ps_root_recvmsgcb: failed to send message to pid 4133: Connection refused ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsgcb: failed to send message to pid 4156: Connection refused ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsgcb: failed to send message to pid 4157: Connection refused ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsgcb: failed to send message to pid 4176: Connection refused [ 301.465571][ T3993] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 301.524638][ T3993] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 301.589321][ T3993] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 301.621534][ T3993] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 301.654699][ T3993] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 301.685225][ T3993] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsgcb: failed to send message to pid 4167: Connection refused ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsgcb: failed to send message to pid 4178: Connection refused ps_root_recvmsgcb: failed to send message to pid 4179: Connection refused ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsgcb: failed to send message to pid 4186: Connection refused ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument Warning: Permanently added '[localhost]:41748' (ECDSA) to the list of known hosts. ps_root_recvmsgcb: failed to send message to pid 4187: Connection refused ps_root_recvmsg: Invalid argument ps_root_recvmsg: Invalid argument [ 335.906418][ T3993] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 335.955134][ T3993] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. ps_root_recvmsgcb: failed to send message to pid 4197: Connection refused [ 336.022478][ T3993] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument 1970/01/01 00:05:40 fuzzer started 1970/01/01 00:05:52 dialing manager at localhost:36377 1970/01/01 00:05:56 syscalls: 2991 1970/01/01 00:05:56 code coverage: enabled 1970/01/01 00:05:56 comparison tracing: enabled 1970/01/01 00:05:56 extra coverage: enabled 1970/01/01 00:05:56 setuid sandbox: enabled 1970/01/01 00:05:56 namespace sandbox: enabled 1970/01/01 00:05:56 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:05:56 fault injection: enabled 1970/01/01 00:05:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:05:56 net packet injection: enabled 1970/01/01 00:05:56 net device setup: enabled 1970/01/01 00:05:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:05:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:05:56 USB emulation: enabled 1970/01/01 00:05:56 hci packet injection: /dev/vhci does not exist 1970/01/01 00:05:56 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:05:56 802.15.4 emulation: enabled 1970/01/01 00:05:59 fetching corpus: 50, signal 24301/25979 (executing program) ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument 1970/01/01 00:06:02 fetching corpus: 100, signal 30902/34131 (executing program) ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument 1970/01/01 00:06:05 fetching corpus: 150, signal 37346/41981 (executing program) 1970/01/01 00:06:06 fetching corpus: 200, signal 40916/46886 (executing program) 1970/01/01 00:06:08 fetching corpus: 250, signal 43893/51147 (executing program) 1970/01/01 00:06:10 fetching corpus: 300, signal 46220/54726 (executing program) 1970/01/01 00:06:12 fetching corpus: 350, signal 47810/57597 (executing program) 1970/01/01 00:06:15 fetching corpus: 400, signal 49423/60504 (executing program) [ 379.009990][ T2903] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.014529][ T2903] ieee802154 phy1 wpan1: encryption failed: -22 1970/01/01 00:06:17 fetching corpus: 450, signal 50697/63021 (executing program) 1970/01/01 00:06:19 fetching corpus: 500, signal 52619/66075 (executing program) 1970/01/01 00:06:22 fetching corpus: 550, signal 54860/69365 (executing program) 1970/01/01 00:06:24 fetching corpus: 600, signal 56074/71688 (executing program) 1970/01/01 00:06:25 fetching corpus: 650, signal 57697/74396 (executing program) 1970/01/01 00:06:27 fetching corpus: 700, signal 58537/76394 (executing program) 1970/01/01 00:06:29 fetching corpus: 750, signal 59518/78408 (executing program) 1970/01/01 00:06:31 fetching corpus: 800, signal 62025/81679 (executing program) 1970/01/01 00:06:33 fetching corpus: 850, signal 63274/83871 (executing program) 1970/01/01 00:06:35 fetching corpus: 900, signal 64782/86231 (executing program) 1970/01/01 00:06:36 fetching corpus: 950, signal 66113/88415 (executing program) ps_root_recvmsgcb: failed to send message to pid 4224: Connection refused ps_root_recvmsgcb: failed to send message to pid 4223: Connection refused 1970/01/01 00:06:39 fetching corpus: 1000, signal 67073/90300 (executing program) 1970/01/01 00:06:41 fetching corpus: 1050, signal 69315/93098 (executing program) 1970/01/01 00:06:43 fetching corpus: 1100, signal 70744/95265 (executing program) 1970/01/01 00:06:44 fetching corpus: 1150, signal 72073/97328 (executing program) 1970/01/01 00:06:45 fetching corpus: 1200, signal 72734/98877 (executing program) 1970/01/01 00:06:47 fetching corpus: 1250, signal 74573/101213 (executing program) 1970/01/01 00:06:49 fetching corpus: 1300, signal 75499/102922 (executing program) 1970/01/01 00:06:50 fetching corpus: 1350, signal 76060/104330 (executing program) 1970/01/01 00:06:52 fetching corpus: 1400, signal 76692/105738 (executing program) 1970/01/01 00:06:54 fetching corpus: 1450, signal 77267/107130 (executing program) 1970/01/01 00:06:56 fetching corpus: 1500, signal 77935/108589 (executing program) 1970/01/01 00:06:57 fetching corpus: 1550, signal 78719/110067 (executing program) 1970/01/01 00:06:59 fetching corpus: 1600, signal 80048/111836 (executing program) 1970/01/01 00:07:01 fetching corpus: 1650, signal 80653/113171 (executing program) 1970/01/01 00:07:03 fetching corpus: 1700, signal 81064/114352 (executing program) 1970/01/01 00:07:05 fetching corpus: 1750, signal 81749/115745 (executing program) ps_root_recvmsgcb: failed to send message to pid 4236: Connection refused 1970/01/01 00:07:06 fetching corpus: 1800, signal 82656/117234 (executing program) 1970/01/01 00:07:08 fetching corpus: 1850, signal 83509/118595 (executing program) ps_root_recvmsgcb: failed to send message to pid 4237: Connection refused 1970/01/01 00:07:10 fetching corpus: 1900, signal 84177/119892 (executing program) 1970/01/01 00:07:12 fetching corpus: 1950, signal 84612/121076 (executing program) 1970/01/01 00:07:14 fetching corpus: 2000, signal 85294/122335 (executing program) 1970/01/01 00:07:16 fetching corpus: 2050, signal 86053/123618 (executing program) [ 440.445986][ T2903] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.449722][ T2903] ieee802154 phy1 wpan1: encryption failed: -22 1970/01/01 00:07:18 fetching corpus: 2100, signal 86567/124765 (executing program) 1970/01/01 00:07:20 fetching corpus: 2150, signal 87217/125990 (executing program) 1970/01/01 00:07:22 fetching corpus: 2200, signal 87799/127167 (executing program) 1970/01/01 00:07:24 fetching corpus: 2250, signal 88612/128422 (executing program) 1970/01/01 00:07:26 fetching corpus: 2300, signal 89369/129630 (executing program) 1970/01/01 00:07:28 fetching corpus: 2350, signal 90131/130773 (executing program) 1970/01/01 00:07:29 fetching corpus: 2400, signal 90584/131801 (executing program) 1970/01/01 00:07:31 fetching corpus: 2450, signal 90972/132810 (executing program) 1970/01/01 00:07:33 fetching corpus: 2500, signal 91574/133899 (executing program) 1970/01/01 00:07:35 fetching corpus: 2550, signal 92279/135008 (executing program) 1970/01/01 00:07:35 fetching corpus: 2552, signal 92298/135829 (executing program) 1970/01/01 00:07:35 fetching corpus: 2552, signal 92298/136683 (executing program) 1970/01/01 00:07:35 fetching corpus: 2552, signal 92298/137554 (executing program) 1970/01/01 00:07:35 fetching corpus: 2552, signal 92298/138419 (executing program) 1970/01/01 00:07:35 fetching corpus: 2552, signal 92298/139241 (executing program) 1970/01/01 00:07:35 fetching corpus: 2552, signal 92298/140064 (executing program) 1970/01/01 00:07:36 fetching corpus: 2552, signal 92298/140867 (executing program) 1970/01/01 00:07:36 fetching corpus: 2552, signal 92298/141716 (executing program) 1970/01/01 00:07:36 fetching corpus: 2552, signal 92298/142576 (executing program) 1970/01/01 00:07:36 fetching corpus: 2552, signal 92298/143415 (executing program) 1970/01/01 00:07:36 fetching corpus: 2552, signal 92298/144279 (executing program) 1970/01/01 00:07:36 fetching corpus: 2552, signal 92298/145132 (executing program) 1970/01/01 00:07:36 fetching corpus: 2552, signal 92298/145943 (executing program) 1970/01/01 00:07:37 fetching corpus: 2552, signal 92298/146793 (executing program) 1970/01/01 00:07:37 fetching corpus: 2552, signal 92298/147667 (executing program) 1970/01/01 00:07:37 fetching corpus: 2552, signal 92298/148512 (executing program) 1970/01/01 00:07:37 fetching corpus: 2552, signal 92298/149361 (executing program) 1970/01/01 00:07:37 fetching corpus: 2552, signal 92298/150210 (executing program) 1970/01/01 00:07:37 fetching corpus: 2552, signal 92298/151051 (executing program) 1970/01/01 00:07:37 fetching corpus: 2552, signal 92298/151840 (executing program) 1970/01/01 00:07:38 fetching corpus: 2552, signal 92298/152697 (executing program) 1970/01/01 00:07:38 fetching corpus: 2552, signal 92298/153562 (executing program) 1970/01/01 00:07:38 fetching corpus: 2552, signal 92298/154361 (executing program) 1970/01/01 00:07:38 fetching corpus: 2552, signal 92298/155207 (executing program) 1970/01/01 00:07:38 fetching corpus: 2552, signal 92298/156015 (executing program) 1970/01/01 00:07:38 fetching corpus: 2552, signal 92298/156863 (executing program) 1970/01/01 00:07:38 fetching corpus: 2552, signal 92298/157705 (executing program) 1970/01/01 00:07:39 fetching corpus: 2552, signal 92298/158532 (executing program) 1970/01/01 00:07:39 fetching corpus: 2552, signal 92298/158933 (executing program) 1970/01/01 00:07:39 fetching corpus: 2552, signal 92298/158933 (executing program) ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument [ 501.886084][ T2903] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.892996][ T2903] ieee802154 phy1 wpan1: encryption failed: -22 ps_root_recvmsgcb: failed to send message to pid 4239: Connection refused ps_root_recvmsgcb: failed to send message to pid 4238: Connection refused 1970/01/01 00:08:47 starting 2 fuzzer processes 00:09:03 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x64, 0x0, &(0x7f0000000100)=[@acquire, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x7, 0x0, 0x2d}, @fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x1101, 0x1}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}}, @increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x2}], 0xcd, 0x0, &(0x7f0000000180)="5a6a6b90505a335a82be99fb6deb3faefbfeb191c6955b2ee93de798eea75009b9fb737bde15bb68f8a54f8229de38785139a0bd57a9c7c63e35be2b8091f0d6c04c6dad174e55c83b78999ba39963bc2eb68b5ae33adea3f35b096427ebd97106b4d6a2f30de8214aad5aabc19cd206d1a130c5f067fc95c401cf7f0fa926e7a7fe79ff0ffd46cea02c6d01da0571041686c41f88e165b23de9968aadd6ee797f5ef2f05d1324b19a54dd020548309c872713a34da0a3023fb42f8593d1e2f5da21c087ef9e422d6eee8c1ff0"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000004c0)={0x1, 0x1, 0x1000, 0xe2, &(0x7f00000002c0)="726659cd52ce30f66d261a47a67fcc67aacbfe2e63b7f1f761ec27144668bd276f3bc9524a1a8ad02b019814e823c64f010a3281d6d3e4924e554fca1a16065f39c9d102c92676600cefc674b6c6abe3c84e4629c660d3cc27b233241cbd5eeee3d96a3e91a47bf7237fac99340497bc3632592a3aad4ff64e6be4b83f5073c83757f420e172564c0a7727b9af308d45400b681582ddffe99fad16a12ede8a2bb3dc2a1661dffb843bf9878b5a209acc530bdde86e14b837bcd8e86e9d72713cf46a75bd2e56e8d3ecf3c1db73f4bcfc68818a83a25e04505ee01c5ecd56525962b3", 0xd0, 0x0, &(0x7f00000003c0)="6d3fddadd162f163dcd270479c6b7e8c3917c5bb6d7dd694594e233afc087498ea4032765618af964fbfaa479d1cd844a77b15f0a4019399905c7d2415f38da3883bb155bdaa51a325f9613830257bf903422b7d15c932e70ff7e94bb2b3dce9bbeeb4b332a1dee17f0d09dc2a667e9f060c53758d1e2600ef290a1a430318172137fefaf50c9d8fac0eb9213e5c28d88c126737d27baa4bc5cb2c18641c9712d29cf6465825e02bba2e8883a04f996f639b358482c9615a6d87370c074a9ed4ad5d90d9766d620edbf5d9807c17a3af"}) fcntl$lock(r1, 0x25, &(0x7f0000000540)={0x0, 0x3, 0x9, 0xfffffffffffffffb, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000580)={0x73622a85, 0xa, 0x1}) r2 = fsmount(0xffffffffffffffff, 0x1, 0x84) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000005c0)={0x1f, 0x1, {0x0, 0x1, 0x2, 0x3, 0x1}, 0xb5}) r3 = syz_open_dev$audion(&(0x7f0000000640)='/dev/audio#\x00', 0x0, 0x210004) getsockname$tipc(r3, &(0x7f0000000680)=@name, &(0x7f00000006c0)=0x10) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000700)={0x0, 0x40, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000780)={&(0x7f0000000740)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r5 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000a40)={0x50, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000840)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f00000007c0)=""/92, 0x5c, 0x0, 0x3f}, @flat=@handle={0x73682a85, 0x100a}}, &(0x7f00000008c0)={0x0, 0x18, 0x40}}}, @free_buffer={0x40086303, r5}], 0xb8, 0x0, &(0x7f0000000980)="c0b2e34969cc4ea4c69ca38a4f39c0abccbda9c5b33a6fdc7c23ed50347e3605e1d8cd7f2f0d19992e13444c78a67be1ae864c54505a9f2691b8b3ec672b68e7e16722de3d6b0104f4d332cfd09bc1df1947e95ed2051b9d21994aabadd2e0a91d8c0e3b5fc8e5ec1e7b236f55024a7ae9c9a715ef0bba6e579572ad79ffaf0caf19668aaa848eda533203ce74c5fc617eeb26cfae5aab171ded7404be043cf592b7d4421fcc3939364371f77052106b93896c483235a674"}) getresuid(&(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)=0x0) statx(r4, &(0x7f0000000b80)='./file0\x00', 0x0, 0x2, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f0000000dc0)=0xe8) read$FUSE(r3, &(0x7f0000000e00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fsetxattr$system_posix_acl(r0, &(0x7f0000000a80)='system.posix_acl_default\x00', &(0x7f0000002e40)={{}, {0x1, 0x3}, [{0x2, 0x4, r6}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x4, r7}, {0x2, 0x6, 0xee01}, {0x2, 0x6, 0xee01}, {0x2, 0x0, r8}, {0x2, 0x1, r9}], {0x4, 0xb}, [{0x8, 0x4, 0xee00}, {0x8, 0x2, 0xee00}, {0x8, 0x7, 0xee00}], {0x10, 0x2}, {0x20, 0x1}}, 0x74, 0x2) ps_root_recvmsgcb: failed to send message to pid 4240: Connection refused [ 556.171006][ T4250] IPVS: ftp: loaded support on port[0] = 21 [ 558.774462][ T4250] chnl_net:caif_netlink_parms(): no params data found ps_root_recvmsgcb: failed to send message to pid 4241: Connection refused [ 560.815000][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.850362][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.934658][ T4250] device bridge_slave_0 entered promiscuous mode [ 561.085799][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.099747][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.173758][ T4250] device bridge_slave_1 entered promiscuous mode [ 561.863718][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.964565][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.568211][ T4250] team0: Port device team_slave_0 added [ 562.671699][ T4250] team0: Port device team_slave_1 added [ 563.324122][ T2903] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.325938][ T2903] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.402317][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.403932][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.420724][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.576253][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.587712][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.589941][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.333874][ T4250] device hsr_slave_0 entered promiscuous mode [ 564.421738][ T4250] device hsr_slave_1 entered promiscuous mode [ 569.314406][ T4250] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 569.496529][ T4250] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 569.628653][ T4250] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 570.002319][ T4250] netdevsim netdevsim0 netdevsim3: renamed from eth3 00:09:28 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x8}, 0x10) ioctl$SNDCTL_TMR_SELECT(r1, 0x40045408) finit_module(r0, &(0x7f0000000080), 0x1) r2 = accept$alg(r1, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) r3 = syz_open_dev$char_raw(&(0x7f00000000c0)='/dev/raw/raw#\x00', 0x1, 0x518040) fcntl$setpipe(r3, 0x407, 0x802) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x9c71, 0x8000, 0x0, 0x81, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r4, 0x5, 0x0, 0x7, 0x6}, &(0x7f00000001c0)=0x18) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2d}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x2404c055) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="8828c1439a0e1c6264e7fbe9562fc1d3f25550aa808768cfa6a46327e2fc2601982ee241aefe476376d3256415b0ffd4bbcdbac90568c27a7312b9f8c85561111b3b9d4572087dfba65265eec7e51f9432483209cc359ff183145a24454aa02d4150cb0ad651e4a7935d6fec3bf29ce563bb3dc26b33f80e3d82ac30dcfcd4173534af8567bddce39132054528199be51940c45a3270a7ba86de09a5671bc398d0bf52e94426d1d492ce6c4a0cdc36e99384e5aaa870b9d1ad94ffa3ae355c1a5568a76673123c4a0c78f64c26fedef50b02aae315598e22cb7aa98614b1fe25939032768bf42bda9e0655add3d318d4398e", 0xf2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0x0, 0x400, 0x70bd25, 0x4ef68085, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4021) r6 = fspick(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r6, 0x4008f50a, &(0x7f0000000580)={0x1, 0x7}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000005c0)={r5, 0x5, 0x2}, &(0x7f0000000600)=0x8) r7 = openat$incfs(r1, &(0x7f0000000640)='.pending_reads\x00', 0x80, 0x3c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r7, 0x84, 0x65, &(0x7f0000000680)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}, @in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}], 0x2c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f00000006c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 573.864835][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.229831][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 574.314675][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 574.630437][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.801644][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 574.834966][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 574.868215][ T2610] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.871461][ T2610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.011996][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 575.491648][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 575.541629][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 575.559424][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.561411][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.596303][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 575.950010][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 576.240944][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 576.335004][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 576.381658][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 576.640873][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 576.689867][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 576.970862][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 577.010307][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 577.292498][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 577.342023][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 577.714508][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 578.902816][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 578.919414][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 579.554551][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.660271][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 580.725829][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 586.193704][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 586.346542][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 586.470678][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 586.495048][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 586.615346][ T4250] device veth0_vlan entered promiscuous mode [ 587.160687][ T4250] device veth1_vlan entered promiscuous mode [ 588.504028][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 588.565108][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 588.836020][ T4250] device veth0_macvtap entered promiscuous mode [ 589.212391][ T4250] device veth1_macvtap entered promiscuous mode [ 589.568691][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 590.236256][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.284364][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 590.340838][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 590.605537][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.611340][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 590.696516][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 590.874964][ T4250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.881053][ T4250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.882749][ T4250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.884307][ T4250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument [ 594.326494][ T4250] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 597.156196][ T4480] IPVS: ftp: loaded support on port[0] = 21 [ 602.835561][ T4480] chnl_net:caif_netlink_parms(): no params data found 00:10:01 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x410042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000002c0), &(0x7f0000000340)=0x68) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x7c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x401, 0x12}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}], @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x7c}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x6c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3bc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc07}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x148}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000000) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366cd155d00080101000240002000f801002000400000000000000000008000"/64, 0x40}, {&(0x7f0000010100)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x800}, {&(0x7f0000010200)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x1000}, {&(0x7f0000010300)="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", 0x120, 0x1800}, {&(0x7f0000010500)="2e20202020202020202020100011e970325132510000e97032510300000000002e2e202020202020202020100011e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200011e970325132510000e970325104001a040000", 0x80, 0x2800}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x3000}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x3800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x6800}], 0x0, &(0x7f0000010d00)) [ 605.549081][ T4480] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.551743][ T4480] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.689601][ T4480] device bridge_slave_0 entered promiscuous mode [ 605.842471][ T4480] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.859671][ T4480] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.922259][ T4480] device bridge_slave_1 entered promiscuous mode [ 606.353010][ T4627] loop0: detected capacity change from 0 to 128 [ 607.103028][ T4480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.244672][ T4480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.062622][ T4480] team0: Port device team_slave_0 added [ 609.231885][ T4480] team0: Port device team_slave_1 added [ 610.091907][ T4480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.093062][ T4480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.095367][ T4480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.312217][ T4480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.313436][ T4480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.315231][ T4480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.378202][ T4480] device hsr_slave_0 entered promiscuous mode [ 611.422188][ T4480] device hsr_slave_1 entered promiscuous mode [ 611.460833][ T4480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 611.466563][ T4480] Cannot create hsr debugfs directory 00:10:10 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x40, 0x32, 0xd5, {0xd5, 0x23, "a421f6a9e32461d505d9bb0c7697b5c5d1615bc73867035856ccc4a1a2dd93c696a69efcaa71a3f440c2fc25b155dfadff6bdbd7723860d23808218dd3b93691dbdc36f529ce6c6db0a0148c0641afd0bbbecc5575f5131a67a10241afcf13539b70bf77bd214365f90e83820241acec2f4291293705b3fc82cd2e8fd6dd6ac247b37e0d1c3f532e80e42cf9355bb8cf16b56862f82b97cc255352153e47972c9c32e5abe76d32fec7349892ce82c3afff705f4029e89f2ee683a0698a7018508e04c32b786f03003153c6ef7823904f03aacc"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}}, &(0x7f0000000380)={0x34, &(0x7f00000001c0)={0x0, 0x30, 0x76, "77d83ae934f0bdf8d776e1f9d179af6f6f70eb25ddfe6f52bf3983bbd51042fdd0f5c0d8fe9cff99964c978a759cae2c2f511762237e84a04ff34557c6da35ce30c7062641917c124bef22042263bcce438a1db4dae9ac1ab07fdf38d16bdeb5cfb546b0635252fe4d749c499377ce97eae357a00e75"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000002c0)={0x20, 0x0, 0x15, {0x13, "3419e95e836339a435e8f842ae2295ff1848ff"}}, &(0x7f0000000300)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000340)={0x20, 0x0, 0x1, 0x8}}) r1 = syz_usb_connect(0x4, 0x511, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0xaa, 0x68, 0x20, 0x87, 0x1737, 0x70, 0xc345, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4ff, 0x1, 0x17, 0xff, 0x60, 0x20, [{{0x9, 0x4, 0xc2, 0x80, 0xb, 0xef, 0xf7, 0x2a, 0x3, [@generic={0xa2, 0x30, "fd5b118c91270467f53541de8e17cec2299e5cb4dbc59a630e6af1535d3273869edb0b536cdf6997382a99d3249cbf569b16a7ed562e87576e9bbb36429c8dd4eb12e1f60ebf8a49a0abaa929410b6161fbcbeabde6aa49ed46f5aee237a2c7ed1c18fd59e1be893fffcd68b36bc9cbff19592f2779c2f6cf0bd12ac840cfdc71b59662d64c0e8d18a6491eba356c8df7f052260e316d9dc3904aa484754f7f5"}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "83c8a09f"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xe5, 0x3, 0x0, 0x2c}, {0x6, 0x24, 0x1a, 0x3, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x7c, 0x4, 0x7f, 0xff}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x40, 0x800}, @acm={0x4, 0x24, 0x2, 0x6}, @dmm={0x7, 0x24, 0x14, 0x5, 0x401}, @mbim={0xc, 0x24, 0x1b, 0x53, 0x4, 0x3, 0x7, 0x4, 0x2}, @mdlm_detail={0x70, 0x24, 0x13, 0x40, "2ea60162117c3135d5b6069c093f5c36628389df9a4f8ce72cf7198e385a4dd91489fa4d595e763a66028d96a0179bebdd53d8fa728acf52e9567b0b2fa0a3cc818453e09131245cf00d731f416233f1afd8b0a52267b5a2b7028427851cb25963f9eddf94f4610577d5378e"}]}], [{{0x9, 0x5, 0x3, 0x10, 0x200, 0x2, 0x6, 0x5}}, {{0x9, 0x5, 0xa, 0x3, 0x20, 0xa1, 0x3, 0x7, [@generic={0xfe, 0xc, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x40, 0x21, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0xe2d}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0xd90}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0xf9, 0x3, 0xdb, [@generic={0x28, 0x8, "d62d78d796127be143acde64ebfcaff876f8673c598035e3123aa00b57a23b7f5006546294af"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0xb0, 0x5, 0x9}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x2, 0x8, 0x46}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x8, 0x0, 0x80, [@generic={0xd4, 0x31, "1337042c27ce888a2683418c1494c0cb6d4ca66df8507bd09e2609dcf559072c9197cb26a69ffbf52e7036247741a72797ad0a3ca2bf5f57d14e82684ea2ec4c30aba22e6720c559a5cfa14cfe263069afc49e428827aa9694b079e163faa1e9ef3eece6063358c379228f70d9b93abc9e4b16f0a936cdd7e6086b6e5bc5998969a5b15e4d427631ca3c7cabe58739a766d41e3f3c47ac3de4ae6f22d11ab50ab0cd1ab9d53bcb68d98c305696c577e1cd28ed4f62e7c682a8cfb0152c1617a76bf67f04b2555577cb390c7622caf045d385"}, @uac_iso={0x7, 0x25, 0x1, 0x41, 0x0, 0xfff}]}}, {{0x9, 0x5, 0xe, 0x13, 0x10, 0xf8, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0xec}, @generic={0x42, 0x23, "048ea4d34320860c9cebf9e4b7c9a0cef091b37a36198706978c1d5aa5508f17c47c8a8d6d04b006e0681404ac7316e2fb0d01fb0e2dbc8beabf7a8146db2aad"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x3ff, 0x5, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xdc6d}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3f}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0xb0, 0x8, 0xc8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfc, 0x5}]}}, {{0x9, 0x5, 0x80, 0xc, 0x48, 0x8b, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x4}, @generic={0xb6, 0x72, "b2f85ee6b2e08993463ace96981995bc6735553186c379d9ad1ebe281fd6b728a2da56a6a907a41761418c848b63c71bf1a35916f82b33476d7da9c578e0628869065276decbe295c7b5d489726dc17819523d3d7e78854e83d7ab2765a788031402e5cff1692339c40cfa59ac5abe84de8efd43e85882856c1724bed5d34316539c8b4f8456ee7c09b0de086de5675479cc0a2cd29faf8de263ecffb5d747feeb5d6a108f34670295b712be6048ad03f8a57f75"}]}}]}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x238, 0x0, 0x8, 0x1, 0x20, 0x6}, 0x72, &(0x7f0000000940)={0x5, 0xf, 0x72, 0x1, [@generic={0x6d, 0x10, 0x1, "fc5232f70481b7f3e8b7c06c1dce742bbbd7219ee8809040a715281a7a1a5d3789d3039a89717fc5449c8dd48ed382f64eae1e04e208033060ba9df67becb51ce3523d50ebdd3ea3f281d90944c9ea6ba2607d0f1a7a47eced264d71501ded965dc38b147148688f74c8"}]}, 0x3, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000c80)={0x14, &(0x7f0000000ac0)={0x20, 0x21, 0xcc, {0xcc, 0x24, "abb80b1041adf68bf6b9321ad813f2bb545441e9fd0ff861a1fbdbafaea7245bf702e54690255b02183bd143f8d5e07634312842c9801e7d634e42bd231c7495159ae280687e685cd0f210e8444e53ac307e2f65fdc55ae0b0f10f616ead49ac526a842a0b7d317df6507aa7aeccbac5a7e107254cf0f2ef073cf83d444990cdd0cc7f660671e7b32cf5a41adfb93aa573df69cee5bfdb1c28e6773d4352ae796d73db07468ce5cc2c6ec39a4f9c3b598b32f3f00e4ba9dd08ef3a1577f68adbebe39dce0dc7c01dcde5"}}, &(0x7f0000000bc0)={0x0, 0x3, 0xaf, @string={0xaf, 0x3, "27d01d83e910565549dd8407bb09d886731f1d213c64c2900690af4b7f5d3af50d34e106fc0f62f1e2a33dadb0e00fde6981f42d2836a66844363c77374038576ac58984eea50862cb146926f493f2662ff8d3ccc73880e6a38806a364b2c3a90a2be96c097f5532565cc59590c8d664deba1c89aac73697423b382185d377b8ffe599f1d0fc722f46643dd7773cbe1a5dd9021ddef3df2846df66c957605a0bb4bce29fec2da035433c579928"}}}, &(0x7f0000000fc0)={0x34, &(0x7f0000000cc0)={0x20, 0xd, 0xfd, "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"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000e80)={0x20, 0x0, 0xa1, {0x9f, "773e696950e026864003c91d9c593f36222b627a1c1ca2a7ba293204d3dbbe1f3b3287c43364bc779a90c5e4a61b57c757a41c06bb42abaaaaa0864431e8a3474c7625e1adad0e7d6830ef73e49ea331d8fa6648aca26fc40ec88cbc498a491d50d40e5788f56e117e74529bb6a8b0deeaa34045d431b2f05591893db930f3e1900f18ea5f6a2dd3bff5c070cb23ff19aef9c3a4c886792463cf9875737786"}}, &(0x7f0000000f40)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000f80)={0x20, 0x0, 0x1, 0x9}}) [ 615.333897][ T3925] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 615.769027][ T3925] usb 1-1: Using ep0 maxpacket: 32 [ 615.913683][ T3925] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 615.940786][ T3925] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 615.942619][ T3925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.146149][ T3925] usb 1-1: config 0 descriptor?? [ 618.171655][ T4480] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 618.551157][ T4480] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 618.738369][ T4480] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 618.940466][ T4480] netdevsim netdevsim1 netdevsim3: renamed from eth3 ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument [ 623.265761][ T4480] 8021q: adding VLAN 0 to HW filter on device bond0 ps_bpf_start_bpf: bpf_open: Invalid argument ps_root_recvmsg: Invalid argument [ 624.524433][ T4480] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.626349][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 624.721727][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 624.765974][ T2903] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.769619][ T2903] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.992655][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 625.025683][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 625.032545][ T4472] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.033589][ T4472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.052462][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 625.200400][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 625.261890][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 625.274401][ T4472] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.276190][ T4472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.509391][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 625.716422][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 626.921371][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 627.005894][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 627.073790][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 627.151398][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 627.191833][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 627.280664][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 627.431686][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 627.681544][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 627.750149][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 628.069837][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 628.753947][ T4472] usb 1-1: USB disconnect, device number 2 [ 629.485561][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 629.500600][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 629.966057][ T4480] 8021q: adding VLAN 0 to HW filter on device batadv0 00:10:28 executing program 0: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x600002, 0x12) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=[0x0, &(0x7f0000000540)='\x00', &(0x7f00000003c0)='\x00'], 0x1000) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x138, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x83}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x22}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffb}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x78}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf2a3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}]}, 0x138}, 0x1, 0x0, 0x0, 0xfe451f6fe57bf89d}, 0x8004) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) [ 631.435869][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 631.489402][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 641.682756][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 641.745839][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 641.824998][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 641.855004][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 641.962348][ T4480] device veth0_vlan entered promiscuous mode [ 642.783555][ T4480] device veth1_vlan entered promiscuous mode [ 644.368729][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 644.449600][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 644.831649][ T4480] device veth0_macvtap entered promiscuous mode [ 645.194360][ T4480] device veth1_macvtap entered promiscuous mode [ 645.428925][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 646.371846][ T4480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 646.388906][ T4480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.532969][ T4480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.553407][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 646.740157][ T2610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 647.025800][ T4480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 647.058483][ T4480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.179145][ T4480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.414115][ T4480] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.415957][ T4480] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.433797][ T4480] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.435054][ T4480] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.665754][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 647.676230][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:10:53 executing program 0: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x600002, 0x12) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=[0x0, &(0x7f0000000540)='\x00', &(0x7f00000003c0)='\x00'], 0x1000) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x138, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x83}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x22}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffb}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x78}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf2a3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}]}, 0x138}, 0x1, 0x0, 0x0, 0xfe451f6fe57bf89d}, 0x8004) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) 00:10:53 executing program 1: r0 = syz_io_uring_setup(0xd08, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) io_uring_enter(r0, 0x7c34, 0xd31c, 0x2, &(0x7f0000000080)={[0x9]}, 0x8) syz_io_uring_setup(0x5969, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x16f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x20080, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) syz_io_uring_setup(0x36db, &(0x7f0000000200)={0x0, 0x1413, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000003c0)) ps_root_recvmsgcb: failed to send message to pid 4487: Connection refused ps_root_recvmsgcb: failed to send message to pid 4488: Connection refused 00:11:01 executing program 1: r0 = syz_io_uring_setup(0xd08, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) io_uring_enter(r0, 0x7c34, 0xd31c, 0x2, &(0x7f0000000080)={[0x9]}, 0x8) syz_io_uring_setup(0x5969, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x16f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x20080, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) syz_io_uring_setup(0x36db, &(0x7f0000000200)={0x0, 0x1413, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000003c0)) 00:11:03 executing program 0: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x13f, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12d, 0x1, 0x1, 0x80, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x40, 0x3, 0x2, 0x6, 0x0, 0x3f, {{0x8, 0x24, 0x6, 0x0, 0x0, "9711aa"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0xffff, 0x2}, [@country_functional={0x10, 0x24, 0x7, 0x69, 0xff, [0x7, 0x6, 0x7, 0x94db, 0xe0d3]}, @ncm={0x6, 0x24, 0x1a, 0x5d, 0x2}, @acm={0x4, 0x24, 0x2, 0x4}, @acm={0x4, 0x24, 0x2, 0x8}, @mdlm_detail={0xbc, 0x24, 0x13, 0x6, "bfeae76ce33701feed67ed53c60c19b516c41f710cc1bb6d27ef00627a92eb80f053c1c0945653a501a39399fed000cc3151523f491e4ee0222b48d2f0c986b9115c457ce4901d527e6bedd1358e4b9dd40cb5bebfee43cfd2a7a76e1e4629264f8f13ae11d2d54752567ea895676f9475edb28c5f2879f7b3979647be3a8f13af027f9f7fdaf4a6a2b78b3e37d784176bebd325e1754103e6fcea01fea5d08dc86dca707e7d11c343c697db348845c3603d16b90d0aa0e5"}, @mbim={0xc, 0x24, 0x1b, 0x41, 0xa0a3, 0x3f, 0x94, 0x2, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xf8, 0x7, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x3, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7f, 0x0, 0x6}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x7f, 0x1, 0x7f, 0x40, 0x9}, 0x13, &(0x7f0000000100)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2a, 0x1, 0x20, 0x8000, 0x2a}]}, 0x9, [{0xe8, &(0x7f0000000300)=@string={0xe8, 0x3, "020da6560b5ab52f9b3d46e2c6bac791a5a92b0737ba8b7ce5aa077ba013ac3a69b69208e0ec393b300e6ab1fc28f46c796e1ddfda62e3b6523940e3de14beceefc046eda2bbe4362ac43cb8af7393523b1c513d864668b706eb73a325cc60b79049314673b12a40b268a3b92a8261a84e6e0693e3ea4adf39f067d25d5bde784a47a216b807a11cd7a896d5102bb44b82b4592071b6bd4bcea1cf83d9c4907058d214ec919ae18e30770b32d4675588f61fa533e1794f2f5cb74777eddd1be48a755a62a328ff4df1c93e0f36e621fba51e1ebcaa987ce064649104a18fcf5f10338e2a5734"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xf8fc}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1409}}, {0xa6, &(0x7f0000000480)=@string={0xa6, 0x3, "3b51f732c3a1fca9b05c58c3343b16e293ec19e3e4f34a5517ddb6c5b89bd1025924087fe69b2226326ba5290144f9fc99fd0121372d0b23a9358a5dc058860d04634ee19dd219c3ea0e3ab4d359a42844e88104c77c79b77efa004d4eaaad33387c633730c80c3a1953e2ccf1a07a3e42ed4c7b734f7bd5e6d047ca3bee0ca3eb234c43bac520287c4b68b3b2dd1e1ad38bf2623bc163c157fe22bc799475ad7fd76e62"}}, {0x24, &(0x7f0000000540)=@string={0x24, 0x3, "046e79e56a4d8e4f19030c8269681abccf1398c00ab8b1ce15b97353857c465ef170"}}, {0x19, &(0x7f0000000580)=@string={0x19, 0x3, "f55458e3ad377769d3c5089f6b6a07f169688435d60fa6"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x860}}, {0xa7, &(0x7f0000000600)=@string={0xa7, 0x3, "0921d89ccf4594e4bd7b299656564f00dfd4232119eeb51e7a24f9c29da3430ffeb05efdf13c784d8b45f81d16bd30123620dbee30e25461021488c8645909f036286e60dfa717959c983be82ef20476db4bc852c90a539cd913e7b075655b87f3dd747819a978fbb5205eefd58e2a30ceb33442fae0aa55ca4ac1df72e51aca39a8f8745583f036a29ca332ae67bb985329deb89c22810a1fcc2062b9120c8aa868db0db2"}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000800)={0x14, &(0x7f0000000780)={0x0, 0xa, 0x1d, {0x1d, 0x24, "301cb9420d3768b79412c5b53358b7d61d9e95cfeff7677113154d"}}, &(0x7f00000007c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x1c, &(0x7f0000000840)={0x0, 0x16, 0x5d, "693d84e87ac81968521a577140d60c3dcea92d261e94aa6fef44cc82d9c0564ac2a040d2121040e9016cbc558073576513eb9a28cb2bfcdc5baa58457ae0ccaa6282fd226e0ab7f32eb10a1abd43c161cba848dadd55a009522cd5c77c"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x62}}) [ 669.231134][ T5] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 669.611925][ T5] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 669.715246][ T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 669.728972][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 669.730596][ T5] usb 1-1: SerialNumber: syz 00:11:08 executing program 1: r0 = syz_io_uring_setup(0xd08, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) io_uring_enter(r0, 0x7c34, 0xd31c, 0x2, &(0x7f0000000080)={[0x9]}, 0x8) syz_io_uring_setup(0x5969, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x16f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x20080, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) syz_io_uring_setup(0x36db, &(0x7f0000000200)={0x0, 0x1413, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000003c0)) [ 671.535614][ T5] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 671.706473][ T4767] udc-core: couldn't find an available UDC or it's busy [ 671.724141][ T4767] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 672.434079][ T4473] usb 1-1: USB disconnect, device number 3 [ 672.493032][ T4473] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 675.499539][ T4473] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 675.872414][ T4473] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 676.001218][ T4473] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 676.003171][ T4473] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 676.004665][ T4473] usb 1-1: SerialNumber: syz [ 677.580862][ T4473] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 677.596008][ T4767] udc-core: couldn't find an available UDC or it's busy [ 677.700748][ T4767] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 677.757757][ T4473] usb 1-1: USB disconnect, device number 4 [ 677.855615][ T4473] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device 00:11:16 executing program 1: r0 = syz_io_uring_setup(0xd08, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) io_uring_enter(r0, 0x7c34, 0xd31c, 0x2, &(0x7f0000000080)={[0x9]}, 0x8) syz_io_uring_setup(0x5969, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x16f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x20080, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) syz_io_uring_setup(0x36db, &(0x7f0000000200)={0x0, 0x1413, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000003c0)) 00:11:19 executing program 0: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x13f, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12d, 0x1, 0x1, 0x80, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x40, 0x3, 0x2, 0x6, 0x0, 0x3f, {{0x8, 0x24, 0x6, 0x0, 0x0, "9711aa"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0xffff, 0x2}, [@country_functional={0x10, 0x24, 0x7, 0x69, 0xff, [0x7, 0x6, 0x7, 0x94db, 0xe0d3]}, @ncm={0x6, 0x24, 0x1a, 0x5d, 0x2}, @acm={0x4, 0x24, 0x2, 0x4}, @acm={0x4, 0x24, 0x2, 0x8}, @mdlm_detail={0xbc, 0x24, 0x13, 0x6, "bfeae76ce33701feed67ed53c60c19b516c41f710cc1bb6d27ef00627a92eb80f053c1c0945653a501a39399fed000cc3151523f491e4ee0222b48d2f0c986b9115c457ce4901d527e6bedd1358e4b9dd40cb5bebfee43cfd2a7a76e1e4629264f8f13ae11d2d54752567ea895676f9475edb28c5f2879f7b3979647be3a8f13af027f9f7fdaf4a6a2b78b3e37d784176bebd325e1754103e6fcea01fea5d08dc86dca707e7d11c343c697db348845c3603d16b90d0aa0e5"}, @mbim={0xc, 0x24, 0x1b, 0x41, 0xa0a3, 0x3f, 0x94, 0x2, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xf8, 0x7, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x3, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7f, 0x0, 0x6}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x7f, 0x1, 0x7f, 0x40, 0x9}, 0x13, &(0x7f0000000100)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2a, 0x1, 0x20, 0x8000, 0x2a}]}, 0x9, [{0xe8, &(0x7f0000000300)=@string={0xe8, 0x3, "020da6560b5ab52f9b3d46e2c6bac791a5a92b0737ba8b7ce5aa077ba013ac3a69b69208e0ec393b300e6ab1fc28f46c796e1ddfda62e3b6523940e3de14beceefc046eda2bbe4362ac43cb8af7393523b1c513d864668b706eb73a325cc60b79049314673b12a40b268a3b92a8261a84e6e0693e3ea4adf39f067d25d5bde784a47a216b807a11cd7a896d5102bb44b82b4592071b6bd4bcea1cf83d9c4907058d214ec919ae18e30770b32d4675588f61fa533e1794f2f5cb74777eddd1be48a755a62a328ff4df1c93e0f36e621fba51e1ebcaa987ce064649104a18fcf5f10338e2a5734"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xf8fc}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1409}}, {0xa6, &(0x7f0000000480)=@string={0xa6, 0x3, "3b51f732c3a1fca9b05c58c3343b16e293ec19e3e4f34a5517ddb6c5b89bd1025924087fe69b2226326ba5290144f9fc99fd0121372d0b23a9358a5dc058860d04634ee19dd219c3ea0e3ab4d359a42844e88104c77c79b77efa004d4eaaad33387c633730c80c3a1953e2ccf1a07a3e42ed4c7b734f7bd5e6d047ca3bee0ca3eb234c43bac520287c4b68b3b2dd1e1ad38bf2623bc163c157fe22bc799475ad7fd76e62"}}, {0x24, &(0x7f0000000540)=@string={0x24, 0x3, "046e79e56a4d8e4f19030c8269681abccf1398c00ab8b1ce15b97353857c465ef170"}}, {0x19, &(0x7f0000000580)=@string={0x19, 0x3, "f55458e3ad377769d3c5089f6b6a07f169688435d60fa6"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x860}}, {0xa7, &(0x7f0000000600)=@string={0xa7, 0x3, "0921d89ccf4594e4bd7b299656564f00dfd4232119eeb51e7a24f9c29da3430ffeb05efdf13c784d8b45f81d16bd30123620dbee30e25461021488c8645909f036286e60dfa717959c983be82ef20476db4bc852c90a539cd913e7b075655b87f3dd747819a978fbb5205eefd58e2a30ceb33442fae0aa55ca4ac1df72e51aca39a8f8745583f036a29ca332ae67bb985329deb89c22810a1fcc2062b9120c8aa868db0db2"}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000800)={0x14, &(0x7f0000000780)={0x0, 0xa, 0x1d, {0x1d, 0x24, "301cb9420d3768b79412c5b53358b7d61d9e95cfeff7677113154d"}}, &(0x7f00000007c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x1c, &(0x7f0000000840)={0x0, 0x16, 0x5d, "693d84e87ac81968521a577140d60c3dcea92d261e94aa6fef44cc82d9c0564ac2a040d2121040e9016cbc558073576513eb9a28cb2bfcdc5baa58457ae0ccaa6282fd226e0ab7f32eb10a1abd43c161cba848dadd55a009522cd5c77c"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x62}}) [ 684.809140][ T4472] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 685.279787][ T4472] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 685.359184][ T4472] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 685.360903][ T4472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 685.379921][ T4472] usb 1-1: SerialNumber: syz 00:11:23 executing program 1: r0 = syz_io_uring_setup(0xd08, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) io_uring_enter(r0, 0x7c34, 0xd31c, 0x2, &(0x7f0000000080)={[0x9]}, 0x8) syz_io_uring_setup(0x5969, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x16f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x20080, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x36db, &(0x7f0000000200)={0x0, 0x1413, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000003c0)) [ 686.214722][ T2903] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.217840][ T2903] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.506142][ T4472] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 687.635346][ T4813] udc-core: couldn't find an available UDC or it's busy [ 687.649369][ T4813] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 688.395123][ T4473] usb 1-1: USB disconnect, device number 5 [ 688.510769][ T4473] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device ps_root_recvmsgcb: failed to send message to pid 4721: Connection refused ps_root_recvmsgcb: failed to send message to pid 4722: Connection refused [ 694.553045][ T4828] ================================================================== [ 694.556706][ T4828] BUG: KASAN: use-after-free in idr_for_each+0xf4/0x160 [ 694.558910][ T4828] Read of size 8 at addr ffffffe010c00878 by task syz-executor.1/4828 [ 694.561248][ T4828] [ 694.562643][ T4828] CPU: 0 PID: 4828 Comm: syz-executor.1 Not tainted 5.12.0-rc2-syzkaller-00467-g0d7588ab9ef9 #0 [ 694.564161][ T4828] Hardware name: riscv-virtio,qemu (DT) [ 694.565301][ T4828] Call Trace: [ 694.566555][ T4828] [] walk_stackframe+0x0/0x23c [ 694.568627][ T4828] [ 694.569538][ T4828] Allocated by task 4828: [ 694.570449][ T4828] (stack is not available) [ 694.571416][ T4828] [ 694.572140][ T4828] Freed by task 4473: [ 694.573132][ T4828] (stack is not available) [ 694.574300][ T4828] [ 694.575098][ T4828] The buggy address belongs to the object at ffffffe010c00840 [ 694.575098][ T4828] which belongs to the cache radix_tree_node of size 576 [ 694.577000][ T4828] The buggy address is located 56 bytes inside of [ 694.577000][ T4828] 576-byte region [ffffffe010c00840, ffffffe010c00a80) [ 694.579928][ T4828] The buggy address belongs to the page: [ 694.581222][ T4828] page:ffffffcf02438000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x90e00 [ 694.582903][ T4828] head:ffffffcf02438000 order:2 compound_mapcount:0 compound_pincount:0 [ 694.584245][ T4828] flags: 0x10200(slab|head) [ 694.586175][ T4828] raw: 0000000000010200 0000000000000100 0000000000000122 ffffffe006e04a00 [ 694.588228][ T4828] raw: 0000000000000000 0000000080170017 00000001ffffffff 0000000000000000 [ 694.590536][ T4828] page dumped because: kasan: bad access detected [ 694.591645][ T4828] [ 694.592380][ T4828] Memory state around the buggy address: [ 694.593667][ T4828] ffffffe010c00700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 694.594823][ T4828] ffffffe010c00780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 694.595915][ T4828] >ffffffe010c00800: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 694.597006][ T4828] ^ [ 694.598849][ T4828] ffffffe010c00880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 694.599983][ T4828] ffffffe010c00900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 694.600655][ T4828] ================================================================== [ 694.602052][ T4828] Disabling lock debugging due to kernel taint [ 694.699983][ T4828] Kernel panic - not syncing: panic_on_warn set ... [ 694.701305][ T4828] CPU: 1 PID: 4828 Comm: syz-executor.1 Tainted: G B 5.12.0-rc2-syzkaller-00467-g0d7588ab9ef9 #0 [ 694.702566][ T4828] Hardware name: riscv-virtio,qemu (DT) [ 694.703245][ T4828] Call Trace: [ 694.703818][ T4828] [] walk_stackframe+0x0/0x23c [ 694.705262][ T4828] SMP: stopping secondary CPUs [ 694.707212][ T4828] Dumping ftrace buffer: [ 694.709582][ T4828] (ftrace buffer empty) [ 694.712079][ T4828] Rebooting in 1 seconds.. Connection to localhost closed by remote host. VM DIAGNOSIS: 01:23:15 Registers: info registers vcpu 0 pc ffffffe0000c8944 mhartid 0000000000000000 mstatus 00000000000000a0 mip 00000000000000a2 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffe00000542c mepc ffffffe0000becda sepc ffffffe0000fa54c mcause 8000000000000003 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffe0000c8930 x2/sp ffffffe0098876a0 x3/gp ffffffe005d25728 x4/tp ffffffe00b9596c0 x5/t0 ffffffe00679db67 x6/t1 0000000000000001 x7/t2 0000000000000000 x8/s0 ffffffe009887760 x9/s1 ffffffe003e2e800 x10/a0 ffffffe067d45800 x11/a1 0000000000000003 x12/a2 1ffffffc0cfa8b00 x13/a3 ffffffe0000c8930 x14/a4 0000000000000000 x15/a5 0000000000000020 x16/a6 0000000000f00000 x17/a7 ffffffe0000d2802 x18/s2 ffffffe0067e9568 x19/s3 ffffffe067d45800 x20/s4 0000000000000001 x21/s5 0000000000000000 x22/s6 ffffffe00584a3e8 x23/s7 0000000000000000 x24/s8 0000000000000000 x25/s9 ffffffe0000d2802 x26/s10 ffffffe005d2b0d0 x27/s11 0000000000000000 x28/t3 24677161bbf38600 x29/t4 ffffffc400cf3b6a x30/t5 ffffffc400cf3b6d x31/t6 ffffffe00679db67 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc 0000000000081718 mhartid 0000000000000001 mstatus 80000000000060a2 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffe00000542c mepc ffffffe00000e46c sepc 0000000000081718 mcause 0000000000000009 scause 000000000000000f mtval 0000000000000000 stval 0000003f9c112000 x0/zero 0000000000000000 x1/ra 000000000003a90c x2/sp 0000003f9e8eebd8 x3/gp 0000000000002000 x4/tp 0000003fa40aaa80 x5/t0 ffffffffffffffff x6/t1 0000003f9c113000 x7/t2 0000000000002000 x8/s0 0000003f9c112000 x9/s1 ffffffffffffffff x10/a0 0000003fa1d1f010 x11/a1 0000000000000200 x12/a2 0000000000000008 x13/a3 0000003fa1af8b20 x14/a4 0000000000000001 x15/a5 0000003fa1d0f448 x16/a6 0000003fa1d0f000 x17/a7 ffffffffffffffff x18/s2 0000000000114000 x19/s3 0000000000000fe7 x20/s4 0000003f9e8eebf8 x21/s5 000000000053a4a5 x22/s6 000000000053a4a4 x23/s7 0000000000000000 x24/s8 0000000000000000 x25/s9 0000000000000008 x26/s10 ffffffffffffffff x27/s11 0000000000000032 x28/t3 0000000000000001 x29/t4 0000003f9c114000 x30/t5 0000003f9c113ff9 x31/t6 0000000000081904 f0/ft0 0000000000000000 f1/ft1 408eaa7cd64a2080 f2/ft2 413acd9000000000 f3/ft3 40e16f12f1c2892f f4/ft4 41288b5000000000 f5/ft5 4039000000000000 f6/ft6 3fe0000000000000 f7/ft7 3fb98e3429f94db0 f8/fs0 3fed2dda160bc2b7 f9/fs1 3f9259324f7269c0 f10/fa0 3fb55f6c2536bff9 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000