last executing test programs: 8.821210246s ago: executing program 3 (id=1107): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xffffffff}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004070}, 0x4008000) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, 0x0}, 0x5) 8.344719586s ago: executing program 2 (id=1109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x5, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc010) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.25797595s ago: executing program 1 (id=1110): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0x4}, 'port1\x00', 0x786520dbf34c80fe, 0x20a03, 0x20000004, 0x0, 0x0, 0x4, 0x400, 0x0, 0x7, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000007fc0)={0x2020}, 0x2020) 8.071566128s ago: executing program 3 (id=1112): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 8.01924641s ago: executing program 1 (id=1113): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) read(r4, &(0x7f0000000100)=""/74, 0x4a) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000280)=0xfffffffa) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0xb3d) ioctl$TCXONC(r5, 0x540a, 0x2) 7.664780795s ago: executing program 2 (id=1116): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) 7.657419686s ago: executing program 1 (id=1117): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = creat(0x0, 0xecf86c37d53049cc) write$binfmt_script(r2, 0x0, 0x0) fsopen(&(0x7f0000000040)='fuse\x00', 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xc0) r3 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) r4 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r4, &(0x7f0000001e80)=""/96, 0x60) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 7.371044938s ago: executing program 2 (id=1120): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x2, 0x0, 0xfffffe0000000001, 0x2fa11, 0xffffffff}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0xa) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x3, 0x6, 0x4, @mcast2, @local, 0x1, 0x20, 0x4, 0x1}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2282, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x11, 0x0, [{0x48a, 0x0, 0x2}]}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x108081, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x3, &(0x7f0000000040), 0x4) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000002000df8eee8f9955eda300000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{&(0x7f0000000380)=@hci, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1}, 0xd7}], 0x1, 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000000000000000000000000000181100ff", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf98000000000000b5080000000000008500000007000000b7000000000000009500000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) 7.066615711s ago: executing program 3 (id=1123): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0x4}, 'port1\x00', 0x786520dbf34c80fe, 0x20a03, 0x20000004, 0x0, 0x0, 0x4, 0x400, 0x0, 0x7, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(0xffffffffffffffff, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 6.456008937s ago: executing program 3 (id=1125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0xb) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000002800)={0x2020}, 0x2020) ioctl$BLKGETSIZE64(r5, 0x80041272, &(0x7f0000000140)) close(r4) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='sour:e', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000200)='befs\x00', 0x0) inotify_init() bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000095455e810094242090d57e76181141fa", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_emit_ethernet(0xe2, &(0x7f0000000b80)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045fe00d40064000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01030000000000000000010000000900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a310000000030000000050a01020000000000000000010000000000008000000000000000010900010073797a31000000000400048014000000020a0103000000000000000000000006140000001100010000000000000000000000000ad3045f3c72cb05049b534ca6035f938a5257c8d7bb4a055945d76c68819629eac7c4ab3c17d291efae9fd2de63211d9c508244323519302c1f87"], 0xb8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40084}, 0x40000) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}], 0x1) 5.966237417s ago: executing program 4 (id=1126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x5, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc010) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.458786839s ago: executing program 4 (id=1128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.178186431s ago: executing program 0 (id=1129): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) bind$netlink(r0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) 4.9608017s ago: executing program 4 (id=1130): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000140)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)}], 0x1, 0x3e42, 0x407ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x18, 0x0, 0x6a98047402e98331, 0x70bd21, 0xff9f, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004041}, 0x4008000) 4.705365991s ago: executing program 2 (id=1131): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000000f14010025bd7000fcdbdf25080001000200000008000300040000000c00450069625f7372707400"], 0x48}, 0x1, 0x0, 0x0, 0x20008005}, 0xc0) close(0x3) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_ttl={{0x14, 0x110, 0x2, 0xffffffff}}, @ip_tos_int={{0x14, 0x110, 0xd}}], 0x30}, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000040)="3700000013", 0x5}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x50) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x7, 0x7f, 0x1, 0x2}, 0x609d, 0x1, 0x8, 0xfffffffa, 0x2, 0x2, 0x18, 0x1, 0x6, 0xe, {0x3, 0xfffffeff, 0x5, 0x0, 0x9, 0x2}}}}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r2, 0x8070587c, &(0x7f00000003c0)) 4.554828577s ago: executing program 0 (id=1132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 4.308308348s ago: executing program 2 (id=1133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 4.172046433s ago: executing program 0 (id=1134): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xffffffff}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004070}, 0x4008000) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, 0x0}, 0x5) 4.040221079s ago: executing program 4 (id=1135): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0x4}, 'port1\x00', 0x786520dbf34c80fe, 0x20a03, 0x20000004, 0x0, 0x0, 0x4, 0x400, 0x0, 0x7, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(0xffffffffffffffff, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 3.827085078s ago: executing program 4 (id=1136): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x9b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) clock_gettime(0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) accept(r1, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b0000000000092275ba3e54754f4b170308734de7af4138d48622a63b7fe8dfa38e9f409e3b20fc5328ccacfa2e730bf514d6cc71aee55339ddec473859283ba1355d7f040c48605aaff38a111df8fae8584a3eef1f5c8db9bb9e16cbda8ba97e8e1eb8352fa0f3d155dc5793526047989c54eb6b79fc3404907d6e0c6c8c992e2e33a2d7562123f3106b4b0a0c24d32924d183a4da8e3f06dea5216b9656cfee7be451c85eb474feaa0e4e92ebef07e9c0dad39d9b364100f680e26e23f38c90be13c3966c720c57cd2ef3d900000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) readv(r2, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r4 = socket(0xb, 0x2, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r5}, 0xc) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 3.055427521s ago: executing program 1 (id=1137): msgsnd(0x0, 0x0, 0x0, 0x800) msgsnd(0x0, &(0x7f0000000200)=ANY=[], 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f0000f78000/0x3000)=nil, 0x3000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) 2.745926034s ago: executing program 3 (id=1138): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f00000001c0)={0x9, @capture={0x1000, 0x0, {0x0, 0x6a574e8}, 0xfffffffb, 0x3606}}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x4}}, 0x20) writev(r3, &(0x7f0000000040), 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x8000000) r4 = semget$private(0x0, 0x4000, 0x0) semtimedop(r4, &(0x7f0000000540)=[{0x2, 0x42, 0x1000}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=@newtfilter={0x878, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x8001, 0x80000001, 0x5, 0xd03cbcd, 0x9, 0x5, 0x400, 0xffff, 0xf2, 0x6, 0xf0, 0xe9, 0x7, 0x4, 0x3, 0x4, 0x1, 0xedb, 0x9, 0x5, 0x7eb, 0x7, 0x0, 0x200, 0x6, 0x5, 0x5, 0x100, 0x6, 0xffffffff, 0xf6e, 0x5, 0xfffffbff, 0x81, 0x3, 0x1, 0x7, 0x1, 0x1, 0x7, 0x8, 0xffff8001, 0xfffffff7, 0x4, 0x9c5, 0x5, 0x5, 0xff, 0x5a9f, 0x4, 0x8, 0x100, 0x8, 0x0, 0xff, 0xc2e, 0x9, 0x1, 0xf, 0x7ff, 0x34, 0x9, 0xb6d4, 0x5, 0x7, 0x44d, 0x43b, 0x8, 0x6, 0x2, 0x4, 0x3, 0x6, 0x8, 0xfff, 0x9, 0x7, 0x5, 0x7fff, 0x80, 0x2, 0x7, 0x0, 0x225, 0x4, 0x4, 0x1, 0x1, 0x4, 0x3, 0x0, 0x10000, 0x6, 0x2, 0x1ff, 0x10001, 0x2, 0x5, 0x200, 0x0, 0xffffff6d, 0x6c93, 0x3, 0xd5, 0x9, 0x10001, 0x0, 0x4, 0x101, 0x8, 0x10001, 0xffffffff, 0x0, 0xffffffff, 0x7, 0x1, 0x4, 0x4, 0x8, 0x110, 0x3, 0x7, 0x7, 0x3, 0x7, 0x7, 0x5bc, 0xfffffff3, 0x58, 0x0, 0x80, 0x800, 0x6, 0x9, 0x3ff, 0x9, 0xfffffffa, 0x81, 0x7, 0x3, 0x8, 0x1, 0x10001, 0x0, 0xf9b0, 0x2, 0x5, 0x0, 0x9, 0x5, 0x3, 0x7, 0x2, 0x8a, 0x6, 0x2, 0xb09, 0x200, 0x100, 0xffffff40, 0x1, 0x6, 0x80000001, 0xed0, 0x1ff, 0x0, 0x80000000, 0x1, 0x5c, 0xfffffc01, 0x60b, 0x8, 0x1, 0x6, 0x3, 0x7, 0xf19, 0x7fffffff, 0xfffffff6, 0x6, 0xfb, 0x2, 0x40, 0xd4, 0x2, 0x4, 0x6, 0x7ff, 0x2, 0x6c0453b7, 0x7, 0x6, 0xee, 0x4, 0x0, 0xd14f, 0x9cd, 0xfffff0bc, 0x10000, 0x4, 0x2, 0x95, 0x5, 0x8, 0x100, 0x5, 0xfffff3c3, 0x6, 0x401, 0x0, 0xffffffff, 0x4, 0xec, 0x1, 0x7, 0x4, 0x9, 0x7, 0x7, 0x2, 0x400, 0x1ff, 0x8, 0x4, 0x1000, 0xeda5, 0xc7b, 0x3, 0x6, 0x6, 0x730, 0xfffffffa, 0x80000000, 0x7ff, 0x6, 0x9, 0x7, 0x48, 0x9b, 0x5, 0x51, 0xbf7, 0x1, 0x6, 0x9, 0x8, 0x2, 0x78, 0x5, 0x1, 0x2f, 0x8, 0x8, 0x1, 0x8001, 0x7f]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x1, 0x8, 0x5, 0x7fff, 0x0, 0x3, 0x1, 0x0, 0x9, 0x7bba3b63, 0x101, 0x6, 0x400, 0x2, 0x4, 0x8711, 0x4, 0x2c, 0xfffffff9, 0xc, 0x7, 0xd8dc, 0x8, 0x7, 0x7, 0x8, 0x522, 0x1ff, 0x3, 0x10001, 0x1, 0x7, 0x9, 0x7, 0x4, 0x7fff, 0x7, 0x7fffffff, 0x2cca, 0x7fffffff, 0x4, 0x66f, 0x3, 0xfffffc01, 0x8, 0x5, 0x3, 0xa, 0x1000, 0x1, 0x213c, 0x1, 0x7, 0xff, 0x1, 0x6, 0x9, 0x3ff, 0x7, 0x9, 0x4, 0x46dc6052, 0xb21, 0xffffffc1, 0x2, 0x6, 0x101, 0x9fd, 0x7, 0x9, 0xd, 0xc, 0x353, 0x4, 0x4, 0x43, 0x8, 0x1ff, 0x6, 0x28, 0x4, 0x7, 0x3, 0x2, 0x7, 0x0, 0x8, 0x5, 0xebfa, 0x8, 0x2, 0x7, 0x9a, 0x3, 0x5, 0x81, 0xbc1, 0xcaa8c3e6, 0x2, 0x81, 0x6, 0x10000000, 0x1, 0x7, 0x9, 0x3, 0x3, 0x7fff, 0x4, 0x3, 0x0, 0xfffffff8, 0x1, 0x5, 0x6, 0x7, 0x7fff, 0x4, 0x4, 0x8b, 0x4, 0x2, 0x9, 0x3, 0x4, 0x80000000, 0x7, 0x7ff, 0x0, 0x3f9f26e9, 0x8ca, 0x3, 0x29, 0x1, 0x2, 0x5, 0x6, 0x5, 0xe61, 0xc, 0x8, 0x10001, 0xca7, 0x7, 0x7, 0x200, 0x2, 0x3, 0x3, 0x3, 0xc8, 0x4, 0x9, 0x200, 0xbff, 0x3, 0x4, 0xc, 0x6, 0xe29a, 0x1000, 0x4, 0x55756530, 0x564f, 0x9, 0xffff6755, 0x2, 0x7fff, 0x65ef, 0xdd, 0x7, 0x6, 0x6, 0x5, 0x8, 0x9, 0x80, 0x1, 0xffffffff, 0x5, 0x3, 0x5, 0x9, 0x8001, 0x7, 0xe, 0x6, 0x7, 0xfffffff9, 0x4, 0x6, 0x8001, 0x8, 0x3, 0x10000, 0x100, 0x1ff, 0xf, 0x8c, 0xffff8000, 0x3, 0x1, 0x200, 0x3, 0x1, 0xd, 0x0, 0x4, 0x3, 0x6, 0x7, 0x0, 0x3, 0x5, 0x180, 0x5, 0x4, 0x7ff, 0x8, 0x7, 0x0, 0x7, 0x0, 0x5504, 0x0, 0x0, 0x7, 0xffffbf52, 0x9, 0xff, 0x6, 0xcee, 0x14, 0x6, 0x4, 0x4, 0xffff, 0xfffffff7, 0x9, 0x6, 0x81, 0x7, 0x0, 0x926e, 0x47b7, 0x0, 0x100, 0x1, 0x8, 0x1, 0xfffffff7, 0x8, 0xffff0001, 0xf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x4, 0x6b, 0x2, 0x0, {0x13, 0x1, 0x8, 0xb, 0x72, 0x5}, {0xa, 0x0, 0x5, 0x0, 0x100, 0x9}, 0x8, 0x3ff, 0x8}}]}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)=@ethtool_cmd={0x4e, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3, 0x77, 0x0, 0x8e7}}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f", 0x18) accept$alg(r6, 0x0, 0x0) 594.239095ms ago: executing program 4 (id=1139): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d80000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a3000000000000002000100000a0900010073797a7a"], 0xd4}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x7}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8081) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x9], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r5 = openat$zero(0xffffff9c, &(0x7f0000000580), 0x200080, 0x0) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f00000005c0)=0xe0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, &(0x7f0000000300)={0xc, &(0x7f0000000280)={0x0, 0x10, 0xe, {0xe, 0x21, "52e3dcd06845b9591ccd759f"}}, &(0x7f00000002c0)={0x0, 0x3, 0xf, @string={0xf, 0x3, "d0d4b0803282c6fdf3f663ba25"}}}, &(0x7f0000000540)={0x24, &(0x7f0000000340)={0x20, 0xe, 0xa, "c9ac1be1f1f9b878ae13"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xf7}, 0x0, &(0x7f0000000440)={0x20, 0x82, 0x3, '/ur'}, &(0x7f0000000480)={0x20, 0x83, 0x1, 'f'}, &(0x7f00000004c0)={0x20, 0x84, 0x2, "ee79"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "d8039c"}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c01000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000300002800c00028005000100840000000c00028005000100000000001400018008000100ac14141108000200ac1414bb0800074000000000a800068014000500fc01000000000000000000000000000114000400fc0200000000000000000000000000012c000380060002004e220000060001004e240000060002004e220000060002004e230000060002004e210000080001"], 0x12c}}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 585.197335ms ago: executing program 1 (id=1140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 524.129048ms ago: executing program 2 (id=1141): r0 = io_uring_setup(0x937, &(0x7f0000000140)={0x0, 0x32b3, 0x80, 0x0, 0x360}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="042210010000000000006c0a34d31a7a080007"], 0x13) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0xc0200) syz_emit_ethernet(0x6e, &(0x7f00000010c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @local, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0x4}, @timestamp_addr={0x44, 0x2c, 0x7f, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x401, r5, 0x0, 0xa002a0}, 0x38) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) io_setup(0xa, &(0x7f0000000140)=0x0) io_submit(r7, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000000080)={0x14}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) 402.209703ms ago: executing program 0 (id=1142): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) 313.290307ms ago: executing program 0 (id=1143): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000000f14010025bd7000fcdbdf25080001000200000008000300040000000c00450069625f7372707400"], 0x48}, 0x1, 0x0, 0x0, 0x20008005}, 0xc0) close(0x3) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_ttl={{0x14, 0x110, 0x2, 0xffffffff}}, @ip_tos_int={{0x14, 0x110, 0xd}}], 0x30}, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000040)="3700000013", 0x5}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x50) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x7, 0x7f, 0x1, 0x2}, 0x609d, 0x1, 0x8, 0xfffffffa, 0x2, 0x2, 0x18, 0x1, 0x6, 0xe, {0x3, 0xfffffeff, 0x5, 0x0, 0x9, 0x2}}}}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r2, 0x8070587c, &(0x7f00000003c0)) 193.110772ms ago: executing program 1 (id=1144): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000002000)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000008}, 0xc, &(0x7f0000001fc0)={&(0x7f0000000d00)={0x125c, 0x14, 0x400, 0x70bd2b, 0x25dfdbfc, {0x19, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x33, 0x1, "54b51a365d82b2b5f68a8abb6a069b01382e030d114be000d54fd2314745e44055c82a3e6fad693f2f5884b5fe7986"}, @INET_DIAG_REQ_BYTECODE={0x38, 0x1, "33bd5ac5c9c1bece79d9195165136ad5c53127dde3b8435fe913cc9334434c4850990090ef253d63954fba27945fff11ab4d5cc8"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "7201c2bba898ee2ad4543892d2e14536ca4e84bf633ec42a75dc4a1d4483c1d258c4ebf57ceb55b5350a8710647577c01fa337b344671c0b0444b803209453a008da37c8b0899410782c0a3e180b5b8c4ae2c95fd5033d32817d50982192b5d0af52514e9260ad747bb3ea84a005853baf400b8fc7a55f3d799b635cbe660a6b2cfcdc8ed51e286f24f03289572e64d3684b8210d66368f2fc99734d8fa7018f36d74ac7ea33d8b45715340c4427836a8136862992207414cac790b7d9aa068747899cc8fbc75157ac4d9e72dd8613b65d2cb2745d489c9582dcb68f33ef5cae"}, @INET_DIAG_REQ_BYTECODE={0xc8, 0x1, "5e00a93614be814e91c8dd2faf2d212a93c69c7bdfb9a563271b04552620f848accd054529ed6297ce8bfa9fca22ee1934bdc37c3d4c4d9c1f60a76f483a38f4618a42e3439e3028ae1092054bdd90797b1cf28fd7558e40c76195dbbd333db20850026f03dbd0138f38cd0000d2a45dfbeab3845d011d0181a0a8606b759ee4a9b6dd72b856fefb65dbbb83befbaf02f0f3a03680bd5824b8038715a77c02da50611cb802a56951bfcdd58be5ed996f4e5f5461c504b1b7b5e4e4d5e51f153fa06d8b48"}, @INET_DIAG_REQ_BYTECODE={0x29, 0x1, "6733cbf981c8577767e46889fcd4d60c24ac1f94c051ef091c2d724539665a2a48e7a65dc8"}]}, 0x125c}, 0x1, 0x0, 0x0, 0x60000810}, 0x40000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x80086601, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000cc0)={0x24, &(0x7f00000009c0)={0x40, 0x15, 0x1, "f8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = eventfd(0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000340), 0x0, 0x400200) name_to_handle_at(r7, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@reiserfs_6={0x18, 0x6, {0x9, 0x9e63, 0x9, 0x8000, 0x40, 0xbc99}}, &(0x7f0000000400), 0x0) r8 = eventfd(0x1) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) read$FUSE(r9, &(0x7f0000005140)={0x2020}, 0x2020) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r9, 0x0, r10, 0x0, 0x7c1c, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) io_submit(r4, 0x7, &(0x7f0000000780)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x8, r1, &(0x7f0000000080)="d730f2e9b3b1ad4cb22235c4d1a62dd955b9f9590250bb16", 0x18, 0x8000, 0x0, 0x3, r6}, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x9, r1, &(0x7f0000000200)="7ad1bf387b622c42c05500bb20ffe94d890880e44cfbdc4f45bcbb5374f6f534193049fa096182b86a7c365dd0c8993d0f17e89ecb6017a330d3ca64322be7e2e189842a21d8d910de8b687deb23354934815592bfae16275409c4f2329509fe3642ea28fc67187a040bd55b0dc8796b14077101d048e7fda40787285d778759f3a3b1558d585f550c60c7c4f5b93096fefd01f3b88fd158f0376b65a6c3df9c748bebdd43d873b001bef88e18fb56f6f3dcec2cc6e1c2022fec9910a8b9c084", 0xc0, 0x7, 0x0, 0x1, r3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x0, r3, &(0x7f0000000300)="ea19b629c5804f2c2f8e3c85646876467abb09f7f65677e0dc921007bd8c32f2ffa189663134a20b05017a7b294799e11dff65e6ab4053d18d4a67c1cb6833273be5d5df06630e6d1cde032d094da7", 0x4f, 0x120, 0x0, 0x0, r7}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f0000000440)="54a04352a390f00c5bb68589f3d31215e0c7d7769c1c68a239fad538620cecf5711c5a5d2b3a5864189a96631a61215c8c0d56783b01005f8a897d9f67627204550d96f8293de94c412166037bce4894418575a390db817f8dd2d0e6322cf077e3a6a8bcee5723ab71984d7c560e16eac67f36ad1a6a4d5383bae16d1149f8f4365dfbd2ce4270a49c6461a7b52a7adb90055b0090ed7f5e4831cbe174471a341bca2d619cfa88fda3ae1f84a28c", 0xae, 0xffffffffffffffff, 0x0, 0x1, r8}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x44f, r0, &(0x7f0000000540)="b7f857d3d87176e9906229e4ffd5fed8af94e4924cc8f658c819f2aae732422aa725b6336d524785acbdb078601ee3c6c1b6e60f255ff1dcdc2e826b6a32cb4f0717c4bcab0cffc574488f9d998d8c1779dd33aac90206a241a196b27c3df5532d5f3412fb35c0dbb21d4783ffc28e27c1e5a400b4bd6ae950f19ccc36", 0x7d, 0x0, 0x0, 0x3, r10}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000000600)="932ad4cae499c86b16c583d7c6b2e1660b9dbc207512a9225a11576311f57df69dc541eea198ec6eadb0ce86b5c9df784163408ebbd55c7ace2bd21ba0073a355081576428175c0d48a14721866239ae4e8fdcfd8ece03db665635eebbc5c38b4a8257c55f562c351354b62241030e473a3183243cd2f418d7e36c0a649bf538fc957b069fb9caddffb62efd5b2bc215993dd79b4fe116a35d699175892a490af869ba97904c13775a6eef7549b8db55089051d81fe1e58effa83c6c52b0a3e6e77271dbbe240adaf3d4d9268211099ebf67bcd48eab849de73dcc1e0adf27cb14760c25895e168a6567fcd0e7496bdd426b", 0xf2, 0xe, 0x0, 0x1, r11}]) 26.115379ms ago: executing program 3 (id=1145): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_setup(0x8, &(0x7f0000000600)=0x0) remap_file_pages(&(0x7f0000903000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x400000}]) 0s ago: executing program 0 (id=1146): syz_usb_connect$cdc_ecm(0x0, 0x55, &(0x7f0000006040)=ANY=[@ANYBLOB="12010000020000202505a1a440000000010109024300010100000009040000120206000005240600000524001400"], 0x0) syz_create_resource$binfmt(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x18}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) fstatfs(0xffffffffffffffff, &(0x7f00000000c0)=""/7) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000f000f00"}}}]}, 0x48}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0xfffff63d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28049, 0xd009}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x0) kernel console output (not intermixed with test programs): : mce write submit urb error = -90 [ 169.748025][ T5513] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.280'. [ 169.779054][ T4372] usb 5-1: USB disconnect, device number 2 [ 169.805640][ T22] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 169.917095][ T22] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 169.920856][ T22] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 169.962809][ T22] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 170.000244][ T22] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 170.025458][ T22] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 170.055522][ T22] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 170.086452][ T22] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 170.115436][ T22] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 170.121549][ T126] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 170.145512][ T22] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 170.175507][ T22] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 170.205419][ T22] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 170.235446][ T22] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 170.268946][ T22] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 170.268975][ T22] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 170.365158][ T126] usb 4-1: USB disconnect, device number 3 [ 170.875614][ T126] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 170.982122][ T5540] loop1: detected capacity change from 0 to 4096 [ 171.085496][ T126] usb 4-1: Using ep0 maxpacket: 32 [ 171.106013][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 171.106049][ T126] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xB7, skipping [ 171.113926][ T126] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 171.113958][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.113981][ T126] usb 4-1: Product: syz [ 171.113996][ T126] usb 4-1: Manufacturer: syz [ 171.114012][ T126] usb 4-1: SerialNumber: syz [ 171.130932][ T126] usb 4-1: config 0 descriptor?? [ 171.174345][ T5333] udevd[5333]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.276838][ T126] usb 4-1: USB disconnect, device number 4 [ 174.303517][ T4275] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 174.335064][ T22] usb 3-1: USB disconnect, device number 3 [ 174.365405][ T4275] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 176.114091][ T5574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.299'. [ 176.648699][ T5587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.305'. [ 176.709977][ T5587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.720571][ T5589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'. [ 176.799668][ T5591] loop3: detected capacity change from 0 to 4096 [ 176.822563][ T5589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 178.415131][ T5587] netlink: 'syz.1.305': attribute type 10 has an invalid length. [ 178.462698][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.470846][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.481950][ T4277] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 178.493704][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.500953][ T5587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.509519][ T4277] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 178.509552][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.523684][ T5587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.554083][ T5587] device bridge0 entered promiscuous mode [ 178.560742][ T5587] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 178.708294][ T5598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.312'. [ 178.779641][ T5604] tipc: Trying to set illegal importance in message [ 179.068550][ T5614] netlink: 36 bytes leftover after parsing attributes in process `syz.3.315'. [ 179.281423][ T5617] device syzkaller0 entered promiscuous mode [ 179.480449][ T5600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.489773][ T5600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.564145][ T5600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.599036][ T5600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.627116][ T5600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.638023][ T5600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.648498][ T5600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.659893][ T5600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.672550][ T5600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.699042][ T5600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.757618][ T5600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.806581][ T5600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.874417][ T5600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.894208][ T5600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.034985][ T5637] netlink: 28 bytes leftover after parsing attributes in process `syz.4.323'. [ 180.177050][ T5639] tipc: Trying to set illegal importance in message [ 180.675677][ T5648] device syzkaller0 entered promiscuous mode [ 180.781964][ T5660] fuse: Unknown parameter '0x0000000000000003' [ 180.872168][ T5182] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 181.007577][ T5664] netlink: 36 bytes leftover after parsing attributes in process `syz.3.335'. [ 181.055575][ T5182] usb 3-1: Using ep0 maxpacket: 32 [ 181.062831][ T5182] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.064640][ T5667] binder_alloc: 5666: pid 5666 spamming oneway? 2 buffers allocated for a total size of 5120 [ 181.085341][ T126] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 181.096928][ T5182] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 181.107323][ T5182] usb 3-1: config 0 interface 0 has no altsetting 0 [ 181.114968][ T5667] binder_alloc: 5666: pid 5666 spamming oneway? 3 buffers allocated for a total size of 5216 [ 181.120344][ T5182] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 181.167748][ T5182] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.181739][ T5182] usb 3-1: Product: syz [ 181.188057][ T5182] usb 3-1: Manufacturer: syz [ 181.192863][ T5182] usb 3-1: SerialNumber: syz [ 181.200841][ T5182] usb 3-1: config 0 descriptor?? [ 181.237517][ T5670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.336'. [ 181.260895][ T5672] vivid-001: ================= START STATUS ================= [ 181.275539][ T5672] vivid-001: Radio HW Seek Mode: Bounded [ 181.282312][ T5672] vivid-001: Radio Programmable HW Seek: false [ 181.295334][ T5672] vivid-001: RDS Rx I/O Mode: [ 181.295409][ T126] usb 5-1: Using ep0 maxpacket: 16 [ 181.297182][ T5672] Block I/O [ 181.316513][ T126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.327730][ T5672] vivid-001: Generate RBDS Instead of RDS: false [ 181.342341][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.342532][ T5672] vivid-001: RDS Reception: [ 181.355445][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 181.370834][ T5672] true [ 181.370861][ T5672] vivid-001: RDS Program Type: 0 inactive [ 181.370899][ T5672] vivid-001: RDS PS Name: [ 181.389283][ T126] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 181.406602][ T5672] inactive [ 181.421849][ T126] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.426392][ T5672] vivid-001: RDS Radio Text: [ 181.440321][ T126] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 181.459360][ T126] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 181.469616][ T126] usb 5-1: Manufacturer: syz [ 181.475537][ T5672] inactive [ 181.481555][ T126] usb 5-1: config 0 descriptor?? [ 181.493521][ T5672] vivid-001: RDS Traffic Announcement: false inactive [ 181.502253][ T5672] vivid-001: RDS Traffic Program: false inactive [ 181.522051][ T5672] vivid-001: RDS Music: false inactive [ 181.530934][ T5672] vivid-001: ================== END STATUS ================== [ 181.691587][ T5182] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 181.955880][ T126] rc_core: IR keymap rc-hauppauge not found [ 181.965596][ T126] Registered IR keymap rc-empty [ 181.992467][ T126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 182.065413][ T126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 182.102181][ T5182] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 182.111609][ T126] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 182.144329][ T5182] gs_usb: probe of 3-1:0.0 failed with error -71 [ 182.155799][ T126] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 182.181425][ T5182] usb 3-1: USB disconnect, device number 4 [ 182.251246][ T126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 182.285557][ T126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 182.315618][ T126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 182.345541][ T126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 182.375623][ T126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 182.415631][ T126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 182.475701][ T126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 182.525519][ T126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 182.555581][ T126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 182.568836][ T5684] netlink: 'syz.1.338': attribute type 10 has an invalid length. [ 182.585775][ T126] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 182.616692][ T126] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 182.645333][ T126] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 182.717839][ T126] usb 5-1: USB disconnect, device number 3 [ 182.824008][ T5703] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 182.850147][ T5703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.862955][ T5703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.928299][ T5703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.949189][ T5703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.965023][ T5703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.983898][ T5703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.994754][ T5703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.060905][ T5703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.081054][ T5703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.100460][ T5703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.112632][ T5703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.131607][ T5703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.142850][ T5703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.173261][ T5703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.455149][ T5712] device syzkaller0 entered promiscuous mode [ 185.612174][ T5739] device syzkaller0 entered promiscuous mode [ 186.046069][ T5758] fuse: Unknown parameter '0x0000000000000003' [ 186.395598][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.2 [ 186.405685][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.2 [ 186.694674][ T5781] device syzkaller0 entered promiscuous mode [ 186.985021][ T5786] device syzkaller0 entered promiscuous mode [ 187.119580][ T5793] input: syz1 as /devices/virtual/input/input7 [ 187.292929][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.323120][ T5795] loop1: detected capacity change from 0 to 4096 [ 187.356234][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.423362][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.440480][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.533416][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.563953][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.613202][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.641979][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.736536][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.846952][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.947327][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.062831][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.165954][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.269165][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.400313][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.519015][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.640028][ T4275] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 188.651060][ T4275] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 189.066459][ T5816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'. [ 189.292969][ T5821] device syzkaller0 entered promiscuous mode [ 189.403722][ T5824] device syzkaller0 entered promiscuous mode [ 189.486004][ T5828] netlink: 120 bytes leftover after parsing attributes in process `syz.2.383'. [ 189.851629][ T5836] loop2: detected capacity change from 0 to 4096 [ 190.855619][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.863382][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.870392][ T4283] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 190.870476][ T4283] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 190.944646][ T5852] fuse: Unknown parameter '0x0000000000000003' [ 191.315426][ T4686] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 191.535545][ T4686] usb 2-1: Using ep0 maxpacket: 16 [ 191.547253][ T4686] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.558035][ T4686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.570510][ T4686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 191.580546][ T4686] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 191.590820][ T4686] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.606266][ T4686] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 191.615622][ T4686] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 191.623735][ T4686] usb 2-1: Manufacturer: syz [ 191.632833][ T4686] usb 2-1: config 0 descriptor?? [ 191.723164][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.780692][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.006221][ T4686] rc_core: IR keymap rc-hauppauge not found [ 192.012323][ T4686] Registered IR keymap rc-empty [ 192.027783][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.055408][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.086010][ T4686] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 192.107597][ T4686] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 192.126525][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.165887][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.217722][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.265481][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.296132][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.418141][ T5826] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.427967][ T5826] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.437204][ T5826] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.446782][ T5826] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.455724][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.485441][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.525437][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.565393][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.605523][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.646908][ T4686] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 192.660917][ T4686] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 192.921187][ T5843] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 192.937193][ T5843] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 192.968843][ T5843] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 193.018802][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.065116][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.082229][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.092937][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.135375][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.155282][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.176703][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.206629][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.216664][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.227325][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.238831][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.249400][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.332729][ T5870] netlink: 'syz.3.391': attribute type 1 has an invalid length. [ 193.361938][ T5870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.369289][ T5870] IPv6: NLM_F_CREATE should be set when creating new route [ 193.385053][ T5849] usb 2-1: USB disconnect, device number 2 [ 193.395600][ T5872] netlink: 'syz.3.391': attribute type 1 has an invalid length. [ 193.424695][ T5872] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.807904][ T5884] tipc: Enabled bearer , priority 0 [ 193.838567][ T5885] device syzkaller0 entered promiscuous mode [ 193.852299][ T5884] tipc: Resetting bearer [ 193.869661][ T5883] tipc: Disabling bearer [ 194.319048][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.325554][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.504901][ T5929] device syzkaller0 entered promiscuous mode [ 195.541612][ T5931] fuse: Unknown parameter '0x0000000000000003' [ 195.905418][ T5182] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 196.115096][ T5936] device syzkaller0 entered promiscuous mode [ 196.125391][ T5182] usb 4-1: Using ep0 maxpacket: 16 [ 196.133187][ T5182] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.193357][ T5182] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.254206][ T5182] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 196.274389][ T5182] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 196.290634][ T5182] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.335131][ T5182] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 196.369866][ T5182] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 196.383987][ T5182] usb 4-1: Manufacturer: syz [ 196.405102][ T5182] usb 4-1: config 0 descriptor?? [ 196.699070][ T5944] loop0: detected capacity change from 0 to 4096 [ 198.975640][ T5182] rc_core: IR keymap rc-hauppauge not found [ 198.992792][ T5182] Registered IR keymap rc-empty [ 199.050663][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.070197][ T4271] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 199.090485][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.105311][ T4271] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 199.150349][ T5182] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 199.199654][ T5182] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 199.244108][ T5965] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 199.339924][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.393356][ T5966] netlink: 'syz.0.422': attribute type 10 has an invalid length. [ 199.417419][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.458620][ T5971] loop4: detected capacity change from 0 to 256 [ 199.467295][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.491183][ T5971] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 199.514175][ T26] audit: type=1800 audit(1778597370.391:12): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.423" name="file1" dev="loop4" ino=1048605 res=0 errno=0 [ 199.571560][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.675564][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.715454][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.755557][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.805663][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.840543][ T5966] team0: Port device netdevsim0 added [ 199.846346][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.880668][ T5968] netlink: 'syz.2.421': attribute type 10 has an invalid length. [ 199.889252][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 199.937255][ T5182] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 200.003963][ T5182] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 200.092210][ T5182] usb 4-1: USB disconnect, device number 5 [ 200.223916][ T5983] device syzkaller0 entered promiscuous mode [ 200.577956][ T5994] binder_alloc: 5989: binder_alloc_buf, no vma [ 201.422585][ T6005] netlink: 'syz.2.432': attribute type 1 has an invalid length. [ 201.471197][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'. [ 201.515413][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 201.521503][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 201.527638][ T4276] Bluetooth: hci1: command 0x0406 tx timeout [ 201.527660][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 201.533679][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 201.574108][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.432'. [ 201.596318][ T6005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.859172][ T4279] Bluetooth: hci2: hardware error 0x02 [ 202.010820][ T6009] bond1: (slave gretap1): making interface the new active one [ 202.044551][ T6009] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 202.088946][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 202.369656][ T6022] netlink: 'syz.1.435': attribute type 1 has an invalid length. [ 202.403452][ T6022] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.503512][ T6025] device syzkaller0 entered promiscuous mode [ 202.746062][ T6032] netlink: 120 bytes leftover after parsing attributes in process `syz.2.439'. [ 202.915404][ T126] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 203.151725][ T126] usb 2-1: unable to get BOS descriptor or descriptor too short [ 203.172416][ T6041] loop3: detected capacity change from 0 to 8 [ 203.207042][ T126] usb 2-1: not running at top speed; connect to a high speed hub [ 203.267221][ T6041] SQUASHFS error: xz decompression failed, data probably corrupt [ 203.275793][ T6041] SQUASHFS error: Failed to read block 0x108: -5 [ 203.282225][ T6041] SQUASHFS error: Unable to read metadata cache entry [106] [ 203.289912][ T6041] SQUASHFS error: Unable to read inode 0x11f [ 203.635792][ T126] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.744979][ T126] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.789499][ T126] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 203.847613][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.869295][ T126] usb 2-1: Product: syz [ 203.898605][ T126] usb 2-1: Manufacturer: syz [ 203.909909][ T126] usb 2-1: SerialNumber: syz [ 203.915910][ T4279] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 203.951292][ T6030] netlink: 'syz.0.438': attribute type 10 has an invalid length. [ 204.079313][ T6030] team0: Port device macvlan1 added [ 204.207475][ T6051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.254220][ T6051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.405855][ T26] audit: type=1326 audit(1778597375.281:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.447" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4377b9cdd9 code=0x7ffc0000 [ 204.478370][ T26] audit: type=1326 audit(1778597375.291:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.447" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f4377b9cdd9 code=0x7ffc0000 [ 204.630188][ T6055] netlink: 'syz.0.447': attribute type 1 has an invalid length. [ 204.643355][ T26] audit: type=1326 audit(1778597375.291:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.447" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4377b9cdd9 code=0x7ffc0000 [ 204.775957][ T126] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 204.791737][ T126] usb 2-1: 3:0: cannot get min/max values for control 2 (id 3) [ 204.800406][ T126] usb 2-1: 3:0: cannot get min/max values for control 3 (id 3) [ 204.836830][ T126] usb 2-1: 3:0: cannot get min/max values for control 4 (id 3) [ 204.856502][ T126] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 204.869678][ T26] audit: type=1326 audit(1778597375.301:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.447" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f4377b9cdd9 code=0x7ffc0000 [ 204.934490][ T126] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 204.960944][ T126] usb 2-1: 3:0: cannot get min/max values for control 8 (id 3) [ 204.989846][ T26] audit: type=1326 audit(1778597375.301:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.447" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4377b9cdd9 code=0x7ffc0000 [ 205.036660][ T6065] device syzkaller0 entered promiscuous mode [ 205.050417][ T126] usb 2-1: 3:0: cannot get min/max values for control 3 (id 3) [ 205.074421][ T126] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 205.098199][ T26] audit: type=1326 audit(1778597375.311:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.447" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f4377b9cdd9 code=0x7ffc0000 [ 205.142147][ T6067] netlink: 'syz.3.449': attribute type 1 has an invalid length. [ 205.327092][ T126] usb 2-1: USB disconnect, device number 3 [ 205.569223][ T26] audit: type=1326 audit(1778597375.311:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.447" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4377b9cdd9 code=0x7ffc0000 [ 205.783501][ T26] audit: type=1326 audit(1778597375.311:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.447" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f4377b9cdd9 code=0x7ffc0000 [ 205.807321][ T26] audit: type=1326 audit(1778597375.401:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.447" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4377b9cdd9 code=0x7ffc0000 [ 205.831542][ T26] audit: type=1326 audit(1778597375.421:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.447" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4377b9cdd9 code=0x7ffc0000 [ 205.856030][ T26] audit: type=1326 audit(1778597375.431:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.447" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4377b9cdd9 code=0x7ffc0000 [ 205.879983][ T26] audit: type=1326 audit(1778597375.451:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.0.447" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4377b9cdd9 code=0x7ffc0000 [ 205.926533][ T6067] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.042293][ T4447] udevd[4447]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.138236][ T6079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.455'. [ 206.854390][ T6086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.942692][ T6086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.968752][ T6095] ±ÿª: renamed from lo [ 207.057358][ T6100] netlink: 'syz.4.457': attribute type 10 has an invalid length. [ 207.103435][ T6100] team0: Port device macvlan1 added [ 208.452202][ T6120] binder_alloc: 6119: pid 6119 spamming oneway? 2 buffers allocated for a total size of 5120 [ 208.538171][ T6122] binder_alloc: 6119: pid 6119 spamming oneway? 3 buffers allocated for a total size of 5216 [ 208.744347][ T6127] device syzkaller0 entered promiscuous mode [ 208.893037][ T6132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.470'. [ 209.110881][ T6137] fuse: Unknown parameter '0x0000000000000003' [ 209.395340][ T4352] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 209.589096][ T4352] usb 5-1: Using ep0 maxpacket: 16 [ 209.599468][ T4352] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.660859][ T4352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.760104][ T4352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 209.799848][ T4352] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 209.848285][ T4352] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.908526][ T4352] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 209.974855][ T4352] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 210.002761][ T4352] usb 5-1: Manufacturer: syz [ 210.043370][ T4352] usb 5-1: config 0 descriptor?? [ 210.605370][ T4352] rc_core: IR keymap rc-hauppauge not found [ 210.618077][ T4352] Registered IR keymap rc-empty [ 210.716660][ T4352] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.745442][ T4352] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.785412][ T4352] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 210.790903][ T4352] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 210.869833][ T4352] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.915648][ T4352] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.945389][ T4352] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.975355][ T4352] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 211.007047][ T4352] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 211.036798][ T4352] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 211.069616][ T4352] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 211.095394][ T4352] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 211.125357][ T4352] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 211.155756][ T4352] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 211.205373][ T4352] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 211.205400][ T4352] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 212.052797][ T4352] usb 5-1: USB disconnect, device number 4 [ 213.275902][ T6170] binder_alloc: 6169: pid 6169 spamming oneway? 2 buffers allocated for a total size of 5120 [ 213.328318][ T6176] binder_alloc: 6169: pid 6169 spamming oneway? 3 buffers allocated for a total size of 5216 [ 213.417675][ T6177] device syzkaller0 entered promiscuous mode [ 213.469859][ T6162] netlink: 'syz.2.477': attribute type 10 has an invalid length. [ 213.552694][ T6184] netlink: 100 bytes leftover after parsing attributes in process `syz.3.485'. [ 213.575861][ T5182] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 213.787432][ T5182] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 213.818856][ T5182] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.840329][ T5182] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.866371][ T5182] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 213.911487][ T5182] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 213.965873][ T5182] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 214.150581][ T5182] usb 2-1: Manufacturer: syz [ 214.199992][ T5182] usb 2-1: config 0 descriptor?? [ 214.812895][ T5182] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 214.840165][ T5182] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 214.886570][ T5182] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 216.493346][ T6200] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 216.503575][ T6200] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 216.513583][ T6200] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 216.887804][ T6214] fuse: Unknown parameter '0x0000000000000003' [ 216.917447][ T6212] device syzkaller0 entered promiscuous mode [ 216.952334][ T2119] usb 2-1: USB disconnect, device number 4 [ 217.195569][ T5182] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 217.405384][ T5182] usb 5-1: Using ep0 maxpacket: 16 [ 217.418110][ T5182] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.815393][ T5182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.840984][ T5182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 217.942726][ T5182] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 217.987412][ T5182] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.014790][ T6229] binder: BINDER_SET_CONTEXT_MGR already set [ 218.052973][ T6229] binder: 6228:6229 ioctl 4018620d 200000000040 returned -16 [ 218.064305][ T5182] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 218.116126][ T5182] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 218.146804][ T5182] usb 5-1: Manufacturer: syz [ 218.166678][ T5182] usb 5-1: config 0 descriptor?? [ 218.224652][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 218.360882][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 218.772341][ T6224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.886724][ T5182] rc_core: IR keymap rc-hauppauge not found [ 218.886740][ T5182] Registered IR keymap rc-empty [ 218.886806][ T5182] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 218.925490][ T5182] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 218.958598][ T5182] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 218.959407][ T5182] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 218.977780][ T5182] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 219.012990][ T5182] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 219.042138][ T5182] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 219.075490][ T5182] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 219.105559][ T5182] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 219.146516][ T5182] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 219.185533][ T5182] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 219.215435][ T5182] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 219.236474][ T6258] device syzkaller0 entered promiscuous mode [ 219.250510][ T5182] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 219.275787][ T5182] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 219.307054][ T5182] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 219.307082][ T5182] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 219.881495][ T6255] netlink: 'syz.1.502': attribute type 10 has an invalid length. [ 220.013885][ T6269] device syzkaller0 entered promiscuous mode [ 220.229787][ T4317] usb 5-1: USB disconnect, device number 5 [ 221.419497][ T6270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.505'. [ 222.057771][ T6288] device syzkaller0 entered promiscuous mode [ 224.734906][ T6271] syz.0.505 (6271): drop_caches: 3 [ 225.796275][ T6324] fuse: Unknown parameter '0x0000000000000003' [ 227.200983][ T6352] netlink: 88 bytes leftover after parsing attributes in process `syz.2.532'. [ 229.056444][ T6374] device syzkaller0 entered promiscuous mode [ 229.936856][ T6403] netlink: 88 bytes leftover after parsing attributes in process `syz.2.544'. [ 232.161314][ T6372] syz.1.533 (6372): drop_caches: 3 [ 232.176722][ T6411] device syzkaller0 entered promiscuous mode [ 232.216029][ T6423] fuse: Unknown parameter '0x0000000000000003' [ 232.506893][ T5182] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 232.715490][ T5182] usb 4-1: Using ep0 maxpacket: 16 [ 232.723022][ T5182] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.785189][ T5182] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.878384][ T5182] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 232.926720][ T5182] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 232.966595][ T5182] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.009123][ T5182] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 233.043659][ T5182] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 233.095194][ T5182] usb 4-1: Manufacturer: syz [ 233.144316][ T5182] usb 4-1: config 0 descriptor?? [ 233.488676][ T5182] rc_core: IR keymap rc-hauppauge not found [ 233.494785][ T5182] Registered IR keymap rc-empty [ 233.500409][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.538682][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.578374][ T5182] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 233.603437][ T5182] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 233.629171][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.672696][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.717593][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.758556][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.800486][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.841621][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.875331][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.915546][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.945546][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.984185][ T5182] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 234.016735][ T5182] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 234.016794][ T5182] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 235.693864][ T2119] usb 4-1: USB disconnect, device number 6 [ 235.991579][ T6472] netlink: 88 bytes leftover after parsing attributes in process `syz.1.557'. [ 236.875152][ T4279] Bluetooth: hci3: hardware error 0x02 [ 237.131191][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.285323][ T5182] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 238.008214][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.018928][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.029614][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.039656][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.050308][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.061381][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.072251][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.082350][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.094639][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.105849][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.120885][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.220475][ T5182] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 238.273483][ T5182] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.339514][ T5182] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 238.369958][ T5182] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.418866][ T5182] usb 3-1: config 0 descriptor?? [ 238.640323][ T6492] device syzkaller0 entered promiscuous mode [ 238.860069][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 238.907874][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 238.938956][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 238.965504][ T4279] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 238.966885][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 238.972180][ T4279] Bluetooth: hci3: hardware error 0x02 [ 239.059887][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 239.077707][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 239.124420][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 239.167936][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 239.223215][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 239.267022][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 239.311568][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x2 [ 239.356978][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 239.401211][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 239.450299][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 239.501026][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 239.543981][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 239.580902][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 239.623019][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 239.669643][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 239.718313][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 239.781295][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 239.831738][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 239.870691][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 239.911259][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 239.955515][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 239.992454][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.034856][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.081145][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.098795][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.155335][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.193250][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.232148][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.271625][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.303983][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.335554][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.373468][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.409459][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.444142][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.482210][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.499946][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.520286][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.540564][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.580749][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.601484][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.615286][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.622650][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.630254][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.637865][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.646105][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.653452][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.662742][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.671060][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.678724][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x1 [ 240.695376][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.702580][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.716424][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.723621][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.731103][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.738522][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.746726][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.755173][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.762710][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.770157][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x2 [ 240.777891][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.785498][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.792698][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.800183][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.812223][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.822350][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.831179][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.842871][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.857408][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.866925][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.877587][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.887662][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.894865][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.904495][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.912034][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.919744][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.927486][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.935545][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.945536][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.954227][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.961920][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.975357][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.982543][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 240.990137][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.003105][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.012355][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.022156][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.031600][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.044075][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.045515][ T4279] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 241.065365][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.079126][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.090545][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.109054][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.130154][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.151563][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.165147][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.174323][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.182941][ T6536] fuse: Unknown parameter '0x0000000000000003' [ 241.190936][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.203548][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.213522][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.222378][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.229811][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.239651][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.246881][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.254045][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.262535][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.269805][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.277067][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.284234][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.291545][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.298798][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.306039][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.313212][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.320472][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.327712][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.334887][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.342149][ T5182] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 241.349445][ T5182] kovaplus 0003:1E7D:2D50.0002: collection stack underflow [ 241.357407][ T5182] kovaplus 0003:1E7D:2D50.0002: item 0 0 0 12 parsing failed [ 241.366361][ T5182] kovaplus 0003:1E7D:2D50.0002: parse failed [ 241.372519][ T5182] kovaplus: probe of 0003:1E7D:2D50.0002 failed with error -22 [ 241.400350][ T5182] usb 3-1: USB disconnect, device number 5 [ 241.775372][ T5182] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 241.975384][ T5182] usb 3-1: Using ep0 maxpacket: 16 [ 241.989781][ T5182] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.000180][ T5182] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 242.015054][ T5182] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 242.024906][ T5182] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 242.034713][ T5182] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.049397][ T5182] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 242.058859][ T5182] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 242.067114][ T5182] usb 3-1: Manufacturer: syz [ 242.082186][ T5182] usb 3-1: config 0 descriptor?? [ 242.415359][ T5182] rc_core: IR keymap rc-hauppauge not found [ 242.421722][ T5182] Registered IR keymap rc-empty [ 242.432248][ T5182] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.469125][ T5182] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.508726][ T5182] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 242.535646][ T5182] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 242.566371][ T5182] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.595506][ T5182] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.626704][ T5182] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.666653][ T5182] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.705457][ T5182] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.738897][ T5182] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.775457][ T5182] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.816597][ T5182] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.845468][ T5182] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.875513][ T5182] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.909246][ T5182] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 242.932570][ T5182] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 243.228550][ T5182] usb 3-1: USB disconnect, device number 6 [ 243.396248][ T6541] netlink: 88 bytes leftover after parsing attributes in process `syz.1.569'. [ 244.782206][ T4279] Bluetooth: hci4: hardware error 0x02 [ 244.856252][ T6551] block device autoloading is deprecated and will be removed. [ 244.974885][ T6551] netlink: 'syz.0.571': attribute type 4 has an invalid length. [ 245.115577][ T6575] netlink: 'syz.0.571': attribute type 4 has an invalid length. [ 245.724653][ T6592] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.745192][ T6592] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.839377][ T6594] netlink: 'syz.2.584': attribute type 1 has an invalid length. [ 245.888380][ T5849] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 245.954901][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.584'. [ 246.072937][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.584'. [ 246.107424][ T5849] usb 5-1: not running at top speed; connect to a high speed hub [ 246.119028][ T6594] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.149178][ T5849] usb 5-1: New USB device found, idVendor=0499, idProduct=100a, bcdDevice= 0.40 [ 246.195543][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.214188][ T5849] usb 5-1: Product: syz [ 246.247489][ T5849] usb 5-1: Manufacturer: syz [ 246.269077][ T5849] usb 5-1: SerialNumber: syz [ 246.726836][ T5849] usb 5-1: BAAD SPEAKERPHONE c_chmask mismatch [ 246.778537][ T5849] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 246.845066][ T4447] udevd[4447]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.865093][ T5849] usb 5-1: USB disconnect, device number 6 [ 246.875385][ T4279] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 247.265307][ T5849] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 248.144269][ T5849] usb 5-1: config 0 has no interfaces? [ 248.154896][ T5849] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 248.186887][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.194961][ T5849] usb 5-1: Product: syz [ 248.199877][ T5849] usb 5-1: Manufacturer: syz [ 248.204681][ T5849] usb 5-1: SerialNumber: syz [ 248.216433][ T5849] usb 5-1: config 0 descriptor?? [ 248.454432][ T6611] device syzkaller1 entered promiscuous mode [ 248.536340][ T5849] usb 5-1: USB disconnect, device number 7 [ 248.730115][ T6613] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 249.034143][ T6620] device syzkaller0 entered promiscuous mode [ 249.124821][ T6618] loop2: detected capacity change from 0 to 4096 [ 249.217074][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 252.244264][ T4283] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 252.276187][ T4283] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 255.228220][ T6660] device syzkaller1 entered promiscuous mode [ 255.523588][ T6671] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 255.670012][ T6675] netlink: 68 bytes leftover after parsing attributes in process `syz.3.605'. [ 255.754245][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.606'. [ 255.764114][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.777110][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.416600][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.424170][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.950796][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.005762][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.489117][ T6685] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.498251][ T6685] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.507589][ T6685] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.516691][ T6685] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.666567][ T6685] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.675858][ T6685] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.684840][ T6685] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.693807][ T6685] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.900964][ T6691] device syzkaller0 entered promiscuous mode [ 258.943652][ T6703] tipc: Enabling of bearer rejected, failed to enable media [ 260.213292][ T6737] netlink: 88 bytes leftover after parsing attributes in process `syz.0.615'. [ 262.023172][ T6750] loop1: detected capacity change from 0 to 256 [ 262.083193][ T6750] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 262.117665][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 262.117712][ T26] audit: type=1800 audit(1778597433.001:47): pid=6750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.617" name="file1" dev="loop1" ino=1048607 res=0 errno=0 [ 263.311336][ T6764] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.371354][ T6764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.418993][ T6764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.503099][ T6764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.565567][ T6764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.732303][ T6764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.847203][ T6764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.374397][ T6770] netlink: 'syz.0.625': attribute type 1 has an invalid length. [ 264.416683][ T6773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.625'. [ 264.468451][ T6773] 8021q: adding VLAN 0 to HW filter on device bond3 [ 264.586962][ T6787] tipc: Trying to set illegal importance in message [ 265.183483][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.191159][ T6780] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.161126][ T6780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.207626][ T6780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.591806][ T6780] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.600846][ T6780] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.610282][ T6780] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.619483][ T6780] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.788914][ T6788] netlink: 'syz.3.629': attribute type 10 has an invalid length. [ 266.875962][ T6788] team0: Port device macvlan1 added [ 267.365709][ T6825] loop2: detected capacity change from 0 to 256 [ 267.515573][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.2 [ 267.525400][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.2 [ 267.838378][ T6825] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 267.871107][ T26] audit: type=1800 audit(1778597438.751:48): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.633" name="file1" dev="loop2" ino=1048609 res=0 errno=0 [ 268.588042][ T6834] netlink: 'syz.2.635': attribute type 4 has an invalid length. [ 268.617171][ T6834] netlink: 'syz.2.635': attribute type 4 has an invalid length. [ 268.719855][ T6840] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 270.035534][ T6855] tipc: Enabling of bearer rejected, failed to enable media [ 270.072700][ T6859] netlink: 'syz.1.641': attribute type 1 has an invalid length. [ 270.144901][ T6868] tipc: Trying to set illegal importance in message [ 270.223897][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.273962][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.302152][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.318495][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.484564][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.492292][ T6858] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.715113][ T6858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.803067][ T6858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.232543][ T6870] Set syz1 is full, maxelem 65536 reached [ 273.392692][ T6858] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.401761][ T6858] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.411098][ T6858] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.420475][ T6858] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.699102][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.641'. [ 273.711153][ T6866] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.970856][ T6900] loop3: detected capacity change from 0 to 256 [ 273.998353][ T6900] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 274.028540][ T26] audit: type=1800 audit(1778597444.911:49): pid=6900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.645" name="file1" dev="loop3" ino=1048611 res=0 errno=0 [ 274.272776][ T6873] bond3: (slave gretap1): making interface the new active one [ 274.350583][ T6873] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 274.984447][ T6888] device syzkaller0 entered promiscuous mode [ 275.011052][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 277.973198][ T6911] netlink: 'syz.1.647': attribute type 10 has an invalid length. [ 278.867876][ T6948] netlink: 'syz.0.653': attribute type 4 has an invalid length. [ 278.931950][ T6952] netlink: 'syz.0.653': attribute type 4 has an invalid length. [ 278.992428][ T6948] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 279.000639][ T6947] loop1: detected capacity change from 0 to 4096 [ 279.007642][ T6953] device syzkaller0 entered promiscuous mode [ 279.355728][ T6820] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 280.217579][ T6959] netlink: 68 bytes leftover after parsing attributes in process `syz.0.658'. [ 280.283105][ T6961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.660'. [ 280.329721][ T4275] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 280.344056][ T4275] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 280.355724][ T6820] usb 5-1: Using ep0 maxpacket: 32 [ 280.363232][ T6820] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 280.395536][ T6820] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 280.427037][ T6820] usb 5-1: config 0 interface 0 has no altsetting 0 [ 280.462640][ T6820] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 280.513603][ T6820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.533921][ T6820] usb 5-1: Product: syz [ 280.546203][ T6820] usb 5-1: Manufacturer: syz [ 280.561183][ T6820] usb 5-1: SerialNumber: syz [ 280.573049][ T6820] usb 5-1: config 0 descriptor?? [ 280.898007][ T4316] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 281.748256][ T6820] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 281.865793][ T4316] usb 4-1: Using ep0 maxpacket: 32 [ 281.883764][ T4316] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.894919][ T4316] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 281.939771][ T4316] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.968114][ T6820] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 282.032060][ T6820] gs_usb: probe of 5-1:0.0 failed with error -71 [ 282.057957][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 282.116129][ T6820] usb 5-1: USB disconnect, device number 8 [ 282.141824][ T4316] usb 4-1: SerialNumber: syz [ 282.338401][ T4316] usb 4-1: bad CDC descriptors [ 283.728737][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.667'. [ 284.481395][ T6987] device syzkaller0 entered promiscuous mode [ 284.792166][ T6992] netlink: 'syz.2.668': attribute type 1 has an invalid length. [ 284.975528][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 285.034649][ T6995] 8021q: adding VLAN 0 to HW filter on device bond3 [ 285.525550][ C0] icmp: detected local route for 172.20.20.43 during ICMP sending, src 172.20.20.2 [ 285.535358][ C0] icmp: detected local route for 172.20.20.43 during ICMP sending, src 172.20.20.2 [ 285.545113][ C0] icmp: detected local route for 172.20.20.43 during ICMP sending, src 172.20.20.2 [ 285.554886][ C0] icmp: detected local route for 172.20.20.43 during ICMP sending, src 172.20.20.2 [ 286.223585][ T7013] loop0: detected capacity change from 0 to 256 [ 286.810091][ T7013] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 286.840023][ T26] audit: type=1800 audit(1778597457.721:50): pid=7013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.671" name="file1" dev="loop0" ino=1048613 res=0 errno=0 [ 287.562803][ T5860] usb 4-1: USB disconnect, device number 7 [ 287.612940][ T7015] loop0: detected capacity change from 0 to 4096 [ 288.451062][ T4271] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 288.466549][ T7023] tipc: Trying to set illegal importance in message [ 288.471863][ T4271] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 290.240914][ T7031] device syzkaller0 entered promiscuous mode [ 292.135680][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.680'. [ 292.601958][ T7036] netlink: 'syz.1.677': attribute type 10 has an invalid length. [ 293.029055][ T7055] loop0: detected capacity change from 0 to 256 [ 293.315577][ T6820] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 293.675493][ T6820] usb 3-1: Using ep0 maxpacket: 32 [ 293.688679][ T6820] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.704009][ T6820] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 293.722726][ T6820] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.733171][ T6820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 293.742285][ T6820] usb 3-1: SerialNumber: syz [ 293.817981][ T7055] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 293.849746][ T26] audit: type=1800 audit(1778597464.731:51): pid=7055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.682" name="file1" dev="loop0" ino=1048615 res=0 errno=0 [ 294.430452][ T6820] usb 3-1: bad CDC descriptors [ 294.516554][ T7061] netlink: 'syz.4.684': attribute type 1 has an invalid length. [ 294.657111][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.684'. [ 294.681773][ T7061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.866947][ T7067] loop3: detected capacity change from 0 to 4096 [ 294.896915][ T7072] tipc: Trying to set illegal importance in message [ 295.015535][ T7068] device syzkaller0 entered promiscuous mode [ 295.437865][ T7061] bond1: (slave gretap1): making interface the new active one [ 295.643907][ T7061] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 295.692092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 295.707806][ T4277] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 295.726649][ T4277] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 295.862666][ T6820] usb 3-1: USB disconnect, device number 7 [ 296.686579][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.692'. [ 298.515116][ T7103] loop1: detected capacity change from 0 to 256 [ 299.301857][ T7103] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 299.329533][ T26] audit: type=1800 audit(1778597470.211:52): pid=7103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.696" name="file1" dev="loop1" ino=1048617 res=0 errno=0 [ 299.889684][ T7107] device syzkaller0 entered promiscuous mode [ 300.068787][ T7108] loop0: detected capacity change from 0 to 4096 [ 302.415875][ T4271] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 302.439247][ T7121] tipc: Trying to set illegal importance in message [ 302.446452][ T4271] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 302.473713][ T7110] netlink: 'syz.3.698': attribute type 10 has an invalid length. [ 302.552350][ T7124] device syzkaller0 entered promiscuous mode [ 302.705392][ T4272] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 302.875688][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.704'. [ 302.905297][ T4272] usb 3-1: Using ep0 maxpacket: 32 [ 302.986593][ T7128] netlink: 'syz.1.703': attribute type 1 has an invalid length. [ 303.636989][ T4272] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.651461][ T4272] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 303.669558][ T4272] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 303.680222][ T4272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 303.692741][ T4272] usb 3-1: SerialNumber: syz [ 303.708672][ T4272] usb 3-1: bad CDC descriptors [ 304.661292][ T7146] loop4: detected capacity change from 0 to 256 [ 304.691926][ T7146] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 305.611168][ T26] audit: type=1800 audit(1778597476.491:53): pid=7147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.707" name="file1" dev="loop4" ino=1048619 res=0 errno=0 [ 306.089169][ T7157] device syzkaller0 entered promiscuous mode [ 306.092477][ T7] usb 3-1: USB disconnect, device number 8 [ 307.811121][ T7174] loop3: detected capacity change from 0 to 4096 [ 309.668861][ T7186] device syzkaller0 entered promiscuous mode [ 309.699135][ T4277] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 309.715944][ T4277] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 309.746086][ T7194] tipc: Trying to set illegal importance in message [ 309.820066][ T7197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.718'. [ 309.976236][ T7201] netlink: 'syz.0.719': attribute type 1 has an invalid length. [ 310.103498][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'. [ 310.117322][ T7201] 8021q: adding VLAN 0 to HW filter on device bond5 [ 310.372201][ T4687] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 310.575382][ T4687] usb 5-1: Using ep0 maxpacket: 32 [ 310.591587][ T4687] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.691791][ T4687] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 310.799375][ T4687] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.859071][ T4687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 310.907935][ T4687] usb 5-1: SerialNumber: syz [ 311.002081][ T4687] usb 5-1: bad CDC descriptors [ 311.146741][ T7215] loop2: detected capacity change from 0 to 256 [ 311.173938][ T7215] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 311.209429][ T26] audit: type=1800 audit(1778597482.091:54): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.722" name="file1" dev="loop2" ino=1048621 res=0 errno=0 [ 311.282077][ T7203] netlink: 'syz.1.716': attribute type 10 has an invalid length. [ 312.291674][ T7223] device syzkaller0 entered promiscuous mode [ 314.368842][ T4272] usb 5-1: USB disconnect, device number 9 [ 314.972560][ T7248] device syzkaller0 entered promiscuous mode [ 315.064912][ T7240] loop2: detected capacity change from 0 to 4096 [ 316.328018][ T7253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.732'. [ 316.361262][ T4283] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 316.398566][ T4283] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 316.496120][ T7259] tipc: Trying to set illegal importance in message [ 316.511314][ T7260] loop1: detected capacity change from 0 to 256 [ 316.538407][ T7260] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 316.572657][ T7258] netlink: 'syz.4.734': attribute type 1 has an invalid length. [ 317.197831][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.204224][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.485886][ T26] audit: type=1800 audit(1778597488.371:55): pid=7261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.736" name="file1" dev="loop1" ino=1048623 res=0 errno=0 [ 317.533241][ T7265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.734'. [ 317.708512][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.734'. [ 317.746470][ T7258] 8021q: adding VLAN 0 to HW filter on device bond2 [ 318.390919][ T7297] netlink: 'syz.1.738': attribute type 10 has an invalid length. [ 318.674675][ T7295] device syzkaller0 entered promiscuous mode [ 320.903194][ T7325] device syzkaller0 entered promiscuous mode [ 321.843586][ T7330] loop3: detected capacity change from 0 to 4096 [ 322.068227][ T7338] loop0: detected capacity change from 0 to 256 [ 323.443860][ T7338] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 324.259856][ T7342] tipc: Trying to set illegal importance in message [ 324.333341][ T7343] netlink: 28 bytes leftover after parsing attributes in process `syz.2.750'. [ 324.446358][ T4277] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 324.452877][ T4277] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 324.580793][ T7351] netlink: 'syz.4.754': attribute type 1 has an invalid length. [ 324.717305][ T7355] netlink: 28 bytes leftover after parsing attributes in process `syz.4.754'. [ 324.846277][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.754'. [ 324.878951][ T7351] 8021q: adding VLAN 0 to HW filter on device bond3 [ 325.209166][ T7370] device syzkaller0 entered promiscuous mode [ 325.256772][ T7373] device syzkaller0 entered promiscuous mode [ 325.264087][ T7366] netlink: 'syz.3.753': attribute type 10 has an invalid length. [ 326.095392][ T6820] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 327.115407][ T6820] usb 3-1: Using ep0 maxpacket: 32 [ 327.132873][ T6820] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.155227][ T6820] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 327.172958][ T6820] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 327.182433][ T6820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 327.212202][ T6820] usb 3-1: SerialNumber: syz [ 327.256843][ T6820] usb 3-1: bad CDC descriptors [ 329.365408][ T7383] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 329.405416][ T7383] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 329.421299][ T7383] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 329.553217][ T7] usb 3-1: USB disconnect, device number 9 [ 329.796966][ T7406] loop0: detected capacity change from 0 to 256 [ 329.823689][ T7406] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 330.736577][ T7413] tipc: Trying to set illegal importance in message [ 330.865441][ T7415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.766'. [ 330.896913][ T7409] loop3: detected capacity change from 0 to 4096 [ 331.398337][ T4277] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 331.475270][ T4277] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 331.599842][ T7429] netlink: 'syz.3.770': attribute type 1 has an invalid length. [ 332.829881][ T7434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.770'. [ 333.176593][ T7438] device syzkaller0 entered promiscuous mode [ 333.523702][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.770'. [ 333.654981][ T7429] 8021q: adding VLAN 0 to HW filter on device bond3 [ 334.510668][ T7439] bond3: (slave gretap1): making interface the new active one [ 334.520324][ T7439] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 334.535379][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 334.566824][ T7458] netlink: 'syz.4.774': attribute type 10 has an invalid length. [ 334.671907][ T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 334.805626][ T7468] loop1: detected capacity change from 0 to 256 [ 334.833785][ T7468] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 334.855303][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 334.905310][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.011810][ T7] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 335.184908][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.304199][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 335.403223][ T7] usb 3-1: SerialNumber: syz [ 335.563766][ T7] usb 3-1: bad CDC descriptors [ 335.880833][ T7471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.779'. [ 336.537378][ T7477] loop4: detected capacity change from 0 to 4096 [ 337.262934][ T4282] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 337.269749][ T4282] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 337.310813][ T7492] tipc: Trying to set illegal importance in message [ 337.419811][ T7493] device syzkaller0 entered promiscuous mode [ 338.421945][ T7502] device syzkaller0 entered promiscuous mode [ 339.318351][ T7508] loop1: detected capacity change from 0 to 256 [ 339.513157][ T7508] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 340.039572][ T26] audit: type=1800 audit(1778597510.921:56): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.789" name="file1" dev="loop1" ino=1048631 res=0 errno=0 [ 340.635025][ T7514] netlink: 'syz.3.791': attribute type 1 has an invalid length. [ 340.709023][ T7514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.791'. [ 340.763857][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.791'. [ 340.801832][ T7514] 8021q: adding VLAN 0 to HW filter on device bond4 [ 340.849011][ T5860] usb 3-1: USB disconnect, device number 10 [ 341.022390][ T7520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.793'. [ 341.151667][ T7518] netlink: 'syz.0.792': attribute type 10 has an invalid length. [ 341.523576][ T7528] device syzkaller0 entered promiscuous mode [ 341.670618][ T7529] loop2: detected capacity change from 0 to 4096 [ 342.040799][ T7540] tipc: Trying to set illegal importance in message [ 342.494477][ T7543] loop0: detected capacity change from 0 to 256 [ 343.445821][ T7543] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 343.522017][ T26] audit: type=1800 audit(1778597514.401:57): pid=7543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.800" name="file1" dev="loop0" ino=1048633 res=0 errno=0 [ 344.029244][ T7545] device syzkaller0 entered promiscuous mode [ 345.652328][ T7558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.806'. [ 346.096320][ T7564] netlink: 'syz.3.808': attribute type 10 has an invalid length. [ 346.181640][ T7570] device syzkaller0 entered promiscuous mode [ 346.320102][ T7572] netlink: 'syz.3.811': attribute type 1 has an invalid length. [ 346.360868][ T7572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.811'. [ 346.382415][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.811'. [ 346.394523][ T7572] 8021q: adding VLAN 0 to HW filter on device bond5 [ 346.818651][ T7581] loop2: detected capacity change from 0 to 4096 [ 348.433624][ T7585] device syzkaller0 entered promiscuous mode [ 348.625450][ T7591] loop4: detected capacity change from 0 to 256 [ 348.652639][ T7591] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 348.691776][ T26] audit: type=1800 audit(1778597519.571:58): pid=7591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.815" name="file1" dev="loop4" ino=1048635 res=0 errno=0 [ 348.768071][ T7593] tipc: Trying to set illegal importance in message [ 350.152696][ T7602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.820'. [ 350.472320][ T7608] device syzkaller0 entered promiscuous mode [ 350.653550][ T7605] netlink: 'syz.0.821': attribute type 10 has an invalid length. [ 350.871956][ T7620] netlink: 'syz.3.826': attribute type 1 has an invalid length. [ 351.023014][ T7623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.826'. [ 351.063415][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'. [ 351.086260][ T7620] 8021q: adding VLAN 0 to HW filter on device bond6 [ 351.189402][ T7625] loop1: detected capacity change from 0 to 4096 [ 351.813680][ T7634] netlink: 'syz.4.829': attribute type 4 has an invalid length. [ 351.967782][ T7636] netlink: 'syz.4.829': attribute type 4 has an invalid length. [ 352.075492][ T7632] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 353.210674][ T7647] tipc: Trying to set illegal importance in message [ 353.324715][ T7646] device syzkaller0 entered promiscuous mode [ 353.339479][ T7651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.834'. [ 353.533422][ T7654] device syzkaller0 entered promiscuous mode [ 354.484135][ T7670] loop0: detected capacity change from 0 to 4096 [ 354.499622][ T7668] netlink: 'syz.1.839': attribute type 10 has an invalid length. [ 355.040778][ T7677] loop2: detected capacity change from 0 to 256 [ 355.067566][ T7677] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 355.102121][ T26] audit: type=1800 audit(1778597525.981:59): pid=7677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.843" name="file1" dev="loop2" ino=1048637 res=0 errno=0 [ 355.185332][ T7679] netlink: 'syz.1.844': attribute type 1 has an invalid length. [ 355.257354][ T4271] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 355.313683][ T7679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.844'. [ 355.322698][ T4271] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 355.365470][ T7683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.846'. [ 355.456271][ T7679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.844'. [ 355.504675][ T7679] 8021q: adding VLAN 0 to HW filter on device bond5 [ 356.660367][ T7711] netlink: 'syz.4.849': attribute type 4 has an invalid length. [ 356.695134][ T7711] netlink: 'syz.4.849': attribute type 4 has an invalid length. [ 356.723290][ T7713] device syzkaller0 entered promiscuous mode [ 356.757443][ T7717] tipc: Trying to set illegal importance in message [ 356.856122][ T7718] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 357.079517][ T7725] netlink: 'syz.3.854': attribute type 10 has an invalid length. [ 357.159023][ T5860] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 357.378895][ T7729] loop4: detected capacity change from 0 to 4096 [ 357.407170][ T5860] usb 2-1: Using ep0 maxpacket: 32 [ 357.457257][ T5860] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.477500][ T5860] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 357.614236][ T5860] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.749580][ T7738] loop0: detected capacity change from 0 to 256 [ 358.285983][ T7738] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 358.333118][ T26] audit: type=1800 audit(1778597529.211:60): pid=7738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.858" name="file1" dev="loop0" ino=1048639 res=0 errno=0 [ 358.667325][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 358.675579][ T5860] usb 2-1: SerialNumber: syz [ 358.718181][ T5860] usb 2-1: bad CDC descriptors [ 359.267750][ T6820] usb 2-1: USB disconnect, device number 5 [ 359.551922][ T4282] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 359.575483][ T4282] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 359.703197][ T7753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.861'. [ 359.946421][ T7757] netlink: 'syz.1.863': attribute type 1 has an invalid length. [ 360.048641][ T7758] device syzkaller0 entered promiscuous mode [ 360.080897][ T7760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.863'. [ 360.577030][ T7757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'. [ 360.587336][ T7757] 8021q: adding VLAN 0 to HW filter on device bond6 [ 360.972187][ T7770] netlink: 'syz.0.867': attribute type 10 has an invalid length. [ 360.980233][ T7774] netlink: 'syz.3.868': attribute type 4 has an invalid length. [ 360.999061][ T7774] netlink: 'syz.3.868': attribute type 4 has an invalid length. [ 361.065792][ T7776] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 361.312371][ T7782] loop0: detected capacity change from 0 to 256 [ 361.343089][ T7782] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 361.379241][ T26] audit: type=1800 audit(1778597532.261:61): pid=7782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.870" name="file1" dev="loop0" ino=1048641 res=0 errno=0 [ 362.344966][ T7787] tipc: Trying to set illegal importance in message [ 362.375224][ T7786] loop0: detected capacity change from 0 to 4096 [ 362.725265][ T6820] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 363.131164][ T6820] usb 3-1: Using ep0 maxpacket: 32 [ 363.144838][ T6820] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.169799][ T6820] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 363.190231][ T6820] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 363.199737][ T6820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 363.208244][ T6820] usb 3-1: SerialNumber: syz [ 363.248442][ T6820] usb 3-1: bad CDC descriptors [ 363.346014][ T4271] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 363.374008][ T4271] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 363.514900][ T7806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.876'. [ 363.798871][ T7] usb 3-1: USB disconnect, device number 11 [ 363.936451][ T7815] device syzkaller0 entered promiscuous mode [ 364.350717][ T7823] loop3: detected capacity change from 0 to 256 [ 364.384586][ T7823] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 364.423273][ T26] audit: type=1800 audit(1778597535.301:62): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.882" name="file1" dev="loop3" ino=1048642 res=0 errno=0 [ 365.667110][ T7827] netlink: 'syz.0.883': attribute type 4 has an invalid length. [ 365.884124][ T7827] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 365.990543][ T7836] netlink: 'syz.3.885': attribute type 1 has an invalid length. [ 366.038818][ T7820] netlink: 'syz.1.881': attribute type 10 has an invalid length. [ 366.063870][ T7836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.885'. [ 366.089141][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.885'. [ 366.101441][ T7836] 8021q: adding VLAN 0 to HW filter on device bond7 [ 366.351427][ T7843] loop1: detected capacity change from 0 to 4096 [ 366.718230][ T4275] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 366.724753][ T4275] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 366.804412][ T7848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.890'. [ 367.632602][ T7866] loop3: detected capacity change from 0 to 256 [ 368.090981][ T7866] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 368.123582][ T26] audit: type=1800 audit(1778597539.001:63): pid=7866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.895" name="file1" dev="loop3" ino=1048643 res=0 errno=0 [ 369.076045][ T7872] netlink: 'syz.1.898': attribute type 10 has an invalid length. [ 369.368309][ T7882] netlink: 'syz.4.901': attribute type 1 has an invalid length. [ 369.742351][ T7885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.901'. [ 369.834834][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.901'. [ 369.862148][ T7886] 8021q: adding VLAN 0 to HW filter on device bond4 [ 370.238667][ T7898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.906'. [ 370.397663][ T7901] loop0: detected capacity change from 0 to 256 [ 370.425781][ T7901] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 370.588503][ T26] audit: type=1800 audit(1778597541.471:64): pid=7902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.907" name="file1" dev="loop0" ino=1048644 res=0 errno=0 [ 371.887719][ T7915] netlink: 'syz.1.912': attribute type 10 has an invalid length. [ 372.065286][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 372.129282][ T7932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.917'. [ 372.159477][ T7934] netlink: 'syz.0.918': attribute type 1 has an invalid length. [ 372.244732][ T7934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.918'. [ 372.260214][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'. [ 372.271111][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 372.275113][ T7934] 8021q: adding VLAN 0 to HW filter on device bond6 [ 372.310627][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.355484][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 372.394778][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 372.412855][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 372.426887][ T7] usb 4-1: SerialNumber: syz [ 372.467717][ T7] usb 4-1: bad CDC descriptors [ 372.666894][ T7948] loop2: detected capacity change from 0 to 256 [ 372.694236][ T7948] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 372.726522][ T26] audit: type=1800 audit(1778597543.611:65): pid=7948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.921" name="file1" dev="loop2" ino=1048646 res=0 errno=0 [ 373.614826][ T7955] device syzkaller0 entered promiscuous mode [ 374.893534][ T7] usb 4-1: USB disconnect, device number 8 [ 374.962826][ T7988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.930'. [ 376.196879][ T7992] netlink: 'syz.4.931': attribute type 4 has an invalid length. [ 376.269362][ T7992] netlink: 'syz.4.931': attribute type 4 has an invalid length. [ 376.294923][ T7999] loop0: detected capacity change from 0 to 256 [ 376.328999][ T7999] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 376.366670][ T26] audit: type=1800 audit(1778597547.251:66): pid=7999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.933" name="file1" dev="loop0" ino=1048648 res=0 errno=0 [ 376.484109][ T8006] tipc: Trying to set illegal importance in message [ 376.517002][ T8004] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 376.981113][ T8018] netlink: 'syz.4.939': attribute type 1 has an invalid length. [ 377.023622][ T8018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.939'. [ 377.074516][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.939'. [ 377.104909][ T8018] 8021q: adding VLAN 0 to HW filter on device bond5 [ 377.417131][ T8028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.942'. [ 377.698337][ T8034] device syzkaller0 entered promiscuous mode [ 377.739627][ T8032] device syzkaller0 entered promiscuous mode [ 378.232008][ T8041] loop1: detected capacity change from 0 to 256 [ 378.257570][ T8041] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 378.291183][ T26] audit: type=1800 audit(1778597549.171:67): pid=8041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.948" name="file1" dev="loop1" ino=1048650 res=0 errno=0 [ 378.637631][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.644204][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.328107][ T8051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.953'. [ 379.358560][ T8038] netlink: 'syz.4.947': attribute type 10 has an invalid length. [ 379.433851][ T8056] tipc: Trying to set illegal importance in message [ 379.696851][ T8062] device syzkaller0 entered promiscuous mode [ 379.993381][ T8064] binder: BINDER_SET_CONTEXT_MGR already set [ 380.000781][ T8064] binder: 8063:8064 ioctl 4018620d 200000000040 returned -16 [ 380.242087][ T8068] device syzkaller0 entered promiscuous mode [ 380.525998][ T8077] loop1: detected capacity change from 0 to 256 [ 380.549800][ T8077] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 380.582676][ T26] audit: type=1800 audit(1778597551.461:68): pid=8077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.962" name="file1" dev="loop1" ino=1048652 res=0 errno=0 [ 381.536511][ T8084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.964'. [ 381.730571][ T8088] ªªªªªª: renamed from vlan0 [ 381.932297][ T8086] netlink: 'syz.1.965': attribute type 10 has an invalid length. [ 381.975677][ T8094] device syzkaller0 entered promiscuous mode [ 382.275408][ T6820] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 382.369151][ T8107] tipc: Trying to set illegal importance in message [ 382.465451][ T6820] usb 5-1: Using ep0 maxpacket: 32 [ 382.473594][ T6820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.495814][ T6820] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 382.538200][ T6820] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 382.550850][ T6820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 382.559911][ T6820] usb 5-1: SerialNumber: syz [ 382.597223][ T6820] usb 5-1: bad CDC descriptors [ 382.750659][ T8113] netlink: 'syz.1.975': attribute type 1 has an invalid length. [ 382.922746][ T8116] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 382.933939][ T8116] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 382.971990][ T8113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.975'. [ 383.466139][ T8120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.977'. [ 383.558805][ T8123] binder: BINDER_SET_CONTEXT_MGR already set [ 383.574322][ T8123] binder: 8122:8123 ioctl 4018620d 200000000040 returned -16 [ 383.676959][ T8125] device syzkaller0 entered promiscuous mode [ 384.367847][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 384.376788][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 384.398795][ T8145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.410225][ T8145] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.432168][ T8145] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 385.006915][ T6820] usb 5-1: USB disconnect, device number 10 [ 385.120726][ T8166] ªªªªªª: renamed from vlan0 [ 385.482666][ T8170] netlink: 28 bytes leftover after parsing attributes in process `syz.4.990'. [ 385.686926][ T8172] device syzkaller0 entered promiscuous mode [ 385.789864][ T8174] netlink: 'syz.4.992': attribute type 1 has an invalid length. [ 385.826829][ T8174] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 385.898420][ T8174] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 385.915501][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.992'. [ 386.966566][ T8190] device syzkaller0 entered promiscuous mode [ 386.977610][ T8188] netlink: 'syz.1.995': attribute type 10 has an invalid length. [ 387.012797][ T8188] team0: Port device netdevsim0 added [ 387.195440][ T4687] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 387.235795][ T8197] fuse: Unknown parameter '0x0000000000000003' [ 387.375306][ T4687] usb 3-1: Using ep0 maxpacket: 32 [ 387.382427][ T4687] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.413419][ T4687] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 387.465693][ T4687] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 387.485428][ T4687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 387.496431][ T4687] usb 3-1: SerialNumber: syz [ 387.504897][ T4687] usb 3-1: bad CDC descriptors [ 387.615364][ T4686] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 387.881900][ T4686] usb 2-1: Using ep0 maxpacket: 16 [ 387.892911][ T4686] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.914395][ T4686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 387.939141][ T4686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 387.968776][ T4686] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 387.979502][ T4686] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.011334][ T4686] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 388.020696][ T4686] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 388.029155][ T4686] usb 2-1: Manufacturer: syz [ 388.047849][ T4686] usb 2-1: config 0 descriptor?? [ 388.401822][ T4686] rc_core: IR keymap rc-hauppauge not found [ 388.411966][ T4686] Registered IR keymap rc-empty [ 388.419245][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 388.455470][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 388.502064][ T4686] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 388.524663][ T4686] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 388.572709][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 388.695326][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 388.738117][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 388.821066][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 388.875330][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 388.905418][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 388.949573][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 388.995301][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 389.048790][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 389.111433][ T4686] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 389.166841][ T4686] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 389.196855][ T4686] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 390.775982][ T4686] usb 3-1: USB disconnect, device number 12 [ 390.874221][ T4687] usb 2-1: USB disconnect, device number 6 [ 390.986961][ T8216] device syzkaller0 entered promiscuous mode [ 391.019235][ T8223] ªªªªªª: renamed from vlan0 [ 391.158263][ T8227] netlink: 'syz.3.1008': attribute type 1 has an invalid length. [ 391.209763][ T8227] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 391.221513][ T8227] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 391.240799][ T8222] netlink: 'syz.1.1007': attribute type 10 has an invalid length. [ 391.582029][ T8244] netlink: 'syz.4.1014': attribute type 10 has an invalid length. [ 391.603829][ T8244] team0: Port device netdevsim0 added [ 391.655456][ T4687] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 391.745531][ T4686] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 391.860109][ T4687] usb 3-1: Using ep0 maxpacket: 32 [ 391.869814][ T4687] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 391.880887][ T4687] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 391.892011][ T4687] usb 3-1: config 0 interface 0 has no altsetting 0 [ 391.903851][ T4687] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 391.913609][ T4687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.922291][ T4687] usb 3-1: Product: syz [ 391.927228][ T4687] usb 3-1: Manufacturer: syz [ 391.932167][ T4687] usb 3-1: SerialNumber: syz [ 391.949161][ T4687] usb 3-1: config 0 descriptor?? [ 391.965299][ T4686] usb 2-1: Using ep0 maxpacket: 32 [ 391.973186][ T4686] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.989979][ T4686] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 392.009419][ T4686] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.022953][ T4686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 392.034349][ T4686] usb 2-1: SerialNumber: syz [ 392.071117][ T4686] usb 2-1: bad CDC descriptors [ 392.153217][ T8253] fuse: Unknown parameter '0x0000000000000003' [ 392.425327][ T6820] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 392.470473][ T4687] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 392.478097][ T4687] gs_usb: probe of 3-1:0.0 failed with error -71 [ 392.488567][ T4687] usb 3-1: USB disconnect, device number 13 [ 392.631087][ T8258] device syzkaller0 entered promiscuous mode [ 392.635772][ T6820] usb 4-1: Using ep0 maxpacket: 16 [ 392.644818][ T6820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.661674][ T6820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 392.684521][ T6820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 392.704082][ T6820] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 392.715657][ T6820] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.753201][ T6820] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 392.769997][ T6820] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 392.787927][ T6820] usb 4-1: Manufacturer: syz [ 392.809451][ T6820] usb 4-1: config 0 descriptor?? [ 393.209890][ T6820] rc_core: IR keymap rc-hauppauge not found [ 393.221484][ T6820] Registered IR keymap rc-empty [ 393.227802][ T6820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 393.265339][ T6820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 393.305983][ T6820] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 393.354594][ T6820] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 393.412377][ T6820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 393.455508][ T6820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 393.495322][ T6820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 393.535540][ T6820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 393.575596][ T6820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 393.615510][ T6820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 393.655422][ T6820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 393.686233][ T6820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 393.715275][ T6820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 393.745404][ T6820] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 393.779330][ T6820] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 393.788953][ T6820] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 394.572888][ T4687] usb 2-1: USB disconnect, device number 7 [ 395.086049][ T8295] loop1: detected capacity change from 0 to 4096 [ 395.301718][ T4275] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 395.325107][ T4275] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 396.275548][ T8297] netlink: 'syz.1.1026': attribute type 1 has an invalid length. [ 396.334904][ T5860] usb 4-1: USB disconnect, device number 9 [ 396.361427][ T8298] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 396.405069][ T8298] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 396.655549][ T8310] netlink: 'syz.2.1030': attribute type 10 has an invalid length. [ 396.690647][ T8310] team0: Port device netdevsim0 added [ 397.114892][ T8329] device syzkaller0 entered promiscuous mode [ 399.429126][ T8339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1040'. [ 399.697793][ T8362] device syzkaller0 entered promiscuous mode [ 399.700373][ T8364] binder: BINDER_SET_CONTEXT_MGR already set [ 399.731917][ T8364] binder: 8363:8364 ioctl 4018620d 200000000040 returned -16 [ 399.804159][ T8368] netlink: 'syz.1.1049': attribute type 1 has an invalid length. [ 399.881226][ T8369] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 399.906562][ T8369] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 399.963778][ T8372] netlink: 'syz.4.1051': attribute type 10 has an invalid length. [ 400.074700][ T8383] netlink: 'syz.0.1053': attribute type 4 has an invalid length. [ 400.091824][ T8383] netlink: 'syz.0.1053': attribute type 4 has an invalid length. [ 400.114763][ T8383] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 400.280949][ T8389] device syzkaller0 entered promiscuous mode [ 401.118775][ T8410] binder: BINDER_SET_CONTEXT_MGR already set [ 401.131312][ T8410] binder: 8409:8410 ioctl 4018620d 200000000040 returned -16 [ 402.604614][ T8392] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1057'. [ 402.717229][ T8420] device syzkaller0 entered promiscuous mode [ 403.057354][ T8431] netlink: 'syz.0.1068': attribute type 1 has an invalid length. [ 403.221942][ T8435] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 403.233573][ T8440] binder: BINDER_SET_CONTEXT_MGR already set [ 403.254050][ T8433] loop1: detected capacity change from 0 to 4096 [ 403.263047][ T8440] binder: 8436:8440 ioctl 4018620d 200000004a80 returned -16 [ 403.292298][ T8435] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 403.295357][ T8439] binder: BINDER_SET_CONTEXT_MGR already set [ 403.336756][ T8439] binder: 8438:8439 ioctl 4018620d 200000000040 returned -16 [ 403.455596][ T4275] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 403.477795][ T4275] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 403.488849][ T8446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1073'. [ 403.898905][ T8459] device syzkaller0 entered promiscuous mode [ 404.316256][ T8468] device syzkaller0 entered promiscuous mode [ 404.511989][ T8473] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1082'. [ 404.963122][ T8483] netlink: 'syz.3.1086': attribute type 10 has an invalid length. [ 404.995941][ T8480] loop4: detected capacity change from 0 to 4096 [ 405.004722][ T8483] team0: Port device netdevsim0 added [ 405.037506][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 405.074458][ T8488] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1088'. [ 405.293002][ T4282] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 405.304851][ T4282] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 405.457589][ T8492] netlink: 'syz.1.1089': attribute type 1 has an invalid length. [ 405.467330][ T8495] binder: BINDER_SET_CONTEXT_MGR already set [ 405.473403][ T8495] binder: 8493:8495 ioctl 4018620d 200000004a80 returned -16 [ 405.592043][ T8500] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 405.636654][ T8500] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 405.706442][ T8501] device syzkaller0 entered promiscuous mode [ 405.962255][ T8507] binder: 8506:8507 ioctl c0306201 200000000300 returned -14 [ 406.032060][ T8509] device syzkaller0 entered promiscuous mode [ 406.352801][ T8519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1100'. [ 406.570746][ T8523] loop0: detected capacity change from 0 to 4096 [ 406.628473][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'. [ 407.250579][ T4271] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 407.281601][ T4271] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 407.313620][ T8538] device syzkaller0 entered promiscuous mode [ 407.466393][ T8540] device syzkaller0 entered promiscuous mode [ 407.629456][ T8549] netlink: 'syz.0.1111': attribute type 1 has an invalid length. [ 407.714622][ T8549] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 407.725481][ T8555] binder: BINDER_SET_CONTEXT_MGR already set [ 407.737394][ T8555] binder: 8551:8555 ioctl 4018620d 200000004a80 returned -16 [ 407.741888][ T8549] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 407.766660][ T8554] binder: 8553:8554 ioctl c0306201 200000000680 returned -14 [ 408.010017][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1116'. [ 408.295467][ T8575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1119'. [ 408.398593][ T4687] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 408.484116][ T8582] device syzkaller0 entered promiscuous mode [ 408.599073][ T4687] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.660521][ T4687] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 408.714039][ T4687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.752302][ T8585] binder: BINDER_SET_CONTEXT_MGR already set [ 408.772810][ T4687] usb 2-1: Product: syz [ 408.785269][ T4687] usb 2-1: Manufacturer: syz [ 408.791635][ T8585] binder: 8584:8585 ioctl 4018620d 200000000040 returned -16 [ 408.820199][ T4687] usb 2-1: SerialNumber: syz [ 408.870534][ T4687] usb 2-1: config 0 descriptor?? [ 409.384875][ T4687] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 409.429002][ T4687] dvb-usb: bulk message failed: -22 (3/0) [ 409.483921][ T4687] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 409.521473][ T4687] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 409.550528][ T4687] usb 2-1: media controller created [ 409.583753][ T4687] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 409.708649][ T4687] dvb-usb: bulk message failed: -22 (6/0) [ 409.735792][ T4687] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 409.767549][ T4687] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 409.797275][ T4687] dvb-usb: schedule remote query interval to 150 msecs. [ 409.814603][ T4687] dvb-usb: bulk message failed: -22 (3/0) [ 409.851559][ T8600] device syzkaller0 entered promiscuous mode [ 409.865586][ T4687] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 409.967743][ T4687] dvb-usb: bulk message failed: -22 (1/0) [ 409.996371][ T4687] dvb-usb: error while querying for an remote control event. [ 410.175253][ T4687] dvb-usb: bulk message failed: -22 (1/0) [ 410.184830][ T4687] dvb-usb: error while querying for an remote control event. [ 410.340418][ T8601] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1125'. [ 410.351146][ T8606] device syzkaller0 entered promiscuous mode [ 410.405436][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 410.416172][ T7] dvb-usb: error while querying for an remote control event. [ 410.615491][ T4687] dvb-usb: bulk message failed: -22 (1/0) [ 410.622913][ T4687] dvb-usb: error while querying for an remote control event. [ 410.887462][ T4687] dvb-usb: bulk message failed: -22 (1/0) [ 410.913952][ T4687] dvb-usb: error while querying for an remote control event. [ 410.953892][ T8611] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1130'. [ 411.095596][ T4687] dvb-usb: bulk message failed: -22 (1/0) [ 411.101407][ T4687] dvb-usb: error while querying for an remote control event. [ 411.105616][ T8614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1131'. [ 411.325230][ T4687] dvb-usb: bulk message failed: -22 (1/0) [ 411.331052][ T4687] dvb-usb: error while querying for an remote control event. [ 411.545267][ T4687] dvb-usb: bulk message failed: -22 (1/0) [ 411.551163][ T4687] dvb-usb: error while querying for an remote control event. [ 411.765250][ T4687] dvb-usb: bulk message failed: -22 (1/0) [ 411.771073][ T4687] dvb-usb: error while querying for an remote control event. [ 411.908641][ T8618] device syzkaller0 entered promiscuous mode [ 412.005419][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 412.011329][ T7] dvb-usb: error while querying for an remote control event. [ 412.225479][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 412.231373][ T7] dvb-usb: error while querying for an remote control event. [ 412.445292][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 412.451111][ T7] dvb-usb: error while querying for an remote control event. [ 412.529258][ T6820] usb 2-1: USB disconnect, device number 8 [ 412.610153][ T6820] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 414.978222][ T8641] netlink: 'syz.1.1137': attribute type 10 has an invalid length. [ 415.150179][ T8651] device syzkaller0 entered promiscuous mode [ 415.376771][ T8659] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1143'. [ 415.445231][ T4316] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 415.635252][ T4316] usb 5-1: Using ep0 maxpacket: 16 [ 415.644158][ T4316] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 415.706701][ T4316] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 415.725238][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.740295][ T4316] usb 5-1: Product: syz [ 415.747764][ T4316] usb 5-1: Manufacturer: syz [ 415.754463][ T4316] usb 5-1: SerialNumber: syz [ 415.767030][ T4316] usb 5-1: config 0 descriptor?? [ 415.925347][ T6820] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 416.127202][ T6820] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.148914][ T6820] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 416.179545][ T6820] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 416.208455][ T6820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.238251][ T6820] usb 2-1: config 0 descriptor?? [ 416.651372][ T6820] Bluetooth: Can't get state to change to load configuration err [ 416.669062][ T6820] Bluetooth: Loading sysconfig file failed [ 416.675024][ T6820] ath3k: probe of 2-1:0.0 failed with error -16 [ 416.684626][ T6820] usb 2-1: USB disconnect, device number 9 [ 416.697192][ T7798] udevd[7798]: setting mode of /dev/bus/usb/002/009 to 020664 failed: No such file or directory [ 416.747111][ T8666] mmap: syz.3.1145 (8666) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 416.765660][ T8666] [ 416.768037][ T8666] ====================================================== [ 416.775088][ T8666] WARNING: possible circular locking dependency detected [ 416.775673][ T7798] udevd[7798]: setting owner of /dev/bus/usb/002/009 to uid=0, gid=0 failed: No such file or directory [ 416.782127][ T8666] syzkaller #0 Not tainted [ 416.782138][ T8666] ------------------------------------------------------ [ 416.782146][ T8666] syz.3.1145/8666 is trying to acquire lock: [ 416.782158][ T8666] ffff888054182870 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3a2/0x1c30 [ 416.821359][ T8666] [ 416.821359][ T8666] but task is already holding lock: [ 416.828752][ T8666] ffff8880196dae58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1a4/0x7b0 [ 416.838775][ T8666] [ 416.838775][ T8666] which lock already depends on the new lock. [ 416.838775][ T8666] [ 416.849190][ T8666] [ 416.849190][ T8666] the existing dependency chain (in reverse order) is: [ 416.858198][ T8666] [ 416.858198][ T8666] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 416.865775][ T8666] down_read_killable+0x4c/0x340 [ 416.871253][ T8666] mmap_read_lock_killable+0x1d/0x60 [ 416.877104][ T8666] lock_mm_and_find_vma+0x2b1/0x2f0 [ 416.882833][ T8666] do_user_addr_fault+0x2db/0xb10 [ 416.888388][ T8666] exc_page_fault+0x60/0x100 [ 416.893510][ T8666] asm_exc_page_fault+0x22/0x30 [ 416.898896][ T8666] fault_in_readable+0x13e/0x1f0 [ 416.904389][ T8666] fault_in_iov_iter_readable+0xbb/0x2e0 [ 416.910575][ T8666] generic_perform_write+0x1f1/0x5c0 [ 416.916429][ T8666] __generic_file_write_iter+0x148/0x2a0 [ 416.922631][ T8666] generic_file_write_iter+0xab/0x2e0 [ 416.928538][ T8666] vfs_write+0x4b1/0xa30 [ 416.933332][ T8666] ksys_write+0x14c/0x250 [ 416.938195][ T8666] do_syscall_64+0x4c/0xa0 [ 416.943142][ T8666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.949569][ T8666] [ 416.949569][ T8666] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 416.958297][ T8666] __lock_acquire+0x2d07/0x7d10 [ 416.963690][ T8666] lock_acquire+0x1bb/0x4a0 [ 416.968728][ T8666] down_write+0x36/0x60 [ 416.973421][ T8666] process_measurement+0x3a2/0x1c30 [ 416.979147][ T8666] ima_file_mmap+0x102/0x150 [ 416.984265][ T8666] __se_sys_remap_file_pages+0x559/0x7b0 [ 416.990457][ T8666] do_syscall_64+0x4c/0xa0 [ 416.995408][ T8666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.001833][ T8666] [ 417.001833][ T8666] other info that might help us debug this: [ 417.001833][ T8666] [ 417.012063][ T8666] Possible unsafe locking scenario: [ 417.012063][ T8666] [ 417.019512][ T8666] CPU0 CPU1 [ 417.024892][ T8666] ---- ---- [ 417.030255][ T8666] lock(&mm->mmap_lock); [ 417.034602][ T8666] lock(&sb->s_type->i_mutex_key#13); [ 417.042607][ T8666] lock(&mm->mmap_lock); [ 417.049458][ T8666] lock(&sb->s_type->i_mutex_key#13); [ 417.054928][ T8666] [ 417.054928][ T8666] *** DEADLOCK *** [ 417.054928][ T8666] [ 417.063081][ T8666] 1 lock held by syz.3.1145/8666: [ 417.068115][ T8666] #0: ffff8880196dae58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1a4/0x7b0 [ 417.078579][ T8666] [ 417.078579][ T8666] stack backtrace: [ 417.084481][ T8666] CPU: 0 PID: 8666 Comm: syz.3.1145 Not tainted syzkaller #0 [ 417.091864][ T8666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 417.101965][ T8666] Call Trace: [ 417.105265][ T8666] [ 417.108197][ T8666] dump_stack_lvl+0x188/0x24e [ 417.112890][ T8666] ? load_image+0x400/0x400 [ 417.117397][ T8666] ? show_regs_print_info+0x12/0x12 [ 417.122617][ T8666] ? print_circular_bug+0x12b/0x1a0 [ 417.127849][ T8666] check_noncircular+0x296/0x330 [ 417.132806][ T8666] ? look_up_lock_class+0x75/0x140 [ 417.137926][ T8666] ? add_chain_block+0x940/0x940 [ 417.142875][ T8666] ? lockdep_lock+0xf1/0x1f0 [ 417.147481][ T8666] ? _find_first_zero_bit+0xcf/0x100 [ 417.152799][ T8666] __lock_acquire+0x2d07/0x7d10 [ 417.157714][ T8666] ? ima_match_policy+0x107/0x2120 [ 417.162835][ T8666] ? __lock_acquire+0x7d10/0x7d10 [ 417.167889][ T8666] ? verify_lock_unused+0x140/0x140 [ 417.173102][ T8666] ? ima_match_policy+0x107/0x2120 [ 417.178256][ T8666] ? ima_match_policy+0x2093/0x2120 [ 417.183483][ T8666] lock_acquire+0x1bb/0x4a0 [ 417.188021][ T8666] ? process_measurement+0x3a2/0x1c30 [ 417.193401][ T8666] ? __might_sleep+0xd0/0xd0 [ 417.197994][ T8666] ? read_lock_is_recursive+0x10/0x10 [ 417.203385][ T8666] ? ima_get_action+0x71/0xa0 [ 417.208134][ T8666] down_write+0x36/0x60 [ 417.212328][ T8666] ? process_measurement+0x3a2/0x1c30 [ 417.217709][ T8666] process_measurement+0x3a2/0x1c30 [ 417.222918][ T8666] ? ima_file_mmap+0x150/0x150 [ 417.227690][ T8666] ? aa_file_perm+0x112/0xf00 [ 417.232392][ T8666] ? aa_file_perm+0x112/0xf00 [ 417.237117][ T8666] ? mtree_load+0x100/0xa70 [ 417.241674][ T8666] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 417.247865][ T8666] ima_file_mmap+0x102/0x150 [ 417.252467][ T8666] ? end_current_label_crit_section+0x14b/0x170 [ 417.258722][ T8666] ? ima_file_free+0x3e0/0x3e0 [ 417.263489][ T8666] ? common_file_perm+0x171/0x1c0 [ 417.268572][ T8666] ? bpf_lsm_mmap_file+0x5/0x10 [ 417.273437][ T8666] ? security_mmap_file+0x11b/0x180 [ 417.278653][ T8666] __se_sys_remap_file_pages+0x559/0x7b0 [ 417.284304][ T8666] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 417.290034][ T8666] ? lock_chain_count+0x20/0x20 [ 417.294903][ T8666] ? lockdep_hardirqs_on+0x94/0x140 [ 417.300109][ T8666] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 417.305845][ T8666] do_syscall_64+0x4c/0xa0 [ 417.310276][ T8666] ? clear_bhb_loop+0x60/0xb0 [ 417.314962][ T8666] ? clear_bhb_loop+0x60/0xb0 [ 417.319648][ T8666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.325559][ T8666] RIP: 0033:0x7f7ca2f9cdd9 [ 417.330007][ T8666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.349648][ T8666] RSP: 002b:00007f7ca3e2e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 417.358067][ T8666] RAX: ffffffffffffffda RBX: 00007f7ca3215fa0 RCX: 00007f7ca2f9cdd9 [ 417.366042][ T8666] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000903000 [ 417.374028][ T8666] RBP: 00007f7ca3032d69 R08: 0000000000000000 R09: 0000000000000000 [ 417.382010][ T8666] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 417.389991][ T8666] R13: 00007f7ca3216038 R14: 00007f7ca3215fa0 R15: 00007ffc097eb278 [ 417.397977][ T8666] [ 417.600202][ T8674] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1139'. [ 417.609302][ T8674] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1139'. [ 418.649196][ T6820] usb 5-1: USB disconnect, device number 11