last executing test programs: 10m11.547670739s ago: executing program 1 (id=178): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) syz_open_procfs(r0, &(0x7f0000000040)='attr/keycreate\x00') r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @remote}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 10m10.876109941s ago: executing program 1 (id=180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000280)=0x14) readv(r3, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/151, 0x97}], 0x1) listen(r1, 0x0) sched_setparam(r2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 10m9.580588106s ago: executing program 1 (id=182): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) getdents(r0, 0x0, 0x0) 10m8.939170585s ago: executing program 1 (id=186): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000380)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x420500, 0x0) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000040)=0x4) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003ac0)=[{&(0x7f0000000100)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10008004}], 0x1, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c032, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000003c0)={0x7f, 0x4, {}, {0xee01}, 0x100000000, 0xc8}) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000300)=@filename='./file0\x00', r6, &(0x7f0000000400)) fsetxattr$security_smack_transmute(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x4, 0x0) 10m7.188469668s ago: executing program 1 (id=197): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x23ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x4, 0xffffffff}, 0xd0, 0x9}}) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x14, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r5, &(0x7f0000000300)=""/56, 0x38) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) 10m5.88391266s ago: executing program 1 (id=201): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m5.492919953s ago: executing program 32 (id=201): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m3.47168198s ago: executing program 4 (id=755): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x44}, 0x1, 0x8}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0xfffa, 0x1}, 0xe) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000002980)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002940)={&(0x7f0000002680)={0x29c, 0x14, 0x2, 0x70bd2b, 0x25dfdbfd, {0x2b, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "1ea3fe6999dfe978480ac6fa0eca85676a8518dbc17c0b4c13c4723857d547dd15b0935f6c6c0a0f38ddb21f9eb43931816e5bdc29cab24ff0d198cee6ec8680571162b5eb4f02f47ea610f3791ddc7fd47563e3cc1a742caf99627118f34c865b144f79a84a32fe1d735a5aee8be85be3ff2cd4f185a73f75bdb714b701f747308e017515e55e73bab9e1d3b83a5d81db596fe4cbf174a9f243dbc08a014784e5847e4b64d929ec32c6e962add68334ea0820c83533907725"}, @INET_DIAG_REQ_BYTECODE={0xda, 0x1, "d3408c60558e045b1cac0e898ceb54a77fe3cb73391541497e15cb0a028f5c28017769530454ce31fbb642f6cf9d7050858255d0fa568ee8831ec926958943ad03ccee451c210ed4a6d63a79d01377c03d8ef0276954bd524a866c098d6f2517d5a455254da26e5068b1c98080f2339f7d0b7e38f00dc424ba886ebe54b47c9a6a890a09733c4987c83096d5c9692bb52198f2a6b2b19226321496712fac548ac22600935bb10c92560c7f84050d71ff05a0a86ab513c2ecb12e32e3881264729aa5631ec51826b47e9d7a58c87836903dad4ab38b6a"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "30eab07cf587bc5ff55ae543e7b1b8e6185cfe1422e34f8c24ba810ddeead8982f80a972616de89424cd1e7397ed0317c0cc249fe606082381f69327a1bbfd50195a05568a4a11e3046f873c47e570533a523abd12b81f9ca6c1c466c365b11c6d75d2492d8773a89591dcb9409a9a959bfd788fb2302e6e1a154a4bfe864b4ed4e088cd9578ee64cc32cd20761080c84ec18c2d39461cc55cf5d277a0f8fa2e73b1230a62cf755e248da51cc16f00accf2ab61f78f0f4797d3966164ffbe8cfce51dee5d4c5965c40919a0a6e3cda9080f932bbf4473edb54d8bd59a61a7eb8dcda554e14"}]}, 0x29c}, 0x1, 0x0, 0x0, 0x44}, 0x20000) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f00000001c0)={0x3, 0x0, 0x1d, 0x9, 0x140, &(0x7f0000000a00)}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002340)={'ip6tnl0\x00', &(0x7f00000022c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x3, 0x1ff, 0xc, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x7800, 0x1ff, 0x25}}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7c, 0x6a, 0xa, 0xff00}, [@call={0x26}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xa, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000002540)={0x80000000, 0x7, "8c0404e9400675de77be4c45611033c79721a00423469f50428fcd1901e2cb2d", 0x5, 0xf4, 0x100000000, 0xfad, 0x5, 0x8000, 0x1, 0x8, [0x9, 0x200, 0x9e1, 0x1]}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) quotactl_fd$Q_SYNC(r5, 0xffffffff80000101, 0x0, 0x0) connect$unix(r7, &(0x7f00000029c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002480)=@bpf_lsm={0x1d, 0x9, &(0x7f0000001200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x1, 0xa, 0x0, 0x7e37, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000001280)='GPL\x00', 0x2, 0x1000, &(0x7f00000012c0)=""/4096, 0x1f00, 0x50, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002380)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000023c0)={0x3, 0x4, 0x3, 0x798b}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002400)=[r7, 0x1], &(0x7f0000002440), 0x10, 0xd3d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x4d}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70) 7m2.799851352s ago: executing program 4 (id=757): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x10001, 0x0, 0x0, 0x0, 0xf6e4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x80000000, 0x0, 0x9, 0x0, 0x0, 0x10001, 0x2}, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001200)=ANY=[@ANYBLOB="18000000181401002100000000000000080005"], 0x18}, 0x1, 0xf00, 0x0, 0x40}, 0x10) r4 = fcntl$dupfd(r0, 0x0, r2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000340)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet(0x2, 0x4, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000500)={0x80000000, 0xb, 0x4, 0x1000, 0x7, {0x77359400}, {0x4, 0x1, 0x6, 0x80, 0x4, 0x0, "94c241d9"}, 0xffffffbd, 0x4, {0xffffffffffffffff}, 0x3, 0x0, r4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000006c0)=@multiplanar_fd={0x6, 0x0, 0x4, 0x1000, 0x1, {0x0, 0xea60}, {0x3, 0xc, 0x4, 0x6, 0x5, 0xfc, "32116b48"}, 0x8, 0x4, {&(0x7f0000000580)=[{0x2, 0x180000, {r6}, 0x10001}, {0x200, 0x80, {r4}, 0x3ff}]}, 0x7ff}) close_range(r5, 0xffffffffffffffff, 0x3e00000000000000) 7m1.363802993s ago: executing program 4 (id=769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000780), 0xb2001, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kvm_set_irq\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000005c0)='rpc_stats_latency\x00', 0xffffffffffffffff, 0x0, 0x3}, 0xb) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd4(r2, &(0x7f0000000340)={[0x3]}, 0x8, 0x80800) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000001c80)="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", 0xd56}], 0x1}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r3, 0x4, &(0x7f0000000200)=0x10008) r4 = socket$kcm(0x10, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x2) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f0000000500)=0xc) ptrace$ARCH_SHSTK_ENABLE(0x1e, r5, 0x3, 0x5001) socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000002c0)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002d0021"], 0x1c}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}, {&(0x7f0000000640)="084e789485e228735ecad56abd526b55f9f3580a44d070182e07fb76a025ad98f6d2b2e29782416f54f5e9987ceb1d691bbb6bb519c4acd20de14250903f39d6cca9dc0354ac17e255a9c0983e7b3e46577bf75961ddcb36e7d83dc65086be1d880558d7f9edbd88db1dec502d7211c2a6ce2a8f6c405a965ab7dfacf7c587512e0cb6c0c72f5fccdaac04b14d84a9c580a74da7b7", 0x95}], 0x2, 0x0, 0x0, 0x1f000801}, 0xc080) 7m1.240255113s ago: executing program 4 (id=771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x47}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x53, r0, 0x41731000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) (async) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) (async) socket$kcm(0x10, 0x2, 0x0) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r4, 0x10000000005, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="10000000ad63000073a5a57d0900000010000000", @ANYRES32=r4, @ANYBLOB="0400"/20, @ANYRES32, @ANYRES32=r4, @ANYBLOB="010000000200000001000000000000000000000000000000000000000796088b930821e9d38d84812855067c9c96d6141d2edb547b55d470c48ef934696a714d81d8912b664a3bae717100b1e757d65085458b6f76798636a00dbf5b0503aa084cbfd04b70f8f7ac11a992bab4c74deffffd8431ee36742652a31a7475bff3266768e9dee24e07feff40e565a1b34040e6ba59ef20d1946210db66a00f05137bc64c704d539dd7add4bd5a0c549f98995626187de782ef7a12aae359a21350"], 0x50) shutdown(r5, 0x1) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, 0x0, &(0x7f0000000140)) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c9201200"], 0x17) (async) syz_open_dev$usbfs(&(0x7f0000000440), 0x77, 0x111341) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) 7m1.071854064s ago: executing program 4 (id=772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005ec0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0x3}, 0x6, 0x1, 0x2, 0x25, 0xfe, 'syz0\x00', "48fa4fa631b51ec55eba0db8421273a90cd33eb538595ef1a14dccdc9841ce27", "07a345d63f89ed93f3237de65493734f33bf24bb379372c458ee34be580b7132", [{0x8, 0xfffd, {0x1, 0xad9}}, {0x101, 0x1, {0x0, 0x3}}, {0x3ff, 0x3, {0x3, 0x4}}, {0x64, 0x3685, {0x1, 0x8}}, {0xf926, 0x7, {0x2, 0x3}}, {0x0, 0x80, {0x3, 0x3}}, {0x200, 0xcb, {0x0, 0xb}}, {0x8, 0x9, {0x2, 0x2}}, {0x4, 0x81, {0x3, 0x801}}, {0x8, 0x1, {0x1, 0x6}}, {0x8000, 0x3ff, {0x3, 0x3}}, {0xfdfc, 0x0, {0x0, 0x7fff}}, {0x8001, 0x6d, {0x2, 0x7ff}}, {0x9, 0xa477, {0x2, 0xfffffffc}}, {0x7fff, 0xb, {0x1, 0x9}}, {0x7, 0x4, {0x3, 0x5}}, {0x5, 0xffff, {0x2, 0xfffffffa}}, {0x7, 0x5, {0x1, 0x7}}, {0x5, 0x5c, {0x0, 0x8001}}, {0x8000, 0x4, {0x0, 0xffffffff}}, {0xfffa, 0x9, {0x1, 0x6}}, {0x0, 0x93, {0x1, 0xf}}, {0x4, 0x3, {0x0, 0x4}}, {0x6, 0x28c, {0x2, 0xffffffff}}, {0x6, 0x7, {0x1, 0x4}}, {0xffff, 0x4, {0x0, 0x1}}, {0x9, 0x45f, {0x3, 0x9}}, {0x64d, 0x37c4, {0x3, 0x8}}, {0x3, 0x1, {0x2, 0x1}}, {0x6, 0x0, {0x0, 0xffffffff}}, {0xfff9, 0xffff, {0x2, 0x3}}, {0x5, 0x6, {0x2, 0x24}}, {0x3, 0x9, {0x3, 0x1}}, {0x10, 0xfff0, {0x1, 0x2}}, {0x7, 0xd70, {0x3, 0x80000000}}, {0x7, 0x3, {0x0, 0x2da06572}}, {0x0, 0x7f, {0x0, 0x7}}, {0xece4, 0x9, {0x0, 0x1}}, {0x1, 0x8000, {0x0, 0x49}}, {0x1, 0x7, {0x1, 0x31}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000080}, 0x40040) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x5, 0x12) sendfile(r2, r2, 0x0, 0x9) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="942b0000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 7m0.488486831s ago: executing program 4 (id=774): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000001000000650000000800000400000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @local, @mcast1, 0x10, 0x0, 0x6, 0x3}}) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000180)={0x7, 0x8}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 6m45.290048987s ago: executing program 33 (id=774): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000001000000650000000800000400000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @local, @mcast1, 0x10, 0x0, 0x6, 0x3}}) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000180)={0x7, 0x8}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 4m11.304074616s ago: executing program 0 (id=1292): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000be2f7de0fa0000ff01400000000000000000000e00000084e8323990d564b70572e11d000000000000000000000000000000000000000040000000000000000000000000000000000000000200"/113]) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0x80000f41, 0x4) sendto$packet(r2, &(0x7f0000000100)="3f0302000000000000001e00a00000004a", 0x11, 0x4800, &(0x7f0000000540)={0xc9, 0x1749191bef107f84, r3, 0x1, 0x1, 0x6, @remote}, 0x14) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r4, {r5, r6}}, './file0\x00'}) mount$9p_unix(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1c2caa, &(0x7f0000000500)={'trans=unix,', {[{@dfltgid={'dfltgid', 0x3d, r7}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r6}}]}}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) eventfd(0xffffffff) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) socket(0x25, 0x5, 0x0) ioctl$VHOST_SET_LOG_FD(r8, 0x4004af07, 0x0) 4m10.372647987s ago: executing program 0 (id=1295): kexec_load(0xf, 0x1, &(0x7f0000003200)=[{&(0x7f0000003180)='K', 0x1, 0x8000, 0x8000}], 0x3e0000) 4m9.686635062s ago: executing program 0 (id=1298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000300)="b9be0300000f320f01f80f20d835200000004f0f202323901ce50a00000000000000ba000000000f30b9ee0200000f3242f7ef0f0666baf80cb88cff018def66bafc0cb800000080efc0fd00460f08", 0x4f}], 0x1, 0xf1e17c17512dff05, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000004000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000280)="0fa396d9060f1c8f006016ba200066b83900000066efdadc0f01c40f01cbbaa100ec66b8002000000f23c80f21f866350c0060000f23f836640f21c6", 0x3c}], 0x1, 0x26, 0x0, 0x0) pwritev2(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="45466b7e5c439546c239e6c2ef962ae161bad84bbddca510f073", 0x1a}, {&(0x7f00000000c0)="bb148f4162f9d05ff6ad4e5526f92c2962450c54169540d890e1124dee3c6dcc8751ad02981e1c5f049a16040918a105eec048bd454dcf3c0a1b6a53fbe991eab98abab5d8e63d122250", 0x4a}, {&(0x7f0000000140)="8b7744300f41384921ce31f37a0d1fdbccd319f89855772f0f830629e9e362896f433afaf3d079c9cb975212f8e2a2abd291ee41deecd6404d44ca0ebffa87bd9153d7b9a6e69a193bfbbf51967d38ad63499cb8bce514388425336113bb7d65ed755f2a956c3512aadfa83798152cde25534a143bece5d969d412179a53e7df4d50d4ee0fa79329839d7b5ac1a3badfb76a858bdf388e", 0x97}, {&(0x7f0000000200)="fde6049ed527a34282e67dadbddaf8bee6713b524c009b7e4cbae3f86d33947435c73dd43236d718b7120591accdfbaa32338866b3257a2bd48397bc4e9d09340b4d62f5e69f3e06e6f2e5aa", 0x4c}, {&(0x7f0000000380)="3299f68fa76bbbda39877874bd9e0f7972a344285be63043548343a23523cb4e06afea924c403995045695d6b9eba4eb796e7d65064120d65fe0d84089e08ad4252f059ed3e41232b76cecff8649297d4ca8dedb1945ff89748ee03a71736507604542a58e07a57f9e1d7156dba7d5c22c8b1ecd7cc657c733802cad87cb985a263a70a8ed52dcce3751441a3418c6e911e6361e87b79cf88fa778e495849af0529d9e61afc1b37e1f137d2ba16da89e80079be9def72b8858fe6756b4790459f6f984e0e1aa971dd6cbe90d60c3fe8675a57f501f754df3c6a8c1b5e29c2329ed946b8f", 0xe4}], 0x5, 0x4, 0x4, 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m8.63589635s ago: executing program 0 (id=1302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0xa}}, 0x20) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0x15) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x20060400) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000380)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x200000000000000, 0x1ffffffffffffe, 0x0, 0x6, 0x9], 0x0, 0x8340}) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000040)=0x86) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m8.098331498s ago: executing program 0 (id=1303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008804}, 0x4850) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000}) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20040600) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000002c0)={0x0, 0xf000, 0x8}) r6 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r6}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r6, 0x14}) eventfd2(0x1, 0x80801) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000003440)=[{0x0}, {0x0}, {&(0x7f00000004c0)=""/249, 0xf9}], 0x3}}], 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 4m7.823567733s ago: executing program 0 (id=1305): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1d, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_clone(0x3836080, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, r0, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000834752b20aab8cf59d4bad3c0000000850000000e000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x71653246673a3ad4, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x222, 0x0) r5 = creat(0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000080)={r2}) signalfd4(r7, &(0x7f00000000c0)={[0x3]}, 0x8, 0x80800) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) 4m7.085288543s ago: executing program 34 (id=1305): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1d, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_clone(0x3836080, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, r0, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000834752b20aab8cf59d4bad3c0000000850000000e000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x71653246673a3ad4, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x222, 0x0) r5 = creat(0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000080)={r2}) signalfd4(r7, &(0x7f00000000c0)={[0x3]}, 0x8, 0x80800) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) 2m37.379670992s ago: executing program 7 (id=1593): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') memfd_create(0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a000020"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) socket$kcm(0x10, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x8) 2m31.528911222s ago: executing program 7 (id=1610): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300090a0000000000000000000200030006000000000802000000ac1414bb00000000000000000200010000000000fd000504feffff4b030005000000000002004e21e00000020000000000000000"], 0x50}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x4, 0xf5, [0x0, 0x4, 0x81, 0xc82, 0x80, 0x2], 0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/245}, &(0x7f00000002c0)=0x78) 2m30.259981994s ago: executing program 7 (id=1614): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="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") r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)="7711", 0x2}], 0x1, 0x3, 0x1) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058da2"], 0x0) 2m27.19070429s ago: executing program 7 (id=1632): socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x4}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) syz_io_uring_setup(0x8000ef3, &(0x7f00000005c0)={0x0, 0x8047, 0x18a9, 0x0, 0x1000}, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x398, 0x188, 0x230, 0xfeffffff, 0x188, 0x188, 0x300, 0x300, 0xffffffff, 0x300, 0x300, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, '\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1, @multicast1, @local, @icmp_id=0x66, @icmp_id=0x67}}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'pimreg0\x00', 'ip_vti0\x00', {}, {}, 0x0, 0x3}, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x7}, [@common=@ttl={{0x28}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0xd}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast1, @icmp_id=0x64, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1f, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @icmp_id=0x65, @gre_key=0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) write(r3, &(0x7f0000000000)="fa", 0xfffffdef) prlimit64(0x0, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) r7 = dup(r6) ioctl$PPPIOCCONNECT(r7, 0x40047435, &(0x7f00000002c0)=0x2) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e21, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x101}}}, &(0x7f00000004c0)=0x84) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, 0x0, 0x4000000) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x308, 0x0, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x10) 2m22.838399164s ago: executing program 7 (id=1644): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000010ac05470200000000000109022400010000500009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x38, 0x3a, 0x1, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f20700", 0x0, 0x32, 0x0, @private2={0xfc, 0x2, '\x00', 0xfc}, @remote, [@fragment={0x2b, 0x0, 0x0, 0x0, 0x0, 0xe, 0x65}]}}}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400100, 0x0) write$tun(r2, &(0x7f00000006c0)={@val={0x0, 0x8809}, @val={0x1, 0x0, 0x7, 0xf148, 0x1, 0x9e2a}, @llc={@llc={0xf8, 0xe, "68fe", "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"}}}, 0x1012) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @loopback, 0x7}, 0x1c) 2m19.639528128s ago: executing program 7 (id=1658): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x3, {0x2, 0xff}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x4040800}, 0x44) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000100)={0x3, 0x30000, 0x0, 0x2, 0x0, 0x2, 0x2, 0x9, 0x10, 0x101, 0xffffffff, 0x8, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r5, 0x4018480c, &(0x7f0000000080)={0x2, 0xffffffff, 0x10000}) r6 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000280)=0x14) read(r7, &(0x7f00000019c0)=""/4097, 0x1001) r8 = fcntl$getown(r6, 0x9) syz_pidfd_open(r8, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0xe040, 0x0) writev(r6, &(0x7f0000002680)=[{&(0x7f00000025c0)='8', 0x1}, {0x0, 0x2}], 0x2) 2m3.974552376s ago: executing program 35 (id=1658): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x3, {0x2, 0xff}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x4040800}, 0x44) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000100)={0x3, 0x30000, 0x0, 0x2, 0x0, 0x2, 0x2, 0x9, 0x10, 0x101, 0xffffffff, 0x8, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r5, 0x4018480c, &(0x7f0000000080)={0x2, 0xffffffff, 0x10000}) r6 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000280)=0x14) read(r7, &(0x7f00000019c0)=""/4097, 0x1001) r8 = fcntl$getown(r6, 0x9) syz_pidfd_open(r8, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0xe040, 0x0) writev(r6, &(0x7f0000002680)=[{&(0x7f00000025c0)='8', 0x1}, {0x0, 0x2}], 0x2) 13.033668268s ago: executing program 2 (id=2039): socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f0000000600)={0x26, 0x0, 0x1000000, 0x40, 0x2, 0x11, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x7}, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x200, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}]}, 0x30}}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x0, 0x4, 0x6, 0x0, 0x7f, 0x401}, {0x1, 0x1, 0xae7, 0x6, 0x4, 0x6}]}) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @dev={0xfe, 0x80, '\x00', 0x15}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000240)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000840)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x11, [0x0, 0x0, 0x10, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x9, 0x3, 0xeffffffc, 0x0, 0x1, 0xfffffffd, 0x0, 0x6, 0x0, 0x200, 0x0, 0x0, 0xe, 0x80, 0x6, 0x4, 0x3, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x400, 0x0, 0x3, 0x4, 0x40000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x2, 0x8000, 0x0, 0xffffffff, 0x6, 0x2, 0x3, 0x2a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b], [0xffffffff, 0x1, 0x2000, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9d5, 0x0, 0x4, 0x80000004, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffeffffe, 0x0, 0x800005], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x6e8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xdb2bb47c, 0x1, 0x400, 0xffff7fff, 0xfffffffe, 0xe9, 0x20, 0x20, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x6, 0x4, 0xb, 0xfffffffe, 0x4, 0x0, 0x3, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) 13.029928395s ago: executing program 3 (id=2040): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0, {[0x30]}}, 0x0, 0x8, &(0x7f0000000300)) socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 11.840793404s ago: executing program 3 (id=2047): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"], 0x0}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="0800264f851600000a00180000000000000000001c005a8018000180140002"], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x20008010) 11.576479723s ago: executing program 3 (id=2049): r0 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) socket$netlink(0x10, 0x3, 0x9) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x0, 0x100}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r3 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10000) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0200020000000008000400010000", 0x23) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) 9.827481666s ago: executing program 3 (id=2055): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="0eb4", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="0308", 0x2}], 0x1}}], 0x3, 0x28048005) 9.609881416s ago: executing program 3 (id=2058): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911069000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) 9.390659961s ago: executing program 3 (id=2060): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 6.991057182s ago: executing program 2 (id=2061): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xff1ed000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x8, 0x40}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x1, 0xfffd, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000080)={0x3, r5, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) 5.7648664s ago: executing program 2 (id=2064): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200200, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414cd0800060001000000"], 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0xc6) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x1fff, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 5.489172973s ago: executing program 2 (id=2067): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) socketpair(0x1d, 0xa, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000340)=[{0x7, 0xbb11, 0x22, &(0x7f0000000080)="cfbb0d939950572c020000b54191bb4e4e1c83ba0000000078e4174aff7ca82431b8"}, {0xff, 0x8000, 0x0, 0x0}], 0x2}) 5.315557147s ago: executing program 6 (id=2070): unshare(0x2c020400) r0 = socket(0x1, 0x3, 0x0) bind$packet(r0, 0x0, 0x0) 5.258588642s ago: executing program 8 (id=2071): prctl$PR_SET_NAME(0xf, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfcfa, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x0, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4}}}, 0x24}}, 0x50) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB], 0xb4}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.031503244s ago: executing program 6 (id=2072): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) r1 = socket$kcm(0x2a, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) removexattr(0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)) ioctl$TIOCSTI(r2, 0x5412, 0x0) syz_clone3(0x0, 0x0) execveat$binfmt(r0, 0x0, 0x0, 0x0, 0x800) syz_socket_connect_nvme_tcp() syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x891c, 0x0) syz_open_procfs(0x0, 0x0) 4.021390087s ago: executing program 5 (id=2073): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x24200) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={[{@none}]}) 3.6518833s ago: executing program 8 (id=2074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) io_uring_setup(0x3450, 0x0) unshare(0x26020280) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58) 3.297812444s ago: executing program 5 (id=2075): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="05c9"], 0x18) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) 2.403410415s ago: executing program 6 (id=2076): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) munlockall() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2.331870016s ago: executing program 8 (id=2077): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200200, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414cd0800060001000000"], 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0xc6) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x1fff, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 2.303950647s ago: executing program 5 (id=2078): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ac0)=@delchain={0x154, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x120, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x114, 0x2, [@m_simple={0xe4, 0x1c, 0x0, 0x0, {{0xb}, {0xb8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x2, 0x3, 0x101, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x3, 0x3, 0x539, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff841e, 0xa, 0x4, 0xfffffffd, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x499b, 0x2, 0x4, 0x200}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x5, 0x0, 0x1, 0xc7cd}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0xfba, 0x1, 0x0, 0xd79}}, @TCA_DEF_PARMS={0x18, 0x2, {0xff, 0x7f, 0x8, 0x2, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x2c, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) 2.214485866s ago: executing program 5 (id=2079): preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x4) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) 2.083925751s ago: executing program 6 (id=2080): write$midi(0xffffffffffffffff, &(0x7f00000005c0)="46b1e509d5b8b7c4b207c3e0af08f4c1ee10e965b80ae88a39a44e77fd6e3e1288cb694d7a2b3a2d58df574bfd6ec7d74e9006baa9dc6ebc8fb45bde80af3dc63ea7be444258d0bc21", 0x49) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) 1.48305568s ago: executing program 8 (id=2081): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.422688949s ago: executing program 2 (id=2082): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000040)="4e3f261e29a7fa76", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, 0x0) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000040)={0x7f1, 0x84, 0xefcc, 0x10004, 0x5, "f06fca79266e82a74b6c5e443a04683cc267a0", 0x7, 0xc}) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5) 1.35088249s ago: executing program 5 (id=2083): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @address_request={0x11, 0x0, 0x0, 0x50}}}}}, 0x0) 1.27186766s ago: executing program 6 (id=2084): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x9, 0x0, 0x265a4e34}, 0xc) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x1, 0x5, 0xffffffff, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x8) 805.611952ms ago: executing program 8 (id=2085): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0xfffc, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2}}}}) 259.359727ms ago: executing program 5 (id=2086): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) open_by_handle_at(r4, &(0x7f0000000340)=ANY=[], 0x60380) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) ioctl$TIOCMGET(r5, 0x5415, 0x0) symlink(0x0, &(0x7f00000000c0)='./file1\x00') listen(r0, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, 0x0) 147.3695ms ago: executing program 2 (id=2087): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, '\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8040, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/242) ioctl$PPPIOCGFLAGS1(r1, 0x40047452, &(0x7f0000000100)) 66.815789ms ago: executing program 6 (id=2088): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x80}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 8 (id=2089): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) kernel console output (not intermixed with test programs): the problem. [ 537.389285][T11246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.404498][ T5971] usb 7-1: Using ep0 maxpacket: 8 [ 537.413062][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 537.420052][ T5971] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 537.439063][ T5971] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 537.469594][ T5971] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 537.488098][ T5971] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 537.527931][ T5971] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 537.538635][ T5971] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.554707][ T5971] usbtmc 7-1:16.0: bulk endpoints not found [ 538.073101][ T5971] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 538.321688][ T5971] usb 6-1: Using ep0 maxpacket: 8 [ 538.373272][ T5971] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 538.417892][ T5971] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 538.539025][ T5971] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 538.606634][ T5971] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 538.620455][ T5971] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.643294][ T5971] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 538.656409][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.683737][ T5828] usb 7-1: USB disconnect, device number 17 [ 538.781565][ T5972] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 539.064321][ T5972] usb 4-1: Using ep0 maxpacket: 16 [ 539.247923][ T5972] usb 4-1: config 0 has an invalid interface number: 79 but max is 0 [ 539.317897][ T5971] usb 6-1: usb_control_msg returned -32 [ 539.353674][ T5972] usb 4-1: config 0 has no interface number 0 [ 539.430086][ T5971] usbtmc 6-1:16.0: can't read capabilities [ 539.553902][ T5972] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 6.76 [ 539.677275][T11246] hsr_slave_0: entered promiscuous mode [ 539.739034][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.878349][ T5972] usb 4-1: Product: syz [ 539.910067][T11246] hsr_slave_1: entered promiscuous mode [ 539.933851][ T5972] usb 4-1: Manufacturer: syz [ 540.007511][ T5972] usb 4-1: SerialNumber: syz [ 540.015795][T11246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 540.128996][T11246] Cannot create hsr debugfs directory [ 540.289105][ T5972] usb 4-1: config 0 descriptor?? [ 540.513804][ T5972] hub 4-1:0.79: bad descriptor, ignoring hub [ 540.609597][ T5972] hub 4-1:0.79: probe with driver hub failed with error -5 [ 540.924818][ T5972] ftdi_sio 4-1:0.79: FTDI USB Serial Device converter detected [ 541.147457][ T5972] ftdi_sio ttyUSB0: unknown device type: 0x676 [ 541.559027][ T5972] usb 4-1: USB disconnect, device number 76 [ 541.691407][ T5972] ftdi_sio 4-1:0.79: device disconnected [ 542.599565][T11384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1345'. [ 542.683252][ T5938] usb 6-1: USB disconnect, device number 41 [ 542.856635][T11384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1345'. [ 542.900946][ T3472] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 542.930188][T11246] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 542.995235][T11246] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 543.065143][T11246] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 543.079095][ T3472] usb 4-1: Using ep0 maxpacket: 16 [ 543.100371][ T3472] usb 4-1: unable to get BOS descriptor or descriptor too short [ 543.102604][T11246] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 543.140486][ T3472] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 543.154133][ T3472] usb 4-1: config 13 has no interface number 0 [ 543.170424][ T3472] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 543.189940][ T3472] usb 4-1: config 13 interface 50 has no altsetting 0 [ 543.557062][ T3472] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 543.587347][T11406] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 543.715640][ T3472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.842594][ T3472] usb 4-1: Product: syz [ 543.916572][ T3472] usb 4-1: Manufacturer: syz [ 544.018089][ T3472] usb 4-1: SerialNumber: syz [ 544.606240][T11381] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 544.789076][T11246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.829755][ T3472] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 544.837862][ T3472] usb 4-1: MIDIStreaming interface descriptor not found [ 544.938538][T11246] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.974719][ T8996] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.982228][ T8996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.015746][ T8996] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.022922][ T8996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.045504][ T3472] usb 4-1: USB disconnect, device number 77 [ 545.316517][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 546.457827][T11246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.964294][T11446] syz.2.1357: attempt to access beyond end of device [ 546.964294][T11446] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 547.025392][T11446] SQUASHFS error: Failed to read block 0x0: -5 [ 547.045035][T11446] unable to read squashfs_super_block [ 547.484171][T11461] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1359'. [ 547.496579][T11461] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1359'. [ 550.500480][T11469] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 550.993599][T11475] netlink: 18 bytes leftover after parsing attributes in process `syz.5.1362'. [ 551.028272][T11246] veth0_vlan: entered promiscuous mode [ 551.059766][T11246] veth1_vlan: entered promiscuous mode [ 551.284812][T11246] veth0_macvtap: entered promiscuous mode [ 551.324771][T11246] veth1_macvtap: entered promiscuous mode [ 551.443922][T11246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.472923][T11482] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1365'. [ 551.535944][T11246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.612645][T11246] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.647009][T11246] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.669824][T11486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1366'. [ 551.681330][T11488] netlink: 'syz.3.1367': attribute type 7 has an invalid length. [ 551.704467][T11488] netlink: 'syz.3.1367': attribute type 8 has an invalid length. [ 551.712486][T11246] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.721253][T11488] netlink: 'syz.3.1367': attribute type 4 has an invalid length. [ 551.721354][T11488] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1367'. [ 551.834341][T11246] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.843728][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 552.014924][ T9] usb 7-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 552.048088][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.082270][ T9] usb 7-1: config 0 descriptor?? [ 552.144156][ T9] gspca_main: spca508-2.14.0 probing 8086:0110 [ 552.208943][ T5992] udevd[5992]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 552.234772][ T5836] udevd[5836]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 552.297648][ T6295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.327656][ T6295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.343098][ T9] gspca_spca508: reg_read err -32 [ 552.448273][ T9] gspca_spca508: reg_read err -32 [ 552.557952][ T9] gspca_spca508: reg_read err -32 [ 552.611740][T11482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.877987][T11482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.915479][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.929503][ T9] gspca_spca508: reg_read err -32 [ 552.945768][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.959696][ T9] gspca_spca508: reg_read err -32 [ 553.166823][ T9] gspca_spca508: reg write: error -71 [ 553.194851][ T9] spca508 7-1:0.0: probe with driver spca508 failed with error -71 [ 553.216776][ T9] usb 7-1: USB disconnect, device number 18 [ 553.998234][T11522] program syz.2.1376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 554.080133][T11521] program syz.2.1376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 554.221041][ T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 554.246373][ C1] sd 0:0:1:0: [sda] tag#3753 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 554.256975][ C1] sd 0:0:1:0: [sda] tag#3753 CDB: Write(6) 0a 00 00 00 00 00 [ 554.451051][ T5984] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 554.477599][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 554.555080][ T10] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 554.567082][ T10] usb 6-1: config 0 has no interface number 0 [ 555.028553][ T5984] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 555.049254][ T10] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 555.061069][ T5984] usb 7-1: config 0 has no interface number 0 [ 555.115311][T11538] netlink: 'syz.7.1380': attribute type 1 has an invalid length. [ 555.124926][T11538] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1380'. [ 555.144416][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.168670][ T5984] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 555.190841][ T10] usb 6-1: Product: syz [ 555.195146][ T5984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.216216][ T10] usb 6-1: Manufacturer: syz [ 555.231080][ T10] usb 6-1: SerialNumber: syz [ 555.240107][ T5984] usb 7-1: Product: syz [ 555.255995][ T10] usb 6-1: config 0 descriptor?? [ 555.261504][ T5984] usb 7-1: Manufacturer: syz [ 555.359344][ T5984] usb 7-1: SerialNumber: syz [ 555.379667][ T10] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 555.397393][ T5984] usb 7-1: config 0 descriptor?? [ 555.606432][ T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 555.656445][T11551] netlink: 18 bytes leftover after parsing attributes in process `syz.7.1381'. [ 555.688642][ T5984] usb 7-1: Firmware version (0.0) predates our first public release. [ 555.697321][ T5984] usb 7-1: Please update to version 0.2 or newer [ 555.723021][ T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 555.791136][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 555.834967][ T10] usb 6-1: USB disconnect, device number 42 [ 555.854850][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 555.875060][ T5984] usb 7-1: USB disconnect, device number 19 [ 555.974190][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 555.987102][ T10] quatech2 6-1:0.51: device disconnected [ 556.766131][T11569] wg1 speed is unknown, defaulting to 1000 [ 558.185547][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1390'. [ 558.326075][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1390'. [ 558.710897][ T9820] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 558.891120][ T9820] usb 3-1: Using ep0 maxpacket: 8 [ 559.051062][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 559.281269][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 559.331105][ T9] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 559.340240][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.401988][ T9] usb 7-1: Product: syz [ 559.406337][ T9] usb 7-1: Manufacturer: syz [ 559.417017][ T9] usb 7-1: SerialNumber: syz [ 559.425674][ T9] usb 7-1: config 0 descriptor?? [ 559.474349][ T9] gspca_main: sq905-2.14.0 probing 2770:9120 [ 559.479701][T11604] openvswitch: netlink: IPv4 tunnel dst address is zero [ 559.499440][ T9820] usb 3-1: unable to get BOS descriptor or descriptor too short [ 559.519541][ T9820] usb 3-1: too many configurations: 189, using maximum allowed: 8 [ 559.546723][ T9820] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 559.555223][ T9820] usb 3-1: can't read configurations, error -71 [ 560.535003][ T9] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 560.612663][ T9] sq905 7-1:0.0: probe with driver sq905 failed with error -110 [ 561.078298][T11615] wg1 speed is unknown, defaulting to 1000 [ 561.324058][T11619] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 561.968589][ T9] usb 7-1: USB disconnect, device number 20 [ 562.091677][ T5938] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 562.271384][ T5938] usb 6-1: Using ep0 maxpacket: 32 [ 562.283432][ T5938] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.299660][ T5938] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 562.318885][ T5938] usb 6-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 562.333369][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.345297][ T5938] usb 6-1: Product: syz [ 562.350527][ T5938] usb 6-1: Manufacturer: syz [ 562.357442][ T5938] usb 6-1: SerialNumber: syz [ 562.376846][ T5938] usb 6-1: config 0 descriptor?? [ 562.702947][T11624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.719835][T11624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.092926][T11624] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.111031][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.129392][T11651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.183729][T11624] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.220905][T11651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.399077][T11650] bridge0: entered allmulticast mode [ 563.542865][ T5938] qmi_wwan 6-1:0.0: probe with driver qmi_wwan failed with error -22 [ 563.597119][ T5938] usb 6-1: USB disconnect, device number 43 [ 563.723575][T11659] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 564.604197][T11671] /dev/nullb0: Can't open blockdev [ 564.991273][ T9] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 565.149439][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1413'. [ 565.168945][T11662] ceph: No mds server is up or the cluster is laggy [ 565.390319][T11683] netlink: 'syz.6.1417': attribute type 12 has an invalid length. [ 566.314094][T11681] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 569.049870][T11701] netlink: 18 bytes leftover after parsing attributes in process `syz.3.1420'. [ 569.473005][ T9] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 569.693193][ T9] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 569.721477][ T9] usb 6-1: config 0 has no interface number 0 [ 569.727643][ T9] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 569.830772][ T9] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 569.839884][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.882550][ T9] usb 6-1: Product: syz [ 569.886794][ T9] usb 6-1: Manufacturer: syz [ 569.904333][ T9] usb 6-1: SerialNumber: syz [ 569.926631][ T9] usb 6-1: config 0 descriptor?? [ 570.065471][T11707] netlink: 18 bytes leftover after parsing attributes in process `syz.2.1422'. [ 570.353877][T11699] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 570.467340][ T9] usb-storage 6-1:0.20: USB Mass Storage device detected [ 570.506214][ T9] usb-storage 6-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 570.583001][T11709] syz.3.1421: attempt to access beyond end of device [ 570.583001][T11709] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 570.596203][T11709] SQUASHFS error: Failed to read block 0x0: -5 [ 570.603060][T11709] unable to read squashfs_super_block [ 570.737712][ T9] scsi host1: usb-storage 6-1:0.20 [ 570.775280][ T9] usb 6-1: USB disconnect, device number 44 [ 571.975752][T11739] netlink: 18 bytes leftover after parsing attributes in process `syz.3.1429'. [ 572.621227][T11747] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1431'. [ 572.663969][T11749] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1431'. [ 573.172536][T11764] netlink: 'syz.3.1435': attribute type 11 has an invalid length. [ 573.325805][T11764] netlink: 'syz.3.1435': attribute type 11 has an invalid length. [ 573.334353][T11764] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1435'. [ 574.734249][T11773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 576.983961][T11809] /dev/nullb0: Can't open blockdev [ 577.620930][ T5828] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 577.750766][ T5828] usb 4-1: device descriptor read/64, error -71 [ 577.990767][ T5828] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 578.142039][ T5828] usb 4-1: device descriptor read/64, error -71 [ 578.264892][ T5828] usb usb4-port1: attempt power cycle [ 578.276928][T11823] syz.2.1452: attempt to access beyond end of device [ 578.276928][T11823] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 578.290771][T11823] SQUASHFS error: Failed to read block 0x0: -5 [ 578.300039][T11823] unable to read squashfs_super_block [ 578.610908][ T5828] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 578.706575][ T5828] usb 4-1: device descriptor read/8, error -71 [ 578.970799][ T5828] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 579.001905][ T5828] usb 4-1: device descriptor read/8, error -71 [ 579.020812][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 579.160601][ T5828] usb usb4-port1: unable to enumerate USB device [ 580.024300][ T5984] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 580.403235][ T5984] usb 7-1: device descriptor read/64, error -71 [ 580.650774][ T5984] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 580.770509][T11838] wg1 speed is unknown, defaulting to 1000 [ 580.821494][ T5984] usb 7-1: device descriptor read/64, error -71 [ 580.934155][ T5984] usb usb7-port1: attempt power cycle [ 581.750779][ T5984] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 581.777128][ T5984] usb 7-1: device descriptor read/8, error -71 [ 581.807839][ T30] audit: type=1326 audit(2000000262.967:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11856 comm="syz.7.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5938e9a9 code=0x7ffc0000 [ 581.873017][ T30] audit: type=1326 audit(2000000262.987:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11856 comm="syz.7.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5938e9a9 code=0x7ffc0000 [ 581.900601][ T30] audit: type=1326 audit(2000000263.007:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11856 comm="syz.7.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b5938e9a9 code=0x7ffc0000 [ 581.937543][ T30] audit: type=1326 audit(2000000263.007:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11856 comm="syz.7.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5938e9a9 code=0x7ffc0000 [ 582.021338][ T5984] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 582.037922][ T30] audit: type=1326 audit(2000000263.007:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11856 comm="syz.7.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5938e9a9 code=0x7ffc0000 [ 582.067460][ T30] audit: type=1326 audit(2000000263.007:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11856 comm="syz.7.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b5938e9a9 code=0x7ffc0000 [ 582.093781][ T30] audit: type=1326 audit(2000000263.007:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11856 comm="syz.7.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5938e9a9 code=0x7ffc0000 [ 582.118925][ T5984] usb 7-1: device descriptor read/8, error -71 [ 582.127525][ T30] audit: type=1326 audit(2000000263.007:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11856 comm="syz.7.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5938e9a9 code=0x7ffc0000 [ 582.169808][ T30] audit: type=1326 audit(2000000263.007:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11856 comm="syz.7.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1b5938e9a9 code=0x7ffc0000 [ 582.194199][ T30] audit: type=1326 audit(2000000263.007:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11856 comm="syz.7.1462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5938e9a9 code=0x7ffc0000 [ 582.230878][ T5972] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 582.231339][ T5984] usb usb7-port1: unable to enumerate USB device [ 582.385309][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 68, changing to 10 [ 582.414537][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.428666][ T5972] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 582.494703][T11871] netlink: 18 bytes leftover after parsing attributes in process `syz.6.1466'. [ 582.660742][ T5972] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 582.842791][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.051894][ T5972] usb 4-1: config 0 descriptor?? [ 584.990130][ T5972] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 585.388957][T11885] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 585.402927][ T5972] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 585.666470][ T5828] usb 4-1: USB disconnect, device number 82 [ 585.829731][ T5972] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 586.012264][ T5972] usb 6-1: Using ep0 maxpacket: 8 [ 586.034915][ T5972] usb 6-1: unable to get BOS descriptor or descriptor too short [ 586.055133][ T5972] usb 6-1: config 1 has an invalid interface number: 4 but max is 2 [ 586.110917][ T5972] usb 6-1: config 1 has no interface number 1 [ 586.141101][ T5972] usb 6-1: too many endpoints for config 1 interface 4 altsetting 16: 195, using maximum allowed: 30 [ 586.229116][ T5972] usb 6-1: config 1 interface 4 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 195 [ 586.248440][ T5972] usb 6-1: config 1 interface 4 has no altsetting 0 [ 586.258794][ T5972] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 586.485676][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.500766][ T5972] usb 6-1: Product: syz [ 586.510730][ T5972] usb 6-1: Manufacturer: syz [ 586.520733][ T5972] usb 6-1: SerialNumber: syz [ 587.959977][T11914] netlink: 18 bytes leftover after parsing attributes in process `syz.6.1475'. [ 588.012862][ T5972] usb 6-1: 2:1 : sample bitwidth 247 in over sample bytes 4 [ 588.032778][ T5972] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 588.103305][ T5972] hub 6-1:1.4: Invalid hub with more than one config or interface [ 588.107719][T11923] netlink: 18 bytes leftover after parsing attributes in process `syz.2.1477'. [ 588.130784][ T5972] hub 6-1:1.4: probe with driver hub failed with error -22 [ 588.164595][ T5972] usb 6-1: USB disconnect, device number 45 [ 588.421163][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 590.023935][T11941] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1482'. [ 590.996533][T11943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 591.034737][T11943] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1484'. [ 591.479725][T11953] FAULT_INJECTION: forcing a failure. [ 591.479725][T11953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.505314][T11953] CPU: 0 UID: 0 PID: 11953 Comm: syz.5.1487 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 591.505344][T11953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 591.505372][T11953] Call Trace: [ 591.505381][T11953] [ 591.505389][T11953] dump_stack_lvl+0x189/0x250 [ 591.505412][T11953] ? __pfx____ratelimit+0x10/0x10 [ 591.505426][T11953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 591.505440][T11953] ? __pfx__printk+0x10/0x10 [ 591.505455][T11953] ? __might_fault+0xb0/0x130 [ 591.505475][T11953] should_fail_ex+0x414/0x560 [ 591.505491][T11953] _copy_from_user+0x2d/0xb0 [ 591.505509][T11953] kvm_vm_ioctl+0x6e0/0xc60 [ 591.505523][T11953] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 591.505538][T11953] ? do_vfs_ioctl+0xf37/0x1990 [ 591.505557][T11953] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 591.505578][T11953] ? kasan_quarantine_put+0xdd/0x220 [ 591.505602][T11953] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 591.505617][T11953] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 591.505629][T11953] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 591.505641][T11953] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 591.505654][T11953] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 591.505671][T11953] ? vfs_write+0x8d8/0xa90 [ 591.505690][T11953] ? __asan_memset+0x22/0x50 [ 591.505706][T11953] ? smack_file_ioctl+0x302/0x340 [ 591.505719][T11953] ? __pfx_smack_file_ioctl+0x10/0x10 [ 591.505737][T11953] ? ksys_write+0x1e1/0x250 [ 591.505753][T11953] ? bpf_lsm_file_ioctl+0x9/0x20 [ 591.505767][T11953] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 591.505790][T11953] __se_sys_ioctl+0xfc/0x170 [ 591.505809][T11953] do_syscall_64+0xfa/0x3b0 [ 591.505821][T11953] ? lockdep_hardirqs_on+0x9c/0x150 [ 591.505834][T11953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.505846][T11953] ? clear_bhb_loop+0x60/0xb0 [ 591.505861][T11953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.505872][T11953] RIP: 0033:0x7f6f5ed8e9a9 [ 591.505885][T11953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.505896][T11953] RSP: 002b:00007f6f5fc01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 591.505911][T11953] RAX: ffffffffffffffda RBX: 00007f6f5efb5fa0 RCX: 00007f6f5ed8e9a9 [ 591.505920][T11953] RDX: 00002000000002c0 RSI: 000000004040ae79 RDI: 0000000000000004 [ 591.505928][T11953] RBP: 00007f6f5fc01090 R08: 0000000000000000 R09: 0000000000000000 [ 591.505935][T11953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.505942][T11953] R13: 0000000000000000 R14: 00007f6f5efb5fa0 R15: 00007ffcb6a81e38 [ 591.505961][T11953] [ 593.486010][T11986] syz.2.1495: attempt to access beyond end of device [ 593.486010][T11986] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 593.499625][T11986] SQUASHFS error: Failed to read block 0x0: -5 [ 593.506559][T11986] unable to read squashfs_super_block [ 594.270928][T11992] netlink: 18 bytes leftover after parsing attributes in process `syz.6.1497'. [ 594.411380][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1499'. [ 594.843078][T11998] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1501'. [ 594.923751][T11998] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1501'. [ 595.251327][T12011] netlink: 18 bytes leftover after parsing attributes in process `syz.7.1504'. [ 595.776786][T12019] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1507'. [ 596.399657][T12021] syz.5.1506: attempt to access beyond end of device [ 596.399657][T12021] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 596.415574][T12021] SQUASHFS error: Failed to read block 0x0: -5 [ 596.423589][T12021] unable to read squashfs_super_block [ 597.550294][T12033] syz.5.1510: attempt to access beyond end of device [ 597.550294][T12033] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 597.566184][T12033] SQUASHFS error: Failed to read block 0x0: -5 [ 597.573035][T12033] unable to read squashfs_super_block [ 597.607648][ T9820] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 597.955459][ T9820] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 597.966958][ T9820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.016312][ T9820] usb 7-1: Product: syz [ 598.049480][ T9820] usb 7-1: Manufacturer: syz [ 598.066376][ T9820] usb 7-1: SerialNumber: syz [ 598.085220][ T9820] usb 7-1: config 0 descriptor?? [ 598.110145][ T9820] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 025 [ 598.439511][T12042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.215873][T12049] wg1 speed is unknown, defaulting to 1000 [ 600.310194][ T9820] (null): failure reading functionality [ 600.323139][ T9820] i2c i2c-1: failure reading functionality [ 600.360215][ T9820] i2c i2c-1: connected i2c-tiny-usb device [ 600.372795][ T9820] usb 7-1: USB disconnect, device number 25 [ 601.185384][T12078] netlink: 18 bytes leftover after parsing attributes in process `syz.2.1522'. [ 601.295086][T12081] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1525'. [ 601.730976][ T5972] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 601.911548][ T5972] usb 7-1: Using ep0 maxpacket: 8 [ 601.926386][ T5972] usb 7-1: config 5 has an invalid interface number: 121 but max is 2 [ 601.953433][ T5972] usb 7-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 601.976575][ T5972] usb 7-1: config 5 has an invalid interface number: 114 but max is 2 [ 602.050846][ T5972] usb 7-1: config 5 has an invalid interface number: 90 but max is 2 [ 602.061169][ T5972] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 602.072396][ T5972] usb 7-1: config 5 has no interface number 0 [ 602.078623][ T5972] usb 7-1: config 5 has no interface number 1 [ 602.085909][ T5972] usb 7-1: config 5 has no interface number 2 [ 602.092912][ T5972] usb 7-1: config 5 interface 121 altsetting 4 endpoint 0x1 has invalid maxpacket 1289, setting to 64 [ 602.105260][ T5972] usb 7-1: config 5 interface 121 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 602.120329][ T5972] usb 7-1: config 5 interface 121 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 602.134488][ T5972] usb 7-1: config 5 interface 114 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 602.147899][ T5972] usb 7-1: config 5 interface 90 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 602.159262][ T5972] usb 7-1: config 5 interface 90 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 602.171156][ T5972] usb 7-1: config 5 interface 90 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 13 [ 602.185345][ T5972] usb 7-1: config 5 interface 121 has no altsetting 0 [ 602.192649][ T5972] usb 7-1: config 5 interface 114 has no altsetting 0 [ 602.199772][ T5972] usb 7-1: config 5 interface 90 has no altsetting 0 [ 602.211606][ T5972] usb 7-1: New USB device found, idVendor=0403, idProduct=8348, bcdDevice=b6.5b [ 602.222221][ T5972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.230252][ T5972] usb 7-1: Product: 鑳浄鲝皼녷৷䌜㙏軮䚲ੜ惴悴ⓓኖ◁䣎拝ﻜⳡ者尷秏큂㾨軄剐ᔍ豛జ飛᮰伜訠桰箷떔癉ߦ煅牖ᩧ䫄⣃彷牗༮춲鋊ᘋ껎빦骘㍋떈ꅻ⮌䎼誳ⓒ≞넇䒭輥킑桍薺쩧뛱毢瓠ͪ隷ဖꐴ鄪ぴ폳뎩矷ퟝ겪衷ꏢ뚺筛茄푖ᵨ╡퍽0또뙈妔말此麃栠ꓭ쫎鲄퇧ᒶ坵晚墘唕 [ 602.267508][ T5972] usb 7-1: Manufacturer: 몖극ҕ웸欿誔⻹㤧ݙ䝝鳉䰙Ꙇ씑櫾깅襣䢹⍂벒⃈ffiᴏⵋ濏ₜ╋쵐⛪荻䑮鎊Ṑﰍ㍲䠺陮끅矕핐蔶뒸镫䤍㔱Ꝉᙗ蔮ܠ掋ぽ䔐ᱎ덤㋳詪癛ꖍ뉀⍚戾ᴜ컶쉨৚⹰ڎ꥛⍭ꭺ먞⠨㫪⠕恀׬㐉啠⒞⋁ꁃ꒭퀫泍슚毌㣡컱킝歉엵穮쬲ꊧ쨖䅀⪳ [ 602.302845][ T5972] usb 7-1: SerialNumber: syz [ 602.337645][ T5972] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 602.347230][ T5972] usb 7-1: no configuration chosen from 1 choice [ 602.354505][ T5828] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 602.513112][ T5828] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.523964][ T5828] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 602.538136][ T5828] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 602.547753][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.581793][ T5828] usb 6-1: config 0 descriptor?? [ 602.591351][ T5828] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 602.924403][T12100] team_slave_0: entered promiscuous mode [ 602.930713][T12100] team_slave_1: entered promiscuous mode [ 602.948644][T12100] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 602.957072][T12100] team0: Device macvtap0 is already an upper device of the team interface [ 602.969613][T12100] team_slave_0: left promiscuous mode [ 602.975140][T12100] team_slave_1: left promiscuous mode [ 603.015109][T12102] 9pnet_fd: Insufficient options for proto=fd [ 603.361227][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1533'. [ 604.105644][T12116] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 604.113923][T12116] macvlan2: entered allmulticast mode [ 604.119674][T12116] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 604.130141][T12116] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 604.137625][T12116] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 604.164386][ T5828] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 604.339942][ T5828] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 604.359432][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.378945][T12122] [U] Ϧ:Kț.G8X4QTZ.|| [ 604.379618][ T5828] usb 3-1: config 0 descriptor?? [ 604.404269][ T5828] cp210x 3-1:0.0: cp210x converter detected [ 604.494371][ T5972] usb 7-1: USB disconnect, device number 26 [ 604.644220][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 604.644239][ T30] audit: type=1800 audit(2000000285.807:171): pid=12114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1535" name="file1" dev="tmpfs" ino=1796 res=0 errno=0 [ 604.676768][ T43] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 604.700851][ T30] audit: type=1800 audit(2000000285.807:172): pid=12114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1535" name="file1" dev="tmpfs" ino=1796 res=0 errno=0 [ 604.738482][ T5828] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 604.750187][ T5828] cp210x 3-1:0.0: querying part number failed [ 604.756230][ T30] audit: type=1800 audit(2000000285.807:173): pid=12114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1535" name="file1" dev="tmpfs" ino=1796 res=0 errno=0 [ 604.777529][ T5828] usb 3-1: cp210x converter now attached to ttyUSB0 [ 604.804368][ T5828] usb 3-1: USB disconnect, device number 73 [ 604.815195][ T30] audit: type=1800 audit(2000000285.807:174): pid=12114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1535" name="file1" dev="tmpfs" ino=1796 res=0 errno=0 [ 604.837821][ T5828] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 604.850838][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 604.857274][ T30] audit: type=1800 audit(2000000285.807:175): pid=12114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1535" name="file1" dev="tmpfs" ino=1796 res=0 errno=0 [ 604.864212][ T43] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 604.908927][ T5828] cp210x 3-1:0.0: device disconnected [ 604.917251][ T5972] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 604.972560][ T43] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 605.014085][ T30] audit: type=1800 audit(2000000285.807:176): pid=12114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1535" name="file1" dev="tmpfs" ino=1796 res=0 errno=0 [ 605.075828][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 605.136536][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.147118][ T5972] usb 7-1: Using ep0 maxpacket: 16 [ 605.149611][ T30] audit: type=1800 audit(2000000285.807:177): pid=12114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1535" name="file1" dev="tmpfs" ino=1796 res=0 errno=0 [ 605.224919][ T43] usb 4-1: Product: Ё [ 605.239386][ T43] usb 4-1: Manufacturer: ည [ 605.275658][ T5972] usb 7-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 605.296551][ T43] usb 4-1: SerialNumber: syz [ 605.315082][ T5972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.368897][ T5972] usb 7-1: Product: syz [ 605.386468][ T5972] usb 7-1: Manufacturer: syz [ 605.481508][ T5972] usb 7-1: SerialNumber: syz [ 605.606875][ T9820] usb 6-1: USB disconnect, device number 46 [ 605.616748][ T30] audit: type=1800 audit(2000000285.807:178): pid=12114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1535" name="file1" dev="tmpfs" ino=1796 res=0 errno=0 [ 605.617699][ T5972] usb 7-1: config 0 descriptor?? [ 605.684321][ T30] audit: type=1800 audit(2000000285.807:179): pid=12114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1535" name="file1" dev="tmpfs" ino=1796 res=0 errno=0 [ 605.730059][ T30] audit: type=1800 audit(2000000285.807:180): pid=12114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1535" name="file1" dev="tmpfs" ino=1796 res=0 errno=0 [ 605.909923][ T5992] udevd[5992]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.918242][T12126] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1539'. [ 606.003935][ T43] cdc_ncm 4-1:1.0: bind() failure [ 606.062094][ T43] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 606.067376][T12144] netlink: 18 bytes leftover after parsing attributes in process `syz.2.1542'. [ 606.072430][ T43] cdc_ncm 4-1:1.1: bind() failure [ 606.155450][ T43] usb 4-1: USB disconnect, device number 83 [ 606.169714][ T9820] usb 7-1: USB disconnect, device number 27 [ 606.600767][ T3472] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 606.757318][ T3472] usb 6-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 606.775358][ T3472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.785459][ T3472] usb 6-1: Product: syz [ 606.789785][ T3472] usb 6-1: Manufacturer: syz [ 606.798691][ T3472] usb 6-1: SerialNumber: syz [ 606.831647][ T3472] usb 6-1: config 0 descriptor?? [ 606.857434][ T3472] gspca_main: touptek-2.14.0 probing 0547:6801 [ 607.045225][ T3472] usb 6-1: USB disconnect, device number 47 [ 607.307370][T12167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.335397][T12167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.551070][ T5984] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 607.859441][ T5984] usb 4-1: device descriptor read/64, error -71 [ 608.247399][T12187] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1553'. [ 608.455168][ T5984] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 608.515218][ T9] hid (null): global environment stack underflow [ 608.572150][ T9] hid (null): unknown global tag 0xd [ 608.587509][T12192] mkiss: ax0: crc mode is auto. [ 608.623649][ T9] hid (null): report_id 7862 is invalid [ 608.629286][ T9] hid (null): report_id 10472 is invalid [ 608.675686][ T5984] usb 4-1: device descriptor read/64, error -71 [ 608.694870][T12195] ALSA: mixer_oss: invalid OSS volume '' [ 608.699745][ T9] hid (null): unknown global tag 0xe [ 608.718492][ T9] hid (null): report_id 0 is invalid [ 608.746776][ T9] hid-generic 0000:0007:0008.0014: unknown main item tag 0x5 [ 608.770659][ T9] hid-generic 0000:0007:0008.0014: unknown main item tag 0x7 [ 608.778618][ T9] hid-generic 0000:0007:0008.0014: unknown main item tag 0x7 [ 608.792095][ T9] hid-generic 0000:0007:0008.0014: unknown main item tag 0x5 [ 608.799623][ T9] hid-generic 0000:0007:0008.0014: unknown main item tag 0x1 [ 608.808878][ T9] hid-generic 0000:0007:0008.0014: unknown main item tag 0x0 [ 608.817275][ T5984] usb usb4-port1: attempt power cycle [ 608.822857][ T9] hid-generic 0000:0007:0008.0014: unknown main item tag 0x2 [ 608.831616][ T9] hid-generic 0000:0007:0008.0014: global environment stack underflow [ 608.839869][ T9] hid-generic 0000:0007:0008.0014: item 0 2 1 11 parsing failed [ 608.848293][ T9] hid-generic 0000:0007:0008.0014: probe with driver hid-generic failed with error -22 [ 609.297800][ T5984] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 609.342698][ T5984] usb 4-1: device descriptor read/8, error -71 [ 609.590782][ T5984] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 609.632389][ T5984] usb 4-1: device descriptor read/8, error -71 [ 609.806036][ T5984] usb usb4-port1: unable to enumerate USB device [ 610.804234][T12223] overlayfs: statfs failed on './file0' [ 611.031421][T12232] netlink: 'syz.2.1566': attribute type 32 has an invalid length. [ 611.070985][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 611.071005][ T30] audit: type=1800 audit(2000000292.217:182): pid=12230 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1565" name="/" dev="9p" ino=9295429631019909122 res=0 errno=0 [ 611.158991][T12237] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1568'. [ 611.317790][T12239] ubi31: attaching mtd0 [ 611.324573][T12239] ubi31 error: ubi_attach_mtd_dev: bad VID header (12288) or data offsets (12352) [ 611.340755][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 611.380822][ T5972] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 611.563123][ T5972] usb 6-1: Using ep0 maxpacket: 16 [ 611.580876][ T43] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 611.593724][ T5972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 38593, setting to 64 [ 611.623268][ T5972] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 611.656879][ T5972] usb 6-1: New USB device found, idVendor=0925, idProduct=001d, bcdDevice= 0.00 [ 611.677186][ T5972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.701931][ T5972] usb 6-1: config 0 descriptor?? [ 611.715998][ T5972] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 611.751633][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 611.761053][ T43] usb 4-1: no configurations [ 611.766136][ T43] usb 4-1: can't read configurations, error -22 [ 611.933312][ T5972] usb 6-1: USB disconnect, device number 48 [ 611.940935][ T43] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 612.029961][T12254] /dev/nullb0: Can't open blockdev [ 612.110821][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 612.156479][ T43] usb 4-1: no configurations [ 612.164375][ T43] usb 4-1: can't read configurations, error -22 [ 612.174297][ T43] usb usb4-port1: attempt power cycle [ 612.520919][ T43] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 612.545590][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 612.546303][ T43] usb 4-1: no configurations [ 612.546316][ T43] usb 4-1: can't read configurations, error -22 [ 612.611387][ T9820] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 612.681197][ T43] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 612.743736][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 612.748736][T12272] netlink: 'syz.6.1578': attribute type 1 has an invalid length. [ 612.752746][ T43] usb 4-1: no configurations [ 612.773667][ T43] usb 4-1: can't read configurations, error -22 [ 612.780791][ T9820] usb 3-1: Using ep0 maxpacket: 8 [ 612.783433][ T43] usb usb4-port1: unable to enumerate USB device [ 612.796657][ T9820] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 612.808747][ T9820] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 612.825657][ T9820] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 612.839046][ T9820] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 612.849341][T12272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 612.856227][ T9820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.864982][ T9820] usb 3-1: Product: syz [ 612.873114][ T9820] usb 3-1: Manufacturer: syz [ 612.878065][ T9820] usb 3-1: SerialNumber: syz [ 613.311347][T12275] syz.5.1577: attempt to access beyond end of device [ 613.311347][T12275] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 613.327919][T12275] SQUASHFS error: Failed to read block 0x0: -5 [ 613.338654][T12275] unable to read squashfs_super_block [ 613.448185][ T9820] adutux 3-1:168.0: interrupt endpoints not found [ 613.461379][ T9820] usb 3-1: USB disconnect, device number 74 [ 614.459269][T12297] vivid-000: disconnect [ 614.480191][T12296] devpts: Bad value for 'max' [ 614.495198][T12294] vivid-000: reconnect [ 614.622549][ T43] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 614.807209][ T43] usb 3-1: config 160 has an invalid interface number: 200 but max is 0 [ 614.845785][ T30] audit: type=1326 audit(2000000296.007:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12305 comm="syz.3.1586" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d0e58e9a9 code=0x0 [ 614.890134][ T43] usb 3-1: config 160 has no interface number 0 [ 614.912922][ T43] usb 3-1: config 160 interface 200 has no altsetting 0 [ 614.927613][ T43] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 614.941919][ T5902] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 614.954353][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.964443][ T43] usb 3-1: Product: syz [ 614.969575][ T43] usb 3-1: Manufacturer: syz [ 615.114142][ T5902] usb 6-1: Using ep0 maxpacket: 32 [ 615.135164][T12309] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1587'. [ 615.158880][ T5902] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 615.184962][ T5902] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 615.186911][ T43] usb 3-1: SerialNumber: syz [ 615.207281][T12307] ALSA: mixer_oss: invalid OSS volume '' [ 615.244171][ T5902] usb 6-1: config 0 interface 0 has no altsetting 0 [ 615.268085][ T5902] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e [ 615.287397][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.311687][ T5902] usb 6-1: Product: syz [ 615.316012][ T5902] usb 6-1: Manufacturer: syz [ 615.320844][ T5902] usb 6-1: SerialNumber: syz [ 615.348054][ T5902] usb 6-1: config 0 descriptor?? [ 615.397625][T12314] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 615.431339][ T5972] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 615.513468][T12316] pimreg: entered allmulticast mode [ 615.531355][ T5972] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 615.551087][ T9820] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 615.646055][T11614] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 615.703052][ T9820] usb 7-1: device descriptor read/64, error -71 [ 616.779661][ T5902] gs_usb 6-1:0.0: Couldn't get device config: (err=-110) [ 616.817072][ T8997] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 616.827637][ T5902] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -110 [ 616.841117][ T8997] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 616.849064][ T9820] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 616.901613][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 616.919671][T12320] netlink: 'syz.5.1585': attribute type 10 has an invalid length. [ 616.928044][T12320] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1585'. [ 617.042384][ T9820] usb 7-1: device descriptor read/64, error -71 [ 617.067820][ T43] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 617.154679][ T43] usb 3-1: MIDIStreaming interface descriptor not found [ 617.912645][T12331] netlink: 18 bytes leftover after parsing attributes in process `syz.7.1593'. [ 618.192035][ T9820] usb usb7-port1: attempt power cycle [ 618.212788][ T43] usb 3-1: USB disconnect, device number 75 [ 618.369565][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 618.617207][T12339] wg1 speed is unknown, defaulting to 1000 [ 619.936317][T12359] program syz.6.1599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 621.180934][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 621.345029][ T30] audit: type=1326 audit(2000000302.507:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12365 comm="syz.3.1602" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d0e58e9a9 code=0x0 [ 621.548039][T12368] ALSA: mixer_oss: invalid OSS volume '' [ 621.795185][T12376] fuse: Bad value for 'user_id' [ 621.827008][T12376] fuse: Bad value for 'user_id' [ 622.136134][ T5972] usb 6-1: USB disconnect, device number 49 [ 622.862913][T12390] netlink: 'syz.3.1609': attribute type 4 has an invalid length. [ 622.872769][T12390] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1609'. [ 622.881789][T12390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1609'. [ 622.891080][T12390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1609'. [ 624.502328][T12421] netlink: 18 bytes leftover after parsing attributes in process `syz.2.1618'. [ 624.560949][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.971815][ T43] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 627.006853][T12462] loop7: detected capacity change from 0 to 7 [ 627.020725][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.030189][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 627.039388][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.048640][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 627.056781][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.065994][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 627.080867][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.090048][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 627.101260][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.110439][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 627.121130][ T43] usb 7-1: device descriptor read/64, error -71 [ 627.128206][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.137507][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 627.146239][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.155463][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 627.164534][T11246] ldm_validate_partition_table(): Disk read failed. [ 627.173025][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.182225][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 627.190386][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.199650][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 627.208649][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 627.217855][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 627.229825][T11246] Dev loop7: unable to read RDB block 0 [ 627.236753][T11246] loop7: unable to read partition table [ 627.243217][T11246] loop7: partition table beyond EOD, truncated [ 627.345232][T12467] usb usb8: usbfs: process 12467 (syz.7.1632) did not claim interface 0 before use [ 627.364292][ T43] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 627.528104][T12470] netlink: 18 bytes leftover after parsing attributes in process `syz.2.1633'. [ 627.530774][ T43] usb 7-1: device descriptor read/64, error -71 [ 627.742826][ T43] usb usb7-port1: attempt power cycle [ 628.156683][ T43] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 628.554931][ T43] usb 7-1: device descriptor read/8, error -71 [ 628.788447][T12473] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 628.879411][ T30] audit: type=1326 audit(2000000310.017:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12475 comm="syz.2.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7910d8e9a9 code=0x7ffc0000 [ 629.623717][ T43] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 629.651723][ T43] usb 7-1: device descriptor read/8, error -71 [ 629.701032][ T30] audit: type=1326 audit(2000000310.017:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12475 comm="syz.2.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7910d8e9a9 code=0x7ffc0000 [ 629.770111][ T43] usb usb7-port1: unable to enumerate USB device [ 629.796982][ T30] audit: type=1326 audit(2000000310.017:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12475 comm="syz.2.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7910d8e9a9 code=0x7ffc0000 [ 629.983999][ T30] audit: type=1326 audit(2000000310.017:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12475 comm="syz.2.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7910d8e9a9 code=0x7ffc0000 [ 630.181267][ T30] audit: type=1326 audit(2000000310.017:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12475 comm="syz.2.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7910d8e9a9 code=0x7ffc0000 [ 630.302140][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 630.349137][ T30] audit: type=1326 audit(2000000310.017:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12475 comm="syz.2.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f7910d8e9a9 code=0x7ffc0000 [ 630.375137][ T30] audit: type=1326 audit(2000000310.017:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12475 comm="syz.2.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7910d8e9a9 code=0x7ffc0000 [ 630.479949][ T30] audit: type=1326 audit(2000000310.017:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12475 comm="syz.2.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7910d8e9a9 code=0x7ffc0000 [ 630.536581][ T30] audit: type=1326 audit(2000000310.017:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12475 comm="syz.2.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7910d8e9a9 code=0x7ffc0000 [ 630.571251][T12502] netlink: 'syz.2.1640': attribute type 6 has an invalid length. [ 630.630276][ T30] audit: type=1326 audit(2000000310.017:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12475 comm="syz.2.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7910d8e9a9 code=0x7ffc0000 [ 632.103748][T12532] netlink: 'syz.6.1648': attribute type 1 has an invalid length. [ 632.112138][ T5902] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 632.127955][T12533] syz.5.1649 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 632.419558][ T5902] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 632.449280][ T5902] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.470536][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0 [ 632.477289][ T5902] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 632.494882][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.832151][ T5902] usb 3-1: config 0 descriptor?? [ 633.000148][T12543] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1651'. [ 633.467879][ T5902] usbhid 3-1:0.0: can't add hid device: -71 [ 633.474080][ T5902] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 633.518569][ T5902] usb 3-1: USB disconnect, device number 76 [ 634.441024][ T5902] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 634.461663][T12561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 634.512363][T12560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 634.699805][ T5902] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.724855][T12564] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1658'. [ 634.750309][ T5902] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 634.791476][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.820290][ T5902] usb 4-1: Product: syz [ 634.846326][ T5902] usb 4-1: Manufacturer: syz [ 634.877498][ T5902] usb 4-1: SerialNumber: syz [ 635.570116][T12558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.648409][T12558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.731157][ T43] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 635.910110][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.941013][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 635.949982][ T43] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 636.017417][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.256404][ T43] usb 3-1: config 0 descriptor?? [ 636.868136][ T43] Bluetooth: Can't get version to change to load ram patch err [ 636.876063][ T43] Bluetooth: Loading patch file failed [ 637.825492][ T43] ath3k 3-1:0.0: probe with driver ath3k failed with error -121 [ 637.871327][ T43] usb 3-1: USB disconnect, device number 77 [ 638.032410][ T5902] cdc_ncm 4-1:1.0: failed to get mac address [ 638.076360][ T5902] cdc_ncm 4-1:1.0: bind() failure [ 638.110894][ T5902] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 638.144642][ T5902] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 638.173538][ T5902] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 638.218070][ T5902] usb 4-1: USB disconnect, device number 92 [ 638.419400][T12602] netlink: 'syz.2.1668': attribute type 12 has an invalid length. [ 638.447670][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 638.447688][ T30] audit: type=1326 audit(2000000319.607:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12594 comm="syz.3.1666" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d0e58e9a9 code=0x0 [ 638.598864][T12607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.682309][T12607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.877047][ T5984] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 639.672939][T12615] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1673'. [ 641.141647][T12617] syz.2.1674: attempt to access beyond end of device [ 641.141647][T12617] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 641.170836][T12617] SQUASHFS error: Failed to read block 0x0: -5 [ 641.180768][T12617] unable to read squashfs_super_block [ 641.307668][T12630] netlink: 18 bytes leftover after parsing attributes in process `syz.3.1672'. [ 641.631450][ T10] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 641.823611][ T10] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 641.896121][ T10] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.916682][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 641.920779][ T5938] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 641.926921][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 641.947188][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.974606][ T10] usb 3-1: config 0 descriptor?? [ 642.080837][ T5938] usb 7-1: device descriptor read/64, error -71 [ 642.320738][ T5938] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 642.419450][ T10] hid (null): invalid report_size 65282 [ 642.499277][ T10] wacom 0003:056A:00CC.0015: invalid report_size 65282 [ 642.516900][ T10] wacom 0003:056A:00CC.0015: item 0 2 1 7 parsing failed [ 642.525678][ T10] wacom 0003:056A:00CC.0015: parse failed [ 642.532967][ T10] wacom 0003:056A:00CC.0015: probe with driver wacom failed with error -22 [ 642.540822][ T5938] usb 7-1: device descriptor read/64, error -71 [ 642.685607][ T5938] usb usb7-port1: attempt power cycle [ 642.714757][ T10] usb 3-1: USB disconnect, device number 78 [ 643.110851][ T5938] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 643.142793][ T5938] usb 7-1: device descriptor read/8, error -71 [ 643.347129][T12649] vxcan1: entered allmulticast mode [ 643.425314][ T5938] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 643.702943][ T5938] usb 7-1: device descriptor read/8, error -71 [ 643.705445][T12656] netlink: 'syz.2.1683': attribute type 10 has an invalid length. [ 643.733975][T12655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 643.790234][T12655] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 643.811360][ T5938] usb usb7-port1: unable to enumerate USB device [ 644.436386][T12665] netlink: 18 bytes leftover after parsing attributes in process `syz.3.1685'. [ 645.160672][ T5902] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 645.501353][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 645.516524][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.528293][ T5902] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 645.572248][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.640996][ T5902] usb 3-1: config 0 descriptor?? [ 646.224651][ T3472] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 646.300308][ T5902] input: HID 041e:3100 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:041E:3100.0016/input/input28 [ 646.380896][ T3472] usb 6-1: Using ep0 maxpacket: 32 [ 646.396537][ T3472] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 646.410055][ T3472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.423502][ T10] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 646.442596][ T3472] usb 6-1: config 0 descriptor?? [ 646.444231][ T5902] creative-sb0540 0003:041E:3100.0016: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.2-1/input0 [ 646.502718][T12667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.516356][T12667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.623246][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.637865][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.657730][ T5902] usb 3-1: USB disconnect, device number 79 [ 646.691637][ T3472] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 646.695488][ T10] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 646.734654][ T3472] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 646.759809][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 646.774783][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.786021][T12691] fido_id[12691]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 646.787757][ T10] usb 7-1: Product: syz [ 646.807053][ T10] usb 7-1: Manufacturer: syz [ 646.813073][ T10] usb 7-1: SerialNumber: syz [ 646.834233][ T3472] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 646.855163][ T3472] usb 6-1: media controller created [ 646.948881][ T3472] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 647.063381][T12684] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 647.130901][ T5902] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 647.305579][ T5902] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 647.327259][ T5902] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 647.341102][ T5902] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 647.382458][ T5902] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 647.392068][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.400271][ T5902] usb 3-1: Product: syz [ 647.406024][ T5902] usb 3-1: Manufacturer: syz [ 647.411085][ T5902] usb 3-1: SerialNumber: syz [ 647.426933][ T5902] hub 3-1:1.0: bad descriptor, ignoring hub [ 647.440715][ T5902] hub 3-1:1.0: probe with driver hub failed with error -5 [ 647.580812][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 647.650302][ T5902] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 80 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 647.689714][T12684] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 647.830817][ T3472] stb0899_attach: Driver disabled by Kconfig [ 647.836906][ T3472] az6027: no front-end attached [ 647.836906][ T3472] [ 647.847986][ T3472] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 647.886371][ T3472] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input29 [ 647.921426][ T5902] usb 3-1: reset high-speed USB device number 80 using dummy_hcd [ 647.931721][ T3472] dvb-usb: schedule remote query interval to 400 msecs. [ 647.935420][ T10] cdc_ncm 7-1:1.0: bind() failure [ 647.959669][ T3472] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 647.966865][ T10] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 647.989223][ T10] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 648.016868][ T10] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 648.056255][ T10] usb 7-1: USB disconnect, device number 39 [ 648.075887][ T3472] usb 6-1: USB disconnect, device number 50 [ 648.197561][ T3472] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 648.515008][ T5984] usb 3-1: USB disconnect, device number 80 [ 648.700484][ T5984] usblp0: removed [ 649.270705][T12701] 9pnet_fd: Insufficient options for proto=fd [ 649.397749][T12704] hfs: unable to load iocharset "io#harset" [ 649.687265][ T5984] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 650.090881][ T10] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 650.320829][ T5984] usb 4-1: Using ep0 maxpacket: 16 [ 650.337834][ T5984] usb 4-1: unable to get BOS descriptor or descriptor too short [ 650.358145][ T10] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 650.385705][ T5984] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 83, changing to 7 [ 650.407383][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.447696][ T5984] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 650.465051][ T10] usb 3-1: config 0 has no interface number 0 [ 650.501080][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.537820][ T10] usb 3-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 650.560713][ T5984] usb 4-1: Product: syz [ 650.564932][ T5984] usb 4-1: Manufacturer: syz [ 650.585145][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.600709][ T5984] usb 4-1: SerialNumber: syz [ 650.626825][ T10] usb 3-1: config 0 descriptor?? [ 650.664150][ T10] rndis_host 3-1:0.9: More than one union descriptor, skipping ... [ 650.683648][ T10] usb 3-1: bad CDC descriptors [ 650.692073][ T10] cdc_acm 3-1:0.9: More than one union descriptor, skipping ... [ 650.950897][T12707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.969084][T12710] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20004 [ 650.979379][T12707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.992656][ T5902] usb 3-1: USB disconnect, device number 81 [ 651.010161][T12707] smb3: Unexpected value for 'rdma' [ 651.015174][T12723] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1703'. [ 651.023826][ T5984] usb 4-1: 2:1 : unsupported format bits 0x80 [ 651.051898][ T5984] usb 4-1: USB disconnect, device number 94 [ 651.124636][T12725] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 651.141789][T12725] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 651.145441][ T5992] udevd[5992]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 651.175035][T12725] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 651.209117][T12725] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 651.227606][T12725] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 651.347839][T12724] wg1 speed is unknown, defaulting to 1000 [ 651.754940][T12738] syz.2.1706: attempt to access beyond end of device [ 651.754940][T12738] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 651.771203][T12738] SQUASHFS error: Failed to read block 0x0: -5 [ 651.778800][T12738] unable to read squashfs_super_block [ 652.224545][T12725] Bluetooth: hci0: command 0x0406 tx timeout [ 652.241022][ T9] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 652.401297][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 652.491513][ T9] usb 7-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 652.697136][T12748] fuse: Bad value for 'fd' [ 653.143344][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.381963][ T5838] Bluetooth: hci1: command tx timeout [ 653.389898][ T9] usb 7-1: config 0 descriptor?? [ 653.448707][T12724] chnl_net:caif_netlink_parms(): no params data found [ 653.776053][T12724] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.784866][T12724] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.793441][T12724] bridge_slave_0: entered allmulticast mode [ 653.803669][T12724] bridge_slave_0: entered promiscuous mode [ 653.814268][T12724] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.822266][T12724] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.829785][T12724] bridge_slave_1: entered allmulticast mode [ 653.839964][T12724] bridge_slave_1: entered promiscuous mode [ 654.161672][T12724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.341038][T12724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.175291][T12724] team0: Port device team_slave_0 added [ 655.186544][T12724] team0: Port device team_slave_1 added [ 655.482238][T12725] Bluetooth: hci1: command tx timeout [ 655.999670][T12724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.040034][T12724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.095127][T12724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.109186][T12724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.116847][T12724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.175498][T12724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.232852][T12789] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 656.240464][T12789] macvlan2: entered allmulticast mode [ 656.246027][T12789] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 656.257674][T12789] mac80211_hwsim hwsim14 wlan1: left allmulticast mode [ 656.264792][T12789] mac80211_hwsim hwsim14 wlan1: left promiscuous mode [ 656.311069][ T5984] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 656.402050][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 656.420398][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 656.512758][T12796] syz.3.1718: attempt to access beyond end of device [ 656.512758][T12796] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 656.526840][T12796] SQUASHFS error: Failed to read block 0x0: -5 [ 656.535653][T12796] unable to read squashfs_super_block [ 656.541456][ T5984] usb 3-1: device descriptor read/64, error -71 [ 656.647053][ T9] usb 7-1: USB disconnect, device number 40 [ 656.953320][T12724] hsr_slave_0: entered promiscuous mode [ 656.961321][ T5984] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 657.041773][T12724] hsr_slave_1: entered promiscuous mode [ 657.074585][T12724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 657.088674][T12724] Cannot create hsr debugfs directory [ 657.181149][ T5984] usb 3-1: device descriptor read/64, error -71 [ 657.290986][ T5984] usb usb3-port1: attempt power cycle [ 657.447904][T12803] netlink: 'syz.5.1719': attribute type 10 has an invalid length. [ 657.456076][T12803] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1719'. [ 657.533675][T12725] Bluetooth: hci1: command tx timeout [ 657.784285][ T5984] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 658.084279][ T5984] usb 3-1: device descriptor read/8, error -71 [ 658.189459][T12724] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 658.239242][T12724] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 658.277277][T12724] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 658.292638][T12724] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 658.431948][ T5984] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 658.470577][ T5984] usb 3-1: device descriptor read/8, error -71 [ 658.601098][ T5984] usb usb3-port1: unable to enumerate USB device [ 658.667984][T12724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.715446][T12724] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.753180][ T7858] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.760380][ T7858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.787364][ T8547] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.794593][ T8547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.894683][T12834] netlink: 18 bytes leftover after parsing attributes in process `syz.5.1726'. [ 659.357674][T12840] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 659.365158][T12840] macvlan2: entered allmulticast mode [ 659.370539][T12840] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 659.385381][T12840] mac80211_hwsim hwsim18 wlan1: left allmulticast mode [ 659.392618][T12840] mac80211_hwsim hwsim18 wlan1: left promiscuous mode [ 659.580849][T12725] Bluetooth: hci1: command tx timeout [ 659.750310][T12846] syz.2.1730: attempt to access beyond end of device [ 659.750310][T12846] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 659.813304][T12846] SQUASHFS error: Failed to read block 0x0: -5 [ 659.820276][T12846] unable to read squashfs_super_block [ 660.340830][ T5984] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 660.400711][ T5938] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 660.509545][T12724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.534382][ T5984] usb 3-1: config 64 has an invalid interface number: 53 but max is 2 [ 660.543582][ T5984] usb 3-1: config 64 has an invalid interface number: 132 but max is 2 [ 660.561134][ T5984] usb 3-1: config 64 has no interface number 1 [ 660.573182][ T5984] usb 3-1: config 64 has no interface number 2 [ 660.573303][ T5938] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 660.588680][ T5984] usb 3-1: config 64 interface 53 altsetting 128 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 660.588716][ T5984] usb 3-1: config 64 interface 53 altsetting 128 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 660.588745][ T5984] usb 3-1: config 64 interface 53 altsetting 128 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 660.588773][ T5984] usb 3-1: config 64 interface 53 altsetting 128 has a duplicate endpoint with address 0xA, skipping [ 660.588813][ T5984] usb 3-1: config 64 interface 0 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 660.588835][ T5984] usb 3-1: config 64 interface 0 altsetting 129 has an endpoint descriptor with address 0x34, changing to 0x4 [ 660.588861][ T5984] usb 3-1: config 64 interface 0 altsetting 129 endpoint 0x4 has invalid maxpacket 8143, setting to 64 [ 660.588888][ T5984] usb 3-1: config 64 interface 0 altsetting 129 has a duplicate endpoint with address 0xB, skipping [ 660.588910][ T5984] usb 3-1: config 64 interface 0 altsetting 129 has a duplicate endpoint with address 0xE, skipping [ 660.588934][ T5984] usb 3-1: config 64 interface 0 altsetting 129 has a duplicate endpoint with address 0xB, skipping [ 660.588955][ T5984] usb 3-1: config 64 interface 0 altsetting 129 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 660.600170][ T5938] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.769360][ T5938] usb 7-1: config 0 descriptor?? [ 660.779161][ T5984] usb 3-1: config 64 interface 0 altsetting 129 has a duplicate endpoint with address 0x83, skipping [ 660.804241][ T5938] cp210x 7-1:0.0: cp210x converter detected [ 660.812001][ T5984] usb 3-1: config 64 interface 0 altsetting 129 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 660.871210][ T5984] usb 3-1: config 64 interface 132 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 660.887450][ T5984] usb 3-1: config 64 interface 132 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 660.915231][ T5984] usb 3-1: config 64 interface 132 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 660.945544][ T5984] usb 3-1: config 64 interface 132 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 660.975944][ T5984] usb 3-1: config 64 interface 132 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 661.009142][T12853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.010623][ T5984] usb 3-1: config 64 interface 132 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 661.060934][ T5984] usb 3-1: config 64 interface 132 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 661.068323][T12853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.090625][ T5984] usb 3-1: config 64 interface 132 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 661.120740][ T5984] usb 3-1: config 64 interface 132 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 661.173563][ T5984] usb 3-1: config 64 interface 132 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 661.205004][ T5984] usb 3-1: config 64 interface 132 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 661.241542][ T5984] usb 3-1: config 64 interface 53 has no altsetting 0 [ 661.263515][ T5984] usb 3-1: config 64 interface 0 has no altsetting 0 [ 661.287067][ T5984] usb 3-1: config 64 interface 132 has no altsetting 0 [ 661.309150][ T5984] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=8b.50 [ 661.319121][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.336705][ T5984] usb 3-1: Product: syz [ 661.346974][ T5984] usb 3-1: Manufacturer: 뷑䨢㙚苹꜆擡힯夥䕕潠営澴ྞ꫰囗稈⧆䘔⥌攘㖈醾ꛓ賅昕爕퍇Ԓ雼௵摉柉↎ [ 661.391994][ T5984] usb 3-1: SerialNumber: syz [ 661.404356][ T5938] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 661.444153][ T5938] usb 7-1: cp210x converter now attached to ttyUSB0 [ 661.507240][T12724] veth0_vlan: entered promiscuous mode [ 661.549145][T12724] veth1_vlan: entered promiscuous mode [ 661.629401][ T5916] usb 7-1: USB disconnect, device number 41 [ 661.638501][ T5916] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 661.687682][ T5916] cp210x 7-1:0.0: device disconnected [ 661.714266][ T5984] aircable 3-1:64.0: aircable converter detected [ 661.758699][ T5984] usb 3-1: aircable converter now attached to ttyUSB0 [ 661.760486][T12724] veth0_macvtap: entered promiscuous mode [ 661.818382][ T5984] usb 3-1: USB disconnect, device number 86 [ 661.894340][T12724] veth1_macvtap: entered promiscuous mode [ 661.933374][ T5984] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 661.953702][ T5984] aircable 3-1:64.0: device disconnected [ 661.992845][T12724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.037512][T12724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.082945][T12724] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.098575][T12724] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.108253][T12724] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.695431][T12724] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.160433][T12872] XFS (nbd3): no-recovery mounts must be read-only. [ 663.183579][T12881] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 663.190757][T12881] macvlan2: entered allmulticast mode [ 663.196140][T12881] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 663.221167][T12881] mac80211_hwsim hwsim18 wlan1: left allmulticast mode [ 663.228136][T12881] mac80211_hwsim hwsim18 wlan1: left promiscuous mode [ 663.578462][T12883] binder: BINDER_SET_CONTEXT_MGR already set [ 663.587388][T12883] binder: 12880:12883 ioctl 4018620d 200000000100 returned -16 [ 663.711106][T12883] binder: BINDER_SET_CONTEXT_MGR already set [ 663.718296][T12883] binder: 12880:12883 ioctl 4018620d 200000000040 returned -16 [ 663.992717][T11614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.031339][T11614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.163209][T12889] syz.3.1741: attempt to access beyond end of device [ 664.163209][T12889] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 664.179344][T12889] SQUASHFS error: Failed to read block 0x0: -5 [ 664.187830][T12889] unable to read squashfs_super_block [ 664.651257][T12886] random: crng reseeded on system resumption [ 664.710975][ T8998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.759337][ T8998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.210311][T12908] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 666.223229][T12908] CPU: 0 UID: 0 PID: 12908 Comm: syz.5.1745 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 666.223266][T12908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 666.223279][T12908] Call Trace: [ 666.223289][T12908] [ 666.223300][T12908] dump_stack_lvl+0x189/0x250 [ 666.223335][T12908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 666.223360][T12908] ? __pfx__printk+0x10/0x10 [ 666.223389][T12908] ? __rcu_read_unlock+0x84/0xe0 [ 666.223412][T12908] ? kernfs_path_from_node+0x2c/0x260 [ 666.223435][T12908] ? kernfs_path_from_node+0x22c/0x260 [ 666.223453][T12908] ? kernfs_path_from_node+0x2c/0x260 [ 666.223478][T12908] sysfs_warn_dup+0x8e/0xa0 [ 666.223498][T12908] sysfs_do_create_link_sd+0xc0/0x110 [ 666.223519][T12908] device_add_class_symlinks+0x1cf/0x240 [ 666.223548][T12908] device_add+0x475/0xb50 [ 666.223575][T12908] wiphy_register+0x199a/0x26b0 [ 666.223613][T12908] ? __pfx_wiphy_register+0x10/0x10 [ 666.223633][T12908] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 666.223664][T12908] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 666.223693][T12908] ieee80211_register_hw+0x33e1/0x4120 [ 666.223734][T12908] ? ieee80211_register_hw+0x1471/0x4120 [ 666.223766][T12908] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 666.223794][T12908] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 666.223833][T12908] ? __hrtimer_setup+0x187/0x210 [ 666.223850][T12908] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 666.223880][T12908] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 666.223932][T12908] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 666.223953][T12908] ? trace_kmalloc+0x1f/0xd0 [ 666.223967][T12908] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 666.223984][T12908] ? kstrndup+0xbf/0x160 [ 666.224014][T12908] hwsim_new_radio_nl+0xea4/0x1b10 [ 666.224040][T12908] ? __pfx___nla_validate_parse+0x10/0x10 [ 666.224075][T12908] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 666.224101][T12908] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 666.224128][T12908] ? __nla_parse+0x40/0x60 [ 666.224151][T12908] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 666.224178][T12908] genl_family_rcv_msg_doit+0x215/0x300 [ 666.224203][T12908] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 666.224234][T12908] ? bpf_lsm_capable+0x9/0x20 [ 666.224254][T12908] ? security_capable+0x7e/0x2e0 [ 666.224290][T12908] genl_rcv_msg+0x60e/0x790 [ 666.224315][T12908] ? __pfx_genl_rcv_msg+0x10/0x10 [ 666.224332][T12908] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 666.224369][T12908] netlink_rcv_skb+0x205/0x470 [ 666.224393][T12908] ? __pfx_genl_rcv_msg+0x10/0x10 [ 666.224413][T12908] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 666.224455][T12908] ? down_read+0x1ad/0x2e0 [ 666.224477][T12908] genl_rcv+0x28/0x40 [ 666.224494][T12908] netlink_unicast+0x75c/0x8e0 [ 666.224526][T12908] netlink_sendmsg+0x805/0xb30 [ 666.224560][T12908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.224592][T12908] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 666.224608][T12908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.224632][T12908] __sock_sendmsg+0x21c/0x270 [ 666.224656][T12908] ____sys_sendmsg+0x505/0x830 [ 666.224687][T12908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 666.224721][T12908] ? import_iovec+0x74/0xa0 [ 666.224747][T12908] ___sys_sendmsg+0x21f/0x2a0 [ 666.224775][T12908] ? __pfx____sys_sendmsg+0x10/0x10 [ 666.224841][T12908] ? __fget_files+0x2a/0x420 [ 666.224875][T12908] ? __fget_files+0x3a0/0x420 [ 666.224904][T12908] __x64_sys_sendmsg+0x19b/0x260 [ 666.224931][T12908] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 666.224967][T12908] ? rcu_is_watching+0x15/0xb0 [ 666.224991][T12908] ? do_syscall_64+0xbe/0x3b0 [ 666.225016][T12908] do_syscall_64+0xfa/0x3b0 [ 666.225036][T12908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.225052][T12908] ? asm_sysvec_call_function_single+0x1a/0x20 [ 666.225069][T12908] ? clear_bhb_loop+0x60/0xb0 [ 666.225098][T12908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.225115][T12908] RIP: 0033:0x7f6f5ed8e9a9 [ 666.225131][T12908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.225146][T12908] RSP: 002b:00007f6f5fbe0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 666.225165][T12908] RAX: ffffffffffffffda RBX: 00007f6f5efb6080 RCX: 00007f6f5ed8e9a9 [ 666.225177][T12908] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000006 [ 666.225189][T12908] RBP: 00007f6f5ee10d69 R08: 0000000000000000 R09: 0000000000000000 [ 666.225201][T12908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.225211][T12908] R13: 0000000000000000 R14: 00007f6f5efb6080 R15: 00007ffcb6a81e38 [ 666.225239][T12908] [ 666.695489][T12911] program syz.3.1747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 666.705346][T12910] program syz.3.1747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 667.892744][T12928] wg1 speed is unknown, defaulting to 1000 [ 668.180782][ T5916] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 668.351093][ T5916] usb 7-1: device descriptor read/64, error -71 [ 668.830717][ T5916] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 669.071269][ T5916] usb 7-1: device descriptor read/64, error -71 [ 669.213714][ T5916] usb usb7-port1: attempt power cycle [ 669.555311][T12968] xt_bpf: check failed: parse error [ 669.571589][ T5916] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 669.652824][ T5916] usb 7-1: device descriptor read/8, error -71 [ 669.854648][ T5938] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 669.911190][ T5916] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 669.952678][ T5916] usb 7-1: device descriptor read/8, error -71 [ 670.073900][ T5938] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.081092][ T5916] usb usb7-port1: unable to enumerate USB device [ 670.313439][ T5938] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 670.315346][T12988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1767'. [ 670.658053][ T5938] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 670.680639][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.691577][T12988] bridge0: entered promiscuous mode [ 670.697743][T12988] macsec1: entered allmulticast mode [ 670.704504][T12988] bridge0: entered allmulticast mode [ 670.709221][ T5938] usb 6-1: config 0 descriptor?? [ 670.720183][T12988] bridge0: port 3(macsec1) entered blocking state [ 670.727074][T12988] bridge0: port 3(macsec1) entered disabled state [ 670.748221][T12988] bridge0: left allmulticast mode [ 670.756057][T12988] bridge0: left promiscuous mode [ 670.825827][T12986] wg1 speed is unknown, defaulting to 1000 [ 670.941848][T12998] syz.2.1769: attempt to access beyond end of device [ 670.941848][T12998] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 670.955350][T12998] SQUASHFS error: Failed to read block 0x0: -5 [ 670.964897][T12998] unable to read squashfs_super_block [ 671.232157][T12999] overlayfs: missing 'lowerdir' [ 671.623972][ T5938] Bluetooth: Can't get state to change to load configuration err [ 671.698957][ T5938] Bluetooth: Loading sysconfig file failed [ 671.860253][ T5938] ath3k 6-1:0.0: probe with driver ath3k failed with error -16 [ 671.896435][T13004] tun0: tun_chr_ioctl cmd 1074025681 [ 672.188994][ T5938] usb 6-1: USB disconnect, device number 51 [ 673.531270][ T5828] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 673.673773][T13020] xt_ecn: cannot match TCP bits for non-tcp packets [ 673.740621][ T5828] usb 7-1: Using ep0 maxpacket: 32 [ 673.767167][ T5828] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 673.783375][ T5828] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 673.795978][ T5828] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 673.808064][ T5828] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 673.835501][ T5828] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 673.868214][ T5828] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 673.880764][ T5938] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 673.912244][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.921076][ T5828] usb 7-1: Product: syz [ 673.925276][ T5828] usb 7-1: Manufacturer: syz [ 673.930311][ T5828] usb 7-1: SerialNumber: syz [ 673.957657][ T5828] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 673.975838][T13022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1776'. [ 673.985754][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1776'. [ 673.987838][ T5828] imon 7-1:155.0: unable to initialize intf0, err -90 [ 674.040724][ T5938] usb 6-1: Using ep0 maxpacket: 32 [ 674.046175][ T5828] imon:imon_probe: failed to initialize context! [ 674.062684][ T5828] imon 7-1:155.0: unable to register, err -19 [ 674.076662][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 674.099718][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 674.129774][ T5938] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 674.150204][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.267933][ T5938] usb 6-1: Product: syz [ 674.278725][ T5938] usb 6-1: Manufacturer: syz [ 674.291131][ T5972] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 674.306644][ T5938] usb 6-1: SerialNumber: syz [ 674.316130][ T5938] usb 6-1: config 0 descriptor?? [ 674.338789][ T5938] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 674.432137][ T5972] usb 9-1: device descriptor read/64, error -71 [ 674.490578][ C1] hrtimer: interrupt took 56757 ns [ 674.720941][ T5972] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 674.860746][ T5972] usb 9-1: device descriptor read/64, error -71 [ 674.867169][ T5984] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 674.932672][T13036] syz.2.1778: attempt to access beyond end of device [ 674.932672][T13036] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 674.946680][T13036] SQUASHFS error: Failed to read block 0x0: -5 [ 674.953949][T13036] unable to read squashfs_super_block [ 674.987651][ T5972] usb usb9-port1: attempt power cycle [ 675.021224][ T5984] usb 4-1: device descriptor read/64, error -71 [ 675.067228][T11614] usb 6-1: Failed to submit usb control message: -71 [ 675.084499][ T5938] usb 6-1: USB disconnect, device number 52 [ 675.108258][T11614] usb 6-1: unable to send the bmi data to the device: -71 [ 675.170184][T11614] usb 6-1: unable to get target info from device [ 675.205951][T11614] usb 6-1: could not get target info (-71) [ 675.296246][ T5984] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 675.341259][ T5828] usb 7-1: USB disconnect, device number 46 [ 675.370114][T11614] usb 6-1: could not probe fw (-71) [ 675.397845][ T5972] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 675.536465][ T5972] usb 9-1: device descriptor read/8, error -71 [ 675.680781][ T5984] usb 4-1: device descriptor read/64, error -71 [ 675.812348][ T5972] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 675.821439][ T5984] usb usb4-port1: attempt power cycle [ 675.852261][ T5972] usb 9-1: device descriptor read/8, error -71 [ 675.914760][T13043] netlink: 120 bytes leftover after parsing attributes in process `syz.6.1779'. [ 675.920414][T13042] netlink: 18 bytes leftover after parsing attributes in process `syz.5.1780'. [ 675.961431][ T5972] usb usb9-port1: unable to enumerate USB device [ 676.039509][T13046] sctp: [Deprecated]: syz.2.1781 (pid 13046) Use of int in maxseg socket option. [ 676.039509][T13046] Use struct sctp_assoc_value instead [ 676.200766][ T5984] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 676.222046][ T5984] usb 4-1: device descriptor read/8, error -71 [ 676.470761][ T5984] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 676.501747][ T5984] usb 4-1: device descriptor read/8, error -71 [ 676.625536][ T5984] usb usb4-port1: unable to enumerate USB device [ 677.055423][T13056] wg1 speed is unknown, defaulting to 1000 [ 677.930744][ T5972] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 678.230881][ T5972] usb 7-1: Using ep0 maxpacket: 8 [ 678.242233][ T5972] usb 7-1: config 0 has an invalid interface number: 176 but max is 0 [ 678.250462][ T5972] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.033789][ T5972] usb 7-1: config 0 has no interface number 0 [ 679.040002][ T5972] usb 7-1: config 0 interface 176 altsetting 0 bulk endpoint 0xB has invalid maxpacket 32 [ 679.092440][T13071] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 679.099531][T13071] macvlan2: entered allmulticast mode [ 679.105116][T13071] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 679.113914][T13071] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 679.121056][T13071] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 679.195124][ T5972] usb 7-1: config 0 interface 176 altsetting 0 endpoint 0xC has invalid maxpacket 1536, setting to 1024 [ 679.263204][ T5972] usb 7-1: config 0 interface 176 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 679.308835][ T5972] usb 7-1: config 0 interface 176 altsetting 0 has an endpoint descriptor with address 0x96, changing to 0x86 [ 679.346065][ T5972] usb 7-1: config 0 interface 176 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 679.389987][ T5972] usb 7-1: config 0 interface 176 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 679.484438][T13079] program syz.5.1790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 679.505703][ T5972] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice=c1.ab [ 679.520376][ T5972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.529478][ T5972] usb 7-1: Product: syz [ 679.564314][ T5972] usb 7-1: Manufacturer: syz [ 679.586819][T13082] xt_connbytes: Forcing CT accounting to be enabled [ 679.593603][ T5972] usb 7-1: SerialNumber: syz [ 679.612390][ T5972] usb 7-1: config 0 descriptor?? [ 679.634272][T13082] set match dimension is over the limit! [ 679.637585][T13059] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 679.879687][ T5972] pxrc 7-1:0.176: Could not find endpoint [ 679.942431][ T5972] usb 7-1: USB disconnect, device number 47 [ 680.166937][T13091] xt_addrtype: ipv6 does not support BROADCAST matching [ 680.448774][T13099] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 680.557799][T13106] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1796'. [ 681.587527][T13105] wg1 speed is unknown, defaulting to 1000 [ 681.841947][ T9] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 682.188014][T13126] syz.2.1801: attempt to access beyond end of device [ 682.188014][T13126] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 682.202264][T13126] SQUASHFS error: Failed to read block 0x0: -5 [ 682.209100][T13126] unable to read squashfs_super_block [ 682.269713][ T9] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 682.598615][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.626145][ T9] usb 4-1: Product: syz [ 682.679073][ T9] usb 4-1: Manufacturer: syz [ 682.728997][ T9] usb 4-1: SerialNumber: syz [ 682.780785][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 682.829247][T13129] netlink: 'syz.2.1802': attribute type 1 has an invalid length. [ 682.870745][ T5972] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 682.904286][T13129] 8021q: adding VLAN 0 to HW filter on device bond2 [ 682.914526][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 682.958423][ T9] r8152-cfgselector 4-1: config 0 descriptor?? [ 683.000639][ T5972] usb 6-1: device descriptor read/64, error -71 [ 683.087735][T13129] vlan3: entered allmulticast mode [ 683.103793][T13129] geneve1: entered allmulticast mode [ 683.136482][T13129] bond2: (slave vlan3): making interface the new active one [ 683.176639][T13129] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 683.250958][ T5972] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 683.380809][ T5972] usb 6-1: device descriptor read/64, error -71 [ 683.511268][ T5972] usb usb6-port1: attempt power cycle [ 683.717726][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1807'. [ 683.730926][T13150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1807'. [ 683.900999][ T5972] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 683.916625][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1808'. [ 683.929408][ T5972] usb 6-1: device descriptor read/8, error -71 [ 683.977532][T13153] fuse: Unknown parameter 'u;.훂iYlZg'e.Ikq693-)K'ݟI lL3@f$M' [ 684.193761][ T5972] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 684.233165][ T5972] usb 6-1: device descriptor read/8, error -71 [ 684.244414][T13159] netlink: 'syz.6.1810': attribute type 4 has an invalid length. [ 684.286572][T13160] netlink: 'syz.6.1810': attribute type 4 has an invalid length. [ 684.362677][ T5972] usb usb6-port1: unable to enumerate USB device [ 684.752235][ T3472] r8152-cfgselector 4-1: USB disconnect, device number 99 [ 685.129569][T13165] wg1 speed is unknown, defaulting to 1000 [ 685.810646][ T9] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 685.996255][T13177] trusted_key: encrypted_key: insufficient parameters specified [ 686.191779][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.401170][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 686.448724][ T9] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.501693][ T9] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.523364][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 686.530060][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 686.623966][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.691483][ T9] usb 4-1: config 0 descriptor?? [ 686.767777][T13184] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 689.001532][T13201] netlink: 'syz.5.1822': attribute type 1 has an invalid length. [ 689.012271][T13201] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1822'. [ 689.594731][T13190] xt_CT: No such helper "snmp" [ 689.692619][T13208] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 690.561711][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 690.572041][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 690.589045][ T9] usb 4-1: USB disconnect, device number 100 [ 691.848332][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1828'. [ 692.167424][T13233] geneve1: entered promiscuous mode [ 692.211708][T13233] macsec1: entered promiscuous mode [ 692.237148][T13233] macsec1: entered allmulticast mode [ 692.251019][ T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 692.285166][T13233] geneve1: entered allmulticast mode [ 692.336913][T13233] geneve1: left allmulticast mode [ 692.342671][T13233] geneve1: left promiscuous mode [ 692.433486][ T9] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 692.486182][ T9] usb 6-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 692.497764][ T9] usb 6-1: Product: syz [ 692.503660][ T9] usb 6-1: Manufacturer: syz [ 692.508491][ T9] usb 6-1: SerialNumber: syz [ 692.517228][ T9] usb 6-1: config 0 descriptor?? [ 692.745343][ T9] usb-storage 6-1:0.0: USB Mass Storage device detected [ 694.221622][T12725] Bluetooth: hci5: command 0x0406 tx timeout [ 694.503328][ T9] usb 6-1: USB disconnect, device number 57 [ 695.434707][ T10] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 695.481101][ T9] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 696.068474][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 696.081844][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.107982][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 696.126617][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 696.136387][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 696.146597][T13276] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1848'. [ 696.164317][ T10] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 696.220516][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 696.238273][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 696.250841][ T10] usb 9-1: SerialNumber: syz [ 696.257717][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 696.279137][ T10] usb 9-1: 0:2 : does not exist [ 696.344569][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 696.362542][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 696.396474][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.409617][ T9] usb 6-1: config 0 descriptor?? [ 696.443484][T12725] Bluetooth: hci6: urb ffff8880257c9e00 submission failed (90) [ 696.650407][ T9] usb 6-1: USB disconnect, device number 58 [ 696.696890][ T10] usb 9-1: USB disconnect, device number 6 [ 696.810621][ T5916] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 697.782735][ T5916] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 697.805607][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 697.820939][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 697.831200][ T5916] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 697.844709][ T5916] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 697.882119][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.932107][ T5916] usb 3-1: config 0 descriptor?? [ 698.061073][ T5938] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 698.278787][ T5938] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 698.287366][ T5938] usb 6-1: config 0 has no interface number 0 [ 698.299689][ T5938] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 698.309595][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.412493][ T5938] usb 6-1: config 0 descriptor?? [ 698.512556][ T5938] usb 6-1: selecting invalid altsetting 1 [ 698.573831][T13298] uprobe: syz.6.1857:13298 failed to unregister, leaking uprobe [ 698.582996][ T5916] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 698.627352][ T5938] dvb_ttusb_budget: ttusb_init_controller: error [ 698.652112][ T5938] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 698.695004][ T5916] usb 3-1: USB disconnect, device number 87 [ 699.890804][ T5938] DVB: Unable to find symbol cx22700_attach() [ 699.903098][T13303] fido_id[13303]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 700.126396][ T5938] DVB: Unable to find symbol tda10046_attach() [ 700.177661][ T5938] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 700.226898][ T5938] usb 6-1: USB disconnect, device number 59 [ 703.392726][ T5938] hid (null): global environment stack underflow [ 703.436498][ T5938] hid (null): unknown global tag 0xa2 [ 703.598697][ T5938] hid-generic 0004:000C:8001.0018: global environment stack underflow [ 703.635559][ T5938] hid-generic 0004:000C:8001.0018: item 0 1 1 11 parsing failed [ 703.809694][ T5938] hid-generic 0004:000C:8001.0018: probe with driver hid-generic failed with error -22 [ 703.853286][ T5828] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 704.118754][ T5828] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 704.158356][ T5828] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.209035][ T5828] usb 9-1: config 0 descriptor?? [ 704.401557][ T30] audit: type=1326 audit(2000000385.557:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13364 comm="syz.2.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7910d8e9a9 code=0x7ffc0000 [ 705.083226][ T30] audit: type=1326 audit(2000000385.567:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13364 comm="syz.2.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7910d8e9a9 code=0x7ffc0000 [ 705.177994][ T30] audit: type=1326 audit(2000000385.617:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13364 comm="syz.2.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7910d8e9a9 code=0x7ffc0000 [ 705.199660][ C1] vkms_vblank_simulate: vblank timer overrun [ 705.279271][ T30] audit: type=1326 audit(2000000385.617:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13364 comm="syz.2.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7910d8e9a9 code=0x7ffc0000 [ 705.300897][ C1] vkms_vblank_simulate: vblank timer overrun [ 705.366043][ T30] audit: type=1326 audit(2000000385.617:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13364 comm="syz.2.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7910d8e9a9 code=0x7ffc0000 [ 705.451021][ T30] audit: type=1326 audit(2000000385.617:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13364 comm="syz.2.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f7910d8e9a9 code=0x7ffc0000 [ 705.511283][ T30] audit: type=1326 audit(2000000385.617:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13364 comm="syz.2.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7910d8e9a9 code=0x7ffc0000 [ 705.532915][ C1] vkms_vblank_simulate: vblank timer overrun [ 705.581217][ T30] audit: type=1326 audit(2000000385.617:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13364 comm="syz.2.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7910d8e9a9 code=0x7ffc0000 [ 705.602834][ C1] vkms_vblank_simulate: vblank timer overrun [ 705.657880][ T30] audit: type=1326 audit(2000000385.617:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13364 comm="syz.2.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7910d8e9a9 code=0x7ffc0000 [ 705.828117][ T30] audit: type=1326 audit(2000000385.617:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13364 comm="syz.2.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7910d8e9a9 code=0x7ffc0000 [ 705.849800][ C1] vkms_vblank_simulate: vblank timer overrun [ 706.970802][T13380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 707.134890][ T5828] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 707.167892][ T5828] asix 9-1:0.0: probe with driver asix failed with error -71 [ 707.511145][ T5828] usb 9-1: USB disconnect, device number 7 [ 709.072795][T13400] /dev/nullb0: Can't open blockdev [ 710.700298][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1897'. [ 710.727861][T13416] binder: BINDER_SET_CONTEXT_MGR already set [ 710.763543][T13416] binder: 13413:13416 ioctl 4018620d 200000000040 returned -16 [ 712.894511][T13447] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[13447] [ 713.831005][ T3472] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 714.234234][ T3472] usb 6-1: Using ep0 maxpacket: 8 [ 714.293379][ T3472] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 714.309320][ T3472] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 714.346777][ T3472] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 714.378273][ T3472] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.430127][ T3472] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 714.477332][ T3472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.741597][ T3472] usb 6-1: GET_CAPABILITIES returned 0 [ 716.939978][ T3472] usbtmc 6-1:16.0: can't read capabilities [ 716.988480][ T3472] usb 6-1: USB disconnect, device number 60 [ 718.600209][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1915'. [ 721.593574][T13508] block nbd3: shutting down sockets [ 722.458364][T13518] cgroup: No subsys list or none specified [ 723.063266][T13525] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 726.166116][ T3472] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 726.812159][ T3472] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 727.052964][ T3472] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 727.253034][ T3472] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 727.331520][ T3472] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 727.346999][ T3472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.366108][ T3472] usb 4-1: Product: syz [ 727.375774][ T3472] usb 4-1: Manufacturer: syz [ 727.388609][ T3472] usb 4-1: SerialNumber: syz [ 727.533020][ T3472] usb 4-1: config 0 descriptor?? [ 728.146813][ T3472] usb 4-1: can't set config #0, error -71 [ 728.552117][ T3472] usb 4-1: USB disconnect, device number 101 [ 729.140686][ T3472] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 729.974259][ T3472] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 730.014434][ T3472] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 730.040584][ T3472] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 730.082570][ T3472] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 730.100023][ T3472] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.135294][ T3472] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 730.267386][ T3472] usb 4-1: invalid MIDI out EP 0 [ 730.317792][ T5828] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 730.866841][ T5828] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 731.006660][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.040769][ T5828] usb 7-1: Product: syz [ 731.045003][ T5828] usb 7-1: Manufacturer: syz [ 731.080292][ T5828] usb 7-1: SerialNumber: syz [ 731.104975][ T5828] usb 7-1: config 0 descriptor?? [ 731.131194][T13590] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1952'. [ 731.145210][ T3472] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 731.162705][ T3472] usb 4-1: USB disconnect, device number 102 [ 731.330767][ T5828] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 732.475115][T12725] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 734.699997][ T5828] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 734.727826][ T5828] usb 7-1: USB disconnect, device number 48 [ 735.629550][T13629] netlink: 'syz.8.1964': attribute type 1 has an invalid length. [ 735.638329][T13629] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1964'. [ 737.822145][T13648] block nbd6: shutting down sockets [ 739.437506][T13658] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 739.446503][T13658] overlayfs: missing 'lowerdir' [ 742.176962][ T5902] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 742.341038][ T5902] usb 7-1: Using ep0 maxpacket: 8 [ 742.369332][ T5902] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 742.403264][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.420875][ T5902] usb 7-1: Product: syz [ 742.438594][ T5902] usb 7-1: Manufacturer: syz [ 742.467204][ T5902] usb 7-1: SerialNumber: syz [ 742.505132][ T5902] usb 7-1: config 0 descriptor?? [ 742.729047][ T5984] hid-generic 0005:16C0:05DF.0019: item fetching failed at offset 0/1 [ 742.761633][ T5902] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 742.796765][ T5984] hid-generic 0005:16C0:05DF.0019: probe with driver hid-generic failed with error -22 [ 742.809167][T13698] block nbd2: shutting down sockets [ 742.845592][T13695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1986'. [ 744.398616][ T5902] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 744.442112][ T5902] usb 7-1: USB disconnect, device number 49 [ 746.071896][T13723] xt_NFQUEUE: number of total queues is 0 [ 747.451403][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.809833][T13732] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1994'. [ 749.109499][T13749] Bluetooth: MGMT ver 1.23 [ 753.740926][ T5838] Bluetooth: hci1: command 0x0405 tx timeout [ 755.841503][T13830] block device autoloading is deprecated and will be removed. [ 757.660995][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 761.630349][T13872] input: syz0 as /devices/virtual/input/input32 [ 762.020748][ T5916] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 762.261306][ T5916] usb 7-1: unable to get BOS descriptor or descriptor too short [ 762.334860][ T5916] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 762.366348][ T5916] usb 7-1: can't read configurations, error -71 [ 763.077107][T13898] input: syz0 as /devices/virtual/input/input33 [ 763.084739][T13898] input: failed to attach handler leds to device input33, error: -6 [ 763.490061][T13896] vlan2: entered allmulticast mode [ 763.527871][T13896] dummy0: entered allmulticast mode [ 764.839642][T13918] lo speed is unknown, defaulting to 1000 [ 765.055993][T13918] lo speed is unknown, defaulting to 1000 [ 765.273020][T13918] lo speed is unknown, defaulting to 1000 [ 767.318952][T13918] infiniband sz1: set active [ 767.325134][ T5902] lo speed is unknown, defaulting to 1000 [ 767.370652][T13918] infiniband sz1: added lo [ 767.382303][T13918] sz1: rxe_create_cq: returned err = -12 [ 767.408822][T13918] infiniband sz1: Couldn't create ib_mad CQ [ 767.517960][ T5916] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 767.552039][T13918] infiniband sz1: Couldn't open port 1 [ 768.503462][T13918] RDS/IB: sz1: added [ 768.531270][T13918] smc: adding ib device sz1 with port count 1 [ 768.555590][ T5916] usb 6-1: Using ep0 maxpacket: 16 [ 768.567012][T13918] smc: ib device sz1 port 1 has pnetid [ 768.574128][ T5916] usb 6-1: device descriptor read/all, error -71 [ 768.617574][ T5902] lo speed is unknown, defaulting to 1000 [ 768.637227][T13918] lo speed is unknown, defaulting to 1000 [ 769.060862][ T5902] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 769.101295][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2071'. [ 769.152084][T13949] vlan2: entered allmulticast mode [ 769.157317][T13949] dummy0: entered allmulticast mode [ 769.265379][ T5902] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 769.273993][ T5902] usb 3-1: config 0 has no interface number 0 [ 769.280143][ T5902] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 770.095624][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.630777][T13918] lo speed is unknown, defaulting to 1000 [ 770.766847][ T5902] usb 3-1: config 0 descriptor?? [ 770.787090][ T5902] usb 3-1: selecting invalid altsetting 1 [ 770.873595][T13956] cgroup: Need name or subsystem set [ 770.899275][ T5902] dvb_ttusb_budget: ttusb_init_controller: error [ 770.915631][ T5902] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 771.834722][T12725] Bluetooth: hci4: ISO packet for unknown connection handle 201 [ 771.880959][T13941] can: request_module (can-proto-0) failed. [ 772.063509][ T5902] DVB: Unable to find symbol cx22700_attach() [ 772.745150][ T5902] DVB: Unable to find symbol tda10046_attach() [ 772.771083][ T5902] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 772.819073][ T5902] usb 3-1: USB disconnect, device number 88 [ 772.822384][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 772.822400][ T30] audit: type=1326 audit(2000000453.977:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13978 comm="syz.8.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2308b8e9a9 code=0x7ffc0000 [ 773.742560][ T30] audit: type=1326 audit(2000000453.977:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13978 comm="syz.8.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2308b8e9a9 code=0x7ffc0000 [ 773.876444][ T30] audit: type=1326 audit(2000000454.037:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13978 comm="syz.8.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2308b8e9a9 code=0x7ffc0000 [ 773.900173][ T30] audit: type=1326 audit(2000000454.037:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13978 comm="syz.8.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2308b8e9a9 code=0x7ffc0000 [ 773.923336][ T30] audit: type=1326 audit(2000000454.037:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13978 comm="syz.8.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2308b8e9a9 code=0x7ffc0000 [ 773.942401][T13986] ubi8: attaching mtd0 [ 773.946463][ T30] audit: type=1326 audit(2000000454.047:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13978 comm="syz.8.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2308b8e9a9 code=0x7ffc0000 [ 773.971974][ T30] audit: type=1326 audit(2000000454.047:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13978 comm="syz.8.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2308b8e9a9 code=0x7ffc0000 [ 773.993082][T13986] ubi8 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66) [ 774.011217][ T30] audit: type=1326 audit(2000000454.047:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13978 comm="syz.8.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2308b8e9a9 code=0x7ffc0000 [ 774.087126][ T30] audit: type=1326 audit(2000000454.057:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13978 comm="syz.8.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f2308b8e9a9 code=0x7ffc0000 [ 774.167882][ T30] audit: type=1326 audit(2000000454.057:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13978 comm="syz.8.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2308b8e9a9 code=0x7ffc0000 [ 774.311623][T13996] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 774.377023][ C0] Oops: divide error: 0000 [#1] SMP KASAN PTI [ 774.383151][ C0] CPU: 0 UID: 0 PID: 13996 Comm: syz.5.2086 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 774.393158][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 774.403221][ C0] RIP: 0010:comedi_buf_write_free+0x3c8/0x7e0 [ 774.409302][ C0] Code: 41 03 45 00 48 8b 4c 24 78 42 0f b6 0c 21 84 c9 4c 8b bc 24 90 00 00 00 44 8b 74 24 54 0f 85 02 01 00 00 31 d2 48 8b 4c 24 30 31 41 89 55 00 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 09 01 [ 774.428919][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010046 [ 774.434992][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffff88814cd9ec80 [ 774.442968][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888036e7f000 [ 774.450946][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 00000000000000ff [ 774.458918][ C0] R10: dffffc0000000000 R11: ffffffff88d8eb20 R12: dffffc0000000000 [ 774.466891][ C0] R13: ffff88814cd9ec38 R14: 0000000000000000 R15: ffff88814cd9ec00 [ 774.474871][ C0] FS: 00007f6f5fbbf6c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 774.483815][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 774.490401][ C0] CR2: 000020000012f000 CR3: 00000000327d4000 CR4: 00000000003526f0 [ 774.498381][ C0] Call Trace: [ 774.501666][ C0] [ 774.504526][ C0] ? __pfx_das16m1_ai_munge+0x10/0x10 [ 774.509911][ C0] comedi_buf_write_samples+0x369/0x5a0 [ 774.515473][ C0] das16m1_handler+0x213/0x4b0 [ 774.520267][ C0] das16m1_interrupt+0xaf/0x180 [ 774.525122][ C0] ? __pfx_das16m1_interrupt+0x10/0x10 [ 774.530619][ C0] __handle_irq_event_percpu+0x289/0x980 [ 774.536264][ C0] ? __pfx___handle_irq_event_percpu+0x10/0x10 [ 774.542428][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 774.547650][ C0] handle_irq_event+0x8b/0x1e0 [ 774.552421][ C0] ? handle_edge_irq+0x25d/0x9c0 [ 774.557364][ C0] handle_edge_irq+0x267/0x9c0 [ 774.562136][ C0] __common_interrupt+0x140/0x250 [ 774.567170][ C0] common_interrupt+0xb6/0xe0 [ 774.571856][ C0] [ 774.574788][ C0] [ 774.577721][ C0] asm_common_interrupt+0x26/0x40 [ 774.582753][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 774.589270][ C0] Code: 74 05 e8 fb 9b 5e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 63 cc 27 f6 65 8b 05 1c 7a 33 07 85 c0 74 40 48 c7 04 24 0e 36 [ 774.608883][ C0] RSP: 0018:ffffc9000de1f9a0 EFLAGS: 00000206 [ 774.614958][ C0] RAX: a86b828335ad9a00 RBX: 0000000000000a02 RCX: a86b828335ad9a00 [ 774.622937][ C0] RDX: 0000000000000006 RSI: ffffffff8d982fba RDI: 0000000000000001 [ 774.630912][ C0] RBP: ffffc9000de1fa30 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 774.638884][ C0] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: dffffc0000000000 [ 774.646857][ C0] R13: dffffc0000000000 R14: ffffffff99dc2bc0 R15: 1ffff92001bc3f34 [ 774.654840][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 774.661187][ C0] serial8250_config_port+0x2c8d/0x5470 [ 774.666740][ C0] ? kfree+0x18e/0x440 [ 774.670821][ C0] ? __pfx_serial8250_config_port+0x10/0x10 [ 774.676715][ C0] ? __release_region+0x2d6/0x360 [ 774.681751][ C0] ? __pfx___release_region+0x10/0x10 [ 774.687129][ C0] univ8250_config_port+0x3d4/0x9a0 [ 774.692345][ C0] ? __pfx_univ8250_release_port+0x10/0x10 [ 774.698159][ C0] ? serial8250_release_std_resource+0x135/0x2e0 [ 774.704495][ C0] uart_ioctl+0x14ce/0x19c0 [ 774.709009][ C0] ? __lock_acquire+0xab9/0xd20 [ 774.713864][ C0] ? __pfx_uart_ioctl+0x10/0x10 [ 774.718721][ C0] ? __asan_memset+0x22/0x50 [ 774.723325][ C0] ? smack_file_ioctl+0x24a/0x340 [ 774.728352][ C0] ? __pfx_smack_file_ioctl+0x10/0x10 [ 774.733733][ C0] ? __fget_files+0x3a0/0x420 [ 774.738412][ C0] ? __fget_files+0x2a/0x420 [ 774.743007][ C0] tty_ioctl+0x926/0xde0 [ 774.747257][ C0] ? __pfx_tty_ioctl+0x10/0x10 [ 774.752028][ C0] __se_sys_ioctl+0xfc/0x170 [ 774.756630][ C0] do_syscall_64+0xfa/0x3b0 [ 774.761136][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.767207][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 774.773365][ C0] ? clear_bhb_loop+0x60/0xb0 [ 774.778047][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.783940][ C0] RIP: 0033:0x7f6f5ed8e9a9 [ 774.788360][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.807973][ C0] RSP: 002b:00007f6f5fbbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 774.816396][ C0] RAX: ffffffffffffffda RBX: 00007f6f5efb6160 RCX: 00007f6f5ed8e9a9 [ 774.824373][ C0] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 000000000000000a [ 774.832351][ C0] RBP: 00007f6f5ee10d69 R08: 0000000000000000 R09: 0000000000000000 [ 774.840325][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.848309][ C0] R13: 0000000000000000 R14: 00007f6f5efb6160 R15: 00007ffcb6a81e38 [ 774.856301][ C0] [ 774.859320][ C0] Modules linked in: [ 774.863231][ C0] ---[ end trace 0000000000000000 ]--- [ 774.868684][ C0] RIP: 0010:comedi_buf_write_free+0x3c8/0x7e0 [ 774.874761][ C0] Code: 41 03 45 00 48 8b 4c 24 78 42 0f b6 0c 21 84 c9 4c 8b bc 24 90 00 00 00 44 8b 74 24 54 0f 85 02 01 00 00 31 d2 48 8b 4c 24 30 31 41 89 55 00 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 09 01 [ 774.894379][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010046 [ 774.900458][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffff88814cd9ec80 [ 774.908445][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888036e7f000 [ 774.916423][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 00000000000000ff [ 774.924400][ C0] R10: dffffc0000000000 R11: ffffffff88d8eb20 R12: dffffc0000000000 [ 774.932377][ C0] R13: ffff88814cd9ec38 R14: 0000000000000000 R15: ffff88814cd9ec00 [ 774.940350][ C0] FS: 00007f6f5fbbf6c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 774.949289][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 774.955874][ C0] CR2: 000020000012f000 CR3: 00000000327d4000 CR4: 00000000003526f0 [ 774.963857][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 774.971301][ C0] Kernel Offset: disabled [ 774.975617][ C0] Rebooting in 86400 seconds..