last executing test programs: 14m25.317518522s ago: executing program 32 (id=2269): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xb, &(0x7f0000000ac0)=@raw=[@call={0x85, 0x0, 0x0, 0xd0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000001280)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000022c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000002340)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x74, 0x43, 0x2}, 0x50) socket(0x40000000015, 0x5, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x8, 0x7d, 0xfffffffffffffffd, 0x5, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x40000000000006, 0xae07, 0x9, 0x4, 0x12, 0x80000006, 0x6}, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) 6m58.719229756s ago: executing program 33 (id=4142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 6m44.56545473s ago: executing program 34 (id=4193): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 6m42.209727037s ago: executing program 35 (id=4202): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 5m24.862060931s ago: executing program 3 (id=4475): r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m24.538488435s ago: executing program 3 (id=4479): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff000705810200020007058202"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000300)={0x20, 0x9, 0x2, '$8'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m21.864435158s ago: executing program 3 (id=4495): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) 5m21.410704419s ago: executing program 3 (id=4497): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@orlov}, {@errors_remount}]}, 0x3, 0x5eb, &(0x7f0000000c00)="$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") mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5m20.659326425s ago: executing program 9 (id=4503): unshare(0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = inotify_init() preadv2(r0, &(0x7f0000004180)=[{&(0x7f00000001c0)=""/236, 0xec}, {&(0x7f0000003180)=""/4096, 0x1000}], 0x2, 0x9, 0x9, 0x3) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/current\x00') r4 = syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r4, 0x0) ptrace(0x10, r4) sched_setaffinity(r4, 0x8, &(0x7f0000000140)=0x5) ptrace$getregset(0x4204, r4, 0x201, &(0x7f0000000100)={0x0}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r3, &(0x7f0000001140)={0x2020}, 0x2020) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) write$FUSE_INIT(r3, 0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) close_range(r1, 0xffffffffffffffff, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000002ff000200000000000000000a00000005000100070900020073797a30000000000400078005000400000000000c000300686173683a697000"], 0x40}, 0x1, 0x0, 0x0, 0x40280d5}, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0x5f456000) 5m19.064933296s ago: executing program 3 (id=4507): open(&(0x7f00000001c0)='./bus\x00', 0x64842, 0x1ff) syz_open_dev$loop(0x0, 0x4, 0x40800) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0xa00086, &(0x7f0000009780), 0x1, 0x9759, &(0x7f000000e040)="$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") r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = open(&(0x7f0000002840)='./file0\x00', 0x577982, 0x240) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0xfffffbffa003e458, 0x2000000000000000) 5m18.979054896s ago: executing program 9 (id=4509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) 5m18.434970793s ago: executing program 9 (id=4512): mq_open(0x0, 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x100008, 0x1, 0xc05}) 5m18.305801287s ago: executing program 9 (id=4513): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x40) syz_open_dev$loop(0x0, 0xffffffffffffffff, 0x101000) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff900ce5c4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r2 = dup(r1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019300)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5m17.232738933s ago: executing program 3 (id=4515): sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xca9ca18c98920048}, 0x8804) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x13c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}, @CTA_EXPECT_NAT={0x60, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 5m16.189955853s ago: executing program 36 (id=4515): sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xca9ca18c98920048}, 0x8804) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x13c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}, @CTA_EXPECT_NAT={0x60, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 5m16.146819574s ago: executing program 9 (id=4520): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@orlov}, {@errors_remount}]}, 0x3, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl") mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5m14.863441628s ago: executing program 9 (id=4527): connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000000)='0\x00', 0x2) 5m1.038237117s ago: executing program 7 (id=4599): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5m0.058709225s ago: executing program 7 (id=4603): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) 4m59.762359772s ago: executing program 7 (id=4606): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) 4m59.514489553s ago: executing program 7 (id=4607): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@orlov}, {@errors_remount}]}, 0x3, 0x5eb, &(0x7f0000000c00)="$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") mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m58.420614855s ago: executing program 7 (id=4615): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fff6ffffffffff7f000000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006004400050000000000000000000000ffff0a010101000000003c0000000200000000000000000000000000ffffac1e010106000000040300000100"/176], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 4m57.484842543s ago: executing program 37 (id=4527): connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000000)='0\x00', 0x2) 4m56.431151959s ago: executing program 7 (id=4624): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001100)={0x60, r1, 0x1, 0x200, 0x0, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}]}}]}, 0x60}}, 0x0) 4m55.726300176s ago: executing program 38 (id=4624): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001100)={0x60, r1, 0x1, 0x200, 0x0, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}]}}]}, 0x60}}, 0x0) 2m7.785306878s ago: executing program 8 (id=5238): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x1000) 2m6.554261697s ago: executing program 8 (id=5245): add_key(0x0, 0x0, &(0x7f0000000400)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e204d434453412073656c662d74657374696e67206b65793020170d3234303431333232113632365a180f32313234303332303232313632365a303a3138303606035504030c2f43657274696669636174652076657269666963617428a2e0861e1ae90d412073656c662d74657374696e67206b6579305930cb06072a8648ce3d020106082a8648ce3d0301070342000407e56b", 0xe7, 0xfffffffffffffffd) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[]) 2m3.264658544s ago: executing program 8 (id=5254): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000300)={[{@threads_num={'threads', 0x3d, 0x5}}, {}, {}, {@threads_num={'threads', 0x3d, 0x8734}}, {@threads_num={'threads', 0x3d, 0x7f}}, {}]}, 0x0, 0x19c, &(0x7f0000000000)="$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") 2m2.95059759s ago: executing program 8 (id=5257): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@orlov}, {@errors_remount}]}, 0x3, 0x5eb, &(0x7f0000000c00)="$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") mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m2.557439325s ago: executing program 8 (id=5261): mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x4f, &(0x7f00000020c0)=ANY=[@ANYBLOB], 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) io_uring_enter(0xffffffffffffffff, 0x8ae, 0xfbb9, 0x35, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000021c0), 0x0, 0x80001) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2002, 0x10c) 1m59.970623664s ago: executing program 8 (id=5271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) 1m59.34263998s ago: executing program 39 (id=5271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) 15.163272068s ago: executing program 2 (id=5579): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, &(0x7f0000000140)) socket$inet6(0xa, 0x80002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x6, 0x40, 0xbfffdffe}, {0x80000006, 0x9, 0x1d, 0x7fff}]}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) 11.228319364s ago: executing program 0 (id=5591): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(r0, 0x0, 0x0) 10.408266931s ago: executing program 0 (id=5595): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc513, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x6, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x85, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0xf, 0xd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000528"], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.734009626s ago: executing program 2 (id=5598): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 8.043342863s ago: executing program 5 (id=5602): io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214d, 0xc000, 0x2, 0x5e}) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000040)={0x1, 0x1}) 8.017982514s ago: executing program 4 (id=5603): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0xf955, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2, @in=@multicast1, 0x32, 0x0, 0x0, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6.848531613s ago: executing program 5 (id=5606): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/printer.usb0/pnp_string\x00', 0x0, 0x86) read(r2, &(0x7f0000000300)=""/100, 0x64) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) eventfd2(0x0, 0x0) sendmsg$xdp(r3, 0x0, 0x4040040) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, 0x0, 0x4008804) sendmsg$inet(r4, 0x0, 0x0) getsockname$unix(r1, &(0x7f0000000140)=@abs, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r5, 0x0, 0x0) 6.795417242s ago: executing program 4 (id=5607): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(r0, 0x0, 0x0) 6.719716469s ago: executing program 2 (id=5608): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = socket(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 6.529348323s ago: executing program 4 (id=5609): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') symlink(&(0x7f0000001a00)='streaming/header/h\x00', &(0x7f0000001b00)='streaming/class/ss/h\x00') symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00') 6.222747852s ago: executing program 4 (id=5610): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x0, 0x3fc, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x18001028, r0, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 5.265328883s ago: executing program 0 (id=5612): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000"], 0x0, 0x56}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x9ab5, 0x80000000}, {0xfffffff9, 0x7fffe}]}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1694, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000400)={0x0, 0x3938700}, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r2 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) lseek(r4, 0x101, 0x1) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 5.148279849s ago: executing program 5 (id=5613): socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[], 0x0) 5.062431781s ago: executing program 4 (id=5615): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, 0x0, 0x0) creat(0x0, 0x24) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fanotify_init(0x20, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000040)=""/131, 0x83}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000000)=0x157) 5.008609273s ago: executing program 6 (id=5616): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 4.60658001s ago: executing program 5 (id=5618): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x31, 0xffffffffffffffff, 0x1000000) link(0x0, &(0x7f0000000380)='./file0\x00') 4.365198508s ago: executing program 6 (id=5619): io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214d, 0xc000, 0x2, 0x5e}) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000040)={0x1, 0x1}) 4.225379368s ago: executing program 5 (id=5620): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 4.100337894s ago: executing program 6 (id=5621): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(r0, 0x0, 0x0) 4.098151708s ago: executing program 2 (id=5622): syz_mount_image$nilfs2(&(0x7f0000000f80), &(0x7f0000000a80)='./file3\x00', 0x0, &(0x7f0000000c00)={[{@errors_remount_ro}, {@order_strict}, {@nodiscard}, {@norecovery}, {@errors_remount_ro}, {@discard}, {@nobarrier}, {@nobarrier}, {@errors_remount_ro}, {@errors_continue}]}, 0x1, 0xa88, &(0x7f0000002140)="$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") 3.740690668s ago: executing program 6 (id=5623): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./bus\x00', 0x10, &(0x7f0000000040)=ANY=[], 0x8, 0x250, &(0x7f0000000b80)="$eJzs2k9rHHUYB/BnYqUxJd2I/2hB+kMP6mVocvIgkiAtiAFFG6EK0qmZ6JJxN2SWwIrYeNGLB1+CZ/HoTZCKFy+5+Ao8eMslxx7EkXbTNhtWyKJxS/P5XPZhn/0uz/AMw+8wu69888n6Wp2vFb2YyrKYWoztuJXFXEzFXdvx0gtXf332navvvbG0vHzp7ZQuL12ZX0gpnb3w0/ufff/czd6Zd384++Pp2Jn7YHfviz92nt45t/vXlY/bdWrXqdPtpSJd73Z7xfWqTKvtej1P6a2qLOoytTt1uTnUX6u6Gxv9VHRWZ2c2Nsu6TkWnn9bLfup1U2+zn4qPinYn5XmeZmeCf2Plu1tNE3vNo9ciu/vd7O/RiuzxlD2xmD11LXtmOzu31zStyQ7KMbm3/6ZpHvs2zty0/xPlwEN9OqL6amtla2XwOegvrUU7qijjYrTiz7h9m+wb1JdfX750Md0xF19WN/bzN7ZWHhnOz0cr5kbn5wf5NJw/HTMH8wvRiidH5xdG5qfjxecP5PNoxW8fRjeqWI3b2fv5z+dTeu3N5UP583d+BwDwsMnTPSPPb3n+T/1Bfozz4aHz1ak4f2qy105E3f90vaiqclMxTnFh3NT05GeeeHH8N1uTRTwIV3qk4pefX335ARhjv1g8vJ1JP5n4P9xf+lET08c7EAAAAAAAAAAAAEfy371F+PX+Pw61snHeLAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6mvwMAAP//cOvMBw==") truncate(&(0x7f0000000040)='./file2\x00', 0xffff) 3.127063697s ago: executing program 6 (id=5625): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/printer.usb0/pnp_string\x00', 0x0, 0x86) read(r2, &(0x7f0000000300)=""/100, 0x64) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) eventfd2(0x0, 0x0) sendmsg$xdp(r3, 0x0, 0x4040040) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, 0x0, 0x4008804) sendmsg$inet(r4, 0x0, 0x0) getsockname$unix(r1, &(0x7f0000000140)=@abs, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r5, 0x0, 0x0) 2.636544419s ago: executing program 2 (id=5626): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) r3 = socket(0x2b, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0x0, 0x1, 0x23, 0xb}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) r5 = dup(0xffffffffffffffff) ioctl$KDFONTOP_COPY(r5, 0x4b72, &(0x7f00000009c0)={0x3, 0x0, 0x4, 0x1b, 0x72, &(0x7f00000005c0)}) mmap(&(0x7f00005fe000/0x2000)=nil, 0x2000, 0x100000d, 0x28011, r5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0) syz_open_pts(r6, 0x8182) r7 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r7, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 2.5746343s ago: executing program 5 (id=5627): add_key(0x0, 0x0, &(0x7f0000000400)="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", 0x142, 0xfffffffffffffffd) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[]) 2.490730006s ago: executing program 1 (id=5628): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4003, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) syz_io_uring_setup(0x18d7, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80009) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) 2.235164185s ago: executing program 1 (id=5629): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4003, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/102400, 0x19000) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80009) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) 1.985178491s ago: executing program 1 (id=5630): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, 0x0) 1.83896585s ago: executing program 6 (id=5631): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0xb}, 0xe) semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) modify_ldt$write(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 1.72359128s ago: executing program 0 (id=5632): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x31, 0xffffffffffffffff, 0x1000000) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.630797825s ago: executing program 1 (id=5633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x602000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="060000000400000003000000"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r3, 0x0, 0x7}, 0x38) 538.606535ms ago: executing program 1 (id=5634): io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214d, 0xc000, 0x2, 0x5e}) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, 0x0) 409.633113ms ago: executing program 0 (id=5635): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(r0, 0x0, 0x0) 365.275139ms ago: executing program 4 (id=5636): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000300)=0x3ff, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x5f0}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd25, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {0x0, 0xe}, {0x1, 0xa}, {0x7, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x4c, 0x9, 0x4, 0xfffffe01, 0x200}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20010094}, 0xc050) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 266.660575ms ago: executing program 1 (id=5637): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x840) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x3c7}) 90.738085ms ago: executing program 0 (id=5638): syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000300)='01234', 0x5) close(0xffffffffffffffff) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(0x0, 0x1ff) r0 = open(0x0, 0x241, 0x1ff) write(r0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='720', 0x3) close(0xffffffffffffffff) r1 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) write(r1, &(0x7f00000006c0)='184', 0x3) close(r1) r2 = open(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwFrameInterval\x00', 0x241, 0x1ff) write(r2, 0x0, 0x0) mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/yuyv\x00') symlink(0x0, &(0x7f0000000940)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlink(&(0x7f0000000980)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x0) mkdir(&(0x7f0000000a80)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) 0s ago: executing program 2 (id=5639): prlimit64(0x0, 0x6, 0x0, 0x0) setreuid(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x80000002, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0094fffd00000000000000000000e7ff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x4559}], 0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): amily 0 port 6081 - 0 [ 1190.173999][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.264684][T19479] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1190.291179][T20974] veth1_vlan: entered promiscuous mode [ 1190.337074][ T5846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.367536][ T5846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.442227][T19479] usb 2-1: Using ep0 maxpacket: 32 [ 1190.460464][T19479] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1190.468130][T20974] veth0_macvtap: entered promiscuous mode [ 1190.489506][T19479] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1190.516620][T20974] veth1_macvtap: entered promiscuous mode [ 1190.520357][T19479] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1190.575132][T20974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1190.607111][T19479] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1190.637178][T19479] usb 2-1: config 1 has no interface number 0 [ 1190.664435][T19479] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1190.689777][T20974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1190.700661][T19479] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1190.724405][T21442] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4722'. [ 1190.780466][T19479] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.799881][T19479] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1190.830473][T21444] dummy0: left promiscuous mode [ 1190.856562][T21442] netlink: 'syz.8.4722': attribute type 10 has an invalid length. [ 1190.873037][T21442] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4722'. [ 1190.919129][ T151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.948433][ T151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.959200][ T151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.968095][ T151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.981012][T21442] dummy0: entered promiscuous mode [ 1191.047632][T19479] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1191.582132][T19479] usb 2-1: USB disconnect, device number 10 [ 1191.610759][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.662346][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.665870][T19479] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1192.311221][ T8768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.383175][ T8768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.418320][T19409] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1193.212030][ T48] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.274478][T21486] dvmrp8: entered allmulticast mode [ 1193.372798][ T30] audit: type=1800 audit(1152.947:200): pid=21492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4733" name="pnp_string" dev="configfs" ino=60497 res=0 errno=0 [ 1193.621713][ T48] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.770768][T21504] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4736'. [ 1193.789476][T21501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4735'. [ 1193.909091][T21508] netlink: 'syz.2.4735': attribute type 10 has an invalid length. [ 1193.941137][T21508] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4735'. [ 1193.950275][T21509] netlink: 'syz.6.4736': attribute type 10 has an invalid length. [ 1193.985440][T21509] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4736'. [ 1194.102190][T21507] dummy0: left promiscuous mode [ 1194.149381][T21508] dummy0: entered promiscuous mode [ 1194.184360][T21509] dummy0: entered promiscuous mode [ 1194.507111][ T48] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.063154][T21528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4740'. [ 1195.304220][T21535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4743'. [ 1195.416664][ T48] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.954037][T21566] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4750'. [ 1196.963499][ T1662] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1197.008353][ T48] bridge_slave_1: left allmulticast mode [ 1197.048258][ T48] bridge_slave_1: left promiscuous mode [ 1197.060889][T21569] netlink: 'syz.6.4750': attribute type 10 has an invalid length. [ 1197.082110][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.104739][T21569] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4750'. [ 1197.145531][ T48] bridge_slave_0: left allmulticast mode [ 1197.158226][ T1662] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1197.172871][ T48] bridge_slave_0: left promiscuous mode [ 1197.183287][ T1662] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.201785][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.225781][ T1662] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.252976][ T1662] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1197.292441][ T1662] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1197.307682][ T1662] usb 9-1: Product: syz [ 1197.325261][ T1662] usb 9-1: Manufacturer: syz [ 1197.379871][ T1662] garmin_gps 9-1:1.0: Garmin GPS usb/tty converter detected [ 1197.427568][ T1662] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1197.481816][ T1662] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1197.719234][T21562] input: syz0 as /devices/virtual/input/input17 [ 1197.802916][ T30] audit: type=1326 audit(1157.010:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21561 comm="syz.8.4749" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148859e0d9 code=0x7ffc0000 [ 1197.854754][T17563] usb 9-1: USB disconnect, device number 8 [ 1197.886979][T17563] garmin_gps 9-1:1.0: device disconnected [ 1197.929679][ T30] audit: type=1326 audit(1157.010:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21561 comm="syz.8.4749" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148859e0d9 code=0x7ffc0000 [ 1198.028281][ T30] audit: type=1326 audit(1157.010:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21561 comm="syz.8.4749" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148859e0d9 code=0x7ffc0000 [ 1198.146080][ T30] audit: type=1326 audit(1157.010:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21561 comm="syz.8.4749" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f148859e0d9 code=0x7ffc0000 [ 1198.191117][ T5615] block nbd6: Receive control failed (result -32) [ 1198.247178][ T30] audit: type=1326 audit(1157.010:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21561 comm="syz.8.4749" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148859e0d9 code=0x7ffc0000 [ 1198.274142][ T30] audit: type=1326 audit(1157.010:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21561 comm="syz.8.4749" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148859e0d9 code=0x7ffc0000 [ 1198.323711][ T30] audit: type=1326 audit(1157.010:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21561 comm="syz.8.4749" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148859e0d9 code=0x7ffc0000 [ 1198.381897][ T30] audit: type=1326 audit(1157.010:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21561 comm="syz.8.4749" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f148859e0d9 code=0x7ffc0000 [ 1198.488805][ T30] audit: type=1326 audit(1157.010:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21561 comm="syz.8.4749" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148859e0d9 code=0x7ffc0000 [ 1198.539008][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1198.588716][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1198.633215][ T48] bond0 (unregistering): Released all slaves [ 1198.690702][T21566] dummy0: left promiscuous mode [ 1198.705838][T21569] dummy0: entered promiscuous mode [ 1199.607983][T21607] overlayfs: failed to clone lowerpath [ 1200.950517][T21633] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4768'. [ 1201.015593][T21636] dummy0: left promiscuous mode [ 1201.038387][T21633] netlink: 'syz.6.4768': attribute type 10 has an invalid length. [ 1201.063089][T21633] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4768'. [ 1201.094631][T21633] dummy0: entered promiscuous mode [ 1201.423054][T21648] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4772'. [ 1201.474099][T21648] dummy0: left promiscuous mode [ 1201.515119][T21648] netlink: 'syz.6.4772': attribute type 10 has an invalid length. [ 1201.544617][T21648] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4772'. [ 1201.580250][T21648] dummy0: entered promiscuous mode [ 1202.602226][T12860] Bluetooth: hci2: command 0x0c1a tx timeout [ 1202.611666][T19479] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1202.646578][T19479] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1202.976533][T21670] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4776'. [ 1203.283037][T21681] gfs2: not a GFS2 filesystem [ 1203.746631][T21691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4785'. [ 1203.801806][T21691] dummy0: left promiscuous mode [ 1203.836409][T21695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4786'. [ 1203.861516][T21691] netlink: 'syz.2.4785': attribute type 10 has an invalid length. [ 1203.879106][T21695] dummy0: left promiscuous mode [ 1203.895126][T21691] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4785'. [ 1203.921582][T21695] netlink: 'syz.0.4786': attribute type 10 has an invalid length. [ 1203.944680][T21695] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4786'. [ 1203.955448][T21691] dummy0: entered promiscuous mode [ 1203.982337][T21695] dummy0: entered promiscuous mode [ 1204.865941][T12860] Bluetooth: hci2: command 0x0c1a tx timeout [ 1205.404911][T21715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4793'. [ 1207.562174][T21757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4803'. [ 1207.633017][T21757] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1207.642774][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1207.707645][T21757] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1207.714194][T21761] netlink: 'syz.1.4803': attribute type 10 has an invalid length. [ 1207.764403][T21761] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4803'. [ 1207.908896][T21761] dummy0: entered promiscuous mode [ 1208.091962][T21761] bond2: (slave dummy0): Releasing backup interface [ 1208.158877][ T5615] Bluetooth: hci4: command 0x0c1a tx timeout [ 1208.482568][T19479] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1208.675351][T19479] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1210.846382][T21797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4808'. [ 1211.180954][ T5615] Bluetooth: hci5: command 0x0c1a tx timeout [ 1211.301041][T19479] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1211.837470][T19479] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1211.977609][T21800] ceph: No mds server is up or the cluster is laggy [ 1212.086099][T16854] libceph: connect (1)[c::]:6789 error -101 [ 1212.175886][T16854] libceph: mon0 (1)[c::]:6789 connect error [ 1212.721215][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1213.140382][T21820] overlayfs: failed to resolve './file1': -2 [ 1213.448821][T21825] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 1214.566334][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout [ 1214.572658][T19479] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1214.586498][T19479] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1215.679866][ T48] hsr_slave_0: left promiscuous mode [ 1215.786667][T21852] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4822'. [ 1215.889156][ T48] hsr_slave_1: left promiscuous mode [ 1215.895848][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1215.903598][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1215.928072][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1215.947922][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1216.015592][ T48] veth1_macvtap: left promiscuous mode [ 1216.054197][ T48] veth0_macvtap: left promiscuous mode [ 1216.072530][ T48] veth1_vlan: left promiscuous mode [ 1216.083244][ T48] veth0_vlan: left promiscuous mode [ 1216.184303][T21855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4823'. [ 1216.340981][T21857] netlink: 'syz.1.4823': attribute type 10 has an invalid length. [ 1216.365776][T21857] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4823'. [ 1217.090193][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1217.146554][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1218.665045][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1218.701364][T21856] dummy0: left promiscuous mode [ 1218.728917][T21857] dummy0: entered promiscuous mode [ 1218.999819][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1219.008327][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1220.272104][T21894] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 1220.425908][T21899] overlayfs: failed to resolve './file1': -2 [ 1222.061894][T21931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4843'. [ 1222.065066][T21929] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4844'. [ 1222.387648][T21934] dummy0: left promiscuous mode [ 1222.578864][T21937] netlink: 'syz.8.4844': attribute type 10 has an invalid length. [ 1222.817195][T21937] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4844'. [ 1222.882202][T21937] dummy0: entered promiscuous mode [ 1223.038428][ T5269] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1224.905537][ T5615] block nbd7: Receive control failed (result -32) [ 1227.184638][T21997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4862'. [ 1228.113391][T22004] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4863'. [ 1228.172121][T22004] dummy0: left promiscuous mode [ 1228.233480][T22006] netlink: 'syz.8.4863': attribute type 10 has an invalid length. [ 1228.299060][T22006] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4863'. [ 1228.329758][T22006] dummy0: entered promiscuous mode [ 1230.348555][ T5615] block nbd8: Receive control failed (result -32) [ 1231.133421][T16854] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1231.180257][T22049] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4877'. [ 1231.312369][T22054] netlink: 'syz.8.4877': attribute type 10 has an invalid length. [ 1231.325066][T16854] usb 2-1: Using ep0 maxpacket: 32 [ 1231.444825][T16854] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1231.470091][T16854] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 1231.478451][T16854] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.494158][T16854] usb 2-1: config 0 has no interface number 0 [ 1231.500668][T16854] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 1231.500918][T22049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1231.512910][T16854] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1231.543791][T22054] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4877'. [ 1231.592448][T22051] dummy0: left promiscuous mode [ 1231.657168][T22056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4878'. [ 1231.747934][T16854] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 1231.758490][T16854] usb 2-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1231.776006][T16854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.788363][T16854] usb 2-1: Product: syz [ 1231.792732][T16854] usb 2-1: Manufacturer: syz [ 1231.798138][T16854] usb 2-1: SerialNumber: syz [ 1231.833727][T16854] usb 2-1: config 0 descriptor?? [ 1231.853696][T16854] usb 2-1: expecting 3 got 1 endpoints! Bailing out. [ 1231.856935][T22051] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1231.934821][T22054] dummy0: entered promiscuous mode [ 1231.985786][T22054] bond1: (slave dummy0): Releasing backup interface [ 1232.134859][T16854] usb 2-1: USB disconnect, device number 11 [ 1232.158241][T22064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4880'. [ 1232.195592][T22064] dummy0: left promiscuous mode [ 1232.259577][T22067] netlink: 'syz.2.4880': attribute type 10 has an invalid length. [ 1232.316804][T22067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4880'. [ 1232.418270][T22067] dummy0: entered promiscuous mode [ 1234.781678][ T5615] block nbd9: Receive control failed (result -32) [ 1235.490626][ T5837] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1235.551031][T22107] gfs2: not a GFS2 filesystem [ 1235.884722][ T5837] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1236.124601][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1236.154527][ T5837] usb 5-1: Product: syz [ 1236.174288][ T5837] usb 5-1: SerialNumber: syz [ 1236.220853][ T5837] usb 5-1: config 0 descriptor?? [ 1236.343080][T22111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4894'. [ 1237.156387][ T5837] hso 5-1:0.0: Not our interface [ 1237.390157][T22123] netlink: 'syz.0.4895': attribute type 10 has an invalid length. [ 1237.401627][T22123] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4895'. [ 1237.495985][T22113] bond1: Unable to set up delay as MII monitoring is disabled [ 1237.539604][T22113] bond1 (unregistering): Released all slaves [ 1237.842140][T22120] dummy0: left promiscuous mode [ 1237.876642][T22123] dummy0: entered promiscuous mode [ 1238.877731][T13238] usb 5-1: USB disconnect, device number 11 [ 1239.131013][T22138] netlink: 'syz.4.4900': attribute type 1 has an invalid length. [ 1239.169814][T22138] netlink: 'syz.4.4900': attribute type 10 has an invalid length. [ 1239.214394][T22138] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4900'. [ 1239.247475][T22138] dummy0: entered promiscuous mode [ 1241.466612][T22168] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4910'. [ 1241.735596][T16854] libceph: connect (1)[c::]:6789 error -101 [ 1241.755913][T16854] libceph: mon0 (1)[c::]:6789 connect error [ 1241.776236][T22175] ceph: No mds server is up or the cluster is laggy [ 1242.115378][T22167] syz.0.4909 (22167): drop_caches: 2 [ 1242.539267][ T5755] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1242.745079][ T5755] usb 9-1: Using ep0 maxpacket: 32 [ 1242.751071][ T5755] usb 9-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1242.764528][ T5755] usb 9-1: config 0 has an invalid interface number: 146 but max is 0 [ 1242.773434][ T5755] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.783975][ T5755] usb 9-1: config 0 has no interface number 0 [ 1242.786980][T22201] netlink: 'syz.0.4918': attribute type 10 has an invalid length. [ 1242.790531][ T5755] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 1242.809940][ T5755] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1242.819909][ T5755] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 1242.831327][ T5755] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1242.846827][ T5755] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1242.868276][ T5755] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 1242.894894][T22196] bond1: Unable to set up delay as MII monitoring is disabled [ 1242.906046][ T5755] usb 9-1: config 0 interface 146 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1242.920955][T22201] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4918'. [ 1242.946628][ T5755] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.967599][ T5755] usb 9-1: Product: syz [ 1242.977153][T22196] bond1 (unregistering): Released all slaves [ 1242.989675][ T5755] usb 9-1: Manufacturer: syz [ 1243.016633][ T5755] usb 9-1: SerialNumber: syz [ 1243.057039][ T5755] usb 9-1: config 0 descriptor?? [ 1243.088924][ T5755] usb 9-1: expecting 3 got 2 endpoints! Bailing out. [ 1243.146860][T22205] netlink: 'syz.6.4920': attribute type 1 has an invalid length. [ 1243.169512][T22199] dummy0: left promiscuous mode [ 1243.257062][T22209] netlink: 'syz.6.4920': attribute type 10 has an invalid length. [ 1243.267572][T22201] dummy0: entered promiscuous mode [ 1243.327678][T22209] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4920'. [ 1243.348812][ T5755] usb 9-1: USB disconnect, device number 9 [ 1243.622408][T22205] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1245.603810][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1245.830933][T22240] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4926'. [ 1245.878831][T22239] ceph: No mds server is up or the cluster is laggy [ 1247.662819][ T24] usb 3-1: device not accepting address 10, error -71 [ 1248.847181][T22258] syz.0.4930 (22258): drop_caches: 2 [ 1248.908816][T22266] netlink: 'syz.8.4935': attribute type 1 has an invalid length. [ 1248.993644][T22271] netlink: 'syz.8.4935': attribute type 10 has an invalid length. [ 1249.024327][T22271] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4935'. [ 1249.071722][T22276] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4938'. [ 1249.082730][T22277] netlink: 'syz.2.4934': attribute type 10 has an invalid length. [ 1249.089839][T22274] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 1249.090961][T22277] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4934'. [ 1249.147019][T22263] bond1: Unable to set up delay as MII monitoring is disabled [ 1249.176058][T22263] bond1 (unregistering): Released all slaves [ 1249.941539][T22266] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1249.957636][T22270] dummy0: left promiscuous mode [ 1250.005443][T22277] dummy0: entered promiscuous mode [ 1250.089133][ T5615] block nbd10: Receive control failed (result -32) [ 1250.365884][T22293] ceph: No mds server is up or the cluster is laggy [ 1250.707209][T16854] libceph: connect (1)[c::]:6789 error -101 [ 1250.897572][T16854] libceph: mon0 (1)[c::]:6789 connect error [ 1251.673477][T22314] gfs2: not a GFS2 filesystem [ 1252.262007][T22319] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4944'. [ 1252.373615][T17563] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1252.646141][T17563] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1252.682684][T17563] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1252.718592][T17563] usb 9-1: Product: syz [ 1252.730167][T17563] usb 9-1: SerialNumber: syz [ 1252.755901][T17563] usb 9-1: config 0 descriptor?? [ 1252.785276][T17563] hso 9-1:0.0: Not our interface [ 1253.050181][T22338] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4953'. [ 1254.529231][ T24] usb 9-1: USB disconnect, device number 10 [ 1254.926847][T22360] netlink: 'syz.2.4957': attribute type 10 has an invalid length. [ 1254.996970][T22360] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4957'. [ 1255.128043][T22351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1255.180115][T22357] dummy0: left promiscuous mode [ 1255.337202][T22357] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1255.386785][T22360] dummy0: entered promiscuous mode [ 1255.427394][T22360] bond1: (slave dummy0): Releasing backup interface [ 1255.885964][T22375] gfs2: not a GFS2 filesystem [ 1256.622422][T22376] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4961'. [ 1256.651840][T22374] ceph: No mds server is up or the cluster is laggy [ 1258.216986][T22401] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4968'. [ 1260.311518][ T5839] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1260.790511][T22429] binder: 22427:22429 ioctl c018620c 200000000240 returned -22 [ 1260.824548][ T5839] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1260.855181][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1260.890977][ T5839] usb 3-1: Product: syz [ 1260.908199][ T5839] usb 3-1: SerialNumber: syz [ 1260.969474][ T5839] usb 3-1: config 0 descriptor?? [ 1260.981839][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 1261.002050][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 1261.012931][ T5839] hso 3-1:0.0: Not our interface [ 1261.027749][T22438] ceph: No mds server is up or the cluster is laggy [ 1261.118539][T22442] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4977'. [ 1261.476631][T22450] gfs2: not a GFS2 filesystem [ 1262.382837][T22452] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1262.464131][ T5839] usb 3-1: USB disconnect, device number 12 [ 1262.532496][T22452] dummy0: left promiscuous mode [ 1262.585479][T22456] netlink: 'syz.6.4979': attribute type 10 has an invalid length. [ 1262.615038][T22452] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1262.666693][T22456] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4979'. [ 1262.918782][T22456] dummy0: entered promiscuous mode [ 1263.509870][T22456] bond3: (slave dummy0): Releasing backup interface [ 1264.003708][T22482] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4988'. [ 1264.765333][T22492] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4991'. [ 1265.797454][T22496] ceph: No mds server is up or the cluster is laggy [ 1266.153347][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 1266.274814][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 1267.340268][ T5839] libceph: connect (1)[c::]:6789 error -101 [ 1267.351942][ T5839] libceph: mon0 (1)[c::]:6789 connect error [ 1267.670912][T22510] gfs2: not a GFS2 filesystem [ 1268.092717][ T5755] libceph: connect (1)[c::]:6789 error -101 [ 1268.127871][ T5755] libceph: mon0 (1)[c::]:6789 connect error [ 1270.780760][T22554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5006'. [ 1270.802688][T22555] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5007'. [ 1273.234105][T22558] loop2: detected capacity change from 0 to 512 [ 1274.171301][T22558] msdos: Unknown parameter 'allow0000000000000077777' [ 1275.616318][T22579] gfs2: not a GFS2 filesystem [ 1276.593943][T22582] binder: 22563:22582 ioctl c018620c 200000000240 returned -22 [ 1277.908266][T22600] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 1278.553732][T22612] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.5024'. [ 1279.000391][ T24] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1279.228465][T22621] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5025'. [ 1279.271213][ T24] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1279.297919][T22623] loop1: detected capacity change from 0 to 512 [ 1279.332372][ T24] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1279.344854][T22623] msdos: Unknown parameter 'allow0000000000000077777' [ 1279.368252][ T24] usb 9-1: Product: syz [ 1279.384654][ T24] usb 9-1: SerialNumber: syz [ 1279.432266][ T24] usb 9-1: config 0 descriptor?? [ 1279.481283][ T24] hso 9-1:0.0: Not our interface [ 1281.429075][T22653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5023'. [ 1282.315781][ T24] usb 9-1: USB disconnect, device number 11 [ 1282.464765][T22658] loop1: detected capacity change from 0 to 2048 [ 1282.542142][ T5755] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1282.608420][T22661] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1282.747874][ T5755] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1282.814136][ T5755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.865996][ T5755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.955332][ T5755] usb 1-1: config 0 descriptor?? [ 1283.859482][ T5755] usbhid 1-1:0.0: can't add hid device: -71 [ 1283.870139][ T5755] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1283.892212][ T5755] usb 1-1: USB disconnect, device number 5 [ 1284.316255][T22681] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5040'. [ 1284.465294][ T5755] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1285.503852][T22660] loop2: detected capacity change from 0 to 32768 [ 1285.537400][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1285.545058][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1285.605699][T22699] dummy0: left promiscuous mode [ 1285.627045][T22699] netlink: 'syz.6.5046': attribute type 10 has an invalid length. [ 1285.660034][T22699] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5046'. [ 1285.669440][T22699] dummy0: entered promiscuous mode [ 1285.757398][T22660] JBD2: Ignoring recovery information on journal [ 1285.860033][T22660] JBD2: journal reset failed [ 1285.888820][T22660] (syz.2.5036,22660,0):ocfs2_journal_load:1163 ERROR: Failed to load journal! [ 1285.909306][T22660] (syz.2.5036,22660,0):ocfs2_check_volume:2373 ERROR: ocfs2 journal load failed! -4 [ 1286.084108][T22714] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 1286.951417][T22711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5048'. [ 1288.087283][ T5839] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1288.206441][T17563] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1288.264565][ T5839] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1288.289293][ T5839] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1288.306853][ T5839] usb 9-1: Product: syz [ 1288.314034][ T5839] usb 9-1: SerialNumber: syz [ 1288.340864][ T5839] usb 9-1: config 0 descriptor?? [ 1288.354741][T22741] overlayfs: failed to clone upperpath [ 1288.374449][ T5839] hso 9-1:0.0: Not our interface [ 1288.402030][T17563] usb 3-1: Using ep0 maxpacket: 8 [ 1288.423126][T17563] usb 3-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 1288.447760][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1288.447780][ T30] audit: type=1326 audit(1240.725:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22740 comm="syz.6.5058" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d1d9e0d9 code=0x7ffc0000 [ 1288.460393][T17563] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1288.507166][T22745] dummy0: left promiscuous mode [ 1288.530170][T22745] netlink: 'syz.0.5059': attribute type 10 has an invalid length. [ 1288.539707][T17563] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.563736][T22745] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5059'. [ 1288.570652][ T30] audit: type=1326 audit(1240.725:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22740 comm="syz.6.5058" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d1d9e0d9 code=0x7ffc0000 [ 1288.579622][T17563] usb 3-1: config 0 descriptor?? [ 1288.646131][T22745] dummy0: entered promiscuous mode [ 1288.656163][ T30] audit: type=1326 audit(1240.725:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22740 comm="syz.6.5058" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f48d1d9e0d9 code=0x7ffc0000 [ 1288.704254][ T30] audit: type=1326 audit(1240.725:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22740 comm="syz.6.5058" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d1d9e0d9 code=0x7ffc0000 [ 1288.780535][ T30] audit: type=1326 audit(1240.725:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22740 comm="syz.6.5058" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d1d9e0d9 code=0x7ffc0000 [ 1288.846103][ T30] audit: type=1326 audit(1240.781:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22740 comm="syz.6.5058" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f48d1d5e90e code=0x7ffc0000 [ 1288.906003][ T30] audit: type=1326 audit(1240.781:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22740 comm="syz.6.5058" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f48d1d5e90e code=0x7ffc0000 [ 1288.976080][T22751] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 1288.982338][ T30] audit: type=1326 audit(1240.790:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22740 comm="syz.6.5058" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f48d1d5e90e code=0x7ffc0000 [ 1289.033026][ T30] audit: type=1326 audit(1240.790:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22740 comm="syz.6.5058" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f48d1d5e90e code=0x7ffc0000 [ 1289.060388][T22753] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1289.105179][ T30] audit: type=1326 audit(1240.790:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22740 comm="syz.6.5058" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f48d1d5e90e code=0x7ffc0000 [ 1289.171010][T17563] usbhid 3-1:0.0: can't add hid device: -71 [ 1289.196853][T17563] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1289.235844][T17563] usb 3-1: USB disconnect, device number 13 [ 1289.745241][ T1662] usb 9-1: USB disconnect, device number 12 [ 1290.924251][T22764] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5066'. [ 1291.870067][T22801] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 1292.529938][ T24] kernel write not supported for file /sg0 (pid: 24 comm: kworker/1:0) [ 1292.546827][T11840] kernel read not supported for file /video9 (pid: 11840 comm: kworker/1:1) [ 1292.617356][ T1662] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1292.735324][T11840] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1292.806117][ T1662] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1293.630653][ T1662] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1293.645305][ T1662] usb 2-1: Product: syz [ 1293.654875][ T1662] usb 2-1: SerialNumber: syz [ 1293.671453][ T1662] usb 2-1: config 0 descriptor?? [ 1293.700952][ T1662] hso 2-1:0.0: Not our interface [ 1293.709488][T11840] usb 1-1: Using ep0 maxpacket: 8 [ 1293.720356][T11840] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 1293.731259][T11840] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1293.739785][T11840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.751419][T11840] usb 1-1: config 0 descriptor?? [ 1294.230165][T11840] usbhid 1-1:0.0: can't add hid device: -71 [ 1294.257710][T11840] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1294.302075][T11840] usb 1-1: USB disconnect, device number 7 [ 1294.597281][ T1662] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1294.770586][ T1662] usb 5-1: Using ep0 maxpacket: 16 [ 1294.779772][ T1662] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1294.805111][ T1662] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.825493][ T1662] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1294.850844][ T1662] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1294.876552][ T1662] usb 5-1: SerialNumber: syz [ 1294.954543][ T1662] usb 5-1: 0:2 : does not exist [ 1295.165901][ T187] usb 2-1: USB disconnect, device number 12 [ 1295.204061][T11840] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1295.399792][T11840] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1295.546176][T22851] gfs2: not a GFS2 filesystem [ 1296.507133][T11840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1296.523181][T11840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1296.534368][T11840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.543518][ T1662] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1296.569681][T11840] usb 1-1: config 0 descriptor?? [ 1296.651430][T22856] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5101'. [ 1296.732433][ T1662] usb 5-1: USB disconnect, device number 12 [ 1297.137095][T22868] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 1298.004710][T22883] dummy0: left promiscuous mode [ 1298.708754][T22887] netlink: 'syz.1.5110': attribute type 10 has an invalid length. [ 1298.719944][T22887] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5110'. [ 1298.765847][T22887] dummy0: entered promiscuous mode [ 1298.965780][T11840] usbhid 1-1:0.0: can't add hid device: -71 [ 1298.991388][T11840] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1299.005853][ T1662] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1299.055321][T11840] usb 1-1: USB disconnect, device number 8 [ 1299.215205][ T1662] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1299.294275][ T1662] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1299.308481][T22855] loop2: detected capacity change from 0 to 40427 [ 1299.315721][ T1662] usb 9-1: Product: syz [ 1299.315750][ T1662] usb 9-1: SerialNumber: syz [ 1299.325245][ T1662] usb 9-1: config 0 descriptor?? [ 1299.348032][ T1662] hso 9-1:0.0: Not our interface [ 1300.891303][ T5615] block nbd11: Receive control failed (result -32) [ 1301.069887][ T1662] usb 9-1: USB disconnect, device number 13 [ 1301.460831][T22920] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 1301.594059][T22914] loop2: detected capacity change from 0 to 32768 [ 1301.809550][T22914] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5120 (22914) [ 1301.969672][T22925] loop4: detected capacity change from 0 to 32768 [ 1301.973401][T22914] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1301.987311][T22914] BTRFS info (device loop2): using crc32c checksum algorithm [ 1301.998239][T22925] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5124 (22925) [ 1302.053860][T22925] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1302.064070][T22925] BTRFS info (device loop4): using sha256 checksum algorithm [ 1302.332411][T22950] overlayfs: failed to clone lowerpath [ 1302.559358][T22914] BTRFS info (device loop2): enabling ssd optimizations [ 1302.566351][T22914] BTRFS info (device loop2): turning on flush-on-commit [ 1302.574089][T22914] BTRFS info (device loop2): enabling free space tree [ 1302.581099][T22914] BTRFS info (device loop2): enabling auto defrag [ 1302.587515][T22914] BTRFS info (device loop2): use lzo compression, level 1 [ 1302.594721][T22914] BTRFS info (device loop2): max_inline set to 4096 [ 1302.627190][T22925] BTRFS info (device loop4): enabling ssd optimizations [ 1302.634237][T22925] BTRFS info (device loop4): turning on sync discard [ 1302.641339][T22925] BTRFS info (device loop4): enabling free space tree [ 1302.648200][T22925] BTRFS info (device loop4): use zlib compression, level 3 [ 1302.892566][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1302.892597][ T30] audit: type=1800 audit(1254.056:283): pid=22914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5120" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 1303.123450][ T30] audit: type=1800 audit(1254.232:284): pid=22914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5120" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 1303.146092][ T30] audit: type=1800 audit(1254.259:285): pid=22968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5124" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 1303.541783][T20935] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1304.387767][T22980] syz_tun: entered allmulticast mode [ 1304.848861][T22978] syz_tun: left allmulticast mode [ 1306.115427][T20974] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1306.144625][ T1662] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1306.366088][ T1662] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1306.403444][ T1662] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1306.451280][ T1662] usb 5-1: Product: syz [ 1306.481112][ T1662] usb 5-1: SerialNumber: syz [ 1306.640920][T23000] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 1307.061750][ T1662] usb 5-1: config 0 descriptor?? [ 1307.239163][ T1662] hso 5-1:0.0: Not our interface [ 1307.897541][T23012] loop8: detected capacity change from 0 to 32768 [ 1307.907601][T23012] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.5143 (23012) [ 1307.926845][T23012] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1307.936994][T23012] BTRFS info (device loop8): using sha256 checksum algorithm [ 1308.055789][T23016] overlayfs: failed to clone lowerpath [ 1308.329082][T23012] BTRFS info (device loop8): enabling ssd optimizations [ 1308.336219][T23012] BTRFS info (device loop8): turning on sync discard [ 1308.342966][T23012] BTRFS info (device loop8): enabling free space tree [ 1308.349730][T23012] BTRFS info (device loop8): use zlib compression, level 3 [ 1308.470543][ T187] usb 5-1: USB disconnect, device number 13 [ 1308.686287][T23034] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5146'. [ 1308.700588][ T30] audit: type=1800 audit(1259.411:286): pid=23032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5143" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 1309.468065][T19388] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1309.755926][T23048] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 1310.337189][ T5615] block nbd12: Receive control failed (result -32) [ 1310.348088][ T1662] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1310.544474][ T1662] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1310.616678][ T1662] usb 1-1: not running at top speed; connect to a high speed hub [ 1310.758855][T23055] loop2: detected capacity change from 0 to 512 [ 1310.787708][ T1662] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1310.824725][T23055] msdos: Unknown parameter 'allow0000000000000077777' [ 1310.863575][ T1662] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 1310.919467][ T1662] usb 1-1: config 0 has no interface number 0 [ 1310.977692][ T1662] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 1311.049794][ T1662] usb 1-1: config 0 interface 88 has no altsetting 0 [ 1311.153753][ T1662] usb 1-1: language id specifier not provided by device, defaulting to English [ 1311.456355][T23071] overlayfs: overlapping lowerdir path [ 1311.556197][ T1662] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1312.751021][ T1662] usb 1-1: config 0 descriptor?? [ 1313.056970][ T1662] usb 1-1: can't set config #0, error -71 [ 1313.116953][ T1662] usb 1-1: USB disconnect, device number 9 [ 1313.456134][T11840] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1313.483643][T23093] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 1313.656484][T11840] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1313.697908][T23094] xt_hashlimit: size too large, truncated to 1048576 [ 1313.735479][T11840] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1313.778047][T11840] usb 5-1: Product: syz [ 1313.793129][T11840] usb 5-1: SerialNumber: syz [ 1313.847402][T11840] usb 5-1: config 0 descriptor?? [ 1313.896442][T11840] hso 5-1:0.0: Not our interface [ 1313.906793][T23105] loop0: detected capacity change from 0 to 512 [ 1313.959448][T23105] msdos: Unknown parameter 'allow0000000000000077777' [ 1314.283082][T23109] binder: 23101:23109 ioctl c018620c 200000000240 returned -22 [ 1315.940175][T16854] usb 5-1: USB disconnect, device number 14 [ 1316.969074][T23134] overlayfs: failed to clone lowerpath [ 1318.132042][T23144] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 1318.144102][T23141] netlink: 108 bytes leftover after parsing attributes in process `syz.6.5182'. [ 1319.783318][ T187] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1320.042633][ T187] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1320.072233][ T187] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1320.095783][ T187] usb 3-1: Product: syz [ 1320.103297][ T187] usb 3-1: SerialNumber: syz [ 1320.120077][ T187] usb 3-1: config 0 descriptor?? [ 1320.147655][ T187] hso 3-1:0.0: Not our interface [ 1320.290494][ T1662] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1320.480080][ T1662] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1320.500550][T23153] loop4: detected capacity change from 0 to 32768 [ 1320.519746][ T1662] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.708549][ T1662] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1320.731503][T23153] (syz.4.5186,23153,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1320.802716][T23153] (syz.4.5186,23153,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1320.828132][ T1662] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1320.959508][ T1662] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1320.985395][ T1662] usb 2-1: Product: syz [ 1320.993810][ T1662] usb 2-1: Manufacturer: syz [ 1321.154241][ T1662] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 1321.214789][T23182] binder: 23177:23182 ioctl c018620c 200000000240 returned -22 [ 1321.376937][T23153] JBD2: Ignoring recovery information on journal [ 1321.591971][ T1662] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1321.625709][ T30] audit: type=1326 audit(1271.348:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23166 comm="syz.1.5191" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8439e0d9 code=0x7ffc0000 [ 1321.668800][ T1662] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1321.782611][ T30] audit: type=1326 audit(1271.385:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23166 comm="syz.1.5191" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8439e0d9 code=0x7ffc0000 [ 1321.822902][T23153] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1321.982142][T23190] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5199'. [ 1321.992390][ T30] audit: type=1326 audit(1271.385:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23166 comm="syz.1.5191" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8439e0d9 code=0x7ffc0000 [ 1322.101040][ T1662] usb 3-1: USB disconnect, device number 14 [ 1322.218139][ T30] audit: type=1326 audit(1271.385:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23166 comm="syz.1.5191" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbc8439e0d9 code=0x7ffc0000 [ 1322.284323][ T30] audit: type=1326 audit(1271.385:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23166 comm="syz.1.5191" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8439e0d9 code=0x7ffc0000 [ 1322.471416][ T30] audit: type=1326 audit(1271.431:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23166 comm="syz.1.5191" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8439e0d9 code=0x7ffc0000 [ 1322.569626][ T30] audit: type=1326 audit(1271.431:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23166 comm="syz.1.5191" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc8435e90e code=0x7ffc0000 [ 1322.619147][T20935] ocfs2: Unmounting device (7,4) on (node local) [ 1322.654493][ T30] audit: type=1326 audit(1271.431:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23166 comm="syz.1.5191" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc8435e90e code=0x7ffc0000 [ 1322.736614][ T30] audit: type=1326 audit(1271.431:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23166 comm="syz.1.5191" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc8435e90e code=0x7ffc0000 [ 1322.792932][ T30] audit: type=1326 audit(1271.440:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23166 comm="syz.1.5191" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc8435e90e code=0x7ffc0000 [ 1322.871997][ T1662] usb 2-1: USB disconnect, device number 13 [ 1322.895510][ T1662] garmin_gps 2-1:1.0: device disconnected [ 1323.156584][T23199] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 1324.393321][T23212] overlayfs: overlapping lowerdir path [ 1326.315751][T23237] netlink: 108 bytes leftover after parsing attributes in process `syz.6.5215'. [ 1326.398391][T23238] gfs2: not a GFS2 filesystem [ 1326.498428][ T187] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1326.685115][ T187] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1326.738773][ T187] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1326.825795][ T187] usb 1-1: Product: syz [ 1326.841307][ T187] usb 1-1: SerialNumber: syz [ 1326.873256][ T187] usb 1-1: config 0 descriptor?? [ 1326.919088][ T187] hso 1-1:0.0: Not our interface [ 1327.128715][T23243] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 1327.242744][T12860] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1327.259916][T12860] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1327.275959][T12860] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1327.285469][T12860] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1327.295860][T12860] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1328.123842][ T5615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1328.142542][ T5615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1328.156096][ T5615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1328.350486][ T187] usb 1-1: USB disconnect, device number 10 [ 1328.736539][ T5615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1328.824215][ T5615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1328.933005][T23255] trusted_key: encrypted_key: insufficient parameters specified [ 1331.026119][T12860] Bluetooth: hci6: command tx timeout [ 1331.069076][T23268] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5224'. [ 1332.105651][T23286] loop1: detected capacity change from 0 to 256 [ 1332.257559][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 1332.257601][ T30] audit: type=1800 audit(1281.161:365): pid=23286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5230" name="file2" dev="loop1" ino=1048740 res=0 errno=0 [ 1333.279850][T12860] Bluetooth: hci6: command tx timeout [ 1333.365162][T16854] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1333.550124][T19983] syz_tun (unregistering): left allmulticast mode [ 1333.603683][T16854] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1333.641926][T23301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5234'. [ 1333.670844][T16854] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1333.740306][T16854] usb 3-1: Product: syz [ 1333.779281][T16854] usb 3-1: SerialNumber: syz [ 1333.829452][T16854] usb 3-1: config 0 descriptor?? [ 1333.916794][T16854] hso 3-1:0.0: Not our interface [ 1334.704763][T23288] loop8: detected capacity change from 0 to 32768 [ 1334.769094][ T187] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1334.877351][T23288] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1335.110515][ T187] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1335.133785][ T187] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.144947][ T187] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.159162][ T187] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1335.176676][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1335.185451][ T187] usb 2-1: Product: syz [ 1335.189716][ T187] usb 2-1: Manufacturer: syz [ 1335.203295][ T187] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 1335.214619][ T187] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1335.226126][ T187] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1335.311732][T19388] ocfs2: Unmounting device (7,8) on (node local) [ 1335.472338][ T30] audit: type=1326 audit(1284.134:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.1.5235" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8439e0d9 code=0x7ffc0000 [ 1335.541539][T11840] usb 3-1: USB disconnect, device number 15 [ 1335.547775][T12860] Bluetooth: hci6: command tx timeout [ 1335.664563][ T30] audit: type=1326 audit(1284.134:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.1.5235" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8439e0d9 code=0x7ffc0000 [ 1335.690706][ T30] audit: type=1326 audit(1284.134:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.1.5235" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8439e0d9 code=0x7ffc0000 [ 1335.727637][ T30] audit: type=1326 audit(1284.134:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.1.5235" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbc8439e0d9 code=0x7ffc0000 [ 1335.783609][ T30] audit: type=1326 audit(1284.134:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.1.5235" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8439e0d9 code=0x7ffc0000 [ 1335.820907][ T30] audit: type=1326 audit(1284.190:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.1.5235" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc8435e90e code=0x7ffc0000 [ 1335.850444][ T30] audit: type=1326 audit(1284.190:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.1.5235" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc8435e90e code=0x7ffc0000 [ 1335.875672][ T30] audit: type=1326 audit(1284.190:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.1.5235" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc8435e90e code=0x7ffc0000 [ 1335.905943][ T9449] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.939461][ T30] audit: type=1326 audit(1284.190:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23309 comm="syz.1.5235" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc8435e90e code=0x7ffc0000 [ 1336.011452][ T1662] usb 2-1: USB disconnect, device number 14 [ 1336.021819][ T1662] garmin_gps 2-1:1.0: device disconnected [ 1336.255632][ T9449] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.007572][T23366] loop2: detected capacity change from 0 to 256 [ 1337.014573][ T9449] bond0: (slave netdevsim1): Releasing backup interface [ 1337.086718][T23371] netlink: 'syz.1.5246': attribute type 1 has an invalid length. [ 1337.133511][T23366] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1337.182175][T23372] netlink: 'syz.1.5246': attribute type 10 has an invalid length. [ 1337.205168][T23372] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5246'. [ 1337.228895][ T9449] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.297450][T16854] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1337.527758][T23373] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff) [ 1337.528054][T16854] usb 9-1: Using ep0 maxpacket: 32 [ 1337.536588][T23373] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 1337.642936][T16854] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1337.714883][T16854] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 1337.764058][T16854] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1337.784353][T12860] Bluetooth: hci6: command tx timeout [ 1337.818621][T16854] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1337.843594][T23371] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1337.861494][T16854] usb 9-1: config 1 has no interface number 0 [ 1337.880171][T16854] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1337.921769][T16854] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1337.970473][T16854] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.064568][T16854] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 1338.113871][ T9449] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.260100][T16854] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 1338.416983][T23387] loop0: detected capacity change from 0 to 8 [ 1338.820875][ T1662] usb 9-1: USB disconnect, device number 14 [ 1338.965023][T16854] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1339.134670][ T1662] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 1339.323603][T16854] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1339.366625][T23387] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1339.406664][T16854] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1339.462522][T16854] usb 3-1: Product: syz [ 1339.487888][T16854] usb 3-1: SerialNumber: syz [ 1339.531309][T23387] SQUASHFS error: Failed to read block 0x9b: -5 [ 1339.540410][T16854] usb 3-1: config 0 descriptor?? [ 1339.559591][T23387] SQUASHFS error: Unable to read metadata cache entry [99] [ 1339.578650][T16854] hso 3-1:0.0: Not our interface [ 1339.606290][T23387] SQUASHFS error: Unable to read inode 0x104 [ 1339.930616][T23401] loop8: detected capacity change from 0 to 8 [ 1340.191218][T23409] loop8: detected capacity change from 0 to 1024 [ 1340.213154][T23409] EXT4-fs: Ignoring removed orlov option [ 1340.258519][T23409] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1340.373485][T23409] jffs2: notice: (23409) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1340.565300][T23422] netlink: 'syz.4.5260': attribute type 1 has an invalid length. [ 1340.613639][T19388] EXT4-fs warning (device loop8): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 1340.639865][ T9449] bridge_slave_1: left allmulticast mode [ 1340.658787][ T9449] bridge_slave_1: left promiscuous mode [ 1340.667632][T19388] EXT4-fs warning (device loop8): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 1340.689120][ T9449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.698447][T23427] netlink: 'syz.4.5260': attribute type 10 has an invalid length. [ 1340.710855][T23427] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5260'. [ 1340.712515][T19388] EXT4-fs warning (device loop8): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 1340.746633][ T9449] bridge_slave_0: left allmulticast mode [ 1340.753689][ T9449] bridge_slave_0: left promiscuous mode [ 1340.759950][ T9449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.770389][T19388] EXT4-fs warning (device loop8): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 1340.808073][T19388] EXT4-fs warning (device loop8): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 1340.831448][T19388] EXT4-fs warning (device loop8): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 1340.859888][T19388] EXT4-fs warning (device loop8): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 1340.895218][T19388] EXT4-fs warning (device loop8): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 1340.906827][ T9449] dvmrp8: left allmulticast mode [ 1340.921955][T19388] EXT4-fs warning (device loop8): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 1340.960068][T19388] EXT4-fs warning (device loop8): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 1341.353323][ T9449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1341.371643][ T9449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1341.390361][ T9449] bond0 (unregistering): Released all slaves [ 1341.408438][ T9449] bond1 (unregistering): Released all slaves [ 1341.433017][ T9449] bond2 (unregistering): Released all slaves [ 1341.464670][ T9449] bond3 (unregistering): Released all slaves [ 1341.506278][T23422] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1341.548751][ T5755] usb 3-1: USB disconnect, device number 16 [ 1341.553071][T23244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.633037][T23244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.708118][T23244] bridge_slave_0: entered allmulticast mode [ 1341.756668][T23244] bridge_slave_0: entered promiscuous mode [ 1341.794355][T23424] dummy0: left promiscuous mode [ 1342.015645][T23437] loop0: detected capacity change from 0 to 256 [ 1342.079308][T23427] dummy0: entered promiscuous mode [ 1342.288108][T23437] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1342.373976][T23244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.399890][T23244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.420684][T23244] bridge_slave_1: entered allmulticast mode [ 1342.441716][T23244] bridge_slave_1: entered promiscuous mode [ 1342.598532][ T9449] tipc: Left network mode [ 1342.661815][T23452] exFAT-fs (loop0): start_clu is invalid cluster(0xffffffff) [ 1342.671035][T23452] exFAT-fs (loop0): valid_size(150994954) is greater than size(10) [ 1342.825392][T21651] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1342.977210][ T5755] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1343.199939][ T5755] usb 2-1: Using ep0 maxpacket: 32 [ 1343.227919][ T5755] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1343.264099][ T5755] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1343.303109][ T5755] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1343.328035][ T5755] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1343.364919][ T5755] usb 2-1: config 1 has no interface number 0 [ 1343.378468][ T5755] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1343.413091][ T5755] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1343.447319][T23244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1343.449707][ T5755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.550075][ T5755] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1343.586981][T23244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1343.789031][T23469] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5270'. [ 1343.805415][ T5755] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1343.843257][T23474] loop2: detected capacity change from 0 to 1024 [ 1343.864511][T23474] EXT4-fs: Ignoring removed orlov option [ 1343.934642][T23474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1343.978165][ T9449] hsr_slave_0: left promiscuous mode [ 1344.022654][ T9449] hsr_slave_1: left promiscuous mode [ 1344.061632][ T9449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1344.092959][ T9449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1344.093463][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1344.116556][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1344.125398][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1344.136605][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1344.145607][ T9449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1344.157523][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1344.205624][ T9449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1344.264079][ T9449] veth1_macvtap: left promiscuous mode [ 1344.273651][T16854] usb 2-1: USB disconnect, device number 15 [ 1344.304433][ T9449] veth0_macvtap: left promiscuous mode [ 1344.327877][T16854] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1344.335318][ T9449] veth1_vlan: left promiscuous mode [ 1344.346206][T20974] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1344.355503][ T9449] veth0_vlan: left promiscuous mode [ 1344.448297][T23484] netlink: 'syz.0.5276': attribute type 1 has an invalid length. [ 1344.662611][T23489] netlink: 'syz.0.5276': attribute type 10 has an invalid length. [ 1344.674610][T23489] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5276'. [ 1345.637497][T16854] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1345.653968][ T9449] team0 (unregistering): Port device team_slave_1 removed [ 1345.682558][ T9449] team0 (unregistering): Port device team_slave_0 removed [ 1345.833996][T16854] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1345.853361][T16854] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1345.864165][T16854] usb 3-1: Product: syz [ 1345.869473][T16854] usb 3-1: SerialNumber: syz [ 1345.884757][T16854] usb 3-1: config 0 descriptor?? [ 1346.058010][T16854] hso 3-1:0.0: Not our interface [ 1346.102637][T23244] team0: Port device team_slave_0 added [ 1346.117635][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1346.128184][T23484] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1346.131536][T23485] dummy0: left promiscuous mode [ 1346.149675][T23489] dummy0: entered promiscuous mode [ 1346.195413][T23244] team0: Port device team_slave_1 added [ 1346.363126][T12860] Bluetooth: hci1: command tx timeout [ 1346.401982][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 1346.402007][ T30] audit: type=1326 audit(1294.225:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23513 comm="syz.0.5281" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4c2f9e0d9 code=0x0 [ 1346.475878][T23517] loop4: detected capacity change from 0 to 256 [ 1346.491807][T23244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1346.508666][T23244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1346.605269][T23244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1346.643628][T23517] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1346.662974][T23244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1346.682190][T23244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1346.954883][T23528] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff) [ 1346.962520][T23528] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 1346.972003][T23244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1347.047528][T23530] device-mapper: ioctl: Unable to rename non-existent device, to j fè [ 1347.200962][T23244] hsr_slave_0: entered promiscuous mode [ 1347.219277][T23244] hsr_slave_1: entered promiscuous mode [ 1347.497706][ T9449] IPVS: stop unused estimator thread 0... [ 1347.908309][T13238] usb 3-1: USB disconnect, device number 17 [ 1348.232303][T23546] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5286'. [ 1348.649741][T12860] Bluetooth: hci1: command tx timeout [ 1350.344466][T23566] netlink: 'syz.4.5291': attribute type 1 has an invalid length. [ 1350.356576][ T5269] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1350.460415][T23571] netlink: 'syz.4.5291': attribute type 10 has an invalid length. [ 1350.551523][T23571] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5291'. [ 1350.793792][T23566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1350.819647][T23567] dummy0: left promiscuous mode [ 1350.855258][T23571] dummy0: entered promiscuous mode [ 1350.869181][T12860] Bluetooth: hci1: command tx timeout [ 1352.092367][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1352.103130][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1352.634600][T23576] loop1: detected capacity change from 0 to 40427 [ 1352.643235][T23576] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1352.664192][T23576] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1352.764482][ T5755] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1352.949418][ T5755] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1352.972356][ T5755] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1352.990363][ T5755] usb 5-1: Product: syz [ 1353.000124][ T5755] usb 5-1: SerialNumber: syz [ 1353.031261][ T5755] usb 5-1: config 0 descriptor?? [ 1353.076779][ T5755] hso 5-1:0.0: Not our interface [ 1353.088441][T23576] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1353.123566][T12860] Bluetooth: hci1: command tx timeout [ 1353.138423][T23576] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1353.148166][T23576] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1353.598534][T23479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.632548][T23479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.649687][T23479] bridge_slave_0: entered allmulticast mode [ 1353.669405][T23479] bridge_slave_0: entered promiscuous mode [ 1353.735530][T23479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.744843][T23479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.756056][T23479] bridge_slave_1: entered allmulticast mode [ 1353.765584][T23479] bridge_slave_1: entered promiscuous mode [ 1354.104900][T23479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1354.279719][T23479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1354.505681][ T24] usb 5-1: USB disconnect, device number 15 [ 1355.163476][T23479] team0: Port device team_slave_0 added [ 1355.232893][T23630] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1355.240208][T23630] IPv6: NLM_F_CREATE should be set when creating new route [ 1355.248010][T23244] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1355.293627][T23244] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1355.379926][T23631] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5305'. [ 1355.490627][T23479] team0: Port device team_slave_1 added [ 1355.889694][T23630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.897669][T23630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.671963][T23649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5300'. [ 1357.533262][T23630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1357.555744][T23630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1357.910191][ T6852] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.933566][T23244] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1357.970916][T23244] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1358.312971][T15186] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.353815][T23244] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1358.406496][T23244] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1358.446929][T23479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1358.455856][T23479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1358.490688][T23479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1358.520827][T23244] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1358.793865][T23244] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1358.835445][T23479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1358.848652][T23479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1358.877956][T23479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1359.356222][T23479] hsr_slave_0: entered promiscuous mode [ 1359.395962][T23479] hsr_slave_1: entered promiscuous mode [ 1359.431190][T23479] debugfs: 'hsr0' already exists in 'hsr' [ 1359.455741][T23479] Cannot create hsr debugfs directory [ 1359.654196][ T1662] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1359.943539][T23706] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5317'. [ 1360.038767][T23708] loop0: detected capacity change from 0 to 16 [ 1360.152358][ T5846] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.286129][ T1662] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1360.717081][T23708] erofs (device loop0): mounted with root inode @ nid 36. [ 1360.757537][ T1662] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1360.767494][ T1662] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1360.777449][ T1662] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1360.842877][ T1662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.851238][ T1662] usb 5-1: Product: syz [ 1360.851342][ T1662] usb 5-1: Manufacturer: syz [ 1360.851438][ T1662] usb 5-1: SerialNumber: syz [ 1360.920119][ T1662] hub 5-1:1.0: bad descriptor, ignoring hub [ 1360.932301][ T1662] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1361.094701][ T9453] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.169087][ T30] audit: type=1326 audit(1307.851:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23711 comm="syz.1.5319" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc8439e0d9 code=0x0 [ 1361.247635][ T1662] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1361.673956][T23244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.769450][T23244] 8021q: adding VLAN 0 to HW filter on device team0 [ 1361.985625][T23700] usb 5-1: reset high-speed USB device number 16 using dummy_hcd [ 1362.020255][ T6850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.027486][ T6850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1362.593187][ T8768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.600497][ T8768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1363.064906][T17563] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1363.239117][T17563] usb 2-1: Using ep0 maxpacket: 32 [ 1363.442935][T17563] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1363.462707][T17563] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1363.471697][T17563] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1363.486708][T17563] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1363.500260][T17563] usb 2-1: config 1 has no interface number 0 [ 1363.506404][T17563] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1363.517871][T17563] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1364.138144][T17563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.257972][T17563] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1364.434728][T17563] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1364.871875][T19479] usb 2-1: USB disconnect, device number 16 [ 1364.907535][T19479] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1365.086898][T23479] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1365.121842][T23479] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1365.139942][T23479] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1365.162358][T23479] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1365.187724][T23479] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1365.226030][T23479] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1365.247601][T23479] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1365.300476][T23479] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1365.904585][T23775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5329'. [ 1365.956422][T23773] loop1: detected capacity change from 0 to 1024 [ 1366.081475][T23773] hfsplus: Unknown parameter 'forcd' [ 1366.818190][T23479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1367.027163][T23479] 8021q: adding VLAN 0 to HW filter on device team0 [ 1367.329645][ T6852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.336867][ T6852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1367.398456][T19479] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1368.198036][ T6852] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.205267][ T6852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1368.213601][T23700] usb 5-1: device descriptor read/all, error -110 [ 1368.276998][T19479] usb 3-1: Using ep0 maxpacket: 32 [ 1368.301871][T19479] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1368.353314][T19479] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1368.377967][T23700] usb 5-1: reset high-speed USB device number 16 using dummy_hcd [ 1368.378690][T19479] usb 3-1: config 0 has no interface number 0 [ 1368.427966][T19479] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1368.683192][T23244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1368.773991][T23700] usb 5-1: device descriptor read/64, error -32 [ 1368.836556][T19479] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.867187][T19479] usb 3-1: Product: syz [ 1369.185543][T19479] usb 3-1: Manufacturer: syz [ 1369.194138][T19479] usb 3-1: SerialNumber: syz [ 1369.468758][T23700] usb 5-1: reset high-speed USB device number 16 using dummy_hcd [ 1369.605790][T19479] usb 3-1: config 0 descriptor?? [ 1369.624822][T23700] usb 5-1: device descriptor read/8, error -32 [ 1369.911632][T23700] usb 5-1: reset high-speed USB device number 16 using dummy_hcd [ 1369.983534][T23700] usb 5-1: device descriptor read/8, error -32 [ 1370.129784][ T1662] usb 5-1: USB disconnect, device number 16 [ 1370.191620][ T1662] usblp0: removed [ 1371.195904][T19479] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1371.230182][T17563] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1371.274847][T19479] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1371.326512][T19479] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1371.530653][T19479] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1371.567503][T19479] usb 3-1: USB disconnect, device number 18 [ 1371.582481][T17563] usb 1-1: Using ep0 maxpacket: 8 [ 1372.455268][T17563] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 1372.525235][T17563] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1372.569730][T17563] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.634103][T17563] usb 1-1: config 0 descriptor?? [ 1372.665859][T23843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5341'. [ 1372.763972][T23244] veth0_vlan: entered promiscuous mode [ 1372.828401][T23244] veth1_vlan: entered promiscuous mode [ 1373.020404][T23244] veth0_macvtap: entered promiscuous mode [ 1373.089722][T23244] veth1_macvtap: entered promiscuous mode [ 1373.195758][T23852] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5343'. [ 1373.606757][T17563] usbhid 1-1:0.0: can't add hid device: -71 [ 1374.051106][T17563] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1374.061782][T17563] usb 1-1: USB disconnect, device number 11 [ 1374.160994][T23244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1374.370213][T23244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1374.701071][ T9453] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.727099][ T9453] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.805820][T23479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1374.905464][ T5846] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.018952][ T5846] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.321102][T23877] loop2: detected capacity change from 0 to 256 [ 1375.532224][T23877] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1375.933302][T23889] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff) [ 1375.943463][T23889] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 1376.668589][T23887] loop4: detected capacity change from 0 to 1024 [ 1377.023429][T23887] EXT4-fs: Ignoring removed orlov option [ 1377.214317][ T6852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.315778][ T6852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.333746][T23887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1377.473139][T23900] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 1377.552629][ T6852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.593168][ T6852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.704986][T20935] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1378.179914][T23479] veth0_vlan: entered promiscuous mode [ 1378.272896][T23479] veth1_vlan: entered promiscuous mode [ 1378.591453][T23930] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5356'. [ 1378.709851][T23479] veth0_macvtap: entered promiscuous mode [ 1378.793514][ T1662] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1379.017114][T23479] veth1_macvtap: entered promiscuous mode [ 1379.317393][T23933] loop1: detected capacity change from 0 to 128 [ 1379.366616][T23479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1379.503268][T23479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1379.543448][ T1662] usb 3-1: Using ep0 maxpacket: 8 [ 1379.597352][ T1662] usb 3-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 1379.645947][T23933] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 1379.678360][ T1662] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1379.797177][ T9453] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.818530][ T1662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.844634][T23933] FAT-fs (loop1): Filesystem has been set read-only [ 1379.860188][ T1662] usb 3-1: config 0 descriptor?? [ 1380.225232][ T9449] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.510545][ T1662] usbhid 3-1:0.0: can't add hid device: -71 [ 1380.555055][ T1662] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1380.560899][ T9453] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.577486][ T1662] usb 3-1: USB disconnect, device number 19 [ 1380.664446][ T9453] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.960817][ T6852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1380.993378][ T6852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1381.001798][T23952] loop1: detected capacity change from 0 to 1024 [ 1381.039988][T23952] EXT4-fs: Ignoring removed orlov option [ 1381.157014][ T6852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1381.166251][ T6852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1381.184963][T23952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1382.363948][T17105] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1382.711607][T23970] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5272'. [ 1385.277003][ T30] audit: type=1326 audit(1330.082:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23999 comm="syz.0.5378" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4c2f9e0d9 code=0x0 [ 1387.021019][T24022] netlink: 'syz.2.5384': attribute type 1 has an invalid length. [ 1389.041236][T24022] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1389.401978][T24026] dummy0: left promiscuous mode [ 1389.767757][T24026] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 1389.780763][ T9449] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1390.054457][ T9453] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1390.073266][T24055] loop4: detected capacity change from 0 to 256 [ 1390.168646][T24057] loop1: detected capacity change from 0 to 512 [ 1390.224552][T24055] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1390.314166][T24057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1392.230394][ T30] audit: type=1326 audit(1336.517:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24074 comm="syz.2.5397" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddbbb9e0d9 code=0x0 [ 1393.860078][T24100] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1393.867437][T24100] IPv6: NLM_F_CREATE should be set when creating new route [ 1393.929435][T24099] loop5: detected capacity change from 0 to 1024 [ 1393.995945][T17105] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1394.031973][T24099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1394.150145][T24107] netlink: 'syz.4.5406': attribute type 1 has an invalid length. [ 1394.201029][T24109] input: syz1 as /devices/virtual/input/input32 [ 1394.442086][T24107] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1394.451038][T24114] dummy0: left promiscuous mode [ 1394.472652][ T151] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 112: padding at end of block bitmap is not set [ 1394.498078][T24114] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 1394.515602][ T5846] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1394.537836][ T151] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 1394.561551][ T151] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1394.561551][ T151] [ 1394.575066][ T151] EXT4-fs (loop5): Total free blocks count 0 [ 1394.592964][ T151] EXT4-fs (loop5): Free/Dirty block details [ 1394.610158][ T151] EXT4-fs (loop5): free_blocks=0 [ 1394.624336][ T151] EXT4-fs (loop5): dirty_blocks=16 [ 1394.647961][ T151] EXT4-fs (loop5): Block reservation details [ 1394.674932][ T6850] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1394.686553][ T151] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 1394.728623][T23479] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1394.852805][T23479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1394.951487][ T30] audit: type=1326 audit(1339.037:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24132 comm="syz.4.5415" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14fcb9e0d9 code=0x0 [ 1396.616594][T24160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1397.280576][T24171] netlink: 'syz.2.5427': attribute type 1 has an invalid length. [ 1397.390659][T24171] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1397.457304][T24173] bond2: (slave dummy0): Removing an active aggregator [ 1397.483545][ T6852] bond2: Warning: Found an uninitialized port [ 1397.497685][T24173] bond2: (slave dummy0): Releasing backup interface [ 1397.543211][T24173] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 1397.588437][ T6850] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1397.774545][ T8771] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1397.815530][T24178] syzkaller0: entered promiscuous mode [ 1397.873967][T24178] syzkaller0: entered allmulticast mode [ 1397.951166][T24182] tipc: Started in network mode [ 1398.005890][T24182] tipc: Node identity 4eadd6b94c62, cluster identity 4711 [ 1398.058909][T24182] tipc: Enabled bearer , priority 0 [ 1398.096992][T24177] tipc: Resetting bearer [ 1398.392126][T24177] tipc: Disabling bearer [ 1399.995728][T24211] file system registered [ 1400.059375][T24205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.067108][T24205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.193783][T24180] loop6: detected capacity change from 0 to 32768 [ 1400.275893][T24180] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5430 (24180) [ 1400.361112][T24180] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1400.399128][T24180] BTRFS info (device loop6): using sha256 checksum algorithm [ 1400.400802][T20564] ffs_data_put(): freeing [ 1400.619984][ T1662] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1400.693725][T24205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1400.743790][T24180] BTRFS info (device loop6): enabling ssd optimizations [ 1400.765836][T24205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1400.782015][T24180] BTRFS info (device loop6): turning on sync discard [ 1400.796427][ T1662] usb 6-1: Using ep0 maxpacket: 32 [ 1400.813227][ T1662] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1400.828842][T24180] BTRFS info (device loop6): enabling free space tree [ 1400.852982][ T1662] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1400.865048][T24180] BTRFS info (device loop6): use zlib compression, level 3 [ 1400.898352][ T1662] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1400.938318][ T1662] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1400.981392][ T1662] usb 6-1: config 1 has no interface number 0 [ 1400.997656][ T1662] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1401.026175][ T1662] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1401.062640][ T1662] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.070432][T24252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5444'. [ 1401.106737][ T1662] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1401.156749][T24255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5444'. [ 1401.334167][ T1662] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1401.443572][ T9453] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.813188][ T5839] usb 6-1: USB disconnect, device number 14 [ 1401.841521][ T5839] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1402.098467][ T30] audit: type=1800 audit(1345.592:451): pid=24270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5430" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 1403.324155][T24252] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.393882][T23244] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1403.581209][ T1662] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1403.783360][ T1662] usb 5-1: Using ep0 maxpacket: 32 [ 1403.791266][ T1662] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1403.848735][ T1662] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1403.899424][ T1662] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1403.912748][ T1662] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1404.426050][ T1662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.606874][ T1662] usb 5-1: Product: syz [ 1404.611187][ T1662] usb 5-1: Manufacturer: syz [ 1404.619994][ T1662] usb 5-1: SerialNumber: syz [ 1404.648778][ T1662] usb 5-1: config 0 descriptor?? [ 1404.775441][ T8771] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.217828][T24299] bond4: entered allmulticast mode [ 1405.233852][T24299] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1405.311955][ T8771] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.398937][ T1662] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1405.403895][ T8771] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.681059][T24252] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.776077][T11840] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1405.959900][T11840] usb 2-1: Using ep0 maxpacket: 8 [ 1406.029260][T11840] usb 2-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 1406.901314][T11840] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1406.904594][T24310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1406.930460][T11840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.975651][T11840] usb 2-1: config 0 descriptor?? [ 1407.012521][T24312] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1408.360888][T11840] usbhid 2-1:0.0: can't add hid device: -71 [ 1408.374462][ T1662] usb 5-1: USB disconnect, device number 18 [ 1408.402282][T11840] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1408.482381][T11840] usb 2-1: USB disconnect, device number 17 [ 1408.970401][T24252] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.524953][T24252] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.537748][T24367] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5474'. [ 1409.590913][T24367] vlan1: entered allmulticast mode [ 1409.637537][T24367] veth0_vlan: entered allmulticast mode [ 1410.433512][T15186] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.617777][T15186] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.034398][ T6850] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.610742][ T6850] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.125226][T24398] xt_hashlimit: size too large, truncated to 1048576 [ 1413.370052][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1413.556764][ T24] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1413.584265][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1413.611248][ T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1413.647432][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.667288][ T24] usb 3-1: Product: syz [ 1413.679290][ T24] usb 3-1: Manufacturer: syz [ 1413.696126][ T24] usb 3-1: SerialNumber: syz [ 1413.959942][ T24] usb 3-1: Limiting number of CPorts to U8_MAX [ 1414.469964][ C1] usb 3-1: invalid arpc response id received: 49152 [ 1414.717605][ T24] usb 3-1: failed to send ARPC request 1: -71 [ 1415.117700][ T24] usb 3-1: failed to execute ARPC: -71 [ 1415.458632][ T24] usb 3-1: failed to set connected state for cport 0: -71 [ 1415.785942][ T24] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 1416.490807][ T24] usb 3-1: failed to send ARPC request 3: -71 [ 1416.507702][ T24] usb 3-1: failed to execute ARPC: -71 [ 1416.630434][ T24] usb 3-1: failed to clear cport 0: -71 [ 1416.665989][ T24] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 1418.205450][ T24] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 1418.219664][ T24] usb 3-1: USB disconnect, device number 20 [ 1418.635306][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1418.641785][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1419.694958][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1419.902197][T24469] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1420.109155][ T24] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1420.539941][ T5839] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1420.608885][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 1420.756261][ T5839] usb 5-1: device descriptor read/64, error -32 [ 1420.902908][ T24] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1420.911108][ T24] usb 3-1: Product: syz [ 1420.915867][ T24] usb 3-1: SerialNumber: syz [ 1421.097230][ T5839] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1421.106704][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 1421.276605][ T5839] usb 5-1: device descriptor read/64, error -32 [ 1421.357559][ T24] usb 3-1: config 0 descriptor?? [ 1421.396127][ T24] hso 3-1:0.0: Not our interface [ 1421.396425][ T5839] usb usb5-port1: attempt power cycle [ 1421.438621][T16854] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1421.645102][T16854] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1421.659788][T16854] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.679999][T16854] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1421.715943][T16854] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1421.760751][T16854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1421.782646][T16854] usb 7-1: Product: syz [ 1421.802585][T16854] usb 7-1: Manufacturer: syz [ 1421.824562][T16854] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 1421.849832][T16854] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1421.850356][ T5839] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1421.864237][T16854] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1421.938309][ T5839] usb 5-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 1421.953635][ T5839] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.975836][ T5839] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1422.010312][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.069907][ T30] audit: type=1326 audit(1364.074:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24478 comm="syz.6.5501" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e799e0d9 code=0x7ffc0000 [ 1422.088536][ T5839] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 1422.115074][ T30] audit: type=1326 audit(1364.074:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24478 comm="syz.6.5501" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e799e0d9 code=0x7ffc0000 [ 1422.139940][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1422.153360][ T30] audit: type=1326 audit(1364.074:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24478 comm="syz.6.5501" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e799e0d9 code=0x7ffc0000 [ 1422.199922][ T30] audit: type=1326 audit(1364.074:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24478 comm="syz.6.5501" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e799e0d9 code=0x7ffc0000 [ 1422.242152][ T30] audit: type=1326 audit(1364.074:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24478 comm="syz.6.5501" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e799e0d9 code=0x7ffc0000 [ 1422.270136][ T30] audit: type=1326 audit(1364.074:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24478 comm="syz.6.5501" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f23e799e0d9 code=0x7ffc0000 [ 1422.296191][ T30] audit: type=1326 audit(1364.120:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24478 comm="syz.6.5501" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f23e795e90e code=0x7ffc0000 [ 1422.323675][ T24] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1422.333050][T19479] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1422.372321][T11840] usb 7-1: USB disconnect, device number 12 [ 1422.384932][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.402076][T11840] garmin_gps 7-1:1.0: device disconnected [ 1422.410633][ T24] usb 2-1: Product: syz [ 1422.417235][ T24] usb 2-1: Manufacturer: syz [ 1422.429078][ T24] usb 2-1: SerialNumber: syz [ 1422.448691][ T24] usb 2-1: config 0 descriptor?? [ 1422.455476][ T30] audit: type=1326 audit(1364.129:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24478 comm="syz.6.5501" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f23e795e90e code=0x7ffc0000 [ 1422.491249][ T30] audit: type=1326 audit(1364.129:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24478 comm="syz.6.5501" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f23e795e90e code=0x7ffc0000 [ 1422.523262][T24505] loop0: detected capacity change from 0 to 1024 [ 1422.536353][ T30] audit: type=1326 audit(1364.129:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24478 comm="syz.6.5501" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f23e795e90e code=0x7ffc0000 [ 1422.576804][T19479] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1422.588474][T19479] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1422.603230][T19479] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1422.624557][ T5839] usb 5-1: USB disconnect, device number 21 [ 1422.635866][T19479] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1422.649810][T19479] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1422.656466][ T2352] usb 5-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 1422.674519][T24505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1422.674628][T19479] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1422.695500][T19479] usb 6-1: Manufacturer: syz [ 1422.737406][T24505] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.5507: lblock 0 mapped to illegal pblock 0 (length 4) [ 1422.751735][T17563] usb 3-1: USB disconnect, device number 21 [ 1422.755790][T19479] usb 6-1: config 0 descriptor?? [ 1422.768203][ T2352] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 1422.813453][T24505] EXT4-fs error (device loop0): ext4_ext_remove_space:2969: inode #15: comm syz.0.5507: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1422.927851][T20564] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1423.253466][T24513] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5510'. [ 1423.709715][ T24] usb 2-1: non-Atmel transceiver xxxxd41f [ 1424.013625][ T24] usb 2-1: Firmware version (0.0) predates our first public release. [ 1424.106102][T19479] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 1424.129407][ T24] usb 2-1: Please update to version 0.2 or newer [ 1424.207244][T24520] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5511'. [ 1424.213317][ T24] usb 2-1: atusb_probe: initialization failed, error = -19 [ 1424.338763][ T24] usb 2-1: USB disconnect, device number 18 [ 1424.566152][T19479] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1424.694576][T19479] usb 6-1: USB disconnect, device number 15 [ 1425.019850][T24535] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1426.428945][T24531] fido_id[24531]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1427.723502][T11840] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1427.866965][T24555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5521'. [ 1427.969283][T24559] loop5: detected capacity change from 0 to 1024 [ 1428.048090][T11840] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1428.126051][T24559] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1428.260737][T24569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5525'. [ 1428.969109][T11840] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1428.977154][T11840] usb 1-1: Product: syz [ 1428.981456][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 1428.981472][ T30] audit: type=1800 audit(1370.463:512): pid=24571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5522" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1429.007699][T11840] usb 1-1: SerialNumber: syz [ 1429.122756][T11840] usb 1-1: config 0 descriptor?? [ 1429.132518][T11840] hso 1-1:0.0: Not our interface [ 1429.148815][T23479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1429.368102][T19479] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1429.695380][T19479] usb 3-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 1429.710353][T19479] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1430.160376][T19479] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1430.203824][T19479] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.602559][ T1662] usb 1-1: USB disconnect, device number 12 [ 1430.901239][T19479] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 1431.232851][T19479] usb 3-1: USB disconnect, device number 22 [ 1431.408662][T24598] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1431.893527][T19479] pvrusb2: Device being rendered inoperable [ 1432.304637][T24613] loop1: detected capacity change from 0 to 256 [ 1432.345658][T24613] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1432.700956][T24624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5544'. [ 1432.982454][T24621] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1432.995166][T24621] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1433.008489][T24621] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1433.021592][T24621] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1433.046785][T24621] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1433.059195][T24621] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1433.075041][T24621] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1433.087496][T24621] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1433.100787][T24621] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1433.112894][T24621] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1433.754771][ T48] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.187347][T24632] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff) [ 1435.387161][T24632] exFAT-fs (loop1): valid_size(150994954) is greater than size(10) [ 1438.530778][T24669] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1438.607300][T16854] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1438.928132][T16854] usb 7-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 1439.065082][T16854] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1439.217178][T16854] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1439.357296][T16854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.861677][T16854] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 1441.640939][T16854] usb 7-1: USB disconnect, device number 13 [ 1441.669961][T16854] pvrusb2: Device being rendered inoperable [ 1441.792331][T24684] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5560'. [ 1443.190686][T24697] loop0: detected capacity change from 0 to 1024 [ 1443.257306][T24697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1443.417343][T24697] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.5564: lblock 0 mapped to illegal pblock 0 (length 4) [ 1443.430839][ T30] audit: type=1800 audit(1383.784:513): pid=24697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5564" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1443.477579][T24697] EXT4-fs error (device loop0): ext4_ext_remove_space:2969: inode #15: comm syz.0.5564: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1444.199923][T20564] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1445.467071][T24721] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1447.729123][T19479] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1447.924592][T19479] usb 7-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 1447.964487][T19479] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1447.992797][T19479] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1448.038904][T19479] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.168473][T19479] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 1448.354373][T19479] usb 7-1: USB disconnect, device number 14 [ 1448.394286][T19479] pvrusb2: Device being rendered inoperable [ 1448.571355][T24732] loop4: detected capacity change from 0 to 32768 [ 1448.591490][T24749] loop5: detected capacity change from 0 to 256 [ 1448.611147][T24732] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5574 (24732) [ 1448.678712][T24749] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1448.772262][T24732] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1448.812477][T24732] BTRFS info (device loop4): using sha256 checksum algorithm [ 1448.848056][T24732] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1449.005442][T24732] BTRFS info (device loop4): rebuilding free space tree [ 1449.089096][T24732] BTRFS info (device loop4): disabling free space tree [ 1449.120850][T24732] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1449.240145][T24732] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1450.346499][T24732] BTRFS info (device loop4): enabling ssd optimizations [ 1450.358556][T24732] BTRFS info (device loop4): enabling disk space caching [ 1450.366170][T24732] BTRFS info (device loop4): force clearing of disk cache [ 1450.375441][T24732] BTRFS info (device loop4): enabling auto defrag [ 1450.382140][T24732] BTRFS info (device loop4): max_inline set to 428 [ 1450.457406][ T9453] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1450.507437][ T9453] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.720359][T24780] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff) [ 1450.729465][T24780] exFAT-fs (loop5): valid_size(150994954) is greater than size(10) [ 1451.469032][T24787] loop6: detected capacity change from 0 to 2048 [ 1451.522082][T24787] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1451.631925][T24787] syz.6.5589: attempt to access beyond end of device [ 1451.631925][T24787] loop6: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 1451.651572][T24791] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1452.237342][T20935] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1452.253069][T24797] netlink: 'syz.5.5592': attribute type 1 has an invalid length. [ 1452.359501][ T6850] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 1452.652384][T24797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1452.883871][T24802] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 1452.908307][ T6853] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1453.220396][ T5846] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1453.562530][T24811] netdevsim0 speed is unknown, defaulting to 1000 [ 1453.569062][T24811] netdevsim0 speed is unknown, defaulting to 1000 [ 1453.577703][T24811] netdevsim0 speed is unknown, defaulting to 1000 [ 1453.584921][T24811] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1453.599285][T24811] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1453.616376][T24811] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1453.639443][T24811] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1453.668847][T24811] netdevsim0 speed is unknown, defaulting to 1000 [ 1453.677060][T24811] netdevsim0 speed is unknown, defaulting to 1000 [ 1453.686789][T24811] netdevsim0 speed is unknown, defaulting to 1000 [ 1453.694815][T24811] netdevsim0 speed is unknown, defaulting to 1000 [ 1453.702781][T24811] netdevsim0 speed is unknown, defaulting to 1000 [ 1453.710863][T24811] netdevsim0 speed is unknown, defaulting to 1000 [ 1453.718921][T24811] netdevsim0 speed is unknown, defaulting to 1000 [ 1453.726895][T24811] netdevsim0 speed is unknown, defaulting to 1000 [ 1453.735132][T24811] netdevsim0 speed is unknown, defaulting to 1000 [ 1453.816053][T13238] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1454.909298][T13238] usb 1-1: Using ep0 maxpacket: 8 [ 1454.961870][T13238] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 1455.015634][T13238] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1455.056570][T13238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.117005][T13238] usb 1-1: config 0 descriptor?? [ 1455.292390][T24827] Illegal XDP return value 4294967274 on prog (id 388) dev N/A, expect packet loss! [ 1456.358508][T13238] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 1456.397102][T13238] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 1456.415432][T13238] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 1456.431344][T13238] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 1456.469154][T13238] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 1456.502948][T13238] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 1456.540227][T13238] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 1456.563166][ T30] audit: type=1800 audit(66931.925:514): pid=24845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5606" name="pnp_string" dev="configfs" ino=70776 res=0 errno=0 [ 1456.565427][T13238] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 1456.641731][T13238] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 1456.672215][T13238] logitech-djreceiver 0003:046D:C513.0002: unknown main item tag 0x0 [ 1456.723578][T13238] usb 1-1: USB disconnect, device number 13 [ 1457.005109][T24854] loop4: detected capacity change from 0 to 136 [ 1458.290480][T24866] netlink: 'syz.6.5616': attribute type 1 has an invalid length. [ 1458.512347][T24866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1459.035426][T24883] bond1: (slave dummy0): Removing an active aggregator [ 1459.054781][ T151] bond1: Warning: Found an uninitialized port [ 1459.083572][T24883] bond1: (slave dummy0): Releasing backup interface [ 1459.178702][T24883] bridge_slave_0: left allmulticast mode [ 1459.195470][T24883] bridge_slave_0: left promiscuous mode [ 1459.218032][T24883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.299846][T24883] bridge_slave_1: left allmulticast mode [ 1459.339596][T24883] bridge_slave_1: left promiscuous mode [ 1459.387042][T24883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.427711][T24889] loop6: detected capacity change from 0 to 128 [ 1459.541948][T24883] bond0: (slave bond_slave_0): Releasing backup interface [ 1459.577555][T24889] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 1459.616420][T24887] loop2: detected capacity change from 0 to 2048 [ 1459.616712][T24883] bond0: (slave bond_slave_1): Releasing backup interface [ 1459.630946][T24889] FAT-fs (loop6): Filesystem has been set read-only [ 1459.657166][T24889] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 1459.676070][T24889] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 1459.738157][T24883] team0: Port device team_slave_0 removed [ 1459.754077][T24887] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1459.867791][T24883] team0: Port device team_slave_1 removed [ 1459.935557][T24883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1459.989135][T24883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1460.055985][T24887] syz.2.5622: attempt to access beyond end of device [ 1460.055985][T24887] loop2: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 1460.058166][T24892] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1460.161056][T24883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1460.210235][T24883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1460.269174][ T30] audit: type=1800 audit(66935.341:515): pid=24895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5625" name="pnp_string" dev="configfs" ino=70389 res=0 errno=0 [ 1460.333163][T24883] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1460.901061][T11840] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1461.073192][T11840] usb 6-1: device descriptor read/64, error -71 [ 1461.355170][T11840] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1461.516657][T11840] usb 6-1: device descriptor read/64, error -71 [ 1461.780461][T11840] usb usb6-port1: attempt power cycle [ 1462.917392][T11840] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1462.970526][T11840] usb 6-1: device descriptor read/8, error -71 [ 1463.128156][T24930] [ 1463.130505][T24930] ====================================================== [ 1463.137512][T24930] WARNING: possible circular locking dependency detected [ 1463.144544][T24930] syzkaller #0 Tainted: G L [ 1463.150523][T24930] ------------------------------------------------------ [ 1463.157531][T24930] syz.0.5638/24930 is trying to acquire lock: [ 1463.163569][T24930] ffffffff8f9eb1e8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x75/0x4d0 [ 1463.174784][T24930] [ 1463.174784][T24930] but task is already holding lock: [ 1463.182146][T24930] ffff8880691c4140 (&sb->s_type->i_mutex_key#40){++++}-{4:4}, at: configfs_symlink+0x3af/0x1030 [ 1463.192590][T24930] [ 1463.192590][T24930] which lock already depends on the new lock. [ 1463.192590][T24930] [ 1463.202990][T24930] [ 1463.202990][T24930] the existing dependency chain (in reverse order) is: [ 1463.211983][T24930] [ 1463.211983][T24930] -> #2 (&sb->s_type->i_mutex_key#40){++++}-{4:4}: [ 1463.220674][T24930] down_write+0x96/0x200 [ 1463.225436][T24930] configfs_depend_item_unlocked+0x153/0x420 [ 1463.231937][T24930] usbg_make_tpg+0x1f6/0x590 [ 1463.237031][T24930] target_fabric_make_tpg+0xa8/0x6d0 [ 1463.242835][T24930] configfs_mkdir+0x4f6/0x9e0 [ 1463.248034][T24930] vfs_mkdir+0x406/0x620 [ 1463.252791][T24930] filename_mkdirat+0x285/0x510 [ 1463.258162][T24930] __se_sys_mkdir+0x34/0x150 [ 1463.263259][T24930] do_syscall_64+0x174/0x580 [ 1463.268377][T24930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.274775][T24930] [ 1463.274775][T24930] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 1463.282407][T24930] __mutex_lock+0x19d/0x1550 [ 1463.287511][T24930] tcm_set_name+0x2b/0xd0 [ 1463.292359][T24930] function_make+0x1a8/0x360 [ 1463.297459][T24930] configfs_mkdir+0x4f6/0x9e0 [ 1463.302655][T24930] vfs_mkdir+0x406/0x620 [ 1463.307399][T24930] filename_mkdirat+0x285/0x510 [ 1463.312778][T24930] __se_sys_mkdir+0x34/0x150 [ 1463.317871][T24930] do_syscall_64+0x174/0x580 [ 1463.322988][T24930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.329387][T24930] [ 1463.329387][T24930] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 1463.337633][T24930] __lock_acquire+0x1520/0x2cf0 [ 1463.342996][T24930] lock_acquire+0x106/0x350 [ 1463.348015][T24930] __mutex_lock+0x19d/0x1550 [ 1463.353115][T24930] uvcg_streaming_header_allow_link+0x75/0x4d0 [ 1463.359776][T24930] configfs_symlink+0x59a/0x1030 [ 1463.365220][T24930] vfs_symlink+0x18b/0x330 [ 1463.370142][T24930] filename_symlinkat+0x1cd/0x410 [ 1463.375674][T24930] __se_sys_symlink+0x4d/0x2b0 [ 1463.380946][T24930] do_syscall_64+0x174/0x580 [ 1463.386046][T24930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.392445][T24930] [ 1463.392445][T24930] other info that might help us debug this: [ 1463.392445][T24930] [ 1463.402650][T24930] Chain exists of: [ 1463.402650][T24930] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#40 [ 1463.402650][T24930] [ 1463.417357][T24930] Possible unsafe locking scenario: [ 1463.417357][T24930] [ 1463.424789][T24930] CPU0 CPU1 [ 1463.430137][T24930] ---- ---- [ 1463.435480][T24930] lock(&sb->s_type->i_mutex_key#40); [ 1463.440931][T24930] lock(&opts->dep_lock); [ 1463.447852][T24930] lock(&sb->s_type->i_mutex_key#40); [ 1463.455826][T24930] lock(gadget_subsys.su_mutex); [ 1463.460838][T24930] [ 1463.460838][T24930] *** DEADLOCK *** [ 1463.460838][T24930] [ 1463.468958][T24930] 2 locks held by syz.0.5638/24930: [ 1463.474135][T24930] #0: ffff88801b74a450 (sb_writers#31){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1463.483397][T24930] #1: ffff8880691c4140 (&sb->s_type->i_mutex_key#40){++++}-{4:4}, at: configfs_symlink+0x3af/0x1030 [ 1463.494283][T24930] [ 1463.494283][T24930] stack backtrace: [ 1463.500151][T24930] CPU: 1 UID: 0 PID: 24930 Comm: syz.0.5638 Tainted: G L syzkaller #0 PREEMPT(full) [ 1463.500183][T24930] Tainted: [L]=SOFTLOCKUP [ 1463.500192][T24930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1463.500205][T24930] Call Trace: [ 1463.500214][T24930] [ 1463.500226][T24930] dump_stack_lvl+0xe8/0x150 [ 1463.500267][T24930] print_circular_bug+0x2e1/0x300 [ 1463.500309][T24930] check_noncircular+0x12e/0x150 [ 1463.500342][T24930] __lock_acquire+0x1520/0x2cf0 [ 1463.500369][T24930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1463.500393][T24930] ? __pfx_stack_trace_save+0x10/0x10 [ 1463.500416][T24930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1463.500443][T24930] ? stack_depot_save_flags+0x33/0x800 [ 1463.500465][T24930] ? __lock_acquire+0x683/0x2cf0 [ 1463.500491][T24930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1463.500514][T24930] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 1463.500535][T24930] lock_acquire+0x106/0x350 [ 1463.500558][T24930] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 1463.500581][T24930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1463.500606][T24930] __mutex_lock+0x19d/0x1550 [ 1463.500632][T24930] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 1463.500664][T24930] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 1463.500685][T24930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1463.500708][T24930] ? __pfx___mutex_lock+0x10/0x10 [ 1463.500738][T24930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1463.500759][T24930] ? make_vfsuid+0x49/0xa0 [ 1463.500779][T24930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1463.500805][T24930] uvcg_streaming_header_allow_link+0x75/0x4d0 [ 1463.500826][T24930] ? inode_permission+0x2bc/0x5f0 [ 1463.500849][T24930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1463.500872][T24930] configfs_symlink+0x59a/0x1030 [ 1463.500894][T24930] ? lookup_one_qstr_excl+0x1d4/0x360 [ 1463.500920][T24930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1463.500943][T24930] ? make_vfsuid+0x49/0xa0 [ 1463.500965][T24930] ? __pfx_configfs_symlink+0x10/0x10 [ 1463.500986][T24930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1463.501008][T24930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1463.501030][T24930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1463.501053][T24930] vfs_symlink+0x18b/0x330 [ 1463.501073][T24930] ? security_path_symlink+0xfd/0x360 [ 1463.501095][T24930] filename_symlinkat+0x1cd/0x410 [ 1463.501119][T24930] ? __pfx_filename_symlinkat+0x10/0x10 [ 1463.501140][T24930] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1463.501162][T24930] ? do_getname+0x151/0x250 [ 1463.501183][T24930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.501202][T24930] __se_sys_symlink+0x4d/0x2b0 [ 1463.501222][T24930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.501242][T24930] do_syscall_64+0x174/0x580 [ 1463.501271][T24930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.501291][T24930] RIP: 0033:0x7fe4c2f9e0d9 [ 1463.501312][T24930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.501332][T24930] RSP: 002b:00007fe4c11f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 1463.501353][T24930] RAX: ffffffffffffffda RBX: 00007fe4c3225fa0 RCX: 00007fe4c2f9e0d9 [ 1463.501374][T24930] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000200000000800 [ 1463.501393][T24930] RBP: 00007fe4c3035024 R08: 0000000000000000 R09: 0000000000000000 [ 1463.501410][T24930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1463.501426][T24930] R13: 00007fe4c3226038 R14: 00007fe4c3225fa0 R15: 00007ffff2fa0228 [ 1463.501455][T24930] [ 1464.275035][T11840] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1464.350311][T24933] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 1464.541664][T11840] usb 6-1: device not accepting address 19, error -71 [ 1464.570638][T11840] usb usb6-port1: unable to enumerate USB device [ 1465.254463][T12860] Bluetooth: hci6: command 0x0406 tx timeout