last executing test programs: 6m43.4128092s ago: executing program 2 (id=18): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) unshare(0x62000000) 6m39.838904257s ago: executing program 2 (id=23): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) unshare(0x62000000) 6m31.624174267s ago: executing program 2 (id=32): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 6m31.543992643s ago: executing program 0 (id=33): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) unshare(0x62000000) 6m29.46791329s ago: executing program 2 (id=34): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 6m29.389060747s ago: executing program 2 (id=35): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) unshare(0x62000000) 6m26.963652481s ago: executing program 0 (id=37): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) unshare(0x62000000) 6m26.22585804s ago: executing program 2 (id=45): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0376aa3c8fdf6894db4df1e714b437a35850a3282750ee733655910717264304cb3330"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_NAME(0xf, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)=""/4073, 0x100e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a00010027bd700003dcdf2502a020"], 0x2c}}, 0x4040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) dup(r4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 6m25.951978773s ago: executing program 0 (id=46): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 6m23.900719758s ago: executing program 0 (id=48): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 6m23.676841995s ago: executing program 0 (id=49): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'b', ' *:* ', 'rwm\x00'}, 0xa) 6m23.523380998s ago: executing program 0 (id=51): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0376aa3c8fdf6894db4df1e714b437a35850a3282750ee733655910717264304cb3330"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_NAME(0xf, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)=""/4073, 0x100e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a00010027bd700003dcdf2502a020"], 0x2c}}, 0x4040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) dup(r4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 6m11.075188358s ago: executing program 32 (id=45): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0376aa3c8fdf6894db4df1e714b437a35850a3282750ee733655910717264304cb3330"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f0000013c292f8c9e8c292aa4064b4e75d401369d4ea21aaecc5b76db7d1aa66b7c793f3af66615d71660a41127e8ead9ffdda820a0b22d48a5c9d567c832533364cd5bcc0b882b0eed823cb215bb88f5408219485f92e039fd8042ba21d943a10c76b37ddc7dc94f1152715a44426df2e59cae23f27adf28f7e08e68539e6539ab5657d19f34aa1337da387a8319940b268fb4980935d1524a8a994693a5ee2a4b950e0501256f0a557189d0b9d28f6631c3a08628ccba63778fd95611fe6c12e7aa2c33faa0a169967e70e874c5ba163082"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_NAME(0xf, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)=""/4073, 0x100e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a00010027bd700003dcdf2502a020"], 0x2c}}, 0x4040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) dup(r4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 6m8.410182552s ago: executing program 33 (id=51): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0376aa3c8fdf6894db4df1e714b437a35850a3282750ee733655910717264304cb3330"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_NAME(0xf, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)=""/4073, 0x100e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a00010027bd700003dcdf2502a020"], 0x2c}}, 0x4040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) dup(r4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 25.079831566s ago: executing program 1 (id=609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = timerfd_create(0x0, 0x80000) pipe2(&(0x7f0000000c40), 0x4800) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 17.660463773s ago: executing program 1 (id=617): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 17.598125877s ago: executing program 4 (id=618): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 17.475856777s ago: executing program 1 (id=619): syz_usb_connect(0x0, 0x136, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0xc0, 0xe7, 0x9f, 0x10, 0x1199, 0x6859, 0xfd7d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x124, 0x1, 0xf, 0x8, 0x60, 0x5, [{{0x9, 0x4, 0xae, 0x1, 0x5, 0xf7, 0x34, 0x51, 0x0, [], [{{0x9, 0x5, 0x8, 0xa, 0x20, 0x2, 0x2, 0x0, [@generic={0xc9, 0xe, "a052cbfb3cc656b28c4608c0bd92f9bda347fd10be0e9c2b13dd2ed50c46952e2c708a964e2a1e396fe540b469affc969ff306807e8bcb681b5359aae2fbec45e849314a5d207164559fa0d3a7901715c6f88637014630668338738db3f8fd5e17ceb4ac54d6bad431a34a6cd92601da9be59e9b5b2b96d7e2312264a9c265c0d23d1a49ce95baa0278e9a3ea0ed4b403c7bc6b11bdc07ab1d83fec72df41a89ef8cab1c150a5c943d58464827e246df1b4aacc305fb86626bfb9a7017aa9b278122c439a195ae"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x7, 0x1, 0x8}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x1, 0xb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x53, 0x6, 0x12, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x94, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x88}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x24, 0xac, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8e, 0x3ff}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x8, 0x9, 0x7, 0x8, 0xc}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0xb, &(0x7f0000000140)=@string={0xb, 0x3, "67baf4a2c144ab5731"}}]}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 16.294571832s ago: executing program 5 (id=621): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0xb, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x8, 0x0, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x6db6ec49e3ab5510, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x5}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1cc09}]}}]}, 0x44}}, 0x400c084) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.845490549s ago: executing program 5 (id=623): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) close(r0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [], {0x14}}, 0x28}}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$eJzs3UuMHEfdAPDq2Z31M5/H+WyyOCaxCSThkd14vZiHBXEUX7DiiFukiIvlOMHCMQhHgkQ52D5xI1FkrjzEKZcIEBK5ICsnLpGIJS45BQ4csIwUiQME7EW7WzU7+/eMemZt73h2fj+ptqa6aqaqZ3t6erq7qhIwthpLf+fnp6uULr3z5tG/P/y3LYtLnmiXaC39nexINVNKVU5Phtf7cGI5vv7Raye7xVWaW/pb0umZa+3nbkspnU/70uXUSnsuXXnjvbmnj184dnH/+28dvnpn1h4AAMbLty4fnt/9lz/dv/Pjtx84kja1l5fj81ZOb8/H/UfygX85/m+k1emqI3SaCuUmc2iEchNdynXW0wzlJnvUPxVet9mj3Kaa+ic6lnVbbxhlZTtupaoxsyrdaMzMLP8mT0u/66eqmbOnz7xwbkgNBW67fz6YUtonCMI4hoUdw94DASyL1wtvcj6eWbg17Veb7K/+a082uj8fboP13v7VP1r1/+qCPQ63z0bdmsp6lc/R9pyO1xHi/UuDfv7L68XrEc0+29nrOsKoXF/o1c6JdW7HWvVqf9wuNqqv57i8D98I+Z2fn/g/HZX/MdDdv5z/F4SxDQvD3gEBd61439xCVvLjfX0xf1NN/uaa/C01+Vtr8rfV5MM4++3LP0mvVyu/8+Nv+kHPh5XzbPfk+P8GbE88Hzlo/fG+30Hdav3xfmK4m/3+xLOnvvL8c1eW7/+v2tv/jby978vpVv5sXc4FyvnCeF69fe9/a3U9jR7l7g3tuadL+aXHu1aXq3atvE7q2M/c1I7p1c/b0avc3tXlWqHclhw2h/bG45Ot4Xnl+KPsV8v7NRnWtxnWYyq0o+xXduY4tgPWomyPve7/L9vndGpWL5w+c+rxnC7b6R8nmpsWlx9Y53YDt67f/j/TaXX/n+3t5c1G535hx8ryqnO/0ArL53osP5jT5XvuOxNblpbPnPzemedv98rDmDv3yqvfPXHmzKkfeOCBBx60Hwx7zwTcabMvv/T92XOvvPrY6ZdOvHjqxVNnDx46dHBu7tBXD87PLh3Xz3Ye3QMbycqX/rBbAgAAAAAAAAAAAPTrh8eOXvnzu1/+YLn//0r/v9L/v9z5W/r//zj0/4/95Es/+NIPcGeX/KUyYYDVqVCumcP/h/buCvXsDs/7RI7b8/jl/v+lujiua2nPfWF5HL+3lAvDCdw0XspUGIMkzhf46RxfzPEvEwxRtaX74hzXjW9dtvUyPoVxKUZT+b+VraGMY1L6f/ca16ns/3euQxu5/dajO+Gw1xHo7h/G/xaEsQ0LC2bxAO4Ow57/s5z3LPHZP3xz82Ioxa49uXp/GccvhVtxt88/qf6NNf9ne/67vvd/Yca81trq/ffPrn7QUW3a02/9cf3LONC7Bqv/41x/WZtHUn/1L/wi1B8vCPXpP6H+rX3Wf9P6711b/f/N9Ze37dGH+q1/ucVVY3U74nnjcv0vnjcurof1L2N7Drz+a5yo8UauH8bZqMwzO6hRmf+3l3gfxpdyuuwIy30Ocb6TQdtf7q8o3wO7w+tXNd9v5v8dbV/Lcd3nocz/W7bHVpd0oyPd7PLebtR9DYyqD13/E4SxDQsLC3f2hFaNoVbO0N//Yf9OGHb9w37/68T5f+MxfJz/N+bH+X9jfpz/N+bH+fVifpz/N76fcf7fmH9feN04P/B0Tf4na/L31OTfX5O/tyb/UzX5+2vyH6jJf7Am/96a/Idq8j9Tk//ZmvyHa/Ifrcn/XE3+Rlf6o4zr+sM4i/3zfP5hfJTrP70+/7tq8oHR9dO3Dzz13G++3Vru/z/VPh9SruMdyelm/u38o5yO171TR3ox792c/mvIv9vPd8A4ieNnxO/3R2rygdFV7vPy+YYxVHUfsaffcat6HeczWj6f4y/k+Is5fizHMzmezfGBHM+tU/u4M5769e8Ov16t/N7fEfL7vZ889geK40Qd7LM98fzAoPezx3H8BnWr9a+xOxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDQNJb+zs9PVyldeufNo88ePz27uOSJdonW0t/JjlSz/byUHs/xRI5/nh9c/+i1k53xjcV4KqUqzaUqVe3l6Zlr7Zq2pZTOp33pcmqlPZeuvPHe3NPHLxy7uP/9tw5fvYNvAQAAAGx4/wsAAP//2XsNow==") open(0x0, 0x0, 0x1b5) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d31352c7561736b3d303030303030303030303030ba303030303030303030332c6e616d65636173653d312c7569643d00", @ANYRESHEX, @ANYBLOB=',fmask=00040000000000000000253,discard,dmask=00000000000000000000002,utf8,iocharset=macinuit,allow_utime=00000000000000000147070,\x00'], 0x41, 0x1528, &(0x7f00000037c0)="$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") fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) creat(0x0, 0x83) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) r4 = open(&(0x7f0000000180)='./file1\x00', 0x185102, 0x2b) ftruncate(r4, 0x2007ffb) sendfile(r2, r4, 0x0, 0x1000000201001) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000"]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000300000000000086dd63269fe0"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 15.834174069s ago: executing program 4 (id=624): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xf8000000, 0x10000}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0xdd3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) lseek(0xffffffffffffffff, 0x9, 0x0) unshare(0x64000600) 15.000443676s ago: executing program 3 (id=625): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = timerfd_create(0x0, 0x80000) pipe2(&(0x7f0000000c40), 0x4800) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 12.822916281s ago: executing program 3 (id=627): syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='b 1223'], 0xa) 10.932930563s ago: executing program 3 (id=628): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 10.115527998s ago: executing program 4 (id=629): syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='b 1223'], 0xa) 10.068804153s ago: executing program 5 (id=630): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2400c800) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xf8000000, 0x10000}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0xf) socket$key(0xf, 0x3, 0x2) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0xdd3) unshare(0x64000600) 10.003321288s ago: executing program 4 (id=631): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 9.97144792s ago: executing program 3 (id=632): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) close(r0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [], {0x14}}, 0x28}}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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") open(0x0, 0x0, 0x1b5) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d31352c7561736b3d303030303030303030303030ba303030303030303030332c6e616d65636173653d312c7569643d00", @ANYRESHEX, @ANYBLOB=',fmask=00040000000000000000253,discard,dmask=00000000000000000000002,utf8,iocharset=macinuit,allow_utime=00000000000000000147070,\x00'], 0x41, 0x1528, &(0x7f00000037c0)="$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") fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) creat(0x0, 0x83) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) r4 = open(&(0x7f0000000180)='./file1\x00', 0x185102, 0x2b) ftruncate(r4, 0x2007ffb) sendfile(r2, r4, 0x0, 0x1000000201001) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000"]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000300000000000086dd63269fe000283a"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 8.886013057s ago: executing program 5 (id=633): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0xf8000000, 0x10000}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0xf) socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) lseek(0xffffffffffffffff, 0x9, 0x0) unshare(0x64000600) 6.199162034s ago: executing program 4 (id=634): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1d4, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xd}, {0x0, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x19c, 0x2, [@TCA_ROUTE4_ACT={0x198, 0x6, [@m_vlan={0x74, 0x6, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1b6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x37, 0x6, "657c8f856bb2bb5d377d3e798375b1d28aa9ff79c5750c001846426a94e358dab26224b357e0bd9c9b84cfee21ec99f48cf585"}, {0xc}, {0xc}}}, @m_bpf={0x120, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0xf5, 0x6, "8eb55930760aaf0b59772c5971036fba8994239acc2d66a896c98c740ca7d203000000000000002a326cef7c8ba136d0bce7d5be2f44c0f7df2af8b58cd15301925bdef87ac2e982db6d48439b06b9d7e9e88cb4d0262a5d0900461c33b2f76470602416519436d7f6f3d3dec1bf02a5ce6e83f8664d689fd77f1519cfac04b8ebd7ea20e82977ee8d8e46d44e8f8c8485af903929b1f3288322548d9e6a92389a03899eaaba97faeef8863180bc96804713e41b3d6d0032dc6414d0626a176725767c2a42131583a64bf3c2e43f64d02f9be090aa44978db670068ac547d4aa7dfb2219f8c926b7d6925ec9105d34f3b0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4004}, 0x20008885) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.178220045s ago: executing program 1 (id=635): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001c0000001800"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) 4.884525369s ago: executing program 5 (id=636): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x7, 0x7) 4.8674275s ago: executing program 1 (id=637): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) unshare(0x62000000) 4.791210116s ago: executing program 3 (id=638): syz_usb_connect(0x0, 0x1c7, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0xc0, 0xe7, 0x9f, 0x10, 0x1199, 0x6859, 0xfd7d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b5, 0x2, 0xf, 0x8, 0x60, 0x5, [{{0x9, 0x4, 0xae, 0x1, 0x9, 0xf7, 0x34, 0x51, 0x0, [], [{{0x9, 0x5, 0x5, 0x0, 0x0, 0x9, 0xf7, 0x3}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x8, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x3c2}]}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x3, 0x5, 0xde}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x6, 0x5, 0x4}}, {{0x9, 0x5, 0x8, 0xa, 0x20, 0x2, 0x2, 0x0, [@generic={0xad, 0xe, "a052cbfb3cc656b28c4608c0bd92f9bda347fd10be0e9c2b13dd2ed50c46952e2c708a964e2a1e396fe540b469affc969ff306807e8bcb681b5359aae2fbec45e849314a5d207164559fa0d3a7901715c6f88637014630668338738db3f8fd5e17ceb4ac54d6bad431a34a6cd92601da9be59e9b5b2b96d7e2312264a9c265c0d23d1a49ce95baa0278e9a3ea0ed4b403c7bc6b11bdc07ab1d83fec72df41a89ef8cab1c150a5c943d5846"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x1, 0xb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}]}}, {{0x9, 0x5, 0xc, 0x1, 0x20, 0x9, 0xc0}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x24, 0xac, 0x2}}, {{0x9, 0x5, 0x794fab014817e5b7, 0x8, 0x20, 0x32, 0xb, 0x4, [@generic={0x3f, 0xc, "a5c48224b081cbdaba331dc6ecfe041ab405618d2b2569dac0d8216989fbc7917aa964ca3b3dc90d160c393e40e123f3cea7ab855bd365475133b3eeeb"}]}}]}}, {{0x9, 0x4, 0x5, 0x80, 0x4, 0x9f, 0xaa, 0xe4, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x3, 0x1b}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0xd, 0x0, 0x3, 0x9, 0x2}]}], [{{0x9, 0x5, 0x8, 0x10, 0x400, 0x3, 0x0, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x4c, 0x90, 0xe, [@generic={0x2, 0x4}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0xe, 0xfc}}, {{0x9, 0x5, 0x8a, 0x10, 0x10, 0x5, 0xf6, 0x8}}]}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000140)=@string={0x2}}]}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.768203918s ago: executing program 4 (id=639): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) close(r0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$eJzs3UuMHEfdAPDq2Z31M5/H+WyyOCaxCSThkd14vZiHBXEUX7DiiFukiIvlOMHCMQhHgkQ52D5xI1FkrjzEKZcIEBK5ICsnLpGIJS45BQ4csIwUiQME7EW7WzU7+/eMemZt73h2fj+ptqa6aqaqZ3t6erq7qhIwthpLf+fnp6uULr3z5tG/P/y3LYtLnmiXaC39nexINVNKVU5Phtf7cGI5vv7Raye7xVWaW/pb0umZa+3nbkspnU/70uXUSnsuXXnjvbmnj184dnH/+28dvnpn1h4AAMbLty4fnt/9lz/dv/Pjtx84kja1l5fj81ZOb8/H/UfygX85/m+k1emqI3SaCuUmc2iEchNdynXW0wzlJnvUPxVet9mj3Kaa+ic6lnVbbxhlZTtupaoxsyrdaMzMLP8mT0u/66eqmbOnz7xwbkgNBW67fz6YUtonCMI4hoUdw94DASyL1wtvcj6eWbg17Veb7K/+a082uj8fboP13v7VP1r1/+qCPQ63z0bdmsp6lc/R9pyO1xHi/UuDfv7L68XrEc0+29nrOsKoXF/o1c6JdW7HWvVqf9wuNqqv57i8D98I+Z2fn/g/HZX/MdDdv5z/F4SxDQvD3gEBd61439xCVvLjfX0xf1NN/uaa/C01+Vtr8rfV5MM4++3LP0mvVyu/8+Nv+kHPh5XzbPfk+P8GbE88Hzlo/fG+30Hdav3xfmK4m/3+xLOnvvL8c1eW7/+v2tv/jby978vpVv5sXc4FyvnCeF69fe9/a3U9jR7l7g3tuadL+aXHu1aXq3atvE7q2M/c1I7p1c/b0avc3tXlWqHclhw2h/bG45Ot4Xnl+KPsV8v7NRnWtxnWYyq0o+xXduY4tgPWomyPve7/L9vndGpWL5w+c+rxnC7b6R8nmpsWlx9Y53YDt67f/j/TaXX/n+3t5c1G535hx8ryqnO/0ArL53osP5jT5XvuOxNblpbPnPzemedv98rDmDv3yqvfPXHmzKkfeOCBBx60Hwx7zwTcabMvv/T92XOvvPrY6ZdOvHjqxVNnDx46dHBu7tBXD87PLh3Xz3Ye3QMbycqX/rBbAgAAAAAAAAAAAPTrh8eOXvnzu1/+YLn//0r/v9L/v9z5W/r//zj0/4/95Es/+NIPcGeX/KUyYYDVqVCumcP/h/buCvXsDs/7RI7b8/jl/v+lujiua2nPfWF5HL+3lAvDCdw0XspUGIMkzhf46RxfzPEvEwxRtaX74hzXjW9dtvUyPoVxKUZT+b+VraGMY1L6f/ca16ns/3euQxu5/dajO+Gw1xHo7h/G/xaEsQ0LC2bxAO4Ow57/s5z3LPHZP3xz82Ioxa49uXp/GccvhVtxt88/qf6NNf9ne/67vvd/Yca81trq/ffPrn7QUW3a02/9cf3LONC7Bqv/41x/WZtHUn/1L/wi1B8vCPXpP6H+rX3Wf9P6711b/f/N9Ze37dGH+q1/ucVVY3U74nnjcv0vnjcurof1L2N7Drz+a5yo8UauH8bZqMwzO6hRmf+3l3gfxpdyuuwIy30Ocb6TQdtf7q8o3wO7w+tXNd9v5v8dbV/Lcd3nocz/W7bHVpd0oyPd7PLebtR9DYyqD13/E4SxDQsLC3f2hFaNoVbO0N//Yf9OGHb9w37/68T5f+MxfJz/N+bH+X9jfpz/N+bH+fVifpz/N76fcf7fmH9feN04P/B0Tf4na/L31OTfX5O/tyb/UzX5+2vyH6jJf7Am/96a/Idq8j9Tk//ZmvyHa/Ifrcn/XE3+Rlf6o4zr+sM4i/3zfP5hfJTrP70+/7tq8oHR9dO3Dzz13G++3Vru/z/VPh9SruMdyelm/u38o5yO171TR3ox792c/mvIv9vPd8A4ieNnxO/3R2rygdFV7vPy+YYxVHUfsaffcat6HeczWj6f4y/k+Is5fizHMzmezfGBHM+tU/u4M5769e8Ov16t/N7fEfL7vZ889geK40Qd7LM98fzAoPezx3H8BnWr9a+xOxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDQNJb+zs9PVyldeufNo88ePz27uOSJdonW0t/JjlSz/byUHs/xRI5/nh9c/+i1k53xjcV4KqUqzaUqVe3l6Zlr7Zq2pZTOp33pcmqlPZeuvPHe3NPHLxy7uP/9tw5fvYNvAQAAAGx4/wsAAP//2XsNow==") open(0x0, 0x0, 0x1b5) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d31352c7561736b3d303030303030303030303030ba303030303030303030332c6e616d65636173653d312c7569643d00", @ANYRESHEX, @ANYBLOB=',fmask=00040000000000000000253,discard,dmask=00000000000000000000002,utf8,iocharset=macinuit,allow_utime=00000000000000000147070,\x00'], 0x41, 0x1528, &(0x7f00000037c0)="$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") fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) creat(0x0, 0x83) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) r4 = open(&(0x7f0000000180)='./file1\x00', 0x185102, 0x2b) ftruncate(r4, 0x2007ffb) sendfile(r2, r4, 0x0, 0x1000000201001) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000"]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}]}], {0x14}}, 0xcc}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 4.62439275s ago: executing program 5 (id=640): r0 = socket$packet(0x11, 0x2, 0x300) close(r0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [], {0x14}}, 0x28}}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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") open(0x0, 0x0, 0x1b5) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d31352c7561736b3d303030303030303030303030ba303030303030303030332c6e616d65636173653d312c7569643d00", @ANYRESHEX, @ANYBLOB=',fmask=00040000000000000000253,discard,dmask=00000000000000000000002,utf8,iocharset=macinuit,allow_utime=00000000000000000147070,\x00'], 0x41, 0x1528, &(0x7f00000037c0)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) r4 = open(&(0x7f0000000180)='./file1\x00', 0x185102, 0x2b) ftruncate(r4, 0x2007ffb) sendfile(r2, r4, 0x0, 0x1000000201001) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000240)=ANY=[@ANYBLOB]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): ace 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.055568][ T8] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 260.086761][ T8] usb 6-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 260.108075][ T8] usb 6-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 260.124299][ T8] usb 6-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 260.145435][ T8] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 260.167258][ T8] usb 6-1: config 15 interface 174 altsetting 1 has an invalid endpoint with address 0xB7, skipping [ 260.184329][ T8] usb 6-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 260.213430][ T8] usb 6-1: config 15 interface 5 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 260.227452][ T8] usb 6-1: config 15 interface 5 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 260.255255][ T8] usb 6-1: config 15 interface 174 has no altsetting 0 [ 260.262166][ T8] usb 6-1: config 15 interface 5 has no altsetting 0 [ 260.288776][ T8] usb 6-1: language id specifier not provided by device, defaulting to English [ 260.328061][ T8] usb 6-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 260.340719][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.385714][ T8] usb 6-1: Product: syz [ 260.389936][ T8] usb 6-1: Manufacturer: syz [ 260.409686][ T8] usb 6-1: SerialNumber: syz [ 260.436638][ T7427] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 260.709967][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.270'. [ 260.798591][ T8] sierra 6-1:15.174: Sierra USB modem converter detected [ 260.813313][ T8] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 260.827981][ T8] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 260.865576][ T8] sierra 6-1:15.5: Sierra USB modem converter detected [ 260.919796][ T8] usb 6-1: Sierra USB modem converter now attached to ttyUSB2 [ 261.784446][ T8] usb 6-1: USB disconnect, device number 8 [ 261.819738][ T8] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 261.837866][ T8] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 261.864697][ T8] sierra 6-1:15.174: device disconnected [ 261.894320][ T8] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 261.903530][ T8] sierra 6-1:15.5: device disconnected [ 263.145627][ T7487] loop3: detected capacity change from 0 to 512 [ 263.224216][ T7487] EXT4-fs (loop3): too many log groups per flexible block group [ 263.261827][ T7487] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 263.277325][ T7488] loop5: detected capacity change from 0 to 512 [ 263.284687][ T7487] EXT4-fs (loop3): mount failed [ 263.349823][ T7488] EXT4-fs (loop5): too many log groups per flexible block group [ 263.374821][ T7488] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 263.406922][ T7488] EXT4-fs (loop5): mount failed [ 264.235041][ T7506] loop1: detected capacity change from 0 to 2048 [ 264.297067][ T7506] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 264.359791][ T7506] NILFS (loop1): mounting unchecked fs [ 264.554238][ T7506] NILFS (loop1): recovery complete [ 264.587875][ T7514] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 264.608215][ T7509] loop5: detected capacity change from 0 to 2048 [ 264.663141][ T7509] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 264.724306][ T28] audit: type=1800 audit(1755417094.820:286): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.279" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 264.778090][ T28] audit: type=1800 audit(1755417094.940:287): pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.279" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 264.799424][ T7509] NILFS (loop5): mounting unchecked fs [ 265.081884][ T5781] udevd[5781]: incorrect nilfs2 checksum on /dev/loop5 [ 265.121121][ T5781] udevd[5781]: incorrect nilfs2 checksum on /dev/loop5 [ 265.219574][ T7509] NILFS (loop5): recovery complete [ 265.243022][ T7524] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 265.303236][ T28] audit: type=1800 audit(1755417095.470:288): pid=7509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.280" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 265.368290][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 265.625537][ T28] audit: type=1800 audit(1755417095.530:289): pid=7525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.280" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 265.680582][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 265.900180][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.368862][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.380610][ T23] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 266.390732][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.489134][ T23] usb 4-1: config 0 descriptor?? [ 266.673394][ T23] hub 4-1:0.0: USB hub found [ 267.016328][ T23] hub 4-1:0.0: 1 port detected [ 267.354368][ T5874] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 267.747615][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 267.881830][ T23] hub 4-1:0.0: activate --> -90 [ 267.944666][ T5874] usb 2-1: unable to get BOS descriptor or descriptor too short [ 268.103683][ T5874] usb 2-1: config 15 has an invalid interface number: 174 but max is 0 [ 268.126761][ T5913] hub 4-1:0.0: hub_ext_port_status failed (err = 2) [ 268.226780][ T5874] usb 2-1: config 15 has no interface number 0 [ 268.288637][ T5874] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.391169][ T5913] usb 4-1: USB disconnect, device number 9 [ 268.471495][ T5874] usb 2-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 268.675637][ T5874] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 268.844261][ T5874] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 269.006488][ T5874] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 269.044561][ T5874] usb 2-1: config 15 interface 174 has no altsetting 0 [ 269.130938][ T5874] usb 2-1: string descriptor 0 read error: -22 [ 269.144146][ T5874] usb 2-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 269.168816][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.223930][ T7529] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 269.247097][ T5874] sierra 2-1:15.174: Sierra USB modem converter detected [ 269.258520][ T7540] loop3: detected capacity change from 0 to 2048 [ 269.304749][ T7540] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 269.330869][ T7540] NILFS (loop3): mounting unchecked fs [ 269.416402][ T6804] udevd[6804]: incorrect nilfs2 checksum on /dev/loop3 [ 269.443485][ T7540] NILFS (loop3): recovery complete [ 269.460690][ T7549] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 269.497855][ T5874] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 269.519510][ T28] audit: type=1800 audit(1755417099.690:290): pid=7540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.286" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 269.602784][ T5874] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 269.644103][ T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 270.027066][ T5874] usb 2-1: USB disconnect, device number 13 [ 270.417640][ T5874] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 270.681129][ T5874] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 270.833636][ T5874] sierra 2-1:15.174: device disconnected [ 271.344109][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 273.254735][ T8] usb 6-1: unable to get BOS descriptor or descriptor too short [ 273.672333][ T8] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 273.694054][ T8] usb 6-1: can't read configurations, error -71 [ 273.750577][ T7566] netdevsim netdevsim4: Direct firmware load for ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 273.771147][ T7566] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 273.867264][ T7569] loop3: detected capacity change from 0 to 2048 [ 273.899783][ T7569] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 273.929744][ T7569] NILFS (loop3): mounting unchecked fs [ 274.005633][ T7569] NILFS (loop3): recovery complete [ 274.021163][ T7572] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 274.140951][ T28] audit: type=1800 audit(1755417104.290:291): pid=7569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.291" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 274.307669][ T28] audit: type=1800 audit(1755417104.480:292): pid=7575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.291" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 274.884157][ T785] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 275.127733][ T785] usb 2-1: Using ep0 maxpacket: 32 [ 275.136897][ T785] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.168542][ T785] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.203974][ T785] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 275.229678][ T785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.254566][ T785] usb 2-1: config 0 descriptor?? [ 275.266788][ T785] hub 2-1:0.0: USB hub found [ 275.314434][ T7601] loop3: detected capacity change from 0 to 2048 [ 275.342097][ T7601] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 275.366395][ T7601] NILFS (loop3): mounting unchecked fs [ 275.410000][ T6804] udevd[6804]: incorrect nilfs2 checksum on /dev/loop3 [ 275.457688][ T7601] NILFS (loop3): recovery complete [ 275.471317][ T7603] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.505701][ T785] hub 2-1:0.0: 1 port detected [ 275.548852][ T28] audit: type=1800 audit(1755417105.720:293): pid=7601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.296" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 275.704177][ T28] audit: type=1800 audit(1755417105.860:294): pid=7604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.296" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 276.291160][ T8] hub 2-1:0.0: activate --> -90 [ 276.505736][ T6983] hub 2-1:0.0: hub_ext_port_status failed (err = 3) [ 276.848859][ T6983] usb 2-1: USB disconnect, device number 14 [ 279.714083][ T5874] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 279.756957][ T7619] loop3: detected capacity change from 0 to 2048 [ 279.804812][ T7619] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 279.824108][ T7619] NILFS (loop3): mounting unchecked fs [ 279.865150][ T7619] NILFS (loop3): recovery complete [ 279.889806][ T7625] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 279.908517][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 279.924482][ T5874] usb 2-1: unable to get BOS descriptor or descriptor too short [ 279.947981][ T5874] usb 2-1: config 15 has an invalid interface number: 174 but max is 1 [ 279.964211][ T5874] usb 2-1: config 15 has an invalid interface number: 5 but max is 1 [ 279.972990][ T5874] usb 2-1: config 15 has an invalid interface descriptor of length 2, skipping [ 279.979187][ T28] audit: type=1800 audit(1755417110.140:295): pid=7619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.299" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 280.014062][ T5874] usb 2-1: config 15 has no interface number 0 [ 280.040645][ T5874] usb 2-1: config 15 has no interface number 1 [ 281.365423][ T5874] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.685836][ T5874] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 282.695997][ T5874] usb 2-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 282.707052][ T5874] usb 2-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 282.718018][ T5874] usb 2-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 282.729345][ T5874] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 282.740577][ T5874] usb 2-1: config 15 interface 174 altsetting 1 has an invalid endpoint with address 0xB7, skipping [ 282.752706][ T5874] usb 2-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 282.763681][ T5874] usb 2-1: config 15 interface 5 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 282.774715][ T5874] usb 2-1: config 15 interface 5 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 282.787953][ T5874] usb 2-1: config 15 interface 174 has no altsetting 0 [ 282.795044][ T5874] usb 2-1: config 15 interface 5 has no altsetting 0 [ 282.803286][ T5874] usb 2-1: string descriptor 0 read error: -71 [ 282.810637][ T5874] usb 2-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 282.819816][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.850164][ T5874] usb 2-1: can't set config #15, error -71 [ 282.884279][ T5874] usb 2-1: USB disconnect, device number 15 [ 284.871367][ T7642] netdevsim netdevsim5: Direct firmware load for ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 284.919139][ T7642] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 291.074341][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 291.120089][ T7680] loop1: detected capacity change from 0 to 512 [ 291.181973][ T7680] EXT4-fs (loop1): too many log groups per flexible block group [ 291.194837][ T7680] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 291.203725][ T7680] EXT4-fs (loop1): mount failed [ 291.281843][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 291.306116][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 291.326523][ T23] usb 4-1: config 15 has an invalid interface number: 174 but max is 1 [ 291.347986][ T23] usb 4-1: config 15 has an invalid interface number: 5 but max is 1 [ 291.370575][ T23] usb 4-1: config 15 has an invalid interface descriptor of length 2, skipping [ 291.401594][ T23] usb 4-1: config 15 has no interface number 0 [ 291.410807][ T23] usb 4-1: config 15 has no interface number 1 [ 291.525551][ T23] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 291.548049][ T23] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 291.558463][ T23] usb 4-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 291.568606][ T23] usb 4-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 291.771617][ T23] usb 4-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 291.783277][ T23] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 291.795527][ T23] usb 4-1: config 15 interface 174 altsetting 1 has an invalid endpoint with address 0xB7, skipping [ 291.806634][ T23] usb 4-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 291.825881][ T23] usb 4-1: config 15 interface 5 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 291.837516][ T23] usb 4-1: config 15 interface 5 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 291.857404][ T23] usb 4-1: config 15 interface 174 has no altsetting 0 [ 291.865114][ T23] usb 4-1: config 15 interface 5 has no altsetting 0 [ 291.879145][ T23] usb 4-1: language id specifier not provided by device, defaulting to English [ 291.898136][ T23] usb 4-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 291.907765][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.928174][ T23] usb 4-1: Product: syz [ 291.932369][ T23] usb 4-1: Manufacturer: syz [ 291.953528][ T23] usb 4-1: SerialNumber: syz [ 291.972627][ T7671] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 292.255776][ T23] sierra 4-1:15.174: Sierra USB modem converter detected [ 292.294477][ T23] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 292.326792][ T23] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 292.413956][ T23] sierra 4-1:15.5: Sierra USB modem converter detected [ 292.472826][ T23] usb 4-1: Sierra USB modem converter now attached to ttyUSB2 [ 292.518403][ T23] usb 4-1: USB disconnect, device number 10 [ 292.581714][ T23] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 292.625873][ T23] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 292.647545][ T23] sierra 4-1:15.174: device disconnected [ 292.661960][ T23] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 292.673073][ T23] sierra 4-1:15.5: device disconnected [ 295.263838][ T7709] netdevsim netdevsim3: Direct firmware load for ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 295.319643][ T7709] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 297.230809][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 298.144294][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 298.175277][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 298.224343][ T23] usb 4-1: config 15 has an invalid interface number: 174 but max is 1 [ 298.252670][ T23] usb 4-1: config 15 has an invalid interface number: 5 but max is 1 [ 298.272880][ T23] usb 4-1: config 15 has an invalid interface descriptor of length 2, skipping [ 298.297152][ T23] usb 4-1: config 15 has no interface number 0 [ 298.303369][ T23] usb 4-1: config 15 has no interface number 1 [ 298.346504][ T23] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.363243][ T7738] netdevsim netdevsim1: Direct firmware load for ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 298.366885][ T23] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 298.386559][ T7738] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 298.402771][ T23] usb 4-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 298.423414][ T23] usb 4-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 298.438744][ T23] usb 4-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 298.450280][ T23] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 298.463916][ T23] usb 4-1: config 15 interface 174 altsetting 1 has an invalid endpoint with address 0xB7, skipping [ 298.480466][ T23] usb 4-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 298.491713][ T23] usb 4-1: config 15 interface 5 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 298.511115][ T23] usb 4-1: config 15 interface 5 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 298.525192][ T23] usb 4-1: config 15 interface 174 has no altsetting 0 [ 298.532490][ T23] usb 4-1: config 15 interface 5 has no altsetting 0 [ 298.540588][ T23] usb 4-1: language id specifier not provided by device, defaulting to English [ 298.554174][ T23] usb 4-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 298.563501][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.571727][ T23] usb 4-1: Product: syz [ 298.585282][ T23] usb 4-1: Manufacturer: syz [ 298.590027][ T23] usb 4-1: SerialNumber: syz [ 298.613947][ T7722] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 298.847330][ T7744] loop5: detected capacity change from 0 to 512 [ 298.858511][ T23] sierra 4-1:15.174: Sierra USB modem converter detected [ 298.877880][ T23] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 298.890430][ T23] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 298.909899][ T7744] EXT4-fs (loop5): too many log groups per flexible block group [ 298.911233][ T23] sierra 4-1:15.5: Sierra USB modem converter detected [ 298.928513][ T23] usb 4-1: Sierra USB modem converter now attached to ttyUSB2 [ 298.944706][ T23] usb 4-1: USB disconnect, device number 11 [ 298.950581][ T7744] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 298.991236][ T23] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 298.999905][ T7744] EXT4-fs (loop5): mount failed [ 299.019800][ T23] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 299.032232][ T23] sierra 4-1:15.174: device disconnected [ 299.042139][ T23] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 299.052602][ T23] sierra 4-1:15.5: device disconnected [ 299.355661][ T7750] loop1: detected capacity change from 0 to 2048 [ 299.367627][ T7750] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 299.394070][ T7750] NILFS (loop1): mounting unchecked fs [ 299.420797][ T6804] udevd[6804]: incorrect nilfs2 checksum on /dev/loop1 [ 299.489799][ T7750] NILFS (loop1): recovery complete [ 299.526772][ T7753] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 299.558878][ T28] audit: type=1800 audit(1755417129.730:296): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.331" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 299.672548][ T28] audit: type=1800 audit(1755417129.830:297): pid=7755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.331" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 301.306155][ T28] audit: type=1326 audit(1755417131.480:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.5.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d35b8ebe9 code=0x7ffc0000 [ 301.363303][ T7775] loop4: detected capacity change from 0 to 2048 [ 301.371123][ T28] audit: type=1326 audit(1755417131.510:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.5.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d35b8ebe9 code=0x7ffc0000 [ 301.413794][ T7775] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 301.435104][ T7775] NILFS (loop4): mounting unchecked fs [ 301.492019][ T28] audit: type=1326 audit(1755417131.520:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.5.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9d35b8ebe9 code=0x7ffc0000 [ 301.540021][ T7773] loop5: detected capacity change from 0 to 1024 [ 302.035250][ T7773] EXT4-fs: Ignoring removed orlov option [ 302.078270][ T7775] NILFS (loop4): recovery complete [ 302.103829][ T28] audit: type=1326 audit(1755417131.520:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.5.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9d35b8ec23 code=0x7ffc0000 [ 302.191320][ T7778] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.236742][ T28] audit: type=1326 audit(1755417131.520:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.5.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9d35b8d69f code=0x7ffc0000 [ 302.279344][ T7773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.284244][ T28] audit: type=1326 audit(1755417131.560:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.5.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9d35b8ec77 code=0x7ffc0000 [ 302.697976][ T7788] syz.5.338[7788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.698477][ T7788] syz.5.338[7788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.431229][ T28] audit: type=1326 audit(1755417131.560:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.5.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d35b8d550 code=0x7ffc0000 [ 303.508303][ T28] audit: type=1326 audit(1755417131.560:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.5.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d35b8e7eb code=0x7ffc0000 [ 303.513246][ T7787] loop1: detected capacity change from 0 to 2048 [ 303.620391][ T7787] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 303.664412][ T6202] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.691547][ T7787] NILFS (loop1): mounting unchecked fs [ 303.809428][ T6804] udevd[6804]: incorrect nilfs2 checksum on /dev/loop1 [ 303.892280][ T7787] NILFS (loop1): recovery complete [ 303.943577][ T7792] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 304.474253][ T5913] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 304.664342][ T5913] usb 6-1: Using ep0 maxpacket: 16 [ 304.737909][ T5913] usb 6-1: unable to get BOS descriptor or descriptor too short [ 304.820985][ T5913] usb 6-1: config 15 has an invalid interface number: 174 but max is 1 [ 304.912724][ T5913] usb 6-1: config 15 has an invalid interface number: 5 but max is 1 [ 305.052960][ T5913] usb 6-1: config 15 has an invalid interface descriptor of length 2, skipping [ 305.172731][ T5913] usb 6-1: config 15 has no interface number 0 [ 306.434339][ T5913] usb 6-1: config 15 has no interface number 1 [ 306.474291][ T5913] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 306.507247][ T5913] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 306.570503][ T5913] usb 6-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 306.622137][ T5913] usb 6-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 306.653066][ T5913] usb 6-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 306.679684][ T5913] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 306.712571][ T5913] usb 6-1: config 15 interface 174 altsetting 1 has an invalid endpoint with address 0xB7, skipping [ 306.728246][ T5913] usb 6-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 306.750571][ T5913] usb 6-1: config 15 interface 5 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 306.773593][ T5913] usb 6-1: config 15 interface 5 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 306.789419][ T5913] usb 6-1: config 15 interface 174 has no altsetting 0 [ 306.796594][ T5913] usb 6-1: config 15 interface 5 has no altsetting 0 [ 306.853313][ T5913] usb 6-1: language id specifier not provided by device, defaulting to English [ 306.882492][ T5913] usb 6-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 306.893576][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.902658][ T5913] usb 6-1: Product: syz [ 306.908575][ T5913] usb 6-1: Manufacturer: syz [ 306.913339][ T5913] usb 6-1: SerialNumber: syz [ 306.929202][ T7794] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 307.014277][ T965] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 307.129118][ T5913] sierra 6-1:15.174: Sierra USB modem converter detected [ 307.154422][ T5913] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 307.290868][ T5913] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 307.304068][ T965] usb 5-1: Using ep0 maxpacket: 16 [ 307.311977][ T5913] sierra 6-1:15.5: Sierra USB modem converter detected [ 308.943773][ T5913] usb 6-1: Sierra USB modem converter now attached to ttyUSB2 [ 308.962157][ T965] usb 5-1: unable to get BOS descriptor or descriptor too short [ 308.982641][ T5913] usb 6-1: USB disconnect, device number 11 [ 309.001756][ T965] usb 5-1: config 15 has an invalid interface number: 174 but max is 0 [ 309.041471][ T965] usb 5-1: config 15 has no interface number 0 [ 309.048569][ T5913] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 309.060713][ T965] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 309.082027][ T5913] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 309.092325][ T965] usb 5-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 309.099825][ T7810] loop3: detected capacity change from 0 to 2048 [ 309.104590][ T5913] sierra 6-1:15.174: device disconnected [ 309.115603][ T965] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 309.138330][ T5913] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 309.149459][ T7810] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 309.159347][ T965] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 309.169531][ T7810] NILFS (loop3): mounting unchecked fs [ 309.185473][ T5913] sierra 6-1:15.5: device disconnected [ 309.196011][ T965] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 309.248464][ T965] usb 5-1: config 15 interface 174 has no altsetting 0 [ 309.254753][ T7810] NILFS (loop3): recovery complete [ 309.283099][ T7812] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.309015][ T965] usb 5-1: string descriptor 0 read error: -22 [ 309.327219][ T965] usb 5-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 309.336522][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 309.336535][ T28] audit: type=1800 audit(1755417139.500:347): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.345" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 309.382670][ T965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.614622][ T7799] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 309.619979][ T28] audit: type=1800 audit(1755417139.600:348): pid=7814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.345" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 309.653556][ T965] sierra 5-1:15.174: Sierra USB modem converter detected [ 309.995105][ T965] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 310.048692][ T965] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 310.198719][ T965] usb 5-1: USB disconnect, device number 6 [ 310.345794][ T965] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 310.473038][ T965] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 310.499031][ T965] sierra 5-1:15.174: device disconnected [ 310.824097][ T5876] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 311.024056][ T5876] usb 4-1: Using ep0 maxpacket: 16 [ 311.065606][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short [ 311.079468][ T5876] usb 4-1: config 15 has an invalid interface number: 174 but max is 1 [ 311.104079][ T5876] usb 4-1: config 15 has an invalid interface number: 5 but max is 1 [ 311.112198][ T5876] usb 4-1: config 15 has an invalid interface descriptor of length 2, skipping [ 311.254191][ T5876] usb 4-1: config 15 has no interface number 0 [ 311.260408][ T5876] usb 4-1: config 15 has no interface number 1 [ 311.274130][ T5876] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 311.332593][ T5876] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 312.242197][ T7845] loop1: detected capacity change from 0 to 2048 [ 312.265639][ T5876] usb 4-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 312.275957][ T5876] usb 4-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 312.287212][ T5876] usb 4-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 312.298863][ T5876] usb 4-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 312.309747][ T5876] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 312.312512][ T7845] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 312.321552][ T5876] usb 4-1: config 15 interface 174 altsetting 1 has an invalid endpoint with address 0xB7, skipping [ 312.341917][ T5876] usb 4-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 312.352793][ T5876] usb 4-1: config 15 interface 5 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 312.363573][ T5876] usb 4-1: config 15 interface 5 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 312.376946][ T5876] usb 4-1: config 15 interface 174 has no altsetting 0 [ 312.383821][ T5876] usb 4-1: config 15 interface 5 has no altsetting 0 [ 312.391442][ T7845] NILFS (loop1): mounting unchecked fs [ 312.397936][ T5876] usb 4-1: language id specifier not provided by device, defaulting to English [ 312.423425][ T5876] usb 4-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 312.445214][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.463474][ T7845] NILFS (loop1): recovery complete [ 312.468804][ T5876] usb 4-1: Product: syz [ 312.483914][ T5876] usb 4-1: Manufacturer: syz [ 312.489030][ T5876] usb 4-1: SerialNumber: syz [ 312.503949][ T7848] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 312.519755][ T7834] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 312.614879][ T28] audit: type=1800 audit(1755417142.780:349): pid=7845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.355" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 312.723753][ T28] audit: type=1800 audit(1755417142.880:350): pid=7849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.355" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 312.960447][ T5876] sierra 4-1:15.174: Sierra USB modem converter detected [ 313.494455][ T7852] loop4: detected capacity change from 0 to 2048 [ 313.680950][ T7852] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 313.851677][ T7852] NILFS (loop4): mounting unchecked fs [ 314.335767][ T7852] NILFS (loop4): recovery complete [ 314.480657][ T7853] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 315.137967][ T5876] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 315.619670][ T28] audit: type=1800 audit(1755417144.900:351): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.357" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 315.663926][ T5876] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 315.718061][ T5876] sierra 4-1:15.5: Sierra USB modem converter detected [ 315.877095][ T5876] usb 4-1: Sierra USB modem converter now attached to ttyUSB2 [ 315.890022][ T28] audit: type=1800 audit(1755417145.830:352): pid=7854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.357" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 315.995244][ T5876] usb 4-1: USB disconnect, device number 12 [ 316.034748][ T5876] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 316.084909][ T5876] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 316.100829][ T5876] sierra 4-1:15.174: device disconnected [ 316.118410][ T5876] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 316.129071][ T5876] sierra 4-1:15.5: device disconnected [ 316.213543][ T7860] netdevsim netdevsim1: Direct firmware load for ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 316.271056][ T7860] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 316.495306][ T5876] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 317.326263][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.333700][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.504513][ T5876] usb 4-1: Using ep0 maxpacket: 16 [ 317.535358][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short [ 318.545615][ T5876] usb 4-1: config 15 has an invalid interface number: 174 but max is 0 [ 318.554246][ T5876] usb 4-1: config 15 has no interface number 0 [ 318.560715][ T5876] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 318.571082][ T5876] usb 4-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 318.635245][ T5876] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 318.702325][ T5876] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 318.736938][ T5876] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 318.787078][ T5876] usb 4-1: config 15 interface 174 has no altsetting 0 [ 318.818140][ T5876] usb 4-1: string descriptor 0 read error: -22 [ 318.833073][ T5876] usb 4-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 318.878126][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.920028][ T5876] usb 4-1: can't set config #15, error -71 [ 318.957064][ T5876] usb 4-1: USB disconnect, device number 13 [ 319.081748][ T7890] loop3: detected capacity change from 0 to 2048 [ 319.096214][ T7890] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 319.106374][ T5874] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 319.115697][ T7890] NILFS (loop3): mounting unchecked fs [ 319.182803][ T7890] NILFS (loop3): recovery complete [ 319.310935][ T7893] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.352968][ T28] audit: type=1800 audit(1755417149.520:353): pid=7890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.367" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 319.524185][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 319.766550][ T5874] usb 5-1: unable to get BOS descriptor or descriptor too short [ 319.798665][ T5874] usb 5-1: config 15 has an invalid interface number: 174 but max is 1 [ 319.845664][ T5874] usb 5-1: config 15 has an invalid interface number: 5 but max is 1 [ 320.268225][ T28] audit: type=1800 audit(1755417150.440:354): pid=7896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.367" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 322.447217][ T5874] usb 5-1: config 15 has an invalid interface descriptor of length 2, skipping [ 323.906929][ T5874] usb 5-1: config 15 has no interface number 0 [ 323.913154][ T5874] usb 5-1: config 15 has no interface number 1 [ 323.919499][ T5874] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 323.929483][ T5874] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 323.944850][ T5874] usb 5-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 323.955013][ T5874] usb 5-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 323.965866][ T5874] usb 5-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 323.977494][ T5874] usb 5-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 323.988356][ T5874] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 324.000117][ T5874] usb 5-1: config 15 interface 174 altsetting 1 has an invalid endpoint with address 0xB7, skipping [ 324.011051][ T5874] usb 5-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 324.021913][ T5874] usb 5-1: config 15 interface 5 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 324.033244][ T5874] usb 5-1: config 15 interface 5 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 324.053432][ T5874] usb 5-1: config 15 interface 174 has no altsetting 0 [ 324.077520][ T5874] usb 5-1: config 15 interface 5 has no altsetting 0 [ 324.092822][ T5874] usb 5-1: string descriptor 0 read error: -71 [ 324.103712][ T5874] usb 5-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 324.129221][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.161523][ T5874] usb 5-1: can't set config #15, error -71 [ 324.170245][ T5874] usb 5-1: USB disconnect, device number 7 [ 324.390765][ T7921] netdevsim netdevsim3: Direct firmware load for ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 324.429218][ T7921] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 324.734159][ T6983] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 324.924077][ T6983] usb 2-1: Using ep0 maxpacket: 16 [ 324.935999][ T6983] usb 2-1: unable to get BOS descriptor or descriptor too short [ 324.949426][ T6983] usb 2-1: config 15 has an invalid interface number: 174 but max is 0 [ 324.963341][ T6983] usb 2-1: config 15 has no interface number 0 [ 324.984125][ T6983] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 325.005182][ T6983] usb 2-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 325.021103][ T6983] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 325.036497][ T6983] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 325.047625][ T6983] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 325.058871][ T6983] usb 2-1: config 15 interface 174 has no altsetting 0 [ 325.069888][ T6983] usb 2-1: string descriptor 0 read error: -22 [ 325.076352][ T6983] usb 2-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 325.085550][ T6983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.100181][ T7924] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 325.121442][ T6983] sierra 2-1:15.174: Sierra USB modem converter detected [ 325.351367][ T6983] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 325.381991][ T6983] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 325.436170][ T6983] usb 2-1: USB disconnect, device number 16 [ 325.499897][ T6983] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 325.551513][ T6983] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 325.561808][ T6983] sierra 2-1:15.174: device disconnected [ 325.564121][ T965] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 325.743510][ T7945] loop3: detected capacity change from 0 to 2048 [ 325.754094][ T965] usb 6-1: Using ep0 maxpacket: 16 [ 325.762993][ T965] usb 6-1: unable to get BOS descriptor or descriptor too short [ 325.777692][ T7945] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 325.790336][ T965] usb 6-1: config 15 has an invalid interface number: 174 but max is 1 [ 325.798988][ T7945] NILFS (loop3): mounting unchecked fs [ 325.808821][ T965] usb 6-1: config 15 has an invalid interface number: 5 but max is 1 [ 325.845115][ T965] usb 6-1: config 15 has an invalid interface descriptor of length 2, skipping [ 325.859567][ T965] usb 6-1: config 15 has no interface number 0 [ 325.860823][ T7945] NILFS (loop3): recovery complete [ 325.896295][ T7946] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 325.899019][ T965] usb 6-1: config 15 has no interface number 1 [ 325.929219][ T965] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 325.969076][ T965] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 325.994611][ T965] usb 6-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 326.008053][ T28] audit: type=1800 audit(1755417156.180:355): pid=7945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.382" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 326.020302][ T965] usb 6-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 326.212738][ T965] usb 6-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 326.268159][ T28] audit: type=1800 audit(1755417156.280:356): pid=7949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.382" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 326.405405][ T965] usb 6-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 326.540737][ T965] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 326.686067][ T965] usb 6-1: config 15 interface 174 altsetting 1 has an invalid endpoint with address 0xB7, skipping [ 326.827516][ T965] usb 6-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 326.979489][ T965] usb 6-1: config 15 interface 5 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 327.131777][ T965] usb 6-1: config 15 interface 5 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 327.336122][ T965] usb 6-1: config 15 interface 174 has no altsetting 0 [ 327.437615][ T965] usb 6-1: config 15 interface 5 has no altsetting 0 [ 327.565670][ T965] usb 6-1: language id specifier not provided by device, defaulting to English [ 327.717817][ T965] usb 6-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 327.839754][ T965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.948839][ T965] usb 6-1: Product: syz [ 328.004132][ T965] usb 6-1: Manufacturer: syz [ 328.008773][ T965] usb 6-1: SerialNumber: syz [ 328.198167][ T7935] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 329.008084][ T965] usb 6-1: can't set config #15, error -71 [ 329.180614][ T965] usb 6-1: USB disconnect, device number 12 [ 330.052574][ T7964] netdevsim netdevsim5: Direct firmware load for ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 330.099127][ T7964] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 330.162667][ T7966] loop3: detected capacity change from 0 to 2048 [ 330.215641][ T7966] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 330.237404][ T7966] NILFS (loop3): mounting unchecked fs [ 330.260182][ T7966] NILFS (loop3): recovery complete [ 330.281236][ T7973] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 330.969077][ T28] audit: type=1800 audit(1755417161.140:357): pid=7966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.387" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 331.146137][ T28] audit: type=1800 audit(1755417161.280:358): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.387" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 331.358815][ T965] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 334.916940][ T7997] loop5: detected capacity change from 0 to 2048 [ 334.952410][ T7997] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 334.964331][ T7997] NILFS (loop5): mounting unchecked fs [ 335.024124][ T7997] NILFS (loop5): recovery complete [ 335.066655][ T8000] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 335.188062][ T28] audit: type=1800 audit(1755417165.360:359): pid=7997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.396" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 335.365489][ T28] audit: type=1800 audit(1755417165.510:360): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.396" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 339.098252][ T8019] loop4: detected capacity change from 0 to 2048 [ 339.202656][ T8019] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 339.257440][ T8019] NILFS (loop4): mounting unchecked fs [ 339.297413][ T8019] NILFS (loop4): recovery complete [ 339.430554][ T8027] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 339.615854][ T28] audit: type=1800 audit(1755417169.780:361): pid=8019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.403" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 339.754187][ T6983] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 339.778927][ T28] audit: type=1800 audit(1755417169.890:362): pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.403" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 340.018069][ T6983] usb 4-1: Using ep0 maxpacket: 16 [ 340.092461][ T6983] usb 4-1: unable to get BOS descriptor or descriptor too short [ 340.187266][ T6983] usb 4-1: config 15 has an invalid interface number: 174 but max is 0 [ 340.272398][ T6983] usb 4-1: config 15 has no interface number 0 [ 340.327026][ T6983] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 340.423718][ T6983] usb 4-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 340.546373][ T6983] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 340.692203][ T6983] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 340.809859][ T6983] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 340.917611][ T6983] usb 4-1: config 15 interface 174 has no altsetting 0 [ 341.035109][ T6983] usb 4-1: string descriptor 0 read error: -22 [ 341.101226][ T6983] usb 4-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 341.185486][ T6983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.350020][ T8029] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 341.529848][ T6983] sierra 4-1:15.174: Sierra USB modem converter detected [ 342.098555][ T6983] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 342.301780][ T6983] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 342.617880][ T6983] usb 4-1: USB disconnect, device number 14 [ 342.966616][ T6983] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 343.192820][ T6983] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 343.382785][ T6983] sierra 4-1:15.174: device disconnected [ 343.645011][ T8042] netdevsim netdevsim1: Direct firmware load for ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 343.695312][ T8040] loop5: detected capacity change from 0 to 2048 [ 343.715956][ T8042] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 343.744913][ T8040] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 343.767161][ T8040] NILFS (loop5): mounting unchecked fs [ 343.782020][ T8040] NILFS (loop5): recovery complete [ 343.803411][ T8046] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 344.185891][ T28] audit: type=1800 audit(1755417174.300:363): pid=8040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.407" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 348.410955][ T8063] loop5: detected capacity change from 0 to 2048 [ 348.443752][ T8063] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 348.459355][ T8063] NILFS (loop5): mounting unchecked fs [ 348.489325][ T8065] udevd[8065]: incorrect nilfs2 checksum on /dev/loop5 [ 348.523830][ T8063] NILFS (loop5): recovery complete [ 348.546197][ T8069] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 348.604113][ T5913] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 348.668960][ T28] audit: type=1800 audit(1755417178.840:364): pid=8063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.415" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 348.804139][ T28] audit: type=1800 audit(1755417178.920:365): pid=8071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.415" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 348.856133][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 350.222418][ T5913] usb 5-1: unable to get BOS descriptor or descriptor too short [ 352.071662][ T5913] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 352.503627][ T5913] usb 5-1: can't read configurations, error -71 [ 352.634188][ T8082] loop4: detected capacity change from 0 to 2048 [ 352.683159][ T8082] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 352.732388][ T8066] udevd[8066]: incorrect nilfs2 checksum on /dev/loop4 [ 352.743576][ T8082] NILFS (loop4): mounting unchecked fs [ 352.795265][ T8082] NILFS (loop4): recovery complete [ 352.814149][ T8084] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 352.931762][ T28] audit: type=1800 audit(1755417183.100:366): pid=8082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.421" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 353.075403][ T28] audit: type=1800 audit(1755417183.230:367): pid=8085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.421" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 356.780941][ T8093] loop1: detected capacity change from 0 to 2048 [ 356.916173][ T8093] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 356.942934][ T8093] NILFS (loop1): mounting unchecked fs [ 356.952754][ T8066] udevd[8066]: incorrect nilfs2 checksum on /dev/loop1 [ 356.966460][ T8093] NILFS (loop1): recovery complete [ 357.012327][ T8097] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 357.136481][ T8099] netdevsim netdevsim3: Direct firmware load for ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 357.176956][ T28] audit: type=1800 audit(1755417187.350:368): pid=8093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.423" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 357.183684][ T8099] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 357.401671][ T28] audit: type=1800 audit(1755417187.450:369): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.423" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 360.694691][ T5913] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 360.914547][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 360.947423][ T5913] usb 4-1: unable to get BOS descriptor or descriptor too short [ 361.067007][ T5913] usb 4-1: config 15 has an invalid interface number: 174 but max is 0 [ 361.179460][ T5913] usb 4-1: config 15 has no interface number 0 [ 361.263094][ T5913] usb 4-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 361.367413][ T5913] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 361.394449][ T5913] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 361.454138][ T5913] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 361.503726][ T5913] usb 4-1: config 15 interface 174 has no altsetting 0 [ 361.517186][ T5913] usb 4-1: string descriptor 0 read error: -22 [ 361.523675][ T5913] usb 4-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 361.545733][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.585135][ T8111] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 361.595362][ T5913] sierra 4-1:15.174: Sierra USB modem converter detected [ 361.831629][ T5913] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 361.887866][ T5913] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 361.897705][ T8121] loop5: detected capacity change from 0 to 2048 [ 361.925091][ T8121] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 361.951429][ T5913] usb 4-1: USB disconnect, device number 15 [ 361.963666][ T8121] NILFS (loop5): mounting unchecked fs [ 361.984704][ T5913] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 362.020480][ T5913] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 362.035992][ T8065] udevd[8065]: incorrect nilfs2 checksum on /dev/loop5 [ 362.062130][ T8121] NILFS (loop5): recovery complete [ 362.063540][ T5913] sierra 4-1:15.174: device disconnected [ 362.093326][ T8124] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 362.157959][ T28] audit: type=1800 audit(1755417192.330:370): pid=8121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.433" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 362.308793][ T28] audit: type=1800 audit(1755417192.440:371): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.433" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 367.491713][ T8140] netdevsim netdevsim4: Direct firmware load for ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 367.524106][ T8140] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 368.052680][ T8150] loop1: detected capacity change from 0 to 2048 [ 368.066459][ T8150] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 368.212862][ T8150] NILFS (loop1): mounting unchecked fs [ 369.076577][ T8066] udevd[8066]: incorrect nilfs2 checksum on /dev/loop1 [ 369.183667][ T8150] NILFS (loop1): recovery complete [ 369.237392][ T8152] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 369.420617][ T28] audit: type=1800 audit(1755417199.590:372): pid=8150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.439" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 370.683615][ T28] audit: type=1800 audit(1755417200.610:373): pid=8162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.439" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 372.138704][ T6983] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 372.639929][ T6983] usb 5-1: Using ep0 maxpacket: 16 [ 373.767608][ T6983] usb 5-1: unable to get BOS descriptor or descriptor too short [ 373.844583][ T6983] usb 5-1: config 15 has an invalid interface number: 174 but max is 0 [ 373.887861][ T6983] usb 5-1: config 15 has no interface number 0 [ 373.913434][ T6983] usb 5-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 373.980097][ T6983] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 374.030431][ T6983] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 374.237849][ T6983] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 374.325377][ T6983] usb 5-1: config 15 interface 174 has no altsetting 0 [ 374.514096][ T6983] usb 5-1: string descriptor 0 read error: -71 [ 374.534385][ T6983] usb 5-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 374.547942][ T6983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.574187][ T6983] usb 5-1: can't set config #15, error -71 [ 374.581834][ T6983] usb 5-1: USB disconnect, device number 11 [ 377.439754][ T8198] netdevsim netdevsim4: Direct firmware load for ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 377.505306][ T8198] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 378.722575][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.730705][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.842075][ T28] audit: type=1326 audit(1755417209.010:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.5.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d35b8ebe9 code=0x7ffc0000 [ 378.860368][ T8215] loop5: detected capacity change from 0 to 1024 [ 378.866349][ T28] audit: type=1326 audit(1755417209.010:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.5.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d35b8ebe9 code=0x7ffc0000 [ 378.888524][ T8215] EXT4-fs: Ignoring removed orlov option [ 378.908719][ T28] audit: type=1326 audit(1755417209.010:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.5.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9d35b8ebe9 code=0x7ffc0000 [ 378.939186][ T28] audit: type=1326 audit(1755417209.010:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.5.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9d35b8ec23 code=0x7ffc0000 [ 378.957201][ T8213] loop3: detected capacity change from 0 to 2048 [ 378.967846][ T28] audit: type=1326 audit(1755417209.010:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.5.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9d35b8d69f code=0x7ffc0000 [ 378.967890][ T28] audit: type=1326 audit(1755417209.010:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.5.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9d35b8ec77 code=0x7ffc0000 [ 378.967927][ T28] audit: type=1326 audit(1755417209.010:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.5.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d35b8d550 code=0x7ffc0000 [ 378.967961][ T28] audit: type=1326 audit(1755417209.010:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.5.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d35b8e7eb code=0x7ffc0000 [ 378.990237][ T5876] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 379.066892][ T28] audit: type=1326 audit(1755417209.040:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.5.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9d35b8d84a code=0x7ffc0000 [ 379.080722][ T8215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.090236][ T28] audit: type=1326 audit(1755417209.040:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.5.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9d35b8d84a code=0x7ffc0000 [ 379.149130][ T8213] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 379.207184][ T8213] NILFS (loop3): mounting unchecked fs [ 379.281280][ T8213] NILFS (loop3): recovery complete [ 379.307317][ T8220] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 379.482497][ T8222] syz.5.456[8222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 379.482630][ T8222] syz.5.456[8222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 379.559834][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 380.693463][ T6202] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.670063][ T5876] usb 5-1: unable to get BOS descriptor or descriptor too short [ 383.889217][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 383.889279][ T28] audit: type=1326 audit(1755417214.020:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.5.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9d35b8ec77 code=0x7ffc0000 [ 383.925962][ T8237] loop5: detected capacity change from 0 to 1024 [ 384.078763][ T8237] EXT4-fs: Ignoring removed orlov option [ 384.299690][ T8236] loop4: detected capacity change from 0 to 2048 [ 384.401496][ T28] audit: type=1326 audit(1755417214.050:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.5.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d35b8d550 code=0x7ffc0000 [ 384.441792][ T5876] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 384.449487][ T5876] usb 5-1: can't read configurations, error -71 [ 384.463551][ T8236] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 384.483571][ T28] audit: type=1326 audit(1755417214.050:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.5.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d35b8e7eb code=0x7ffc0000 [ 384.504911][ T8239] netdevsim netdevsim1: Direct firmware load for ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 384.506552][ T28] audit: type=1326 audit(1755417214.200:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.5.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9d35b8d84a code=0x7ffc0000 [ 384.534305][ T8236] NILFS (loop4): mounting unchecked fs [ 384.582187][ T8239] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 384.584207][ T8237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.609276][ T28] audit: type=1326 audit(1755417214.200:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.5.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9d35b8d84a code=0x7ffc0000 [ 384.639511][ T28] audit: type=1326 audit(1755417214.220:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.5.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9d35b8d457 code=0x7ffc0000 [ 384.719299][ T8236] NILFS (loop4): recovery complete [ 384.781526][ T28] audit: type=1326 audit(1755417214.230:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.5.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9d35b9038a code=0x7ffc0000 [ 384.816758][ T8246] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 384.969710][ T28] audit: type=1326 audit(1755417214.880:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.5.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d35b8d550 code=0x7ffc0000 [ 385.053088][ T28] audit: type=1326 audit(1755417214.880:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.5.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f9d35b8d937 code=0x7ffc0000 [ 385.214658][ T8250] syz.5.460[8250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.214780][ T8250] syz.5.460[8250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.610040][ T28] audit: type=1326 audit(1755417214.880:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.5.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d35b8d550 code=0x7ffc0000 [ 388.957261][ T8268] loop1: detected capacity change from 0 to 2048 [ 388.967576][ T6202] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.033045][ T8268] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 389.069967][ T8268] NILFS (loop1): mounting unchecked fs [ 389.164961][ T8268] NILFS (loop1): recovery complete [ 389.182670][ T8271] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 389.432919][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 389.432973][ T28] audit: type=1800 audit(1755417219.570:469): pid=8267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.465" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 389.562370][ T28] audit: type=1800 audit(1755417219.730:470): pid=8268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.465" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 390.249521][ T965] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 390.544056][ T965] usb 5-1: Using ep0 maxpacket: 16 [ 390.570333][ T965] usb 5-1: unable to get BOS descriptor or descriptor too short [ 390.678123][ T965] usb 5-1: config 15 has an invalid interface number: 174 but max is 0 [ 390.724311][ T965] usb 5-1: config 15 has no interface number 0 [ 390.784952][ T965] usb 5-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 390.882224][ T965] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 391.120474][ T965] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 391.229880][ T965] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 391.339769][ T965] usb 5-1: config 15 interface 174 has no altsetting 0 [ 391.427618][ T965] usb 5-1: string descriptor 0 read error: -22 [ 391.486730][ T965] usb 5-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 391.588912][ T965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.101995][ T8278] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 392.334712][ T965] sierra 5-1:15.174: Sierra USB modem converter detected [ 393.790950][ T965] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 393.857210][ T965] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 394.065316][ T8290] Zero length message leads to an empty skb [ 394.118913][ T965] usb 5-1: USB disconnect, device number 14 [ 394.282477][ T8295] netdevsim netdevsim3: Direct firmware load for ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 394.311981][ T965] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 394.329675][ T8295] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 394.362346][ T965] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 394.428905][ T965] sierra 5-1:15.174: device disconnected [ 397.031392][ T28] audit: type=1326 audit(1755417227.200:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d35b8ebe9 code=0x7ffc0000 [ 397.088621][ T28] audit: type=1326 audit(1755417227.230:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d35b8ebe9 code=0x7ffc0000 [ 397.172952][ T8309] loop5: detected capacity change from 0 to 1024 [ 397.251015][ T8309] EXT4-fs: Ignoring removed orlov option [ 397.292456][ T28] audit: type=1326 audit(1755417227.250:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9d35b8ebe9 code=0x7ffc0000 [ 397.336744][ T28] audit: type=1326 audit(1755417227.250:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9d35b8ec23 code=0x7ffc0000 [ 397.496754][ T8309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.525941][ T28] audit: type=1326 audit(1755417227.290:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9d35b8d69f code=0x7ffc0000 [ 397.550631][ T28] audit: type=1326 audit(1755417227.290:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9d35b8ec77 code=0x7ffc0000 [ 397.577821][ T28] audit: type=1326 audit(1755417227.290:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d35b8d550 code=0x7ffc0000 [ 397.855077][ T965] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 397.944552][ T8324] syz.5.476[8324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.944809][ T8324] syz.5.476[8324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.734139][ T28] audit: type=1326 audit(1755417227.340:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d35b8e7eb code=0x7ffc0000 [ 398.794159][ T965] usb 2-1: Using ep0 maxpacket: 16 [ 398.827209][ T965] usb 2-1: unable to get BOS descriptor or descriptor too short [ 398.862441][ T965] usb 2-1: config 15 has an invalid interface number: 174 but max is 0 [ 398.887066][ T28] audit: type=1326 audit(1755417227.420:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9d35b8d84a code=0x7ffc0000 [ 398.914923][ T28] audit: type=1326 audit(1755417227.420:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.5.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9d35b8d84a code=0x7ffc0000 [ 399.078331][ T965] usb 2-1: config 15 has no interface number 0 [ 399.085226][ T965] usb 2-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 399.095334][ T965] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 399.106432][ T965] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 399.117571][ T965] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 399.129644][ T965] usb 2-1: config 15 interface 174 has no altsetting 0 [ 399.152165][ T6202] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.173785][ T965] usb 2-1: string descriptor 0 read error: -22 [ 399.907856][ T965] usb 2-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 399.921903][ T965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.969770][ T8315] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 400.011015][ T965] sierra 2-1:15.174: Sierra USB modem converter detected [ 400.262012][ T8341] loop5: detected capacity change from 0 to 2048 [ 400.307741][ T8341] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 400.364062][ T965] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 400.374278][ T965] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 400.387977][ T965] usb 2-1: USB disconnect, device number 17 [ 400.399929][ T965] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 400.411504][ T8341] NILFS (loop5): mounting unchecked fs [ 400.433633][ T8341] NILFS (loop5): recovery complete [ 400.441786][ T965] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 400.722188][ T965] sierra 2-1:15.174: device disconnected [ 400.785226][ T8345] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 406.586569][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 406.586583][ T28] audit: type=1326 audit(1755417236.760:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d35b8ebe9 code=0x7ffc0000 [ 406.654200][ T8378] loop5: detected capacity change from 0 to 1024 [ 406.678822][ T8378] EXT4-fs: Ignoring removed orlov option [ 406.693260][ T28] audit: type=1326 audit(1755417236.790:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d35b8ebe9 code=0x7ffc0000 [ 406.722759][ T28] audit: type=1326 audit(1755417236.790:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9d35b8ebe9 code=0x7ffc0000 [ 406.746058][ T28] audit: type=1326 audit(1755417236.790:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9d35b8ec23 code=0x7ffc0000 [ 406.780253][ T28] audit: type=1326 audit(1755417236.790:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9d35b8d69f code=0x7ffc0000 [ 406.816378][ T8378] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.618491][ T28] audit: type=1326 audit(1755417236.820:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9d35b8ec77 code=0x7ffc0000 [ 407.676819][ T28] audit: type=1326 audit(1755417236.820:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d35b8d550 code=0x7ffc0000 [ 407.779774][ T28] audit: type=1326 audit(1755417236.820:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d35b8e7eb code=0x7ffc0000 [ 407.823249][ T28] audit: type=1326 audit(1755417236.850:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9d35b8d84a code=0x7ffc0000 [ 407.984479][ T28] audit: type=1326 audit(1755417236.850:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9d35b8d84a code=0x7ffc0000 [ 408.193110][ T8394] syz.5.490[8394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 408.193669][ T8394] syz.5.490[8394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 408.779684][ T8392] loop3: detected capacity change from 0 to 1024 [ 408.829082][ T8392] EXT4-fs: Ignoring removed orlov option [ 408.904030][ T8392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.990035][ T6202] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.333625][ T8401] syz.3.494[8401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.333750][ T8401] syz.3.494[8401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.359676][ T965] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 410.792157][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.944580][ T965] usb 2-1: Using ep0 maxpacket: 16 [ 411.036292][ T965] usb 2-1: device descriptor read/all, error -71 [ 411.127997][ T8411] loop3: detected capacity change from 0 to 2048 [ 411.293582][ T8411] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 411.318848][ T8411] NILFS (loop3): mounting unchecked fs [ 411.707691][ T8411] NILFS (loop3): recovery complete [ 411.796012][ T8419] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 412.364768][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 412.364802][ T28] audit: type=1800 audit(1755417242.530:606): pid=8411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.498" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 412.939416][ T28] audit: type=1800 audit(1755417243.110:607): pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.498" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 413.607459][ T8440] loop5: detected capacity change from 0 to 2048 [ 413.709815][ T8440] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 413.732375][ T8440] NILFS (loop5): mounting unchecked fs [ 413.760944][ T8440] NILFS (loop5): recovery complete [ 413.770777][ T8445] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 414.734743][ T28] audit: type=1800 audit(1755417244.720:608): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.506" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 416.610842][ T28] audit: type=1800 audit(1755417244.780:609): pid=8447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.506" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 416.694835][ T28] audit: type=1326 audit(1755417246.850:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0398ebe9 code=0x7ffc0000 [ 416.704205][ T8451] loop4: detected capacity change from 0 to 1024 [ 416.744744][ T8451] EXT4-fs: Ignoring removed orlov option [ 416.784559][ T28] audit: type=1326 audit(1755417246.850:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0398ebe9 code=0x7ffc0000 [ 416.807263][ T28] audit: type=1326 audit(1755417246.870:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fba0398ebe9 code=0x7ffc0000 [ 416.890421][ T28] audit: type=1326 audit(1755417246.870:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fba0398ec23 code=0x7ffc0000 [ 416.939564][ T8451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.010928][ T28] audit: type=1326 audit(1755417246.870:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fba0398d69f code=0x7ffc0000 [ 417.194192][ T28] audit: type=1326 audit(1755417246.870:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fba0398ec77 code=0x7ffc0000 [ 417.298080][ T8458] syz.4.508[8458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.298207][ T8458] syz.4.508[8458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.432160][ T28] audit: type=1326 audit(1755417246.870:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba0398d550 code=0x7ffc0000 [ 417.932605][ T28] audit: type=1326 audit(1755417246.870:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba0398e7eb code=0x7ffc0000 [ 418.057875][ T6178] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.092272][ T28] audit: type=1326 audit(1755417246.900:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fba0398d84a code=0x7ffc0000 [ 418.124386][ T5827] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 418.137612][ T28] audit: type=1326 audit(1755417246.900:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fba0398d84a code=0x7ffc0000 [ 418.160465][ T28] audit: type=1326 audit(1755417246.920:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fba0398d457 code=0x7ffc0000 [ 418.188909][ T28] audit: type=1326 audit(1755417246.920:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fba0399038a code=0x7ffc0000 [ 418.217356][ T28] audit: type=1326 audit(1755417247.170:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba0398d550 code=0x7ffc0000 [ 418.308560][ T28] audit: type=1326 audit(1755417247.170:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fba0398d937 code=0x7ffc0000 [ 418.334224][ T28] audit: type=1326 audit(1755417247.170:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba0398d550 code=0x7ffc0000 [ 418.359355][ T28] audit: type=1326 audit(1755417247.170:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba0398e7eb code=0x7ffc0000 [ 418.384219][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 418.399952][ T5827] usb 4-1: unable to get BOS descriptor or descriptor too short [ 418.411577][ T5827] usb 4-1: config 15 has an invalid interface number: 174 but max is 0 [ 418.419916][ T5827] usb 4-1: config 15 has no interface number 0 [ 418.426296][ T5827] usb 4-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 418.437565][ T5827] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 418.448911][ T5827] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 418.460556][ T5827] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 418.478242][ T5827] usb 4-1: config 15 interface 174 has no altsetting 0 [ 418.491485][ T5827] usb 4-1: string descriptor 0 read error: -22 [ 418.498337][ T5827] usb 4-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 418.513478][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.547124][ T8457] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 418.573805][ T5827] sierra 4-1:15.174: Sierra USB modem converter detected [ 418.914565][ T5827] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 418.983700][ T5827] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 419.179695][ T5827] usb 4-1: USB disconnect, device number 16 [ 419.252095][ T5827] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 419.383729][ T5827] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 419.394503][ T5827] sierra 4-1:15.174: device disconnected [ 419.783147][ T8481] loop5: detected capacity change from 0 to 1024 [ 419.829609][ T8481] EXT4-fs: Ignoring removed orlov option [ 419.901302][ T8481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.955556][ T8490] syz.5.517[8490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.956090][ T8490] syz.5.517[8490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.762248][ T6202] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.494013][ T5876] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 423.695102][ T5876] usb 6-1: Using ep0 maxpacket: 16 [ 423.702767][ T5876] usb 6-1: unable to get BOS descriptor or descriptor too short [ 424.461357][ T5876] usb 6-1: config 15 has an invalid interface number: 174 but max is 0 [ 424.484004][ T5876] usb 6-1: config 15 has no interface number 0 [ 424.490277][ T5876] usb 6-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 424.510502][ T5876] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 424.521653][ T5876] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 424.533494][ T5876] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 424.563847][ T5876] usb 6-1: config 15 interface 174 has no altsetting 0 [ 424.582392][ T5876] usb 6-1: string descriptor 0 read error: -22 [ 424.603613][ T5876] usb 6-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 424.613540][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.635884][ T8515] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 424.645976][ T5876] sierra 6-1:15.174: Sierra USB modem converter detected [ 424.672989][ T8524] loop4: detected capacity change from 0 to 2048 [ 424.755255][ T8524] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 424.826301][ T8524] NILFS (loop4): mounting unchecked fs [ 424.842503][ T8288] udevd[8288]: incorrect nilfs2 checksum on /dev/loop4 [ 424.865992][ T8524] NILFS (loop4): recovery complete [ 424.901233][ T8530] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 424.985655][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 424.985670][ T28] audit: type=1800 audit(1755417255.150:695): pid=8524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.529" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 425.065029][ T5876] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 425.798946][ T28] audit: type=1800 audit(1755417255.960:696): pid=8533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.529" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 425.938121][ T5876] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 426.235052][ T5876] usb 6-1: USB disconnect, device number 13 [ 426.303118][ T5876] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 426.480191][ T5876] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 426.592092][ T5876] sierra 6-1:15.174: device disconnected [ 431.377126][ T8571] loop3: detected capacity change from 0 to 2048 [ 431.430562][ T8571] loop3: p1 < > p4 [ 431.447814][ T8571] loop3: p4 size 8388608 extends beyond EOD, truncated [ 432.580846][ T23] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 432.759334][ T8288] udevd[8288]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 432.894055][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 432.903034][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 432.917848][ T23] usb 2-1: config 15 has an invalid interface number: 174 but max is 0 [ 432.927568][ T23] usb 2-1: config 15 has no interface number 0 [ 432.934191][ T23] usb 2-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 432.944353][ T23] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 432.955621][ T23] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 432.966686][ T23] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 432.978197][ T23] usb 2-1: config 15 interface 174 has no altsetting 0 [ 433.129360][ T23] usb 2-1: string descriptor 0 read error: -22 [ 433.195401][ T23] usb 2-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 433.372577][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.512008][ T8569] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 433.563644][ T23] sierra 2-1:15.174: Sierra USB modem converter detected [ 433.691212][ T8590] syzkaller0: entered promiscuous mode [ 433.696838][ T8590] syzkaller0: entered allmulticast mode [ 435.424409][ T23] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 435.446972][ T23] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 435.478172][ T23] usb 2-1: USB disconnect, device number 20 [ 435.511809][ T23] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 435.564588][ T23] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 435.599843][ T23] sierra 2-1:15.174: device disconnected [ 437.466328][ T28] audit: type=1326 audit(1755417267.640:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.5.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d35b8ebe9 code=0x7ffc0000 [ 437.642773][ T8613] loop5: detected capacity change from 0 to 1024 [ 437.690565][ T28] audit: type=1326 audit(1755417267.760:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.5.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d35b8ebe9 code=0x7ffc0000 [ 437.696422][ T8613] EXT4-fs: Ignoring removed orlov option [ 437.895423][ T8613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.016306][ T28] audit: type=1326 audit(1755417268.190:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.5.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d35b8ebe9 code=0x7ffc0000 [ 438.251142][ T28] audit: type=1326 audit(1755417268.190:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.5.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d35b8ebe9 code=0x7ffc0000 [ 438.282450][ T28] audit: type=1326 audit(1755417268.190:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.5.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d35b8ebe9 code=0x7ffc0000 [ 438.305442][ T28] audit: type=1326 audit(1755417268.190:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.5.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9d35b8ebe9 code=0x7ffc0000 [ 438.328094][ T785] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 438.335908][ T28] audit: type=1326 audit(1755417268.190:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.5.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d35b8ebe9 code=0x7ffc0000 [ 438.397569][ T8633] syz.5.553[8633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 438.398145][ T8633] syz.5.553[8633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 438.980485][ T28] audit: type=1326 audit(1755417268.220:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.5.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9d35b8ebe9 code=0x7ffc0000 [ 439.015087][ T28] audit: type=1326 audit(1755417268.220:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.5.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d35b8ebe9 code=0x7ffc0000 [ 439.073455][ T28] audit: type=1326 audit(1755417268.220:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.5.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d35b8ebe9 code=0x7ffc0000 [ 439.165611][ T785] usb 4-1: Using ep0 maxpacket: 16 [ 439.196787][ T785] usb 4-1: unable to get BOS descriptor or descriptor too short [ 439.215474][ T785] usb 4-1: config 15 has an invalid interface number: 174 but max is 0 [ 439.223779][ T785] usb 4-1: config 15 has no interface number 0 [ 439.261983][ T785] usb 4-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 439.264302][ T8645] loop1: detected capacity change from 0 to 2048 [ 439.283139][ T785] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 439.300206][ T8645] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 439.319344][ T8645] NILFS (loop1): mounting unchecked fs [ 439.333077][ T785] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 439.355058][ T785] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 439.355130][ T8645] NILFS (loop1): recovery complete [ 439.385084][ T785] usb 4-1: config 15 interface 174 has no altsetting 0 [ 439.391358][ T8646] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 439.405679][ T785] usb 4-1: string descriptor 0 read error: -22 [ 439.411978][ T785] usb 4-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 439.455956][ T785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.492303][ T8625] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 439.512649][ T785] sierra 4-1:15.174: Sierra USB modem converter detected [ 440.115040][ T785] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 440.579397][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.602494][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.726953][ T785] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 441.229787][ T785] usb 4-1: USB disconnect, device number 17 [ 441.733468][ T785] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 442.039894][ T785] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 442.567360][ T785] sierra 4-1:15.174: device disconnected [ 443.535611][ T6202] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.043405][ T8669] loop5: detected capacity change from 0 to 2048 [ 444.135611][ T8669] loop5: p1 < > p4 [ 444.135680][ T8672] loop3: detected capacity change from 0 to 2048 [ 444.155066][ T8669] loop5: p4 size 8388608 extends beyond EOD, truncated [ 444.246099][ T8672] loop3: p1 < > p4 [ 444.301672][ T8672] loop3: p4 size 8388608 extends beyond EOD, truncated [ 444.473809][ T8678] udevd[8678]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 444.488501][ T8066] udevd[8066]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 445.420110][ T5876] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 445.436290][ T8288] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 445.590058][ T8288] udevd[8288]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 445.602857][ T8066] udevd[8066]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 445.763296][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 445.775182][ T5876] usb 2-1: unable to get BOS descriptor or descriptor too short [ 445.789036][ T5876] usb 2-1: config 15 has an invalid interface number: 174 but max is 0 [ 445.804116][ T5876] usb 2-1: config 15 has no interface number 0 [ 445.820647][ T5876] usb 2-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 445.838146][ T5876] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 445.849505][ T5876] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 445.861300][ T5876] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 445.882188][ T5876] usb 2-1: config 15 interface 174 has no altsetting 0 [ 445.898357][ T5876] usb 2-1: string descriptor 0 read error: -22 [ 445.906985][ T5876] usb 2-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 445.918322][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.941991][ T8674] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 445.964146][ T5876] sierra 2-1:15.174: Sierra USB modem converter detected [ 446.412672][ T5876] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 446.450500][ T5876] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 446.562400][ T5876] usb 2-1: USB disconnect, device number 21 [ 446.575890][ T5876] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 446.588668][ T5876] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 446.598472][ T5876] sierra 2-1:15.174: device disconnected [ 447.571132][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.579'. [ 447.603115][ T8703] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.612731][ T8703] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.621882][ T8703] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.630990][ T8703] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.642354][ T8703] vxlan0: entered promiscuous mode [ 448.024133][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 448.024201][ T28] audit: type=1326 audit(1755417278.180:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110858ebe9 code=0x7ffc0000 [ 448.125513][ T8714] loop1: detected capacity change from 0 to 1024 [ 448.139211][ T28] audit: type=1326 audit(1755417278.180:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110858ebe9 code=0x7ffc0000 [ 448.173598][ T8714] EXT4-fs: Ignoring removed orlov option [ 448.293561][ T28] audit: type=1326 audit(1755417278.230:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f110858ebe9 code=0x7ffc0000 [ 448.340458][ T28] audit: type=1326 audit(1755417278.230:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f110858ec23 code=0x7ffc0000 [ 448.363868][ T28] audit: type=1326 audit(1755417278.260:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f110858d69f code=0x7ffc0000 [ 448.618873][ T8714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.665157][ T28] audit: type=1326 audit(1755417278.280:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f110858ec77 code=0x7ffc0000 [ 448.789617][ T28] audit: type=1326 audit(1755417278.290:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f110858d550 code=0x7ffc0000 [ 448.818616][ T28] audit: type=1326 audit(1755417278.300:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f110858e7eb code=0x7ffc0000 [ 448.954913][ T28] audit: type=1326 audit(1755417278.340:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f110858d84a code=0x7ffc0000 [ 448.984403][ T28] audit: type=1326 audit(1755417278.340:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.1.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f110858d84a code=0x7ffc0000 [ 449.624513][ T8721] syz.1.583[8721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 449.624645][ T8721] syz.1.583[8721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 450.904207][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.920913][ T8733] loop4: detected capacity change from 0 to 2048 [ 450.946403][ T8733] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 450.974013][ T8733] NILFS (loop4): mounting unchecked fs [ 450.995172][ T8288] udevd[8288]: incorrect nilfs2 checksum on /dev/loop4 [ 451.014697][ T8733] NILFS (loop4): recovery complete [ 451.032967][ T8738] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 451.264154][ T6983] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 451.665176][ T6983] usb 4-1: Using ep0 maxpacket: 16 [ 451.853788][ T6983] usb 4-1: unable to get BOS descriptor or descriptor too short [ 451.938324][ T6983] usb 4-1: config 15 has an invalid interface number: 174 but max is 0 [ 451.946988][ T6983] usb 4-1: config 15 has no interface number 0 [ 451.953296][ T6983] usb 4-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 452.020725][ T6983] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 452.029461][ T8745] loop1: detected capacity change from 0 to 2048 [ 452.077379][ T8745] loop1: p1 < > p4 [ 452.111591][ T8745] loop1: p4 size 8388608 extends beyond EOD, truncated [ 452.202897][ T6983] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 452.216319][ T6983] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 452.228251][ T6983] usb 4-1: config 15 interface 174 has no altsetting 0 [ 452.247853][ T6983] usb 4-1: string descriptor 0 read error: -22 [ 452.254426][ T6983] usb 4-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 452.263531][ T6983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.277978][ T8735] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 452.318307][ T6983] sierra 4-1:15.174: Sierra USB modem converter detected [ 452.697251][ T6983] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 452.776005][ T6983] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 452.806588][ T6983] usb 4-1: USB disconnect, device number 18 [ 452.818500][ T6983] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 452.890024][ T6983] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 452.905503][ T6983] sierra 4-1:15.174: device disconnected [ 453.011152][ T8288] udevd[8288]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 453.024994][ T8066] udevd[8066]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 453.978081][ T8760] loop1: detected capacity change from 0 to 2048 [ 453.999749][ T8760] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 454.009712][ T8760] NILFS (loop1): mounting unchecked fs [ 454.148349][ T8760] NILFS (loop1): recovery complete [ 454.173598][ T8770] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 454.317946][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 454.317962][ T28] audit: type=1800 audit(1755417284.490:777): pid=8760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.594" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 457.539302][ T8788] loop3: detected capacity change from 0 to 2048 [ 457.588422][ T8788] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 457.610423][ T8788] NILFS (loop3): mounting unchecked fs [ 457.689242][ T8788] NILFS (loop3): recovery complete [ 457.697749][ T8797] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 457.901542][ T28] audit: type=1800 audit(1755417288.070:778): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.602" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 458.014154][ T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 458.674228][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 458.731415][ T28] audit: type=1800 audit(1755417288.900:779): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.602" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 458.784737][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 458.885786][ T8] usb 5-1: config 15 has an invalid interface number: 174 but max is 0 [ 458.894164][ T8] usb 5-1: config 15 has no interface number 0 [ 458.902058][ T8] usb 5-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 458.912261][ T8] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 458.923375][ T8] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 458.935119][ T8] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 458.946224][ T8] usb 5-1: config 15 interface 174 has no altsetting 0 [ 458.959596][ T8] usb 5-1: string descriptor 0 read error: -22 [ 458.969716][ T8] usb 5-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 458.978968][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.050576][ T8795] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 459.096044][ T8] sierra 5-1:15.174: Sierra USB modem converter detected [ 459.342110][ T8] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 459.364946][ T8] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 459.417620][ T8] usb 5-1: USB disconnect, device number 15 [ 459.436090][ T8] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 459.449404][ T8] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 459.462699][ T8] sierra 5-1:15.174: device disconnected [ 462.844878][ T8824] loop5: detected capacity change from 0 to 2048 [ 462.873286][ T8824] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 462.908201][ T8824] NILFS (loop5): mounting unchecked fs [ 462.953021][ T8288] udevd[8288]: incorrect nilfs2 checksum on /dev/loop5 [ 462.986291][ T8824] NILFS (loop5): recovery complete [ 462.993653][ T8825] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 463.104132][ T28] audit: type=1800 audit(1755417293.270:780): pid=8824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.612" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 463.198355][ T8827] loop3: detected capacity change from 0 to 2048 [ 463.310030][ T8827] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 463.357638][ T28] audit: type=1800 audit(1755417293.380:781): pid=8828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.612" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 463.476114][ T8827] NILFS (loop3): mounting unchecked fs [ 464.299378][ T8827] NILFS (loop3): recovery complete [ 464.426774][ T8831] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 466.263380][ T28] audit: type=1800 audit(1755417295.690:782): pid=8827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.613" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 466.399074][ T28] audit: type=1800 audit(1755417296.560:783): pid=8838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.613" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 467.056639][ T8849] loop4: detected capacity change from 0 to 1024 [ 467.089003][ T8849] ======================================================= [ 467.089003][ T8849] WARNING: The mand mount option has been deprecated and [ 467.089003][ T8849] and is ignored by this kernel. Remove the mand [ 467.089003][ T8849] option from the mount to silence this warning. [ 467.089003][ T8849] ======================================================= [ 467.171829][ T8849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.294075][ T5913] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 468.164028][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 468.183387][ T28] audit: type=1800 audit(1755417298.350:784): pid=8849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.618" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 468.205503][ T5913] usb 2-1: unable to get BOS descriptor or descriptor too short [ 468.233189][ T5913] usb 2-1: config 15 has an invalid interface number: 174 but max is 0 [ 468.242466][ T5913] usb 2-1: config 15 has no interface number 0 [ 468.271495][ T5913] usb 2-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 468.287194][ T5913] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 468.298754][ T5913] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 468.345440][ T5913] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 468.383059][ T5913] usb 2-1: config 15 interface 174 has no altsetting 0 [ 468.417116][ T5913] usb 2-1: string descriptor 0 read error: -22 [ 468.423676][ T5913] usb 2-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 468.433775][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.470880][ T8852] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 468.497868][ T5913] sierra 2-1:15.174: Sierra USB modem converter detected [ 468.603626][ T6178] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.276860][ T8869] loop5: detected capacity change from 0 to 2048 [ 469.309879][ T8869] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 469.343245][ T8869] NILFS (loop5): mounting unchecked fs [ 469.366121][ T8288] udevd[8288]: incorrect nilfs2 checksum on /dev/loop5 [ 469.401277][ T8869] NILFS (loop5): recovery complete [ 469.410975][ T8872] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 469.430337][ T5913] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 469.454786][ T5913] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 469.483743][ T5913] usb 2-1: USB disconnect, device number 22 [ 469.513549][ T5913] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 469.540416][ T28] audit: type=1800 audit(1755417299.710:785): pid=8869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.623" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 469.542842][ T5913] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 469.601843][ T5913] sierra 2-1:15.174: device disconnected [ 469.748268][ T28] audit: type=1800 audit(1755417299.820:786): pid=8878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.623" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 474.582260][ T8899] loop3: detected capacity change from 0 to 2048 [ 474.617151][ T8899] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 474.673635][ T8897] loop4: detected capacity change from 0 to 1024 [ 474.680463][ T8899] NILFS (loop3): mounting unchecked fs [ 474.734709][ T8288] udevd[8288]: incorrect nilfs2 checksum on /dev/loop3 [ 474.775263][ T8899] NILFS (loop3): recovery complete [ 475.424295][ T8903] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 475.495335][ T8897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.574089][ T28] audit: type=1800 audit(1755417305.740:787): pid=8897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.631" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 475.687314][ T28] audit: type=1800 audit(1755417305.860:788): pid=8899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.632" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 475.787730][ T28] audit: type=1800 audit(1755417305.940:789): pid=8909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.632" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 478.421678][ T6178] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.861610][ T8920] loop4: detected capacity change from 0 to 2048 [ 479.895483][ T8920] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 479.922955][ T8920] NILFS (loop4): mounting unchecked fs [ 479.931249][ T8066] udevd[8066]: incorrect nilfs2 checksum on /dev/loop4 [ 479.952724][ T8920] NILFS (loop4): recovery complete [ 479.964287][ T8923] loop5: detected capacity change from 0 to 2048 [ 479.979121][ T8925] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 479.984545][ T8923] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 480.015889][ T8923] NILFS (loop5): mounting unchecked fs [ 480.031221][ T28] audit: type=1800 audit(1755417310.200:790): pid=8920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.639" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 480.134494][ T965] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 480.317061][ T8923] NILFS (loop5): recovery complete [ 480.337514][ T28] audit: type=1800 audit(1755417310.280:791): pid=8927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.639" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 480.432627][ T965] usb 4-1: Using ep0 maxpacket: 16 [ 480.460324][ T8930] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 480.570907][ T965] usb 4-1: unable to get BOS descriptor or descriptor too short [ 480.688941][ T965] usb 4-1: config 15 has an invalid interface number: 174 but max is 1 [ 480.797355][ T965] usb 4-1: config 15 has an invalid interface number: 5 but max is 1 [ 482.351510][ T28] audit: type=1800 audit(1755417311.050:792): pid=8923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.640" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 482.396350][ T965] usb 4-1: config 15 has an invalid interface descriptor of length 2, skipping [ 482.427781][ T28] audit: type=1800 audit(1755417312.600:793): pid=8931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.640" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 484.282391][ T965] usb 4-1: config 15 has no interface number 0 [ 484.294267][ T965] usb 4-1: config 15 has no interface number 1 [ 484.300518][ T965] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 484.310926][ T965] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 484.321158][ T965] usb 4-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 484.332271][ T965] usb 4-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 484.365130][ T965] usb 4-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 484.389673][ T965] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 484.405686][ T965] usb 4-1: config 15 interface 174 altsetting 1 has an invalid endpoint with address 0xB7, skipping [ 484.416989][ T965] usb 4-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 484.435741][ T965] usb 4-1: config 15 interface 5 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 484.486321][ T965] usb 4-1: config 15 interface 5 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 501.634510][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.640874][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.513876][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 589.520872][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8931/1:b..l [ 589.529211][ C1] rcu: (detected by 1, t=10502 jiffies, g=47681, q=137 ncpus=2) [ 589.536956][ C1] task:syz.5.640 state:R running task stack:23496 pid:8931 ppid:6202 flags:0x00004004 [ 589.548720][ C1] Call Trace: [ 589.552015][ C1] [ 589.554965][ C1] __schedule+0x14d2/0x44d0 [ 589.559512][ C1] ? asan.module_dtor+0x20/0x20 [ 589.564380][ C1] ? mark_lock+0x94/0x320 [ 589.568732][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 589.574744][ C1] ? preempt_schedule_irq+0xaa/0x140 [ 589.580050][ C1] preempt_schedule_irq+0xb5/0x140 [ 589.585177][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 589.590919][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 589.596757][ C1] irqentry_exit+0x67/0x70 [ 589.601189][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 589.607191][ C1] RIP: 0010:preempt_count_add+0x8/0x1a0 [ 589.612750][ C1] Code: 24 80 e1 07 80 c1 03 38 c1 7c 97 48 8b 3c 24 e8 fe 68 81 00 eb 8c e9 f1 fe ff ff 0f 1f 80 00 00 00 00 f3 0f 1e fa 41 57 41 56 <53> 49 bf 00 00 00 00 00 fc ff df 48 c7 c0 60 a4 ea 96 48 c1 e8 03 [ 589.632457][ C1] RSP: 0018:ffffc9000c01f1e0 EFLAGS: 00000202 [ 589.638537][ C1] RAX: ffffffff813aa35f RBX: 1ffff92001803e59 RCX: 0000000000000000 [ 589.646521][ C1] RDX: ffff88802b4fbc00 RSI: 0000000000000001 RDI: 0000000000000001 [ 589.654497][ C1] RBP: 0000000000000001 R08: ffffc9000c01f390 R09: 000000000000000e [ 589.662476][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc9000c01f2c8 [ 589.670467][ C1] R13: dffffc0000000000 R14: ffffc9000c01f300 R15: ffffffff8a6d4fda [ 589.678445][ C1] ? syscall_exit_to_user_mode+0x1a/0x50 [ 589.684101][ C1] ? unwind_next_frame+0x9f/0x2970 [ 589.689235][ C1] ? syscall_exit_to_user_mode+0x1a/0x50 [ 589.694888][ C1] unwind_next_frame+0xbe/0x2970 [ 589.699852][ C1] ? syscall_exit_to_user_mode+0x1a/0x50 [ 589.705503][ C1] ? syscall_exit_to_user_mode+0x1a/0x50 [ 589.711151][ C1] ? stack_trace_save+0xe0/0xe0 [ 589.716013][ C1] arch_stack_walk+0x144/0x190 [ 589.720791][ C1] ? syscall_exit_to_user_mode+0x1a/0x50 [ 589.726447][ C1] stack_trace_save+0x9c/0xe0 [ 589.731147][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 589.736283][ C1] save_stack+0xf7/0x1f0 [ 589.740611][ C1] ? __reset_page_owner+0x190/0x190 [ 589.745829][ C1] ? free_unref_page_prepare+0x7ce/0x8e0 [ 589.751474][ C1] ? free_unref_page_list+0xbe/0x860 [ 589.756773][ C1] ? release_pages+0x1fa0/0x2220 [ 589.761721][ C1] ? tlb_flush_mmu+0x368/0x4f0 [ 589.766496][ C1] ? tlb_finish_mmu+0xc3/0x1d0 [ 589.771271][ C1] ? exit_mmap+0x3f0/0xb50 [ 589.775703][ C1] ? __mmput+0x118/0x3c0 [ 589.779956][ C1] ? exit_mm+0x1da/0x2c0 [ 589.784209][ C1] ? do_exit+0x88e/0x23c0 [ 589.788567][ C1] ? do_group_exit+0x21b/0x2d0 [ 589.793339][ C1] ? get_signal+0x12fc/0x1400 [ 589.798029][ C1] ? arch_do_signal_or_restart+0x96/0x780 [ 589.803763][ C1] ? exit_to_user_mode_loop+0x70/0x110 [ 589.809232][ C1] ? exit_to_user_mode_prepare+0xb1/0x140 [ 589.814965][ C1] ? syscall_exit_to_user_mode+0x1a/0x50 [ 589.820615][ C1] ? page_ext_get+0x22/0x2b0 [ 589.825222][ C1] ? page_ext_get+0x1e2/0x2b0 [ 589.829910][ C1] __reset_page_owner+0x4e/0x190 [ 589.834863][ C1] ? rcu_is_watching+0x15/0xb0 [ 589.839644][ C1] free_unref_page_prepare+0x7ce/0x8e0 [ 589.845132][ C1] free_unref_page_list+0xbe/0x860 [ 589.850253][ C1] ? __folio_memcg+0x63/0x160 [ 589.854945][ C1] ? folio_memcg+0x127/0x480 [ 589.859547][ C1] release_pages+0x1fa0/0x2220 [ 589.864316][ C1] ? mlock_drain_local+0x79/0x490 [ 589.869357][ C1] ? lru_cache_disable+0x30/0x30 [ 589.874304][ C1] ? free_swap_cache+0xe9/0x760 [ 589.879174][ C1] tlb_flush_mmu+0x368/0x4f0 [ 589.883780][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 589.888387][ C1] ? free_pgtables+0x743/0x770 [ 589.893164][ C1] exit_mmap+0x3f0/0xb50 [ 589.897417][ C1] ? exit_mm_release+0x1a/0x30 [ 589.902202][ C1] ? vm_brk+0x30/0x30 [ 589.906196][ C1] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 589.911866][ C1] ? uprobe_clear_state+0x278/0x290 [ 589.917074][ C1] ? mm_update_next_owner+0x562/0x6c0 [ 589.922462][ C1] __mmput+0x118/0x3c0 [ 589.926544][ C1] exit_mm+0x1da/0x2c0 [ 589.930631][ C1] ? do_exit+0x23c0/0x23c0 [ 589.935067][ C1] ? taskstats_exit+0x35e/0x9e0 [ 589.939943][ C1] do_exit+0x88e/0x23c0 [ 589.944120][ C1] ? put_task_struct+0xc0/0xc0 [ 589.948898][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 589.954885][ C1] ? get_signal+0x1068/0x1400 [ 589.959576][ C1] ? lock_chain_count+0x20/0x20 [ 589.964433][ C1] ? _raw_spin_lock_irq+0xaf/0xe0 [ 589.969472][ C1] do_group_exit+0x21b/0x2d0 [ 589.974078][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 589.979291][ C1] get_signal+0x12fc/0x1400 [ 589.983829][ C1] arch_do_signal_or_restart+0x96/0x780 [ 589.989396][ C1] ? do_pwritev+0x340/0x340 [ 589.993915][ C1] ? get_sigframe_size+0x20/0x20 [ 589.998875][ C1] ? __se_sys_sendfile64+0x13f/0x190 [ 590.004179][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 590.009661][ C1] exit_to_user_mode_loop+0x70/0x110 [ 590.014963][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 590.020532][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 590.026001][ C1] do_syscall_64+0x61/0xb0 [ 590.030428][ C1] ? clear_bhb_loop+0x40/0x90 [ 590.035081][ C1] ? clear_bhb_loop+0x40/0x90 [ 590.039736][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 590.045609][ C1] RIP: 0033:0x7f9d35b8ebe9 [ 590.050016][ C1] RSP: 002b:00007f9d36a4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 590.058407][ C1] RAX: fffffffffffffe00 RBX: 00007f9d35db6090 RCX: 00007f9d35b8ebe9 [ 590.066402][ C1] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000005 [ 590.074370][ C1] RBP: 00007f9d35c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 590.082327][ C1] R10: 0001000000201001 R11: 0000000000000246 R12: 0000000000000000 [ 590.090282][ C1] R13: 00007f9d35db6128 R14: 00007f9d35db6090 R15: 00007ffe1d851bc8 [ 590.098241][ C1] [ 590.101250][ C1] rcu: rcu_preempt kthread starved for 10553 jiffies! g47681 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 590.112467][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 590.122433][ C1] rcu: RCU grace-period kthread stack dump: [ 590.128302][ C1] task:rcu_preempt state:R running task stack:26872 pid:17 ppid:2 flags:0x00004000 [ 590.139093][ C1] Call Trace: [ 590.142389][ C1] [ 590.145338][ C1] __schedule+0x14d2/0x44d0 [ 590.149885][ C1] ? asan.module_dtor+0x20/0x20 [ 590.154759][ C1] ? enqueue_timer+0x225/0x530 [ 590.159539][ C1] ? __mod_timer+0x984/0xdb0 [ 590.161821][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 590.164141][ C1] schedule+0xbd/0x170 [ 590.164166][ C1] schedule_timeout+0x160/0x280 [ 590.164188][ C1] ? console_conditional_schedule+0x40/0x40 [ 590.164212][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 590.179914][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 590.185196][ C1] ? update_process_times+0x1b0/0x1b0 [ 590.185235][ C1] ? prepare_to_swait_event+0x339/0x360 [ 590.185256][ C1] rcu_gp_fqs_loop+0x302/0x1560 [ 590.185283][ C1] ? rcu_gp_init+0x110e/0x1510 [ 590.185314][ C1] ? dump_blkd_tasks+0x810/0x810 [ 590.222865][ C1] ? rcu_gp_init+0x1510/0x1510 [ 590.227657][ C1] ? rcu_gp_cleanup+0xb4c/0xca0 [ 590.232537][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 590.237760][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 590.242972][ C1] rcu_gp_kthread+0x99/0x380 [ 590.247550][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 590.252654][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 590.257603][ C1] ? __kthread_parkme+0x162/0x1c0 [ 590.262638][ C1] kthread+0x2fa/0x390 [ 590.266701][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 590.271806][ C1] ? kthread_blkcg+0xd0/0xd0 [ 590.276382][ C1] ret_from_fork+0x48/0x80 [ 590.280788][ C1] ? kthread_blkcg+0xd0/0xd0 [ 590.285362][ C1] ret_from_fork_asm+0x11/0x20 [ 590.290123][ C1] [ 590.293122][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 590.299436][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.6.102-syzkaller #0 [ 590.307150][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 590.317193][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 590.322916][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 e6 3a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 590.342517][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 590.348569][ C1] RAX: c2165b1ef5eb4a00 RBX: ffffffff8161914b RCX: c2165b1ef5eb4a00 [ 590.356522][ C1] RDX: 0000000000000001 RSI: ffffffff8aaab9c0 RDI: ffffffff8afc66c0 [ 590.364472][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36d4b R09: 1ffff110171e6da9 [ 590.372424][ C1] R10: dffffc0000000000 R11: ffffed10171e6daa R12: ffffffff8e4a8828 [ 590.380382][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110037cb780 [ 590.388344][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 590.397269][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 590.403874][ C1] CR2: 00007f6da2000020 CR3: 000000002bf20000 CR4: 00000000003506e0 [ 590.411854][ C1] Call Trace: [ 590.415132][ C1] [ 590.418044][ C1] default_idle+0x13/0x20 [ 590.422365][ C1] default_idle_call+0x6c/0xa0 [ 590.427129][ C1] do_idle+0x1eb/0x510 [ 590.431187][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 590.436370][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 590.441553][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 590.447176][ C1] cpu_startup_entry+0x43/0x60 [ 590.451930][ C1] start_secondary+0xee/0xf0 [ 590.456500][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 590.462557][ C1] [ 590.484971][ T965] usb 4-1: config 15 interface 174 has no altsetting 0 [ 590.491870][ T965] usb 4-1: config 15 interface 5 has no altsetting 0 [ 590.505466][ T965] usb 4-1: string descriptor 0 read error: -71 [ 590.511694][ T965] usb 4-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 590.521141][ T965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.534566][ T965] usb 4-1: can't set config #15, error -71 [ 590.541705][ T965] usb 4-1: USB disconnect, device number 19 SYZFAIL: failed to send rpc fd=3 want=408 sent=0 n=-1 (errno 32: Broken pipe) [ 592.670960][ T3447] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.703934][ T3447] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.848393][ T3447] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.859723][ T3447] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.932201][ T3447] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.942547][ T3447] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.018692][ T3447] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.029113][ T3447] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.136981][ T3447] hsr_slave_0: left promiscuous mode [ 594.143212][ T3447] hsr_slave_1: left promiscuous mode [ 594.172630][ T3447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.182735][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.194714][ T3447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.203318][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.211837][ T3447] bridge_slave_1: left allmulticast mode [ 594.217787][ T3447] bridge_slave_1: left promiscuous mode [ 594.223539][ T3447] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.234160][ T3447] bridge_slave_0: left allmulticast mode [ 594.239896][ T3447] bridge_slave_0: left promiscuous mode [ 594.248659][ T3447] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.281523][ T3447] veth1_macvtap: left promiscuous mode [ 594.294198][ T3447] veth0_macvtap: left promiscuous mode [ 594.299879][ T3447] veth1_vlan: left promiscuous mode [ 594.311299][ T3447] veth0_vlan: left promiscuous mode [ 594.835682][ T3447] team0 (unregistering): Port device team_slave_1 removed [ 594.877844][ T3447] team0 (unregistering): Port device team_slave_0 removed [ 594.916077][ T3447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.953791][ T3447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.334276][ T3447] bond0 (unregistering): Released all slaves [ 595.899150][ T3447] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.966311][ T3447] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.038847][ T3447] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.102595][ T3447] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.278837][ T3447] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.348801][ T3447] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.411102][ T3447] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.491171][ T3447] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.672360][ T3447] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.758856][ T3447] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.842174][ T3447] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.902589][ T3447] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.568481][ T3447] hsr_slave_0: left promiscuous mode [ 598.574977][ T3447] hsr_slave_1: left promiscuous mode [ 598.581116][ T3447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.591666][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.601703][ T3447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.609485][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.617640][ T3447] bridge_slave_1: left allmulticast mode [ 598.623308][ T3447] bridge_slave_1: left promiscuous mode [ 598.629604][ T3447] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.647052][ T3447] bridge_slave_0: left allmulticast mode [ 598.652806][ T3447] bridge_slave_0: left promiscuous mode [ 598.660006][ T3447] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.675618][ T3447] hsr_slave_0: left promiscuous mode [ 598.681598][ T3447] hsr_slave_1: left promiscuous mode [ 598.688044][ T3447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.696460][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.706472][ T3447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.713980][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.721841][ T3447] bridge_slave_1: left allmulticast mode [ 598.728250][ T3447] bridge_slave_1: left promiscuous mode [ 598.734517][ T3447] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.743649][ T3447] bridge_slave_0: left allmulticast mode [ 598.749915][ T3447] bridge_slave_0: left promiscuous mode [ 598.756114][ T3447] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.775843][ T3447] hsr_slave_0: left promiscuous mode [ 598.781906][ T3447] hsr_slave_1: left promiscuous mode [ 598.792676][ T3447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.800491][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.814264][ T3447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.821682][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.833308][ T3447] bridge_slave_1: left allmulticast mode [ 598.840229][ T3447] bridge_slave_1: left promiscuous mode [ 598.849533][ T3447] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.860069][ T3447] bridge_slave_0: left allmulticast mode [ 598.869518][ T3447] bridge_slave_0: left promiscuous mode [ 598.877914][ T3447] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.953069][ T3447] veth1_macvtap: left promiscuous mode [ 598.961907][ T3447] veth0_macvtap: left promiscuous mode [ 598.968568][ T3447] veth1_vlan: left promiscuous mode [ 598.975618][ T3447] veth0_vlan: left promiscuous mode [ 598.982214][ T3447] veth1_macvtap: left promiscuous mode [ 598.988787][ T3447] veth0_macvtap: left promiscuous mode [ 598.994488][ T3447] veth1_vlan: left promiscuous mode [ 598.999766][ T3447] veth0_vlan: left promiscuous mode [ 599.006834][ T3447] veth1_macvtap: left promiscuous mode [ 599.012334][ T3447] veth0_macvtap: left promiscuous mode [ 599.018501][ T3447] veth1_vlan: left promiscuous mode [ 599.023799][ T3447] veth0_vlan: left promiscuous mode [ 599.265413][ T3447] bond1 (unregistering): Released all slaves