used only with -p tcp or -p udp [ 911.712684][ T4375] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 912.461674][ T4375] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 913.943506][ T4375] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 914.070613][ T4375] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 914.079899][ T4375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.091382][ T4375] usb 1-1: config 0 descriptor?? [ 914.106038][ T4375] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 914.112864][ T4375] dvb-usb: bulk message failed: -22 (3/0) [ 914.121409][ T4375] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 914.130672][ T4375] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 914.137906][ T4375] usb 1-1: media controller created [ 914.144821][ T4375] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 914.159093][ T4375] dvb-usb: bulk message failed: -22 (6/0) [ 914.166637][ T4375] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 914.183691][T10886] ieee802154 phy0 wpan0: encryption failed: -22 [ 914.186056][ T4375] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input26 [ 914.216108][ T4375] dvb-usb: schedule remote query interval to 150 msecs. [ 914.223503][ T4375] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 914.281719][ T4375] usb 1-1: USB disconnect, device number 9 [ 914.418191][ T4375] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 914.732436][ T4320] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 917.006656][ T27] audit: type=1800 audit(1791123530.718:91): pid=10907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1596" name="memory_backed" dev="configfs" ino=57510 res=0 errno=0 [ 917.075431][ T27] audit: type=1800 audit(1791123530.718:92): pid=10907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1596" name="zoned" dev="configfs" ino=57511 res=0 errno=0 [ 917.144961][ T4320] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 917.177152][ T27] audit: type=1800 audit(1791123530.748:93): pid=10907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1596" name="power" dev="configfs" ino=57517 res=0 errno=0 [ 917.182556][ T4320] usb 2-1: config 0 has no interface number 0 [ 918.088881][ T4320] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 918.101996][ T4320] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.112450][ T4320] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 918.125815][ T4320] usb 2-1: config 0 interface 1 has no altsetting 0 [ 918.848729][ T4320] usb 2-1: string descriptor 0 read error: -71 [ 918.872416][ T4320] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 918.881537][ T4320] usb 2-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 918.933679][ T4320] usb 2-1: config 0 descriptor?? [ 918.972965][ T4320] usb 2-1: can't set config #0, error -71 [ 918.997472][ T4320] usb 2-1: USB disconnect, device number 13 [ 919.997020][T10931] xt_TPROXY: Can be used only with -p tcp or -p udp [ 920.332541][ T4320] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 921.958039][ T4320] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.004888][ T4320] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 922.090479][ T4320] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 922.191743][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.375551][ T4320] usb 4-1: config 0 descriptor?? [ 922.926084][T10934] netlink: 'syz.6.1603': attribute type 10 has an invalid length. [ 922.965363][ T4320] usb 4-1: can't set config #0, error -71 [ 923.031443][T10945] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 923.039485][T10945] Error parsing options; rc = [-22] [ 923.513500][ T4320] usb 4-1: USB disconnect, device number 14 [ 923.525669][T10945] device vlan0 entered promiscuous mode [ 923.683677][ T4284] Bluetooth: Wrong link type (-71) [ 923.780374][ T27] audit: type=1800 audit(1791123537.488:94): pid=10950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1608" name="memory_backed" dev="configfs" ino=57306 res=0 errno=0 [ 924.684356][ T27] audit: type=1800 audit(1791123537.518:95): pid=10950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1608" name="zoned" dev="configfs" ino=57307 res=0 errno=0 [ 924.716792][ T27] audit: type=1800 audit(1791123538.428:96): pid=10950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1608" name="power" dev="configfs" ino=57316 res=0 errno=0 [ 929.588472][T11005] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 929.596401][T11005] Error parsing options; rc = [-22] [ 929.931462][T11005] team0: Port device vlan0 removed [ 930.736847][ T27] audit: type=1800 audit(1791123544.448:97): pid=11022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1625" name="memory_backed" dev="configfs" ino=57667 res=0 errno=0 [ 930.810735][ T27] audit: type=1800 audit(1791123544.448:98): pid=11022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1625" name="zoned" dev="configfs" ino=57668 res=0 errno=0 [ 931.141037][ T27] audit: type=1800 audit(1791123544.498:99): pid=11022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1625" name="power" dev="configfs" ino=57676 res=0 errno=0 [ 931.236775][T11028] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 931.447783][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.455747][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.197180][T11061] xt_TPROXY: Can be used only with -p tcp or -p udp [ 934.481788][T11075] ieee802154 phy0 wpan0: encryption failed: -22 [ 934.582561][ T7963] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 935.181481][ T7963] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 935.543276][ T7963] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 935.552664][ T7963] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 935.561854][ T7963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.573114][ T7963] usb 6-1: config 0 descriptor?? [ 935.581229][ T7963] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 935.592442][ T7963] dvb-usb: bulk message failed: -22 (3/0) [ 935.604095][ T7963] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 935.621010][ T7963] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 935.628652][ T7963] usb 6-1: media controller created [ 935.635514][ T7963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 935.664095][ T7963] dvb-usb: bulk message failed: -22 (6/0) [ 935.677992][ T7963] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 935.702518][ T7963] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input27 [ 935.724423][T11087] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 935.733530][ T27] audit: type=1800 audit(1791123549.448:100): pid=11085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1639" name="memory_backed" dev="configfs" ino=58704 res=0 errno=0 [ 935.754815][ T7963] dvb-usb: schedule remote query interval to 150 msecs. [ 935.761825][ T7963] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 935.800544][ T27] audit: type=1800 audit(1791123549.458:101): pid=11085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1639" name="zoned" dev="configfs" ino=58705 res=0 errno=0 [ 935.952587][ T27] audit: type=1800 audit(1791123549.638:102): pid=11085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1639" name="power" dev="configfs" ino=57758 res=0 errno=0 [ 935.990476][ T4322] dvb-usb: bulk message failed: -22 (1/0) [ 935.996452][ T4322] dvb-usb: error while querying for an remote control event. [ 936.262561][ T4322] dvb-usb: bulk message failed: -22 (1/0) [ 937.140352][ T4322] dvb-usb: error while querying for an remote control event. [ 937.313800][ T7963] dvb-usb: bulk message failed: -22 (1/0) [ 937.319815][ T7963] dvb-usb: error while querying for an remote control event. [ 938.380324][ T7963] dvb-usb: bulk message failed: -22 (1/0) [ 938.396477][ T7963] dvb-usb: error while querying for an remote control event. [ 938.562563][ T7963] dvb-usb: bulk message failed: -22 (1/0) [ 938.568455][ T7963] dvb-usb: error while querying for an remote control event. [ 938.793004][ T4321] usb 6-1: USB disconnect, device number 10 [ 938.857423][T11112] netlink: 'syz.0.1647': attribute type 10 has an invalid length. [ 939.697955][ T4321] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 942.129324][T11135] ieee802154 phy0 wpan0: encryption failed: -22 [ 944.382484][T11152] xt_TPROXY: Can be used only with -p tcp or -p udp [ 945.052382][ T7403] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 945.864829][ T7403] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 945.890405][ T7403] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 945.920217][ T7403] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 945.962632][ T7403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.982372][ T4320] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 946.015155][ T7403] usb 2-1: config 0 descriptor?? [ 946.036345][ T7403] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 946.067989][ T7403] dvb-usb: bulk message failed: -22 (3/0) [ 946.215666][T11177] loop9: detected capacity change from 0 to 7 [ 946.224549][ T4320] usb 4-1: Using ep0 maxpacket: 16 [ 946.258270][ T4320] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.331861][T11177] Dev loop9: unable to read RDB block 7 [ 946.337621][T11177] loop9: unable to read partition table [ 946.343543][T11177] loop9: partition table beyond EOD, truncated [ 946.349791][T11177] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 946.440237][ T7403] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 946.449107][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 946.462087][ T7403] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 946.469437][ T4320] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 946.768580][ T7403] usb 2-1: media controller created [ 946.869447][ T7403] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 946.898899][ T4320] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 947.054096][ T7403] dvb-usb: bulk message failed: -22 (6/0) [ 947.060026][ T4320] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 947.078684][ T7403] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 947.100939][ T4320] usb 4-1: Manufacturer: syz [ 947.135904][ T7403] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 947.148646][ T4320] usb 4-1: config 0 descriptor?? [ 947.218099][ T7403] dvb-usb: schedule remote query interval to 150 msecs. [ 947.261379][ T7403] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 947.475350][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 947.481221][ T4320] dvb-usb: error while querying for an remote control event. [ 948.222812][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 948.230694][ T4320] dvb-usb: error while querying for an remote control event. [ 948.547686][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 948.553924][ T4320] dvb-usb: error while querying for an remote control event. [ 950.231005][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 950.283110][ T4321] usb 2-1: USB disconnect, device number 14 [ 950.322794][T11212] ieee802154 phy0 wpan0: encryption failed: -22 [ 950.358170][ T4320] dvb-usb: error while querying for an remote control event. [ 950.452583][ T4320] usb 4-1: USB disconnect, device number 15 [ 950.576649][ T4321] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 953.950008][T11240] loop9: detected capacity change from 0 to 7 [ 954.011606][T11240] Dev loop9: unable to read RDB block 7 [ 954.017541][T11240] loop9: unable to read partition table [ 954.023519][T11240] loop9: partition table beyond EOD, truncated [ 954.029736][T11240] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 955.064164][T11252] zero sized request [ 957.143165][T11272] ieee802154 phy0 wpan0: encryption failed: -22 [ 960.103753][T11303] loop9: detected capacity change from 0 to 7 [ 960.135110][T11303] Dev loop9: unable to read RDB block 7 [ 960.141302][T11303] loop9: unable to read partition table [ 960.147794][T11303] loop9: partition table beyond EOD, truncated [ 960.154176][T11303] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 960.900130][ T27] audit: type=1800 audit(1791123574.608:103): pid=11301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1688" name=80 dev="sda1" ino=2047 res=0 errno=0 [ 961.279612][T11319] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 961.287526][T11319] Error parsing options; rc = [-22] [ 963.834991][T11349] xt_TPROXY: Can be used only with -p tcp or -p udp [ 964.215290][ T4375] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 965.020314][T10529] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 965.143062][ T4375] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.172386][ T4375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 965.195225][ T4375] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 965.218219][ T4375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.232510][T10529] usb 6-1: Using ep0 maxpacket: 16 [ 965.365637][T10529] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.376722][ T4375] usb 4-1: config 0 descriptor?? [ 966.135555][ T4375] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 966.142258][ T4375] dvb-usb: bulk message failed: -22 (3/0) [ 966.148983][T10529] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 966.164617][ T4375] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 966.173117][T10529] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 966.263170][ T4375] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 966.270339][ T4375] usb 4-1: media controller created [ 966.285218][T10529] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 966.301047][ T4375] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 966.309535][T10529] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 966.328938][T10529] usb 6-1: Manufacturer: syz [ 966.368944][ T4375] dvb-usb: bulk message failed: -22 (6/0) [ 966.381847][T10529] usb 6-1: config 0 descriptor?? [ 966.387884][ T4375] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 966.426106][ T4375] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 966.446013][ T4375] dvb-usb: schedule remote query interval to 150 msecs. [ 966.453118][ T4375] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 966.570663][ T4375] usb 4-1: USB disconnect, device number 16 [ 966.648301][ T4375] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 968.024065][ T27] audit: type=1800 audit(1791123581.738:104): pid=11390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1710" name="memory_backed" dev="configfs" ino=58258 res=0 errno=0 [ 968.107392][ T27] audit: type=1800 audit(1791123581.768:105): pid=11390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1710" name="zoned" dev="configfs" ino=58259 res=0 errno=0 [ 968.191272][ T27] audit: type=1800 audit(1791123581.848:106): pid=11392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1710" name="power" dev="configfs" ino=58266 res=0 errno=0 [ 969.754565][ T4322] usb 6-1: USB disconnect, device number 11 [ 973.893464][ T27] audit: type=1800 audit(1791123587.608:107): pid=11446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1724" name="memory_backed" dev="configfs" ino=59419 res=0 errno=0 [ 973.982906][ T27] audit: type=1800 audit(1791123587.638:108): pid=11446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1724" name="zoned" dev="configfs" ino=59420 res=0 errno=0 [ 974.079453][ T27] audit: type=1800 audit(1791123587.648:109): pid=11446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1724" name="power" dev="configfs" ino=59425 res=0 errno=0 [ 974.192453][ T4321] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 974.437498][ T4321] usb 1-1: Using ep0 maxpacket: 16 [ 974.553459][ T4321] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 974.572460][ T4321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 974.584335][ T4321] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 974.623861][ T4321] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 974.663595][ T4321] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 974.691183][ T4321] usb 1-1: Manufacturer: syz [ 974.729768][ T4321] usb 1-1: config 0 descriptor?? [ 977.588667][ T4322] usb 1-1: USB disconnect, device number 10 [ 978.312373][ T27] audit: type=1800 audit(1791123592.008:110): pid=11505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1737" name="memory_backed" dev="configfs" ino=59558 res=0 errno=0 [ 978.393426][ T27] audit: type=1800 audit(1791123592.048:111): pid=11505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1737" name="zoned" dev="configfs" ino=59559 res=0 errno=0 [ 978.485729][ T27] audit: type=1800 audit(1791123592.068:112): pid=11505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1737" name="power" dev="configfs" ino=59564 res=0 errno=0 [ 980.610870][T11534] comedi comedi3: board detection failed [ 980.621329][T11534] netlink: 'syz.1.1744': attribute type 10 has an invalid length. [ 984.319327][ T27] audit: type=1800 audit(1791123598.028:113): pid=11556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1751" name="memory_backed" dev="configfs" ino=60594 res=0 errno=0 [ 984.381214][ T27] audit: type=1800 audit(1791123598.068:114): pid=11556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1751" name="zoned" dev="configfs" ino=60595 res=0 errno=0 [ 984.540870][ T27] audit: type=1800 audit(1791123598.068:115): pid=11556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1751" name="power" dev="configfs" ino=60600 res=0 errno=0 [ 985.609020][T11578] xt_TPROXY: Can be used only with -p tcp or -p udp [ 985.882450][ T7963] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 986.674423][ T7963] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.691155][ T7963] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 986.700609][ T7963] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 986.730936][ T7963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.758018][ T7963] usb 2-1: config 0 descriptor?? [ 986.780053][ T7963] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 987.912431][ T7963] dvb-usb: bulk message failed: -22 (3/0) [ 987.919718][T11593] netlink: 'syz.6.1759': attribute type 10 has an invalid length. [ 987.984662][ T7963] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 988.063731][ T7963] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 988.111900][ T7963] usb 2-1: media controller created [ 988.141875][ T7963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 988.190004][ T7963] dvb-usb: bulk message failed: -22 (6/0) [ 988.201158][ T7963] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 988.367558][ T7963] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 989.209292][ T7963] dvb-usb: schedule remote query interval to 150 msecs. [ 989.232424][ T7963] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 989.258911][ T7963] usb 2-1: USB disconnect, device number 15 [ 989.352553][ T7963] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 992.782836][ T7963] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 992.894836][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.901213][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.535039][ T4284] Bluetooth: Wrong link type (-71) [ 993.735858][ T7963] usb 2-1: Using ep0 maxpacket: 16 [ 993.745841][ T7963] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.779014][T11644] comedi comedi3: board detection failed [ 993.787924][T11644] netlink: 'syz.5.1774': attribute type 10 has an invalid length. [ 993.796505][T11644] bridge0: port 3(netdevsim0) entered disabled state [ 993.803370][T11644] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.810614][T11644] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.863350][ T7963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 994.446517][ T7963] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 994.592680][ T7963] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 994.652411][ T7963] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 994.692244][ T7963] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 994.711120][ T7963] usb 2-1: Manufacturer: syz [ 994.727272][ T7963] usb 2-1: config 0 descriptor?? [ 994.758553][T11657] xt_TPROXY: Can be used only with -p tcp or -p udp [ 994.784639][T11653] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.1776'. [ 996.472618][ T7403] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 996.497838][ T7963] usb 2-1: USB disconnect, device number 16 [ 996.665449][ T7403] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.793265][ T7403] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 996.802858][ T7403] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 996.811974][ T7403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.893459][ T7403] usb 1-1: config 0 descriptor?? [ 997.006285][ T7403] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 997.013815][ T7403] dvb-usb: bulk message failed: -22 (3/0) [ 997.038671][ T7403] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 997.058679][ T7403] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 997.072859][ T7403] usb 1-1: media controller created [ 997.143565][ T7403] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 997.197691][ T7403] dvb-usb: bulk message failed: -22 (6/0) [ 997.212617][ T7403] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 997.247501][ T7403] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input31 [ 997.430225][ T7403] dvb-usb: schedule remote query interval to 150 msecs. [ 997.446813][ T7403] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 997.511733][T11688] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 997.519579][T11688] Error parsing options; rc = [-22] [ 997.530211][T11688] team0: Port device vlan0 added [ 997.923049][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 998.194373][ T7403] usb 1-1: USB disconnect, device number 11 [ 998.200920][ T4375] dvb-usb: bulk message failed: -22 (1/0) [ 998.212392][ T4375] dvb-usb: error while querying for an remote control event. [ 998.309253][ T7403] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1000.940302][T11713] overlayfs: failed to clone upperpath [ 1001.082406][ T7963] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1001.800095][ T4284] Bluetooth: Wrong link type (-71) [ 1001.986738][ T7963] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.026726][ T7963] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1002.062484][ T7963] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1002.084959][ T7963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.128728][ T7963] usb 6-1: config 0 descriptor?? [ 1002.142087][T11726] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1790'. [ 1002.175657][ T7963] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1002.209904][ T7963] dvb-usb: bulk message failed: -22 (3/0) [ 1002.262871][ T7963] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1002.292130][ T7963] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1002.332431][ T7963] usb 6-1: media controller created [ 1002.371667][ T7963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1002.429557][ T7963] dvb-usb: bulk message failed: -22 (6/0) [ 1002.456840][ T7963] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1002.504592][ T7963] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input32 [ 1002.553556][ T7963] dvb-usb: schedule remote query interval to 150 msecs. [ 1002.641895][ T7963] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1002.792511][ T7963] dvb-usb: bulk message failed: -22 (1/0) [ 1002.798673][ T7963] dvb-usb: error while querying for an remote control event. [ 1002.955440][T11746] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1002.972498][ T4321] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1002.980302][ T7963] dvb-usb: bulk message failed: -22 (1/0) [ 1002.987059][ T7963] dvb-usb: error while querying for an remote control event. [ 1003.015755][ T7963] usb 6-1: USB disconnect, device number 12 [ 1003.044303][ T7963] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1003.202459][ T4321] usb 1-1: Using ep0 maxpacket: 16 [ 1003.209627][ T4321] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.224230][ T4321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1003.236876][ T4321] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1003.248017][ T4321] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1003.264977][ T4321] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1003.340049][ T7403] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1004.132021][ T4321] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1004.160691][ T4321] usb 1-1: Manufacturer: syz [ 1004.168819][ T4321] usb 1-1: config 0 descriptor?? [ 1004.175727][ T7403] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.205806][ T7403] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1004.261723][ T7403] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1004.281766][ T7403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.301056][ T7403] usb 2-1: config 0 descriptor?? [ 1004.477698][ T7403] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1004.572609][ T7403] dvb-usb: bulk message failed: -22 (3/0) [ 1004.586785][ T7403] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1004.612916][ T7403] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1004.620115][ T7403] usb 2-1: media controller created [ 1004.643665][ T7403] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1004.738979][ T7403] dvb-usb: bulk message failed: -22 (6/0) [ 1004.767768][ T7403] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1004.811008][ T7403] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input33 [ 1004.845811][ T7403] dvb-usb: schedule remote query interval to 150 msecs. [ 1004.875646][ T7403] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1005.029475][ T7403] usb 2-1: USB disconnect, device number 17 [ 1005.069808][ T7403] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1005.156246][T11767] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.1802'. [ 1006.224990][ T4321] usb 1-1: USB disconnect, device number 12 [ 1010.525064][T11800] netlink: 'syz.1.1813': attribute type 72 has an invalid length. [ 1013.455685][T11819] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1014.375849][ T4264] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1015.064740][ T4264] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.105880][ T4264] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1015.141958][ T4264] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1015.179323][ T4264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.213085][ T4264] usb 2-1: config 0 descriptor?? [ 1015.226335][ T4264] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1015.249895][ T4264] dvb-usb: bulk message failed: -22 (3/0) [ 1015.289564][ T4264] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1015.346513][ T4264] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1015.365781][ T4264] usb 2-1: media controller created [ 1015.397208][ T4264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1015.489785][ T4264] dvb-usb: bulk message failed: -22 (6/0) [ 1015.515902][ T4264] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1016.182480][ T4264] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34 [ 1016.205407][ T4264] dvb-usb: schedule remote query interval to 150 msecs. [ 1016.212910][ T4264] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1016.240588][ T4264] usb 2-1: USB disconnect, device number 18 [ 1016.361759][ T4264] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1018.567244][T11858] netlink: 'syz.5.1828': attribute type 72 has an invalid length. [ 1019.114078][T11868] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 1019.121967][T11868] Error parsing options; rc = [-22] [ 1019.135854][T11868] device vlan0 entered promiscuous mode [ 1019.150689][T11868] team0: Port device vlan0 added [ 1019.909644][T11879] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1020.942404][ T4264] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 1020.950075][ T14] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1022.542531][ T14] usb 6-1: Using ep0 maxpacket: 16 [ 1022.549928][ T4264] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.564414][ T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.608068][ T4264] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1022.617188][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1022.628418][ T4264] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1022.637636][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1022.647730][ T4264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.656986][ T14] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1022.679181][ T4264] usb 1-1: config 0 descriptor?? [ 1022.691965][ T14] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1022.711458][ T4264] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1022.718466][ T4264] dvb-usb: bulk message failed: -22 (3/0) [ 1022.726043][ T14] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1022.747804][ T4264] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1022.756693][ T14] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1022.765344][ T14] usb 6-1: Manufacturer: syz [ 1022.770353][ T4264] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1022.796925][ T14] usb 6-1: config 0 descriptor?? [ 1022.802167][ T4264] usb 1-1: media controller created [ 1022.811351][ T4264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1022.821965][T11894] netlink: 'syz.3.1841': attribute type 72 has an invalid length. [ 1022.869076][ T4264] dvb-usb: bulk message failed: -22 (6/0) [ 1022.877854][ T4264] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1022.923306][ T14] usb 6-1: can't set config #0, error -71 [ 1022.944451][ T4264] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35 [ 1022.962989][ T14] usb 6-1: USB disconnect, device number 13 [ 1023.005245][ T4264] dvb-usb: schedule remote query interval to 150 msecs. [ 1023.032376][ T4264] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1023.080841][ T4264] usb 1-1: USB disconnect, device number 13 [ 1023.142152][ T4264] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1024.328458][T11903] FAULT_INJECTION: forcing a failure. [ 1024.328458][T11903] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.341539][T11903] CPU: 0 PID: 11903 Comm: syz.0.1844 Not tainted syzkaller #0 [ 1024.349064][T11903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1024.359188][T11903] Call Trace: [ 1024.362518][T11903] [ 1024.365494][T11903] dump_stack_lvl+0x188/0x24e [ 1024.370233][T11903] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1024.375926][T11903] ? show_regs_print_info+0x12/0x12 [ 1024.381181][T11903] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1024.386930][T11903] should_fail_ex+0x390/0x4c0 [ 1024.391720][T11903] should_failslab+0x5/0x20 [ 1024.396274][T11903] slab_pre_alloc_hook+0x59/0x300 [ 1024.401360][T11903] kmem_cache_alloc+0x56/0x2f0 [ 1024.406179][T11903] ? fib_insert_alias+0x300/0x1280 [ 1024.411349][T11903] fib_insert_alias+0x300/0x1280 [ 1024.416342][T11903] ? lockdep_rtnl_is_held+0x22/0x30 [ 1024.421606][T11903] ? fib_find_node+0x28a/0x2f0 [ 1024.426433][T11903] fib_trie_unmerge+0x308/0xce0 [ 1024.431349][T11903] fib_unmerge+0xbc/0x350 [ 1024.435747][T11903] fib4_rule_configure+0x114/0xae0 [ 1024.440910][T11903] ? __nla_parse+0x3c/0x50 [ 1024.445398][T11903] fib_nl_newrule+0x135a/0x1e40 [ 1024.450332][T11903] ? fib_rules_seq_read+0xf0/0xf0 [ 1024.455462][T11903] ? rcu_is_watching+0x11/0xa0 [ 1024.460288][T11903] ? trace_contention_end+0x5f/0x170 [ 1024.465673][T11903] ? fib_rules_seq_read+0xf0/0xf0 [ 1024.470757][T11903] rtnetlink_rcv_msg+0x863/0xfb0 [ 1024.475751][T11903] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 1024.480925][T11903] ? rtnetlink_bind+0x80/0x80 [ 1024.485651][T11903] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1024.491709][T11903] ? __lock_acquire+0x7ea0/0x7ea0 [ 1024.496794][T11903] ? lock_chain_count+0x20/0x20 [ 1024.501719][T11903] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1024.507666][T11903] ? lockdep_hardirqs_on+0x94/0x140 [ 1024.512923][T11903] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1024.518861][T11903] ? _raw_spin_unlock+0x40/0x40 [ 1024.523761][T11903] ? __dev_queue_xmit+0x1d84/0x3810 [ 1024.529041][T11903] ? rcu_preempt_deferred_qs_irqrestore+0x827/0xbd0 [ 1024.535706][T11903] ? rcu_read_unlock_special+0x510/0x510 [ 1024.541431][T11903] ? memcpy+0x3c/0x60 [ 1024.545478][T11903] netlink_rcv_skb+0x1ef/0x440 [ 1024.550346][T11903] ? rtnetlink_bind+0x80/0x80 [ 1024.555091][T11903] ? netlink_ack+0x1160/0x1160 [ 1024.559920][T11903] ? __rcu_read_unlock+0x78/0xd0 [ 1024.564906][T11903] ? netlink_deliver_tap+0x2e/0x1b0 [ 1024.570177][T11903] netlink_unicast+0x7ad/0x920 [ 1024.575015][T11903] netlink_sendmsg+0x8ad/0xbd0 [ 1024.579853][T11903] ? netlink_getsockopt+0x550/0x550 [ 1024.585112][T11903] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1024.590727][T11903] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1024.596065][T11903] ? security_socket_sendmsg+0x7c/0xa0 [ 1024.601609][T11903] ? netlink_getsockopt+0x550/0x550 [ 1024.606871][T11903] ____sys_sendmsg+0x5ed/0x9a0 [ 1024.611707][T11903] ? __sys_sendmsg_sock+0x30/0x30 [ 1024.616781][T11903] ? __import_iovec+0x306/0x510 [ 1024.621706][T11903] ? import_iovec+0x6f/0xa0 [ 1024.626279][T11903] ___sys_sendmsg+0x2a2/0x360 [ 1024.631029][T11903] ? __sys_sendmsg+0x2a0/0x2a0 [ 1024.635899][T11903] __se_sys_sendmsg+0x1c3/0x2b0 [ 1024.640806][T11903] ? __x64_sys_sendmsg+0x80/0x80 [ 1024.645811][T11903] ? lockdep_hardirqs_on+0x94/0x140 [ 1024.651079][T11903] do_syscall_64+0x4c/0xa0 [ 1024.655555][T11903] ? clear_bhb_loop+0x60/0xb0 [ 1024.660298][T11903] ? clear_bhb_loop+0x60/0xb0 [ 1024.665038][T11903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1024.670999][T11903] RIP: 0033:0x7f11b539e159 [ 1024.675470][T11903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.695140][T11903] RSP: 002b:00007f11b6289028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1024.703623][T11903] RAX: ffffffffffffffda RBX: 00007f11b5626090 RCX: 00007f11b539e159 [ 1024.711652][T11903] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 1024.719678][T11903] RBP: 00007f11b543506b R08: 0000000000000000 R09: 0000000000000000 [ 1024.727708][T11903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1024.735742][T11903] R13: 00007f11b5626128 R14: 00007f11b5626090 R15: 00007ffdd9582bc8 [ 1024.743793][T11903] [ 1024.851561][T11903] db_root: cannot open: $ [ 1025.247241][T11911] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1025.572606][ T4264] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1025.642133][T11917] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 1025.650056][T11917] Error parsing options; rc = [-22] [ 1025.783749][ T4264] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.206380][ T4264] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1026.333868][ T4264] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1026.511718][ T4264] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.334198][ T4264] usb 6-1: config 0 descriptor?? [ 1027.365115][ T4264] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1027.382148][ T4264] dvb-usb: bulk message failed: -22 (3/0) [ 1027.434994][ T4264] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1027.503138][ T4264] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1027.550898][ T4264] usb 6-1: media controller created [ 1027.605199][ T4264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1027.629432][ T4264] dvb-usb: bulk message failed: -22 (6/0) [ 1027.745342][ T4264] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1027.755060][ T4264] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input36 [ 1027.768384][ T4264] dvb-usb: schedule remote query interval to 150 msecs. [ 1027.775885][ T4264] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1027.792329][ T4320] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1027.932402][ T4264] dvb-usb: bulk message failed: -22 (1/0) [ 1027.938262][ T4264] dvb-usb: error while querying for an remote control event. [ 1027.992326][ T4320] usb 4-1: Using ep0 maxpacket: 16 [ 1027.999611][ T4320] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.050599][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1028.122355][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1028.132702][ T4264] dvb-usb: bulk message failed: -22 (1/0) [ 1028.144469][ T4264] dvb-usb: error while querying for an remote control event. [ 1028.162335][ T4320] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1028.182542][ T4320] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1028.214955][ T4320] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1028.242316][ T4320] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1028.257633][ T4320] usb 4-1: Manufacturer: syz [ 1028.277710][ T4320] usb 4-1: config 0 descriptor?? [ 1028.303078][ T4264] dvb-usb: bulk message failed: -22 (1/0) [ 1028.310014][ T4264] dvb-usb: error while querying for an remote control event. [ 1028.351547][T11936] netlink: 'syz.1.1853': attribute type 10 has an invalid length. [ 1028.453600][ T4264] usb 6-1: USB disconnect, device number 14 [ 1028.499332][ T4264] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1028.575385][T11939] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1028.683578][T11941] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1855'. [ 1029.016672][T11948] kAFS: No cell specified [ 1029.072167][ T7963] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1029.528026][ T7963] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.620355][ T7963] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1029.770530][ T7963] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1029.847080][ T7963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.881096][ T7963] usb 2-1: config 0 descriptor?? [ 1029.926876][ T7963] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1029.971895][ T7963] dvb-usb: bulk message failed: -22 (3/0) [ 1030.001026][ T7963] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1030.050782][ T7963] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1030.080149][ T7963] usb 2-1: media controller created [ 1030.100646][ T7963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1030.158298][ T7963] dvb-usb: bulk message failed: -22 (6/0) [ 1030.181044][ T7963] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1030.263986][ T7963] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input37 [ 1030.307982][ T7963] dvb-usb: schedule remote query interval to 150 msecs. [ 1030.316332][T11956] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 1030.324131][T11956] Error parsing options; rc = [-22] [ 1030.331415][ T7963] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1030.365361][ T7963] usb 2-1: USB disconnect, device number 19 [ 1030.434789][ T7963] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1032.232379][ T4320] rc_core: IR keymap rc-hauppauge not found [ 1032.239037][ T4320] Registered IR keymap rc-empty [ 1032.359720][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1032.572968][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1032.734425][ T4320] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1032.756796][T11986] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.1867'. [ 1032.774737][T11983] netlink: 'syz.1.1865': attribute type 10 has an invalid length. [ 1032.839297][ T4320] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input38 [ 1032.914417][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1032.962646][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1033.122844][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1033.141592][T11996] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1033.152353][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1033.911293][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1033.942497][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1034.043282][ T4375] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1034.081744][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1034.112436][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1034.167243][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1034.202391][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1034.233759][ T4320] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1034.245205][ T4320] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1034.269113][ T4375] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.286334][ T4320] usb 4-1: USB disconnect, device number 17 [ 1034.293816][ T4375] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1034.352714][ T4375] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1034.392429][ T4375] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.414718][ T4375] usb 6-1: config 0 descriptor?? [ 1034.454522][ T4375] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1034.461315][ T4375] dvb-usb: bulk message failed: -22 (3/0) [ 1034.504482][ T4375] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1034.533048][ T4375] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1034.540201][ T4375] usb 6-1: media controller created [ 1034.557728][ T4375] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1034.580258][ T4375] dvb-usb: bulk message failed: -22 (6/0) [ 1034.592570][ T4375] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1034.625810][ T4375] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input39 [ 1034.674464][ T4375] dvb-usb: schedule remote query interval to 150 msecs. [ 1034.742823][ T4375] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1034.822052][T12008] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 1034.829828][T12008] Error parsing options; rc = [-22] [ 1034.840007][T12008] team0: Port device vlan0 added [ 1034.855004][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1034.902744][T10529] dvb-usb: bulk message failed: -22 (1/0) [ 1034.919037][T10529] dvb-usb: error while querying for an remote control event. [ 1035.112578][T10529] dvb-usb: bulk message failed: -22 (1/0) [ 1035.118758][T10529] dvb-usb: error while querying for an remote control event. [ 1035.425622][T10529] dvb-usb: bulk message failed: -22 (1/0) [ 1035.432427][T10529] dvb-usb: error while querying for an remote control event. [ 1035.592479][T10529] dvb-usb: bulk message failed: -22 (1/0) [ 1035.598668][T10529] dvb-usb: error while querying for an remote control event. [ 1035.842640][ T4264] usb 6-1: USB disconnect, device number 15 [ 1035.893863][ T4264] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1035.949179][T12013] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1036.473744][T12024] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1880'. [ 1037.092331][T10529] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1037.559455][T10529] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.605141][T10529] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1037.695020][T10529] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1037.785879][T10529] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.332441][T10529] usb 2-1: config 0 descriptor?? [ 1040.348970][T10529] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1040.356754][T10529] dvb-usb: bulk message failed: -22 (3/0) [ 1040.381289][T10529] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1040.390388][T10529] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1040.523017][T10529] usb 2-1: media controller created [ 1040.529745][T10529] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1040.552540][T10529] dvb-usb: bulk message failed: -22 (6/0) [ 1040.558577][T10529] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1040.575250][T10529] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input40 [ 1040.589126][T10529] dvb-usb: schedule remote query interval to 150 msecs. [ 1040.596773][T10529] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1042.177511][T10529] usb 2-1: USB disconnect, device number 20 [ 1042.350407][T12049] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1042.387285][T10529] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1042.622524][ T4264] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1044.351553][ T4264] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.361884][ T4264] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1044.371257][ T4264] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1044.381025][ T4264] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.440788][ T4264] usb 6-1: config 0 descriptor?? [ 1044.485793][ T4264] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1044.523210][ T4264] dvb-usb: bulk message failed: -22 (3/0) [ 1044.556543][ T4264] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1044.598539][T12059] netlink: 'syz.3.1891': attribute type 10 has an invalid length. [ 1044.619161][ T4264] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1044.637333][ T4264] usb 6-1: media controller created [ 1044.655357][ T4264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1044.695104][ T4264] dvb-usb: bulk message failed: -22 (6/0) [ 1044.718106][ T4264] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1044.758207][ T4264] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input41 [ 1044.809085][ T4264] dvb-usb: schedule remote query interval to 150 msecs. [ 1044.932065][ T4264] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1045.624899][ T4264] dvb-usb: bulk message failed: -22 (1/0) [ 1045.630707][ T4264] dvb-usb: error while querying for an remote control event. [ 1045.939263][ T4264] dvb-usb: bulk message failed: -22 (1/0) [ 1045.952334][ T4264] dvb-usb: error while querying for an remote control event. [ 1046.112633][ T4264] dvb-usb: bulk message failed: -22 (1/0) [ 1046.118536][ T4264] dvb-usb: error while querying for an remote control event. [ 1046.201083][ T4322] usb 6-1: USB disconnect, device number 16 [ 1046.268390][ T4322] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1046.453338][ T4264] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1047.192423][ T4264] usb 1-1: Using ep0 maxpacket: 16 [ 1047.280262][T12085] kAFS: No cell specified [ 1047.300487][ T4264] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.395118][ T4264] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1047.526132][ T4264] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1047.646907][ T4264] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1047.764365][ T4264] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1047.932966][ T4264] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1048.044081][ T4264] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1048.356410][ T4264] usb 1-1: Manufacturer: syz [ 1049.515811][ T4264] usb 1-1: config 0 descriptor?? [ 1049.527676][T12091] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1049.716706][ T4264] usb 1-1: can't set config #0, error -71 [ 1049.736938][ T4264] usb 1-1: USB disconnect, device number 14 [ 1051.441890][T12115] netlink: 'syz.1.1904': attribute type 10 has an invalid length. [ 1053.845832][T12146] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1054.326536][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.333785][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.574839][T12158] netlink: 'syz.3.1918': attribute type 10 has an invalid length. [ 1057.030731][T12189] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1057.162433][ T4264] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1058.202503][ T4264] usb 2-1: Using ep0 maxpacket: 16 [ 1058.211724][ T4264] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.274388][ T4264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1058.311943][ T4264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1058.349950][ T4264] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1058.373113][ T4264] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1058.408482][T12201] netlink: 'syz.0.1933': attribute type 10 has an invalid length. [ 1058.464710][ T4264] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1058.535039][ T4264] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1058.559065][ T4264] usb 2-1: Manufacturer: syz [ 1058.574594][ T4264] usb 2-1: config 0 descriptor?? [ 1061.482792][T12227] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1061.802586][ T4375] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1061.872357][ T4264] rc_core: IR keymap rc-hauppauge not found [ 1061.878348][ T4264] Registered IR keymap rc-empty [ 1061.886563][ T4264] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1061.941363][ T4264] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1062.004278][ T4264] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1062.050521][ T4264] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input42 [ 1062.094396][ T4375] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.111269][ T4264] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1062.122333][ T4375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1062.164674][ T4264] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1062.165803][ T4375] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1062.192351][ T4264] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1062.219318][T12238] netlink: 'syz.1.1946': attribute type 10 has an invalid length. [ 1062.232627][ T4264] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1062.271821][ T4375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.292709][ T4264] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1062.331161][ T4264] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1062.341801][ T4375] usb 4-1: config 0 descriptor?? [ 1062.373018][ T4264] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1062.394168][ T4375] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1062.400885][ T4375] dvb-usb: bulk message failed: -22 (3/0) [ 1062.403118][ T4264] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1062.472835][ T4375] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1062.475217][ T4264] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1063.542370][ T4264] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1063.555217][ T4375] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1063.573562][ T4264] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1063.581646][ T4264] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1063.601390][ T4375] usb 4-1: media controller created [ 1063.625326][ T4264] usb 2-1: USB disconnect, device number 21 [ 1063.631965][ T4375] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1063.716627][ T4375] dvb-usb: bulk message failed: -22 (6/0) [ 1063.752388][ T4375] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1063.813602][ T4375] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input43 [ 1063.852152][ T4375] dvb-usb: schedule remote query interval to 150 msecs. [ 1063.868135][ T4375] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1063.940263][ T4375] usb 4-1: USB disconnect, device number 18 [ 1064.017552][ T4375] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1064.102565][ T4264] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1064.301162][ T4264] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.395113][T10529] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1064.445833][ T4264] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1064.532777][ T4264] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1064.567628][ T4264] usb 2-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 1065.255832][ T4264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.272484][T10529] usb 1-1: Using ep0 maxpacket: 16 [ 1065.279671][T10529] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.297389][ T4264] usb 2-1: config 0 descriptor?? [ 1065.339515][T10529] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1065.411127][T10529] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1065.481032][T10529] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1065.529634][T10529] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1065.611640][T10529] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1065.689743][T10529] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1065.709453][ T4264] usbhid 2-1:0.0: can't add hid device: -71 [ 1065.722483][T10529] usb 1-1: Manufacturer: syz [ 1065.722612][ T4264] usbhid: probe of 2-1:0.0 failed with error -71 [ 1065.778698][T10529] usb 1-1: config 0 descriptor?? [ 1065.790411][ T4264] usb 2-1: USB disconnect, device number 22 [ 1066.495831][T12281] netlink: 'syz.5.1960': attribute type 10 has an invalid length. [ 1066.792626][T10529] rc_core: IR keymap rc-hauppauge not found [ 1066.798628][T10529] Registered IR keymap rc-empty [ 1067.796813][T10529] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1067.912553][T10529] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1067.953244][T10529] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1069.406368][T10529] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input44 [ 1070.034363][T10529] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1070.072462][T10529] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1070.112352][T10529] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1070.152384][T10529] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1070.182359][T10529] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1070.212834][T10529] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1070.252351][T10529] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1070.292364][T10529] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1070.322360][T10529] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1070.367829][T10529] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1070.413571][T10529] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1070.630517][T12316] kAFS: No cell specified [ 1071.243862][T10529] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1071.259117][T10529] usb 1-1: USB disconnect, device number 15 [ 1073.080841][T12330] netlink: 'syz.5.1972': attribute type 10 has an invalid length. [ 1079.424835][T12368] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 1079.433020][T12368] Error parsing options; rc = [-22] [ 1081.185258][T12389] netlink: 'syz.6.1987': attribute type 10 has an invalid length. [ 1084.926376][T12408] kAFS: No cell specified [ 1089.413203][T12431] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1096.143045][T12486] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1096.201464][ T27] audit: type=1800 audit(1791123721.916:116): pid=12484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2011" name="memory_backed" dev="configfs" ino=64677 res=0 errno=0 [ 1096.271725][ T27] audit: type=1800 audit(1791123721.946:117): pid=12484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2011" name="zoned" dev="configfs" ino=64678 res=0 errno=0 [ 1097.084034][ T27] audit: type=1800 audit(1791123721.986:118): pid=12484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2011" name="power" dev="configfs" ino=64686 res=0 errno=0 [ 1105.586295][T12540] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1107.014109][T12566] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2033'. [ 1109.691152][T12598] db_root: cannot open: $ [ 1110.426928][T12598] FAULT_INJECTION: forcing a failure. [ 1110.426928][T12598] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1110.592486][T12598] CPU: 1 PID: 12598 Comm: syz.1.2042 Not tainted syzkaller #0 [ 1110.600040][T12598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1110.610135][T12598] Call Trace: [ 1110.613442][T12598] [ 1110.616425][T12598] dump_stack_lvl+0x188/0x24e [ 1110.621142][T12598] ? show_regs_print_info+0x12/0x12 [ 1110.626398][T12598] ? load_image+0x410/0x410 [ 1110.630946][T12598] ? __lock_acquire+0x142d/0x7ea0 [ 1110.636022][T12598] should_fail_ex+0x390/0x4c0 [ 1110.640750][T12598] get_futex_key+0x1de/0x1000 [ 1110.645463][T12598] ? verify_lock_unused+0x140/0x140 [ 1110.650710][T12598] ? futex_setup_timer+0xc0/0xc0 [ 1110.655695][T12598] ? verify_lock_unused+0x140/0x140 [ 1110.660943][T12598] futex_wake+0x123/0x4f0 [ 1110.665308][T12598] ? queue_state_write+0xa0/0x290 [ 1110.670375][T12598] ? futex_wake_mark+0x150/0x150 [ 1110.675357][T12598] do_futex+0x2e2/0x320 [ 1110.679545][T12598] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1110.685478][T12598] ? __might_fault+0xc2/0x120 [ 1110.690208][T12598] mm_release+0x20a/0x330 [ 1110.694573][T12598] ? exit_robust_list+0x2ce/0x2f0 [ 1110.699632][T12598] ? exit_mm_release+0x30/0x30 [ 1110.704448][T12598] ? lockdep_hardirqs_on+0x94/0x140 [ 1110.709687][T12598] exit_mm+0xa0/0x350 [ 1110.713723][T12598] ? sysctl_delayacct+0x220/0x220 [ 1110.718787][T12598] ? do_exit+0x2570/0x2570 [ 1110.723270][T12598] ? mm_trace_rss_stat+0xa7/0x250 [ 1110.728342][T12598] ? sync_mm_rss+0x211/0x350 [ 1110.732973][T12598] do_exit+0x958/0x2570 [ 1110.737180][T12598] ? put_task_struct+0x80/0x80 [ 1110.741991][T12598] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1110.748019][T12598] ? lock_chain_count+0x20/0x20 [ 1110.752931][T12598] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1110.757998][T12598] do_group_exit+0x229/0x2e0 [ 1110.762630][T12598] ? lockdep_hardirqs_on+0x94/0x140 [ 1110.767882][T12598] get_signal+0x1259/0x1340 [ 1110.772460][T12598] arch_do_signal_or_restart+0xc4/0x1310 [ 1110.778131][T12598] ? finish_task_switch+0x327/0x8e0 [ 1110.783373][T12598] ? do_futex+0x310/0x320 [ 1110.787742][T12598] ? get_sigframe_size+0x10/0x10 [ 1110.792716][T12598] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1110.798662][T12598] ? exit_to_user_mode_loop+0x3b/0x110 [ 1110.804170][T12598] exit_to_user_mode_loop+0x70/0x110 [ 1110.809494][T12598] exit_to_user_mode_prepare+0xee/0x180 [ 1110.815077][T12598] syscall_exit_to_user_mode+0x16/0x40 [ 1110.820570][T12598] do_syscall_64+0x58/0xa0 [ 1110.825022][T12598] ? clear_bhb_loop+0x60/0xb0 [ 1110.829734][T12598] ? clear_bhb_loop+0x60/0xb0 [ 1110.834446][T12598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1110.840379][T12598] RIP: 0033:0x7f345819e159 [ 1110.844827][T12598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.864466][T12598] RSP: 002b:00007f34590210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1110.872911][T12598] RAX: fffffffffffffe00 RBX: 00007f3458426098 RCX: 00007f345819e159 [ 1110.880919][T12598] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3458426098 [ 1110.888961][T12598] RBP: 00007f3458426090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.896984][T12598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1110.904990][T12598] R13: 00007f3458426128 R14: 00007fff437d65b0 R15: 00007fff437d6698 [ 1110.913009][T12598] [ 1112.151570][ T27] audit: type=1800 audit(1791123738.861:119): pid=12610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2024" name="memory_backed" dev="configfs" ino=65088 res=0 errno=0 [ 1112.777016][ T27] audit: type=1800 audit(1791123738.911:120): pid=12610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2024" name="zoned" dev="configfs" ino=65089 res=0 errno=0 [ 1113.101533][ T27] audit: type=1800 audit(1791123739.591:121): pid=12619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2024" name="power" dev="configfs" ino=65105 res=0 errno=0 [ 1115.765844][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.772412][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.163489][ T27] audit: type=1800 audit(1791123745.881:122): pid=12677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2062" name="memory_backed" dev="configfs" ino=65649 res=0 errno=0 [ 1119.737816][ T27] audit: type=1800 audit(1791123745.911:123): pid=12677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2062" name="zoned" dev="configfs" ino=65650 res=0 errno=0 [ 1120.135756][ T27] audit: type=1800 audit(1791123746.851:124): pid=12677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2062" name="power" dev="configfs" ino=65276 res=0 errno=0 [ 1123.090610][T12695] team0: Port device vlan0 removed [ 1124.992314][T12714] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1127.973987][ T27] audit: type=1800 audit(1791123754.691:125): pid=12737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2075" name="memory_backed" dev="configfs" ino=65723 res=0 errno=0 [ 1128.040795][ T27] audit: type=1800 audit(1791123754.691:126): pid=12737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2075" name="zoned" dev="configfs" ino=65724 res=0 errno=0 [ 1128.102157][ T27] audit: type=1800 audit(1791123754.751:127): pid=12737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2075" name="power" dev="configfs" ino=65731 res=0 errno=0 [ 1135.388924][ T27] audit: type=1800 audit(1791123762.101:128): pid=12804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2090" name="memory_backed" dev="configfs" ino=65813 res=0 errno=0 [ 1135.481731][ T27] audit: type=1800 audit(1791123762.141:129): pid=12804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2090" name="zoned" dev="configfs" ino=65814 res=0 errno=0 [ 1135.572383][ T27] audit: type=1800 audit(1791123762.191:130): pid=12804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2090" name="power" dev="configfs" ino=65820 res=0 errno=0 [ 1141.209988][T12835] zero sized request [ 1142.510077][T12843] db_root: cannot open: $ [ 1144.925077][ T27] audit: type=1800 audit(1791123772.646:131): pid=12857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2103" name="memory_backed" dev="configfs" ino=66673 res=0 errno=0 [ 1144.986198][ T27] audit: type=1800 audit(1791123772.676:132): pid=12857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2103" name="zoned" dev="configfs" ino=66674 res=0 errno=0 [ 1145.092627][ T27] audit: type=1800 audit(1791123772.816:133): pid=12859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2103" name="power" dev="configfs" ino=66680 res=0 errno=0 [ 1148.489042][ T4322] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1148.732704][ T4322] usb 1-1: Using ep0 maxpacket: 32 [ 1148.770154][ T4322] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1148.832322][ T4322] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1148.905469][ T4322] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1148.908055][ T4322] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1148.908086][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.908109][ T4322] usb 1-1: Product: syz [ 1148.908127][ T4322] usb 1-1: Manufacturer: syz [ 1148.908143][ T4322] usb 1-1: SerialNumber: syz [ 1149.704446][ T4322] usb 1-1: config 0 descriptor?? [ 1150.065578][T12892] zero sized request [ 1150.133770][ T4322] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 1150.979851][ T4322] usb 1-1: USB disconnect, device number 16 [ 1153.646765][T12909] db_root: cannot open: $ [ 1157.775870][ T27] audit: type=1800 audit(1791123785.496:134): pid=12932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2120" name=80 dev="sda1" ino=2047 res=0 errno=0 [ 1164.716077][T12972] netlink: 'syz.3.2118': attribute type 10 has an invalid length. [ 1168.386644][T13013] netlink: 'syz.1.2146': attribute type 10 has an invalid length. [ 1169.888825][T13023] zero sized request [ 1172.307119][T13037] db_root: cannot open: $ [ 1173.357696][T13044] jffs2: notice: (13044) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1177.240908][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.248173][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.538470][T13086] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1178.729769][T13091] zero sized request [ 1178.902531][ T4322] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1179.140524][ T4322] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.233681][ T4322] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1179.380740][ T4322] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1179.532338][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.614014][ T4322] usb 2-1: config 0 descriptor?? [ 1179.655173][ T4322] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1179.672367][ T4322] dvb-usb: bulk message failed: -22 (3/0) [ 1179.714137][ T4322] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1179.734908][ T4322] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1179.742064][ T4322] usb 2-1: media controller created [ 1179.786862][ T4322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1179.817844][ T4322] dvb-usb: bulk message failed: -22 (6/0) [ 1179.996872][ T4322] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1180.231679][ T4322] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input45 [ 1180.480076][ T4322] dvb-usb: schedule remote query interval to 150 msecs. [ 1180.572076][ T4322] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1180.742982][ T4322] usb 2-1: USB disconnect, device number 23 [ 1181.107004][ T4322] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1184.373295][T13129] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1185.307665][T13141] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1185.661408][T13143] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 1185.669311][T13143] Error parsing options; rc = [-22] [ 1190.126839][T13178] db_root: cannot open: $ [ 1191.832915][T13186] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1195.422063][T13230] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2206'. [ 1196.071684][T13230] syz.5.2206 (13230) used greatest stack depth: 17712 bytes left [ 1196.512586][T13237] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1197.834225][T13249] db_root: cannot open: $ [ 1198.751367][T13254] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1198.771490][T13253] netlink: 'syz.6.2214': attribute type 10 has an invalid length. [ 1199.744035][T13257] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1203.006850][T13298] netlink: 'syz.1.2226': attribute type 10 has an invalid length. [ 1204.087174][T13304] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 1204.095039][T13304] Error parsing options; rc = [-22] [ 1204.855439][T13317] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1205.162345][ T4322] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1206.083587][ T4322] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.095487][ T4322] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1206.111219][ T4322] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1206.133651][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.153478][ T4322] usb 1-1: config 0 descriptor?? [ 1206.182445][ T4322] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1206.311714][ T4322] dvb-usb: bulk message failed: -22 (3/0) [ 1206.533717][ T4322] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1206.690353][ T4322] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1206.986773][ T4322] usb 1-1: media controller created [ 1207.008116][ T4322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1207.092393][ T4322] dvb-usb: bulk message failed: -22 (6/0) [ 1207.149780][ T4322] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1207.272900][ T4322] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input46 [ 1208.016264][ T4322] dvb-usb: schedule remote query interval to 150 msecs. [ 1208.123670][ T4322] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1208.319600][ T4322] usb 1-1: USB disconnect, device number 17 [ 1208.707882][T13341] comedi comedi1: Minor 524288 is invalid! [ 1208.829585][ T4322] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1209.836110][T13351] netlink: 'syz.6.2238': attribute type 10 has an invalid length. [ 1211.552610][T13373] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1212.623743][ T4320] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1213.034555][ T4320] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.242299][ T4320] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1213.278286][ T4320] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1213.302583][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.333058][ T4320] usb 4-1: config 0 descriptor?? [ 1213.373239][ T4320] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1213.390005][ T4320] dvb-usb: bulk message failed: -22 (3/0) [ 1215.250917][ T4320] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1216.482773][ T4320] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1216.489954][ T4320] usb 4-1: media controller created [ 1216.496970][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1216.510810][ T4320] dvb-usb: bulk message failed: -22 (6/0) [ 1216.517119][ T4320] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1216.526760][ T4320] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input47 [ 1216.539229][ T4320] dvb-usb: schedule remote query interval to 150 msecs. [ 1216.547407][ T4320] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1216.557086][ T4320] usb 4-1: USB disconnect, device number 19 [ 1216.661945][T13389] netlink: 'syz.1.2250': attribute type 10 has an invalid length. [ 1217.198280][ T4320] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1222.500222][ T27] audit: type=1800 audit(1791123850.216:135): pid=13432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2265" name="memory_backed" dev="configfs" ino=68818 res=0 errno=0 [ 1222.564492][ T27] audit: type=1800 audit(1791123850.246:136): pid=13432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2265" name="zoned" dev="configfs" ino=68821 res=0 errno=0 [ 1222.632731][ T27] audit: type=1800 audit(1791123850.266:137): pid=13432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2265" name="power" dev="configfs" ino=68829 res=0 errno=0 [ 1222.723819][T13436] netlink: 'syz.0.2264': attribute type 10 has an invalid length. [ 1224.112481][ T4320] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1224.982341][ T4320] usb 4-1: Using ep0 maxpacket: 16 [ 1224.991091][ T4320] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.062314][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1225.096732][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1225.148757][ T4320] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1225.565318][ T4320] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1225.772410][ T4320] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1225.850386][ T4320] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1226.146259][ T4320] usb 4-1: Manufacturer: syz [ 1226.176789][ T4320] usb 4-1: config 0 descriptor?? [ 1226.740025][T13467] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2262'. [ 1226.822413][ T4320] rc_core: IR keymap rc-hauppauge not found [ 1226.834935][ T4320] Registered IR keymap rc-empty [ 1226.864738][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1226.922285][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1226.952874][ T4320] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1227.010121][ T4320] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input48 [ 1227.394432][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1227.797665][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1228.910557][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1228.992325][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1229.042613][T13481] No source specified [ 1229.072284][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1229.130304][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1229.212428][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1229.243258][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1229.277708][ T27] audit: type=1800 audit(1791123856.996:138): pid=13483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2278" name="memory_backed" dev="configfs" ino=68159 res=0 errno=0 [ 1229.299532][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1229.339698][ T27] audit: type=1800 audit(1791123857.016:139): pid=13483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2278" name="zoned" dev="configfs" ino=68160 res=0 errno=0 [ 1229.365868][ T4320] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1229.436691][ T4320] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1229.454459][ T27] audit: type=1800 audit(1791123857.146:140): pid=13483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2278" name="power" dev="configfs" ino=68168 res=0 errno=0 [ 1229.502407][ T4320] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1229.521516][ T4320] usb 4-1: USB disconnect, device number 20 [ 1229.530074][T13488] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 1229.572274][T13488] Error parsing options; rc = [-22] [ 1230.969012][T13495] netlink: 'syz.5.2280': attribute type 10 has an invalid length. [ 1233.852671][ T4322] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1234.111622][T13518] overlayfs: missing 'lowerdir' [ 1234.282291][ T4322] usb 4-1: Using ep0 maxpacket: 16 [ 1235.562603][ T4322] usb 4-1: device descriptor read/all, error -71 [ 1235.679023][ T27] audit: type=1800 audit(1791123863.396:141): pid=13522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2291" name="zoned" dev="configfs" ino=68304 res=0 errno=0 [ 1236.581125][ T27] audit: type=1800 audit(1791123864.296:142): pid=13522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2291" name="power" dev="configfs" ino=69097 res=0 errno=0 [ 1236.848959][ T4322] general protection fault, probably for non-canonical address 0xdffffc0000000013: 0000 [#1] PREEMPT SMP KASAN [ 1236.860765][ T4322] KASAN: null-ptr-deref in range [0x0000000000000098-0x000000000000009f] [ 1236.869228][ T4322] CPU: 0 PID: 4322 Comm: kworker/0:6 Not tainted syzkaller #0 [ 1236.876737][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1236.886860][ T4322] Workqueue: kafsd afs_process_async_call [ 1236.892637][ T4322] RIP: 0010:__mutex_lock+0xe8/0xae0 [ 1236.897911][ T4322] Code: c0 40 a1 c3 96 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 56 09 00 00 83 3d 15 eb 86 0c 00 75 21 48 8d 7b 60 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 dc ea 96 f7 48 39 5b 60 0f 85 d9 08 00 00 [ 1236.917571][ T4322] RSP: 0018:ffffc90004887960 EFLAGS: 00010202 [ 1236.923687][ T4322] RAX: 0000000000000013 RBX: 0000000000000038 RCX: ffffffff96c3a103 [ 1236.931706][ T4322] RDX: ffff8880253ede3c RSI: ffffffff8a8c2a20 RDI: 0000000000000098 [ 1236.939725][ T4322] RBP: ffffc90004887ac0 R08: ffffffff8966b856 R09: 000000000000000b [ 1236.947742][ T4322] R10: 00000000fffffffb R11: 0000000000000000 R12: dffffc0000000000 [ 1236.955759][ T4322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1236.963779][ T4322] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1236.972757][ T4322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1236.979382][ T4322] CR2: 00007f3459020ff8 CR3: 0000000062a04000 CR4: 00000000003506f0 [ 1236.987419][ T4322] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1236.995438][ T4322] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1237.003464][ T4322] Call Trace: [ 1237.006840][ T4322] [ 1237.009815][ T4322] ? afs_put_call+0x28b/0x480 [ 1237.014558][ T4322] ? rcu_is_watching+0x11/0xa0 [ 1237.019380][ T4322] ? afs_extract_data+0x33e/0x650 [ 1237.024454][ T4322] ? rxrpc_kernel_abort_call+0x26/0x70 [ 1237.029962][ T4322] ? mutex_lock_nested+0x10/0x10 [ 1237.034956][ T4322] ? afs_extract_data+0x33e/0x650 [ 1237.040032][ T4322] ? afs_send_simple_reply+0x300/0x300 [ 1237.045557][ T4322] ? iov_iter_kvec+0x4a/0x1f0 [ 1237.050298][ T4322] rxrpc_kernel_abort_call+0x26/0x70 [ 1237.055636][ T4322] afs_deliver_to_call+0x6ab/0x1200 [ 1237.060900][ T4322] ? afs_wait_for_call_to_complete+0xc20/0xc20 [ 1237.067115][ T4322] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1237.073161][ T4322] ? __lock_acquire+0x7ea0/0x7ea0 [ 1237.078247][ T4322] ? read_lock_is_recursive+0x10/0x10 [ 1237.083673][ T4322] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1237.089621][ T4322] ? _raw_spin_unlock+0x40/0x40 [ 1237.094524][ T4322] afs_process_async_call+0x7e/0xe0 [ 1237.099776][ T4322] ? process_one_work+0x7b4/0x1160 [ 1237.104939][ T4322] process_one_work+0x8ab/0x1160 [ 1237.109940][ T4322] ? worker_detach_from_pool+0x240/0x240 [ 1237.115628][ T4322] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1237.120714][ T4322] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1237.126321][ T4322] ? wq_worker_running+0x97/0x190 [ 1237.131407][ T4322] worker_thread+0xaf5/0x12a0 [ 1237.136147][ T4322] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1237.142140][ T4322] kthread+0x29d/0x330 [ 1237.146250][ T4322] ? worker_clr_flags+0x1a0/0x1a0 [ 1237.151331][ T4322] ? kthread_blkcg+0xd0/0xd0 [ 1237.155973][ T4322] ret_from_fork+0x1f/0x30 [ 1237.160452][ T4322] [ 1237.163521][ T4322] Modules linked in: [ 1237.707042][T13536] netlink: 'syz.6.2296': attribute type 10 has an invalid length. [ 1237.812692][ T4322] ---[ end trace 0000000000000000 ]--- [ 1237.819341][ T4322] RIP: 0010:__mutex_lock+0xe8/0xae0 [ 1237.826635][ T4322] Code: c0 40 a1 c3 96 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 56 09 00 00 83 3d 15 eb 86 0c 00 75 21 48 8d 7b 60 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 dc ea 96 f7 48 39 5b 60 0f 85 d9 08 00 00 [ 1237.852331][ T4322] RSP: 0018:ffffc90004887960 EFLAGS: 00010202 [ 1237.858501][ T4322] RAX: 0000000000000013 RBX: 0000000000000038 RCX: ffffffff96c3a103 [ 1237.869999][ T4322] RDX: ffff8880253ede3c RSI: ffffffff8a8c2a20 RDI: 0000000000000098 [ 1237.878321][ T4322] RBP: ffffc90004887ac0 R08: ffffffff8966b856 R09: 000000000000000b [ 1237.888634][ T4322] R10: 00000000fffffffb R11: 0000000000000000 R12: dffffc0000000000 [ 1237.896937][ T4322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1237.907275][ T4322] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1237.916543][ T4322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1237.925963][ T4322] CR2: 0000200000001000 CR3: 000000007e359000 CR4: 00000000003506f0 [ 1237.935290][ T4322] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1237.945912][ T4322] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1237.958534][ T4322] Kernel panic - not syncing: Fatal exception [ 1237.965253][ T4322] Kernel Offset: disabled [ 1237.969602][ T4322] Rebooting in 86400 seconds..