last executing test programs: 4m51.860119564s ago: executing program 2 (id=100): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400000000e9ff596425ba4e34bece00ada2b8a4096ebce1a21fc94b846ce9cd2a5d87cd70a9c29ed0c543", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000084000400c4f40c848d97a447"], 0x48}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000964fa7dbb12715de4e214dcafd4a273d5d8de57aaf000400000000000034a73d3f9c0a6e4fc2fdbdfe1aef12dbcc8d9e9087b9f8517ef3a6ca8e544ced4ac19a7fd5ff29ce52964ff3b64e6e87fef42c30648df87bd2fa435960b3e0f11778bcc94a37b7bda79c49ed1ee0744970d0b3070000000000000082dbbad6dd175fb1d32328a52070e2dc6eb424e2181a047199b9b7f3b20cfdaee9b154b9eed24053071017c713ad0295d853a8e583947b3c99edc9a2dfe493041c8bcf6012c0f8f9e0ede5eb6e2bbcbf501fa539a8c616859d4f05bc5ecd8fab2be2c283eb024bc2451db94832b2943e6274bbbb535d495ee80be2187cbc20ac2b5c6a2f8fc8e7a506f563f96d283b20947700000800000000000000", @ANYRES16=r7, @ANYBLOB="010300000000fedbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) writev(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x6}, 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000004c0)=""/163, &(0x7f0000000040)=0xa3) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0x25, 0x148, 0x0, 0x60, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x320, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'macvlan1\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x8}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x7f}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x6}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510) 4m49.505196345s ago: executing program 2 (id=105): mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x356}, &(0x7f00000008c0)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x70a, 0x41e3, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_usbip_server_init(0xaa7f3cec63cbb9d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @local, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x11, 0x0, @private, @multicast2}}}}}}, 0x0) mremap(&(0x7f00007f8000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x356}, &(0x7f00000008c0), &(0x7f0000000500)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) (async) io_uring_enter(r2, 0x70a, 0x41e3, 0x0, 0x0, 0x0) (async) syz_open_dev$sndctrl(0x0, 0x1, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) syz_usbip_server_init(0xaa7f3cec63cbb9d) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @local, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x11, 0x0, @private, @multicast2}}}}}}, 0x0) (async) mremap(&(0x7f00007f8000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) 4m46.847974142s ago: executing program 2 (id=106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x10a) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x4}, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000011b6be041e9a75ab000000e7fab16ea40700"/37], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000040000000200000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x105, r3}, 0x38) pipe2$9p(&(0x7f0000000c00), 0x4000) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r3}, 0x38) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x44, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xffffffff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x800}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xfffffff7}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x4}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x7a3edbe6}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x1}]}}]}, 0x70}}, 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f00000001c0)=0x1) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000280)={0x5, 0x33424752, 0x1, @discrete={0x5, 0x5d29f7f1}}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) r11 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000180)=[{0x0, 0xea}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0x1, 0x5, 0x2, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x0, 0x1, 0x9}, {0xffffffff, 0x8, 0xfff8, 0x4, 0xe, 0x2, 0x2}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 4m45.647994492s ago: executing program 2 (id=112): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x8d}, &(0x7f0000000180)=0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000200000000000000000004e0095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='f2fs_destroy_extent_tree\x00', r3, 0x0, 0x101}, 0x18) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) (async) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000340)={@dev, 0x0}, &(0x7f0000000400)=0x14) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mremap(&(0x7f00000ab000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) (async) r13 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r13, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r12, r9, 0x25, 0x2, @val=@tcx}, 0x1c) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)={0x90, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async, rerun: 64) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 64) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r15, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) 4m45.56637999s ago: executing program 2 (id=113): socket(0x1e, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4008800) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 4m44.868882128s ago: executing program 2 (id=116): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000000008000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffff000100"/28], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2a020400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf25170039001c00038008000200fdffffff0800030005000008000100080000002c0017800c0003000fed000000000000080001000400000008000200060000000c00030000100081000000002c00078008000100e40400000c000400050000000000000008000100070000000c0004000100000000000000100004800900010073797a3100200000"], 0x98}, 0x1, 0x0, 0x0, 0x40810}, 0x80) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev2(r5, &(0x7f0000000380)=[{&(0x7f0000000600)="002ec56be0d52f355b3adf", 0xb}], 0x1, 0x528, 0x5, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd700021dcdf10270000000c00018008000100", @ANYRES32, @ANYBLOB="180001801400020064756d6d7930"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@nested={0x8, 0x6, 0x0, 0x1, [@nested={0x4, 0x1}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x106c, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x1034, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x1b, 0x3}}, @TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xbf0}]}, @TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc}]}, @TCA_ROUTE4_ACT={0xfe4, 0x6, [@m_vlan={0x5c, 0xc, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x7, 0x0, 0xfffff1ee, 0x7fffffff}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb11}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x4}}}}, @m_pedit={0xf84, 0x4, 0x0, 0x0, {{0xa}, {0xefc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xef8, 0x4, {{{0x4, 0x38e37825, 0xffffffffffffffff, 0x4, 0x2e}, 0x6, 0x3, [{0xfff, 0xaa0, 0x7fffffff, 0x5, 0x9, 0xf87}, {0x6, 0x4, 0x4, 0x10000, 0xf41, 0x9}, {0x97c, 0x2, 0x3, 0x1, 0x22, 0x4}, {0xf09, 0x101, 0x9277, 0xffff, 0x3, 0xfc6}, {0x6, 0x6, 0x6, 0x3, 0x256, 0x800}, {0x2, 0x9, 0x10000, 0x9, 0x3, 0x7}, {0x80000001, 0x3ff, 0x4, 0x8, 0xea23, 0x6}, {0xd8b4, 0x8, 0x800, 0x6, 0x5, 0xfffffeff}, {0x40, 0xb7, 0x7ff, 0x1, 0x3, 0xfffffff8}]}, [{0xffff, 0x6, 0x0, 0x0, 0xffffff3a, 0x7}, {0xe, 0x1, 0x9, 0x3, 0xdd, 0xa}, {0x2, 0x6, 0x7, 0x401, 0xb, 0x42}, {0x8, 0x1, 0xc, 0xceb, 0x7ff, 0xa3b1}, {0x5, 0x3, 0x9, 0xb, 0x6d1, 0x10000}, {0x6, 0xda1a, 0x3, 0x5, 0x1ff, 0xc2d3}, {0x6ea, 0x10, 0x528, 0x8001, 0x7, 0xc}, {0x4, 0x3, 0xac, 0x61, 0xad, 0x2cbe}, {0xe4f, 0x7fff, 0xac8, 0x80000000, 0xfffffff8, 0x11f1}, {0x9, 0x3331, 0x0, 0xfffffe00, 0x4, 0x1}, {0x4, 0x10001, 0x4, 0x1, 0x10001, 0x5ea}, {0x45e7c124, 0x9, 0xe8, 0x182bd0b6, 0x4, 0x5}, {0x7ff, 0x5, 0x10, 0x5f35, 0x0, 0x9}, {0x6, 0x19, 0xffff08a7, 0x6, 0xce8, 0x2}, {0xffff, 0x9, 0x5, 0x7ff, 0xfffffff8, 0x8b1}, {0x1, 0xa, 0xc7, 0x40, 0xf0f3, 0x10000}, {0xf59f, 0x3, 0x6, 0x7fff, 0xff, 0x4}, {0x1, 0x6, 0x43aa175b, 0x2, 0x5, 0x6}, {0x75, 0x5, 0xffffff94, 0x8, 0x10000, 0x1fb}, {0x8000, 0x2, 0xe, 0x6, 0x6, 0x4}, {0x5, 0x6, 0x8, 0x9, 0x6, 0x1}, {0x4, 0x6, 0x3, 0x8e, 0x8001}, {0x1000, 0x0, 0xe, 0x2, 0x4, 0x7}, {0x5, 0x40, 0x6, 0xe, 0x18000000, 0xa}, {0x84, 0x2, 0x9, 0xfe, 0x400, 0x1ed1}, {0x3, 0x1, 0xf, 0x18000000, 0x80, 0xcda}, {0x80000001, 0xdbc, 0x2, 0xcf10, 0x0, 0xca7}, {0x2, 0x0, 0x8, 0x7, 0x6, 0x84}, {0x5, 0x1, 0x4, 0xc2ac, 0x3ff, 0x10000}, {0x7, 0x6, 0x3, 0x4, 0x2, 0x3}, {0x7, 0x1, 0x0, 0x3a4a, 0x81, 0xc000}, {0x8, 0x3, 0x1, 0x6, 0x8, 0x80000001}, {0x1fd, 0x4, 0x6, 0x3786, 0x40, 0x8}, {0xffff8001, 0x6, 0x7fff, 0xfffffff9, 0x0, 0x23f4}, {0xfffffff7, 0xfffff001, 0x4, 0x14, 0x1}, {0x3ff, 0x0, 0x2, 0x4, 0x1, 0x8562}, {0x3, 0xe, 0x1, 0x5f00, 0x5, 0x9}, {0x92e, 0x7, 0x4, 0x1ff, 0xff, 0x4}, {0x5, 0x0, 0x1, 0x0, 0x36d, 0x1}, {0x6, 0xd6, 0x9, 0x1, 0x5, 0x5}, {0x1, 0x460, 0x0, 0xf2, 0x8, 0xffffffff}, {0x4, 0x9, 0x5, 0x6, 0x7, 0x86}, {0x100, 0x7, 0xb6, 0x7, 0x6, 0x7}, {0x5, 0xfff, 0x3, 0xaa2, 0x4, 0x401}, {0x5, 0x2, 0x2d7, 0xc66eecb, 0x4, 0xe}, {0x80000000, 0x7, 0xf9b6, 0x95, 0x7ff, 0x2}, {0x6, 0xabba, 0x6, 0xaf, 0xc, 0x7}, {0xfffffffd, 0x4586d16d, 0x4, 0x0, 0x86b7, 0x100}, {0x0, 0x5d67ef11, 0x3, 0x2, 0x2, 0x7}, {0x7ff, 0x3, 0x777, 0xfffffffe, 0xb, 0x1ff}, {0x4, 0x9, 0x5, 0x2, 0x0, 0x3ff}, {0xfff, 0x6, 0x8, 0x2, 0x1472, 0x8}, {0x4, 0x4, 0x8, 0x7, 0x100, 0x4}, {0x3, 0x0, 0x7, 0x8, 0x4afc}, {0x0, 0x17207ab, 0x0, 0x0, 0x3, 0x1ff}, {0x10000000, 0x3, 0x5cc2, 0x3, 0x7f, 0x80000001}, {0xff, 0xfff, 0x8, 0x7, 0x8, 0xffff41fc}, {0xd15, 0xb65, 0x8, 0x0, 0xb, 0x9}, {0xa62c, 0xb, 0x10001, 0x4, 0x0, 0x6}, {0x7, 0xf, 0xff, 0x7, 0x9, 0x1}, {0x2, 0x9, 0x4, 0x10, 0xffff, 0x2}, {0x8, 0x4, 0x3, 0x2, 0x2, 0x6}, {0xe, 0x10000, 0x9, 0x9, 0xffffffff, 0x1}, {0x1, 0x3ff, 0x8e, 0x4, 0x8000, 0x9}, {0x6, 0x8, 0x4, 0x5, 0xffffffff, 0xc}, {0x79a4, 0x100, 0xfff, 0x9122, 0xc21, 0xff}, {0x7, 0x6, 0x2, 0x6, 0xfb, 0x6}, {0x7f, 0x2, 0x8000, 0x1ff, 0x8}, {0x4c, 0x4, 0xa6f, 0xffffffff, 0x4, 0xfffffffc}, {0x8, 0x8, 0x40, 0x2, 0x3}, {0x2, 0x4, 0x80000000, 0x2, 0x3, 0x69}, {0x5, 0xa0, 0x4, 0xd09, 0x9, 0x5}, {0x5, 0x2, 0x7, 0x4, 0x0, 0x9}, {0x0, 0xf0e, 0x2, 0x5, 0xfffffffc, 0x7}, {0x0, 0x2, 0x400, 0x6, 0x10001, 0xb2}, {0x3, 0xb1, 0x3, 0x5, 0xfffffffd, 0x10000}, {0x417, 0x8, 0xc9c3, 0x4, 0x3, 0x8000}, {0x9849, 0x80000001, 0x2, 0x3, 0x7fffffff, 0xd}, {0x8, 0xffffffc0, 0xe4, 0x6, 0x2f, 0x9}, {0x4, 0x8, 0x7fffffff, 0x9, 0x3}, {0x0, 0x8, 0x5, 0x3, 0x0, 0x3}, {0x3, 0x1, 0xfff, 0x101, 0x5, 0x9}, {0x3, 0x60, 0x9104, 0xa6, 0x3ff, 0x4}, {0x3, 0x3, 0x3, 0x457, 0x3, 0xfe}, {0x401, 0x80000001, 0xa54, 0x700, 0x4, 0x1}, {0x27, 0x32d6, 0x9, 0x6, 0xfffffc5f, 0xb600}, {0x401, 0x7, 0x8, 0x4, 0x61a, 0xb380}, {0x6, 0x5, 0x7fff, 0x1, 0x4, 0x3}, {0x0, 0x8, 0x2, 0x3, 0x1907, 0x200}, {0xfffff6d0, 0x9, 0x7, 0x7fff, 0xb, 0x200}, {0x2800, 0x100, 0x200, 0x7, 0xc57d, 0x39}, {0x80000000, 0x6, 0xeed, 0x7, 0x0, 0x7}, {0xb, 0x9c4, 0x5, 0x4, 0xb, 0x2}, {0x5, 0x3, 0x1, 0x5, 0x2, 0x17}, {0x35, 0x3, 0x8, 0xaf5, 0x4138000, 0x3}, {0x9, 0x5, 0xde2, 0x800, 0x2, 0x40}, {0x8, 0x6, 0xb, 0x5, 0x0, 0x7}, {0x0, 0x7fffffff, 0x2, 0x472, 0x6, 0x8}, {0x6, 0x59a6, 0x2, 0x8, 0x5, 0x2}, {0x4, 0x0, 0x401, 0x4711, 0x7, 0xfffffffe}, {0x9, 0x1, 0x2, 0x1, 0x9, 0xb}, {0x4, 0x7fff, 0x7ff800, 0x40000000, 0x8, 0x5}, {0x7, 0x6, 0x0, 0x7, 0x5e, 0xf}, {0x2, 0x1, 0x1, 0x6, 0x8, 0x1}, {0xff, 0x9, 0xffff, 0xab, 0x80, 0xfffffd74}, {0x10, 0x9, 0x0, 0x0, 0x6, 0xffff0000}, {0x4, 0x5, 0x8, 0x1ff, 0xd271}, {0x3, 0x0, 0xffff, 0x7ff, 0x8, 0x3}, {0xf, 0x4, 0x5, 0x800, 0x6, 0x1}, {0x6, 0x401, 0xc3a, 0xfffffff8, 0x401, 0x5}, {0x2, 0x93, 0x7, 0x563, 0xac4a, 0x6}, {0x1, 0x3, 0x5, 0xe, 0x5, 0x100}, {0x1, 0xae0, 0x2000000b, 0x6, 0xddc, 0x6}, {0xff, 0x1ff, 0x7ff, 0x100, 0x101, 0x8}, {0x5, 0x5, 0x94, 0x43d66f65, 0xc, 0x1ff}, {0x5, 0x4, 0x5, 0x4f9, 0x7cc9, 0x7}, {0x8, 0x10001, 0x0, 0x7, 0x7f}, {0xa, 0x744, 0x7fffffff, 0x7, 0xfffffffe, 0xfffff801}, {0x3, 0x3, 0xe8, 0x0, 0x8, 0x6}, {0xa3, 0xff, 0x2b, 0xf, 0x7, 0x8000000}, {0x7, 0x678, 0x5, 0x7, 0x4, 0x600}, {0x1, 0x3, 0xfffffffd, 0x73a3, 0x0, 0x9}, {0x9b, 0x10000, 0x0, 0x80000001, 0xe4f, 0xa9}, {0xeda, 0x8a, 0x1, 0x9, 0x6, 0xfffffffe}, {0x1, 0x8c, 0x0, 0xb, 0x2, 0x2}, {0x0, 0x5, 0x6f0d, 0x5, 0x1ff, 0x6}, {0xbac1, 0xffff, 0xf, 0x3, 0xde94, 0x1}, {0xf, 0x1, 0x6, 0xf, 0xebe3, 0x632c}], [{0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x3}, {0x16bbac55c46027fd, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x7}, {0x5, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x2, 0xf707d4d33a03d386}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {}, {}, {0x3, 0x1}, {}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x4}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x5}, {0x6}, {0x0, 0x1}, {0x2}, {}, {0x4}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x2}]}}]}, {0x60, 0x6, "90dcfff5bd6cbac6a5534ce329efc995035f3ab14d4fa62ca9e190325d8986b6cc66cbabf26af97bebe04962f5b05b275929e82b8d9248d85b62b5abc3e9e78f1e8f30fe5a736a134a3ed4a946955cef86c6e4b8494ac3ee66088ca1"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x68}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x56}, @TCA_ROUTE4_IIF={0x8, 0x4, r10}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff2, 0x8}}]}}, @TCA_RATE={0x6, 0x5, {0x2}}]}, 0x106c}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r1}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000051881712f9ff70576a93000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r12, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r13 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r13, 0x4008af60, &(0x7f0000000040)={@my=0x1}) 4m29.487704312s ago: executing program 32 (id=116): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000000008000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffff000100"/28], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2a020400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf25170039001c00038008000200fdffffff0800030005000008000100080000002c0017800c0003000fed000000000000080001000400000008000200060000000c00030000100081000000002c00078008000100e40400000c000400050000000000000008000100070000000c0004000100000000000000100004800900010073797a3100200000"], 0x98}, 0x1, 0x0, 0x0, 0x40810}, 0x80) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev2(r5, &(0x7f0000000380)=[{&(0x7f0000000600)="002ec56be0d52f355b3adf", 0xb}], 0x1, 0x528, 0x5, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd700021dcdf10270000000c00018008000100", @ANYRES32, @ANYBLOB="180001801400020064756d6d7930"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@nested={0x8, 0x6, 0x0, 0x1, [@nested={0x4, 0x1}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x106c, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x1034, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x1b, 0x3}}, @TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xbf0}]}, @TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc}]}, @TCA_ROUTE4_ACT={0xfe4, 0x6, [@m_vlan={0x5c, 0xc, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x7, 0x0, 0xfffff1ee, 0x7fffffff}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb11}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x4}}}}, @m_pedit={0xf84, 0x4, 0x0, 0x0, {{0xa}, {0xefc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xef8, 0x4, {{{0x4, 0x38e37825, 0xffffffffffffffff, 0x4, 0x2e}, 0x6, 0x3, [{0xfff, 0xaa0, 0x7fffffff, 0x5, 0x9, 0xf87}, {0x6, 0x4, 0x4, 0x10000, 0xf41, 0x9}, {0x97c, 0x2, 0x3, 0x1, 0x22, 0x4}, {0xf09, 0x101, 0x9277, 0xffff, 0x3, 0xfc6}, {0x6, 0x6, 0x6, 0x3, 0x256, 0x800}, {0x2, 0x9, 0x10000, 0x9, 0x3, 0x7}, {0x80000001, 0x3ff, 0x4, 0x8, 0xea23, 0x6}, {0xd8b4, 0x8, 0x800, 0x6, 0x5, 0xfffffeff}, {0x40, 0xb7, 0x7ff, 0x1, 0x3, 0xfffffff8}]}, [{0xffff, 0x6, 0x0, 0x0, 0xffffff3a, 0x7}, {0xe, 0x1, 0x9, 0x3, 0xdd, 0xa}, {0x2, 0x6, 0x7, 0x401, 0xb, 0x42}, {0x8, 0x1, 0xc, 0xceb, 0x7ff, 0xa3b1}, {0x5, 0x3, 0x9, 0xb, 0x6d1, 0x10000}, {0x6, 0xda1a, 0x3, 0x5, 0x1ff, 0xc2d3}, {0x6ea, 0x10, 0x528, 0x8001, 0x7, 0xc}, {0x4, 0x3, 0xac, 0x61, 0xad, 0x2cbe}, {0xe4f, 0x7fff, 0xac8, 0x80000000, 0xfffffff8, 0x11f1}, {0x9, 0x3331, 0x0, 0xfffffe00, 0x4, 0x1}, {0x4, 0x10001, 0x4, 0x1, 0x10001, 0x5ea}, {0x45e7c124, 0x9, 0xe8, 0x182bd0b6, 0x4, 0x5}, {0x7ff, 0x5, 0x10, 0x5f35, 0x0, 0x9}, {0x6, 0x19, 0xffff08a7, 0x6, 0xce8, 0x2}, {0xffff, 0x9, 0x5, 0x7ff, 0xfffffff8, 0x8b1}, {0x1, 0xa, 0xc7, 0x40, 0xf0f3, 0x10000}, {0xf59f, 0x3, 0x6, 0x7fff, 0xff, 0x4}, {0x1, 0x6, 0x43aa175b, 0x2, 0x5, 0x6}, {0x75, 0x5, 0xffffff94, 0x8, 0x10000, 0x1fb}, {0x8000, 0x2, 0xe, 0x6, 0x6, 0x4}, {0x5, 0x6, 0x8, 0x9, 0x6, 0x1}, {0x4, 0x6, 0x3, 0x8e, 0x8001}, {0x1000, 0x0, 0xe, 0x2, 0x4, 0x7}, {0x5, 0x40, 0x6, 0xe, 0x18000000, 0xa}, {0x84, 0x2, 0x9, 0xfe, 0x400, 0x1ed1}, {0x3, 0x1, 0xf, 0x18000000, 0x80, 0xcda}, {0x80000001, 0xdbc, 0x2, 0xcf10, 0x0, 0xca7}, {0x2, 0x0, 0x8, 0x7, 0x6, 0x84}, {0x5, 0x1, 0x4, 0xc2ac, 0x3ff, 0x10000}, {0x7, 0x6, 0x3, 0x4, 0x2, 0x3}, {0x7, 0x1, 0x0, 0x3a4a, 0x81, 0xc000}, {0x8, 0x3, 0x1, 0x6, 0x8, 0x80000001}, {0x1fd, 0x4, 0x6, 0x3786, 0x40, 0x8}, {0xffff8001, 0x6, 0x7fff, 0xfffffff9, 0x0, 0x23f4}, {0xfffffff7, 0xfffff001, 0x4, 0x14, 0x1}, {0x3ff, 0x0, 0x2, 0x4, 0x1, 0x8562}, {0x3, 0xe, 0x1, 0x5f00, 0x5, 0x9}, {0x92e, 0x7, 0x4, 0x1ff, 0xff, 0x4}, {0x5, 0x0, 0x1, 0x0, 0x36d, 0x1}, {0x6, 0xd6, 0x9, 0x1, 0x5, 0x5}, {0x1, 0x460, 0x0, 0xf2, 0x8, 0xffffffff}, {0x4, 0x9, 0x5, 0x6, 0x7, 0x86}, {0x100, 0x7, 0xb6, 0x7, 0x6, 0x7}, {0x5, 0xfff, 0x3, 0xaa2, 0x4, 0x401}, {0x5, 0x2, 0x2d7, 0xc66eecb, 0x4, 0xe}, {0x80000000, 0x7, 0xf9b6, 0x95, 0x7ff, 0x2}, {0x6, 0xabba, 0x6, 0xaf, 0xc, 0x7}, {0xfffffffd, 0x4586d16d, 0x4, 0x0, 0x86b7, 0x100}, {0x0, 0x5d67ef11, 0x3, 0x2, 0x2, 0x7}, {0x7ff, 0x3, 0x777, 0xfffffffe, 0xb, 0x1ff}, {0x4, 0x9, 0x5, 0x2, 0x0, 0x3ff}, {0xfff, 0x6, 0x8, 0x2, 0x1472, 0x8}, {0x4, 0x4, 0x8, 0x7, 0x100, 0x4}, {0x3, 0x0, 0x7, 0x8, 0x4afc}, {0x0, 0x17207ab, 0x0, 0x0, 0x3, 0x1ff}, {0x10000000, 0x3, 0x5cc2, 0x3, 0x7f, 0x80000001}, {0xff, 0xfff, 0x8, 0x7, 0x8, 0xffff41fc}, {0xd15, 0xb65, 0x8, 0x0, 0xb, 0x9}, {0xa62c, 0xb, 0x10001, 0x4, 0x0, 0x6}, {0x7, 0xf, 0xff, 0x7, 0x9, 0x1}, {0x2, 0x9, 0x4, 0x10, 0xffff, 0x2}, {0x8, 0x4, 0x3, 0x2, 0x2, 0x6}, {0xe, 0x10000, 0x9, 0x9, 0xffffffff, 0x1}, {0x1, 0x3ff, 0x8e, 0x4, 0x8000, 0x9}, {0x6, 0x8, 0x4, 0x5, 0xffffffff, 0xc}, {0x79a4, 0x100, 0xfff, 0x9122, 0xc21, 0xff}, {0x7, 0x6, 0x2, 0x6, 0xfb, 0x6}, {0x7f, 0x2, 0x8000, 0x1ff, 0x8}, {0x4c, 0x4, 0xa6f, 0xffffffff, 0x4, 0xfffffffc}, {0x8, 0x8, 0x40, 0x2, 0x3}, {0x2, 0x4, 0x80000000, 0x2, 0x3, 0x69}, {0x5, 0xa0, 0x4, 0xd09, 0x9, 0x5}, {0x5, 0x2, 0x7, 0x4, 0x0, 0x9}, {0x0, 0xf0e, 0x2, 0x5, 0xfffffffc, 0x7}, {0x0, 0x2, 0x400, 0x6, 0x10001, 0xb2}, {0x3, 0xb1, 0x3, 0x5, 0xfffffffd, 0x10000}, {0x417, 0x8, 0xc9c3, 0x4, 0x3, 0x8000}, {0x9849, 0x80000001, 0x2, 0x3, 0x7fffffff, 0xd}, {0x8, 0xffffffc0, 0xe4, 0x6, 0x2f, 0x9}, {0x4, 0x8, 0x7fffffff, 0x9, 0x3}, {0x0, 0x8, 0x5, 0x3, 0x0, 0x3}, {0x3, 0x1, 0xfff, 0x101, 0x5, 0x9}, {0x3, 0x60, 0x9104, 0xa6, 0x3ff, 0x4}, {0x3, 0x3, 0x3, 0x457, 0x3, 0xfe}, {0x401, 0x80000001, 0xa54, 0x700, 0x4, 0x1}, {0x27, 0x32d6, 0x9, 0x6, 0xfffffc5f, 0xb600}, {0x401, 0x7, 0x8, 0x4, 0x61a, 0xb380}, {0x6, 0x5, 0x7fff, 0x1, 0x4, 0x3}, {0x0, 0x8, 0x2, 0x3, 0x1907, 0x200}, {0xfffff6d0, 0x9, 0x7, 0x7fff, 0xb, 0x200}, {0x2800, 0x100, 0x200, 0x7, 0xc57d, 0x39}, {0x80000000, 0x6, 0xeed, 0x7, 0x0, 0x7}, {0xb, 0x9c4, 0x5, 0x4, 0xb, 0x2}, {0x5, 0x3, 0x1, 0x5, 0x2, 0x17}, {0x35, 0x3, 0x8, 0xaf5, 0x4138000, 0x3}, {0x9, 0x5, 0xde2, 0x800, 0x2, 0x40}, {0x8, 0x6, 0xb, 0x5, 0x0, 0x7}, {0x0, 0x7fffffff, 0x2, 0x472, 0x6, 0x8}, {0x6, 0x59a6, 0x2, 0x8, 0x5, 0x2}, {0x4, 0x0, 0x401, 0x4711, 0x7, 0xfffffffe}, {0x9, 0x1, 0x2, 0x1, 0x9, 0xb}, {0x4, 0x7fff, 0x7ff800, 0x40000000, 0x8, 0x5}, {0x7, 0x6, 0x0, 0x7, 0x5e, 0xf}, {0x2, 0x1, 0x1, 0x6, 0x8, 0x1}, {0xff, 0x9, 0xffff, 0xab, 0x80, 0xfffffd74}, {0x10, 0x9, 0x0, 0x0, 0x6, 0xffff0000}, {0x4, 0x5, 0x8, 0x1ff, 0xd271}, {0x3, 0x0, 0xffff, 0x7ff, 0x8, 0x3}, {0xf, 0x4, 0x5, 0x800, 0x6, 0x1}, {0x6, 0x401, 0xc3a, 0xfffffff8, 0x401, 0x5}, {0x2, 0x93, 0x7, 0x563, 0xac4a, 0x6}, {0x1, 0x3, 0x5, 0xe, 0x5, 0x100}, {0x1, 0xae0, 0x2000000b, 0x6, 0xddc, 0x6}, {0xff, 0x1ff, 0x7ff, 0x100, 0x101, 0x8}, {0x5, 0x5, 0x94, 0x43d66f65, 0xc, 0x1ff}, {0x5, 0x4, 0x5, 0x4f9, 0x7cc9, 0x7}, {0x8, 0x10001, 0x0, 0x7, 0x7f}, {0xa, 0x744, 0x7fffffff, 0x7, 0xfffffffe, 0xfffff801}, {0x3, 0x3, 0xe8, 0x0, 0x8, 0x6}, {0xa3, 0xff, 0x2b, 0xf, 0x7, 0x8000000}, {0x7, 0x678, 0x5, 0x7, 0x4, 0x600}, {0x1, 0x3, 0xfffffffd, 0x73a3, 0x0, 0x9}, {0x9b, 0x10000, 0x0, 0x80000001, 0xe4f, 0xa9}, {0xeda, 0x8a, 0x1, 0x9, 0x6, 0xfffffffe}, {0x1, 0x8c, 0x0, 0xb, 0x2, 0x2}, {0x0, 0x5, 0x6f0d, 0x5, 0x1ff, 0x6}, {0xbac1, 0xffff, 0xf, 0x3, 0xde94, 0x1}, {0xf, 0x1, 0x6, 0xf, 0xebe3, 0x632c}], [{0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x3}, {0x16bbac55c46027fd, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x7}, {0x5, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x2, 0xf707d4d33a03d386}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {}, {}, {0x3, 0x1}, {}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x4}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x5}, {0x6}, {0x0, 0x1}, {0x2}, {}, {0x4}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x2}]}}]}, {0x60, 0x6, "90dcfff5bd6cbac6a5534ce329efc995035f3ab14d4fa62ca9e190325d8986b6cc66cbabf26af97bebe04962f5b05b275929e82b8d9248d85b62b5abc3e9e78f1e8f30fe5a736a134a3ed4a946955cef86c6e4b8494ac3ee66088ca1"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x68}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x56}, @TCA_ROUTE4_IIF={0x8, 0x4, r10}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff2, 0x8}}]}}, @TCA_RATE={0x6, 0x5, {0x2}}]}, 0x106c}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r1}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000051881712f9ff70576a93000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r12, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r13 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r13, 0x4008af60, &(0x7f0000000040)={@my=0x1}) 5.59595017s ago: executing program 0 (id=848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000640)={0x0, 0x0}) sched_setscheduler(r0, 0x6, &(0x7f0000000100)=0x1) r1 = getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000005c0)="0f40cd66ba430066b8d50066ef450f07b9a1020000b835770000ba000000000f30c46259ab4d02470f07c7442400b0000000c744240209f1bd66ff2c2466f04783640f094766baf80cb8c7a23b80ef66bafc0cec0f20d835200000000f22d8", 0x5f}], 0x1, 0x4, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="5e54e574da93883e8cfa850a728461ff75d2e73c68141965f3fbcf0e16db6e759d420186e17d0004b94e65d89f0834e0f9fe277e88033a19aa45952cb3bcb22a7c0190", 0x43}], 0x1}}], 0x1, 0x44000) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"5fbcdbfb555ab7b6da2c492fe4db90aeaf8e5347c79716e75fe060d73e9de531ef8085f88b3a09f05bf084c593b4dab8756600000000077eebf9940a0b60f02d333a2c2aa407522edaabb8cfccecb9d7e0cfd915c17f32bc1ac7e430af977b671ede8605c7c72a5d1397639fd21bf848190fbdbfaeb7e166205def53caa18404ba077c2b5713acbc3d125aea78dfd962dd250511376c3a3b5732114cc92d27be04c7c146cedcc9081a8435f9c67a0c5174df503a84dc11d1d98a2473fbd39de5d9c56ffa28098914b4d47ea99e8134deb75f944afd0df95136c08e057e4d839936c0755318e58ae63dd46f7009df574d263f87508d7e496efb29de0496d4018e8d6c6f7d016752a1d10bb1df8b406bb488dbb43ffd11eb1eb9b36d57cee3b9e4e2e72e97a8059bb8e8120bf04b1d0b929692cc3e5508293bb205beba29259f18213a602dde8a8a19dd2a16b26476ca4f24e86b84ee76d86aacc862c59e154e6bec6ec6e86eb3d9dd50c4ecf6de82c2419674da3b885ac6abaea4765d256727d8560fb55d0bee0c11b1e8a05d4b932254673e8f67abfca2f184a23839164b15e021bff742605fbeb628ab93803e90954074762487b0afc90eec0e31e75dda865693dd655a190f16dbdf7ce7693d27aaf31758d97e25ab40fc44dbc911639d99b592dd0c660b820a46b8374f7e8030031c39768fb9361164f5dad133cf0d5d66c617d3d62b1f0b80e9f88ffc872df05fb5822601dfe4b39179ace0a4f6808b39bad72a80a9a9bd579d0f9a104191ef6e708083218053d3daf8211dff0a87568b7c734ab79b26cf2a65d66b00f2c2f0d3ffd5fc35b58795406446275afb8df4247add7730331b045d384b0c9fa06284463eec7167512277a435ced48980aab83b37a85b7a33ce8fd8b2a543af82bd15955b12833a59645e1de6bd6ab86c4a046a0323415351e6ddb9bcb869d2e7d092b234bfa8c5be098abcd24d8b4a659b36d8af4f3136d23f9115ea6bdc62fb89e2de415e0f08bd6ec5cc53ee3a666049168a88191c6911ea5fe7972f5627923e8b5b9e7c5323da43d48b25caee3016f88c8178fb8ab1149547e33d7fff442fa3ab42408c87cdfe35a82034bd77399a0861ce16141670ffecde05c7393ae522430425707a4c7d988f34a494727e0b1920e93c95af07d3affe9d41bb82d59ff2149705bb782c9d85e53320268fb57096c6c47e616c457a371dda361170f706e53bf9a9ac5692b72d44072217ecb8646e841b6929251a080f56be308c47dac5d59db54bd1ca7499cf3bf7cb8bb763fed9a75d2eb69573b118e3ee78fb11d41c1ce314538fec8fc542c7bf4865841a2e71fc1efd9fa385903372e3670d96398128e75d786f242a6dbf2c053dc48ee2398763b1ba3550136c14ac7ad77d3c8e97b2f36b6af200"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r7, &(0x7f00000000c0), 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.183594382s ago: executing program 5 (id=852): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r3, 0xee72) sendfile(r2, r3, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x19) 4.836056407s ago: executing program 5 (id=855): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bdf000fcdbdf251000000008000300", @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES16=r2, @ANYBLOB="af"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) 4.674191624s ago: executing program 1 (id=857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 4.568088998s ago: executing program 5 (id=858): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 4.567711805s ago: executing program 3 (id=859): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) 4.342716366s ago: executing program 5 (id=861): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000ffff112700", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 4.192049097s ago: executing program 3 (id=863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) 4.191509289s ago: executing program 1 (id=864): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x168, 0x9, 0x0, 0xb, 0x238, 0x250, 0x250, 0x238, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth0_to_bridge\x00', 'nicvf0\x00'}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'team0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) (async) capset(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7}) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4ea0, 0x100000, @empty}, 0x1c) (async) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x20011814) r7 = syz_io_uring_setup(0x5683, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x22}, &(0x7f0000000340), &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r7}], 0x1, 0x0, 0x0, 0x0) (async) r8 = syz_io_uring_setup(0x3734, &(0x7f0000000580)={0x0, 0x139b, 0x4, 0x1, 0x16a, 0x0, r7}, &(0x7f0000000600), &(0x7f0000000900)) syz_io_uring_setup(0x7dc0, &(0x7f0000000880)={0x0, 0x5, 0x20000, 0x2, 0x2000000, 0x0, r8}, &(0x7f0000000780), 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) 4.087982967s ago: executing program 5 (id=865): r0 = syz_socket_connect_nvme_tcp() r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) recvmmsg(r0, 0x0, 0x0, 0x2101, &(0x7f0000000e00)) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000014) socket$pppoe(0x18, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.887822876s ago: executing program 1 (id=867): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') (async, rerun: 32) r1 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x421]}}]}]}, 0x5c}}, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000440)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) r7 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x80c0, 0x4) (async, rerun: 64) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 64) read$FUSE(r8, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r7, r9, r10) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=@updpolicy={0x1bc, 0x19, 0x4783d94c57cdfba3, 0x70bd27, 0x25dfdbfb, {{@in=@empty, @in=@remote, 0x4e23, 0x1ff, 0x4e21, 0x1, 0xa, 0x0, 0x20, 0x4, r5, r6}, {0x6, 0x8, 0x9, 0x0, 0x22b000000, 0x5, 0xfffffffffffffffd, 0x1000}, {0x8, 0x5c2, 0xfffffffffffffffe, 0x7}, 0x3, 0x6e6bb5, 0x3, 0x1, 0x2, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x33}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3503, 0x4, 0x3, 0x9b, 0x4, 0x1, 0xc402}]}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}, @policy={0xac, 0x7, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e24, 0x3, 0x4e22, 0x0, 0x2, 0x40, 0x80, 0x2b, 0x0, r9}, {0x7, 0x7fffffffffffffff, 0x0, 0x10, 0x8001, 0x7, 0xa16b, 0x4}, {0x7, 0x3, 0x33, 0x6}, 0x8, 0x0, 0x0, 0xb11b18b53d41785, 0x2, 0x1}}, @mark={0xc, 0x15, {0x35075d, 0x1ff}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4090}, 0x4000060) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x90}}, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000380)=ANY=[@ANYBLOB="12015002020000202505a102030109025c0002010800060904000001020d0000052406000105240000800d240f012c00000002000002d206241a0300200905810340004804030904010000020d00000904010102020d0000090582022000050a0209050302000209050600000000"], 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r13 = openat$cgroup_ro(r12, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r12, @ANYBLOB="05", @ANYRES16=r12, @ANYRES16=r13, @ANYRES16], 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x15a) (async) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 3.887463145s ago: executing program 0 (id=868): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setrlimit(0x9, &(0x7f0000000380)) io_setup(0x2004, &(0x7f0000000680)) 2.743168824s ago: executing program 3 (id=870): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(r1) 2.659986129s ago: executing program 0 (id=871): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) setitimer(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10020) 2.63222285s ago: executing program 1 (id=872): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r2, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) 2.528591254s ago: executing program 4 (id=873): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 2.243852542s ago: executing program 3 (id=874): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r1) 2.237929575s ago: executing program 1 (id=875): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x10) 2.202068335s ago: executing program 4 (id=876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) 1.984077626s ago: executing program 4 (id=877): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r2, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.792905765s ago: executing program 4 (id=878): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x4, {{0xa, 0x1, 0xffffffff, @private0, 0xffffffbb}}, {{0xa, 0x4e23, 0x806, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8}}}, 0x108) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.645376183s ago: executing program 0 (id=879): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r4, 0x5404, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0xe6c, 0x9, 0xffff1980, 0xa, 0x6, "d8ad0e98c775e49ce1c41b6500a138b8ccdb17"}) 1.13205192s ago: executing program 4 (id=880): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r3 = socket$netlink(0x10, 0x3, 0x2) preadv(r2, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 571.071649ms ago: executing program 0 (id=881): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) 546.401965ms ago: executing program 1 (id=882): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bind(0xffffffffffffffff, &(0x7f0000000040)=@sco={0x1f, @none}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$bt_hci(r3, 0x0, 0x1, 0x0, &(0x7f0000000080)=0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 379.919777ms ago: executing program 3 (id=883): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0) 379.519827ms ago: executing program 5 (id=884): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) socket$rds(0x15, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) 347.149901ms ago: executing program 0 (id=885): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "c172f5", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0xffbf, {0x5, 0x6, "54d03a", 0x400, 0x88, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00'}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000001880)=0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071106300000000006600"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000001100)=0x2000000009) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x20004041) syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r1) socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) 100.562461ms ago: executing program 4 (id=886): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000500000000000000cd0d000018110000", @ANYRES32, @ANYBLOB="020000dfffffffffb602000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018290000", @ANYRES32, @ANYBLOB="0000000007000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) 0s ago: executing program 3 (id=887): syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x1) kernel console output (not intermixed with test programs): 0 arch=c000003e syscall=202 compat=0 ip=0x7f68ecf8ebe9 code=0x7ffc0000 [ 178.932230][ T6940] syz.4.220: attempt to access beyond end of device [ 178.932230][ T6940] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 178.955500][ T30] audit: type=1326 audit(1755427593.010:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6938 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f68ecf8ebe9 code=0x7ffc0000 [ 178.955546][ T30] audit: type=1326 audit(1755427593.010:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6938 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ecf8ebe9 code=0x7ffc0000 [ 178.979667][ T6628] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.032632][ T6940] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 179.120553][ T30] audit: type=1326 audit(1755427593.010:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6938 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ecf8ebe9 code=0x7ffc0000 [ 179.229688][ T30] audit: type=1326 audit(1755427593.010:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6938 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f68ecf8ebe9 code=0x7ffc0000 [ 179.477762][ T30] audit: type=1326 audit(1755427593.010:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6938 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ecf8ebe9 code=0x7ffc0000 [ 179.869110][ T30] audit: type=1326 audit(1755427593.010:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6938 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ecf8ebe9 code=0x7ffc0000 [ 180.111337][ T30] audit: type=1326 audit(1755427593.010:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6938 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f68ecf8ebe9 code=0x7ffc0000 [ 180.207156][ T30] audit: type=1326 audit(1755427593.010:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6938 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ecf8ebe9 code=0x7ffc0000 [ 180.260662][ T3557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.269641][ T3557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.573659][ T6968] random: crng reseeded on system resumption [ 181.947838][ T6978] syz.4.227: attempt to access beyond end of device [ 181.947838][ T6978] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 181.961364][ T6978] EXT4-fs (nbd4): unable to read superblock [ 182.212110][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.244072][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.904254][ T43] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 186.164139][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 186.180629][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.317517][ T43] usb 2-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 186.384782][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.464211][ T43] usb 2-1: config 0 descriptor?? [ 186.496650][ T43] cdc_acm 2-1:0.0: skipping garbage [ 187.110518][ T10] usb 2-1: USB disconnect, device number 14 [ 187.442014][ T7014] xt_l2tp: invalid flags combination: 8 [ 189.563916][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 189.723980][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 189.750011][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.768451][ T10] usb 2-1: config 0 has no interface number 0 [ 189.781378][ T7053] No control pipe specified [ 189.786789][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 189.824177][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 189.824947][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 189.824960][ T30] audit: type=1326 audit(1755427603.910:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7052 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 189.853586][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.937718][ T10] usb 2-1: config 0 descriptor?? [ 189.961908][ T30] audit: type=1326 audit(1755427603.910:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7052 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 189.985651][ T10] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 190.045478][ T30] audit: type=1326 audit(1755427603.910:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7052 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 190.172586][ T7059] netlink: 408 bytes leftover after parsing attributes in process `syz.0.242'. [ 190.350268][ T7045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.459767][ T7045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.642308][ T30] audit: type=1326 audit(1755427603.910:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7052 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 190.664332][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.910568][ T10] usb 2-1: USB disconnect, device number 15 [ 191.108850][ T30] audit: type=1326 audit(1755427603.910:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7052 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 191.131077][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.607687][ T30] audit: type=1326 audit(1755427603.910:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7052 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 191.629221][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.085999][ T30] audit: type=1326 audit(1755427603.910:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7052 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 192.468969][ T30] audit: type=1326 audit(1755427603.910:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7052 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 193.493087][ T30] audit: type=1326 audit(1755427603.910:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7052 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 193.580025][ T30] audit: type=1326 audit(1755427603.910:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7052 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 193.763489][ T7071] sctp: [Deprecated]: syz.0.243 (pid 7071) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.763489][ T7071] Use struct sctp_sack_info instead [ 194.207524][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.214009][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.324012][ T7073] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 194.330719][ T7073] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 194.343095][ T7073] vhci_hcd vhci_hcd.0: Device attached [ 194.503270][ T7070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.244'. [ 194.606623][ T5913] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 194.634304][ T7075] vhci_hcd: connection closed [ 194.656571][ T3514] vhci_hcd: stop threads [ 195.034804][ T3514] vhci_hcd: release socket [ 195.062052][ T3514] vhci_hcd: disconnect device [ 195.964310][ T43] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 196.134019][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 196.150578][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.205172][ T43] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 196.374346][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.406035][ T43] usb 1-1: config 0 descriptor?? [ 196.432869][ T43] cdc_acm 1-1:0.0: skipping garbage [ 196.540847][ T7112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.251'. [ 196.577231][ T7116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.253'. [ 196.632015][ T7116] netlink: 'syz.4.253': attribute type 1 has an invalid length. [ 196.749041][ T5956] usb 1-1: USB disconnect, device number 14 [ 197.057511][ T7116] netlink: 'syz.4.253': attribute type 2 has an invalid length. [ 197.074293][ T7116] netlink: 'syz.4.253': attribute type 3 has an invalid length. [ 199.834002][ T5913] vhci_hcd: vhci_device speed not set [ 203.575461][ T7182] 9pnet_fd: Insufficient options for proto=fd [ 203.635336][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 203.635352][ T30] audit: type=1326 audit(1755427617.730:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7181 comm="syz.0.267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9fb98ebe9 code=0x0 [ 203.764990][ T5897] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 203.909494][ T7185] netlink: 72 bytes leftover after parsing attributes in process `syz.0.267'. [ 203.924221][ T7191] kAFS: unable to lookup cell '(/c¾ûL' [ 203.944140][ T5897] usb 6-1: device descriptor read/64, error -71 [ 203.974271][ T7190] x_tables: duplicate underflow at hook 1 [ 204.004939][ T7195] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.013974][ T7195] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.022681][ T7195] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.031439][ T7195] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.042288][ T7195] vxlan0: entered promiscuous mode [ 204.047485][ T7195] vxlan0: entered allmulticast mode [ 204.176427][ T7198] syz.1.269: attempt to access beyond end of device [ 204.176427][ T7198] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 204.189822][ T7198] EXT4-fs (nbd1): unable to read superblock [ 204.923885][ T5897] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 205.094091][ T5897] usb 6-1: device descriptor read/64, error -71 [ 206.016454][ T5897] usb usb6-port1: attempt power cycle [ 208.049163][ T7202] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 208.056391][ T7202] overlayfs: failed to set xattr on upper [ 208.062139][ T7202] overlayfs: ...falling back to index=off. [ 208.068023][ T7202] overlayfs: ...falling back to uuid=null. [ 208.975068][ T7230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.315734][ T7249] netlink: 44 bytes leftover after parsing attributes in process `syz.4.282'. [ 211.353911][ T7249] netlink: 20 bytes leftover after parsing attributes in process `syz.4.282'. [ 211.445036][ T7254] binder: BINDER_SET_CONTEXT_MGR already set [ 211.543646][ T7254] binder: 7252:7254 ioctl 4018620d 200000000040 returned -16 [ 211.671352][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.279'. [ 211.780676][ T7263] tipc: Started in network mode [ 211.821737][ T7263] tipc: Node identity 428461ffcdfb, cluster identity 4711 [ 211.838211][ T7263] tipc: Enabled bearer , priority 0 [ 211.855689][ T7259] syzkaller0: entered promiscuous mode [ 211.861193][ T7259] syzkaller0: entered allmulticast mode [ 212.219315][ T7275] tipc: Resetting bearer [ 212.835168][ T5888] tipc: Node number set to 2407490047 [ 212.848551][ T7266] pim6reg: entered allmulticast mode [ 212.848938][ T7283] xt_TCPMSS: Only works on TCP SYN packets [ 213.031888][ T7258] tipc: Resetting bearer [ 213.199779][ T7258] tipc: Disabling bearer [ 213.306616][ T7284] pim6reg: left allmulticast mode [ 214.536680][ T7305] netlink: 52 bytes leftover after parsing attributes in process `syz.0.292'. [ 215.791847][ T7325] syz.3.297: attempt to access beyond end of device [ 215.791847][ T7325] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 215.805251][ T7325] EXT4-fs (nbd3): unable to read superblock [ 217.959003][ T7350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.304'. [ 217.980845][ T7350] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.285688][ T30] audit: type=1326 audit(1755427632.240:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7352 comm="syz.5.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4658ebe9 code=0x7ffc0000 [ 218.791482][ T30] audit: type=1326 audit(1755427632.270:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7352 comm="syz.5.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4658ebe9 code=0x7ffc0000 [ 219.136287][ T30] audit: type=1326 audit(1755427632.490:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7352 comm="syz.5.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c4658ebe9 code=0x7ffc0000 [ 220.258327][ T30] audit: type=1326 audit(1755427632.510:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7352 comm="syz.5.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4658ebe9 code=0x7ffc0000 [ 220.352746][ T30] audit: type=1326 audit(1755427632.510:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7352 comm="syz.5.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4658ebe9 code=0x7ffc0000 [ 220.451507][ T30] audit: type=1326 audit(1755427632.510:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7352 comm="syz.5.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c4658ebe9 code=0x7ffc0000 [ 220.572223][ T30] audit: type=1326 audit(1755427632.540:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7352 comm="syz.5.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4658ebe9 code=0x7ffc0000 [ 220.668444][ T30] audit: type=1326 audit(1755427632.540:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7352 comm="syz.5.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f3c4658ebe9 code=0x7ffc0000 [ 220.723840][ T30] audit: type=1326 audit(1755427632.540:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7352 comm="syz.5.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4658ebe9 code=0x7ffc0000 [ 220.823893][ T30] audit: type=1326 audit(1755427632.560:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7352 comm="syz.5.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4658ebe9 code=0x7ffc0000 [ 220.853940][ T5897] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 221.044210][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 221.055253][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.084255][ T43] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 221.093573][ T5897] usb 2-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 221.122656][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.354967][ T7381] syz.5.311: attempt to access beyond end of device [ 221.354967][ T7381] nbd5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 221.368447][ T7381] EXT4-fs (nbd5): unable to read superblock [ 221.943899][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 221.964460][ T5897] usb 2-1: config 0 descriptor?? [ 222.171580][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.216679][ T5897] cdc_acm 2-1:0.0: skipping garbage [ 222.342410][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.443900][ T43] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 222.452988][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.605348][ T5934] usb 2-1: USB disconnect, device number 16 [ 222.675030][ T43] usb 1-1: config 0 descriptor?? [ 222.913885][ T5913] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 223.143985][ T5913] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 223.194134][ T5913] usb 6-1: config 1 has no interface number 0 [ 223.200287][ T5913] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.373517][ T5913] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 223.407323][ T43] ft260 0003:0403:6030.0009: chip code: 6424 8183 [ 223.462217][ T5913] usb 6-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x31, changing to 0x1 [ 223.572085][ T5913] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 223.614143][ T43] ft260 0003:0403:6030.0009: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 223.709565][ T5913] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.383843][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.391891][ T5913] usb 6-1: Product: syz [ 224.449888][ T43] ft260 0003:0403:6030.0009: failed to retrieve status: -32, no wakeup [ 224.503976][ T5913] usb 6-1: Manufacturer: syz [ 224.508628][ T5913] usb 6-1: SerialNumber: syz [ 224.526022][ T43] ft260 0003:0403:6030.0009: i2c bus error: 0x22 [ 224.702194][ T7464] xt_bpf: check failed: parse error [ 224.790762][ T43] ft260 0003:0403:6030.0009: failed to reset I2C controller: -71 [ 224.886572][ T43] usb 1-1: USB disconnect, device number 15 [ 225.034047][ T5913] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 225.068639][ T5913] cdc_ncm 6-1:1.1: bind() failure [ 226.455549][ T7498] netlink: 148 bytes leftover after parsing attributes in process `syz.0.326'. [ 226.900093][ T5897] usb 6-1: USB disconnect, device number 5 [ 227.181579][ T7507] program syz.1.327 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.611512][ T7512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.329'. [ 229.994330][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 230.859827][ T5934] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 231.093993][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 231.116773][ T5934] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 231.148908][ T5934] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 231.187899][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 231.228923][ T5934] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 231.283303][ T5934] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 231.331249][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.412065][ T5934] usb 5-1: Product: syz [ 231.428990][ T5934] usb 5-1: Manufacturer: syz [ 231.433628][ T5934] usb 5-1: SerialNumber: syz [ 231.515038][ T5934] usb 5-1: config 0 descriptor?? [ 231.609230][ T5934] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 231.759042][ T7525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.774336][ T7525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.046639][ T7543] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 232.053294][ T7543] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 232.061610][ T7543] vhci_hcd vhci_hcd.0: Device attached [ 232.703785][ T5934] imon:send_packet: packet tx failed (-71) [ 232.711287][ T7549] vhci_hcd: connection closed [ 232.724102][ T5934] imon 5-1:0.0: panel buttons/knobs setup failed [ 232.773648][ T36] vhci_hcd: stop threads [ 232.795115][ T36] vhci_hcd: release socket [ 232.851348][ T36] vhci_hcd: disconnect device [ 232.905830][ T5913] usb 42-1: enqueue for inactive port 0 [ 232.911499][ T7557] netlink: 'syz.1.338': attribute type 2 has an invalid length. [ 233.015397][ T5888] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 233.027730][ T5934] rc_core: IR keymap rc-imon-pad not found [ 233.224180][ T5934] Registered IR keymap rc-empty [ 233.250714][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 233.253372][ T5934] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 233.278331][ T5934] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 233.288692][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 233.292823][ T5934] imon:send_packet: packet tx failed (-71) [ 233.344799][ T5934] imon 5-1:0.0: remote input dev register failed [ 233.353365][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 233.363276][ T5934] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 233.379785][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.432746][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.444549][ T5934] imon 5-1:0.0: unable to initialize intf0, err 0 [ 233.453710][ T5934] imon:imon_probe: failed to initialize context! [ 233.471365][ T5934] imon 5-1:0.0: unable to register, err -19 [ 233.478227][ T5913] usb usb42-port1: attempt power cycle [ 233.494649][ T5888] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 233.511575][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.513411][ T5934] usb 5-1: USB disconnect, device number 15 [ 233.564819][ T5888] usb 6-1: config 0 descriptor?? [ 234.074042][ T5888] usbhid 6-1:0.0: can't add hid device: -71 [ 234.080078][ T5888] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 234.097905][ T5913] usb usb42-port1: unable to enumerate USB device [ 234.117749][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 234.117765][ T30] audit: type=1326 audit(1755427648.200:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7577 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 234.169696][ T5888] usb 6-1: USB disconnect, device number 6 [ 234.203849][ T30] audit: type=1326 audit(1755427648.210:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7577 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 234.270853][ T30] audit: type=1326 audit(1755427648.210:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7577 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 234.363642][ T30] audit: type=1326 audit(1755427648.250:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7577 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 234.425642][ T30] audit: type=1326 audit(1755427648.250:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7577 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 234.466851][ T30] audit: type=1326 audit(1755427648.250:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7577 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 235.872049][ T7605] netlink: 'syz.4.340': attribute type 1 has an invalid length. [ 235.880581][ T7605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.316591][ T5888] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 238.584273][ T5888] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 239.308979][ T7627] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 239.336111][ T7627] CIFS mount error: No usable UNC path provided in device string! [ 239.336111][ T7627] [ 239.346939][ T7627] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 241.663911][ T5888] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 241.673822][ T10] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 242.717379][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 242.733730][ T10] usb 4-1: config 201 has an invalid interface number: 249 but max is 0 [ 242.752117][ T5888] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 243.032537][ T10] usb 4-1: config 201 has no interface number 0 [ 243.274589][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.514258][ T10] usb 4-1: config 201 interface 249 has no altsetting 0 [ 243.529277][ T5888] usb 2-1: config 0 has no interface number 0 [ 243.537591][ T10] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 243.546892][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.682805][ T5888] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 243.729920][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.360'. [ 243.753478][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.775764][ T10] usb 4-1: Product: syz [ 243.779962][ T10] usb 4-1: Manufacturer: syz [ 243.802307][ T5888] usb 2-1: Product: syz [ 243.818998][ T10] usb 4-1: SerialNumber: syz [ 243.826984][ T5888] usb 2-1: Manufacturer: syz [ 243.909896][ T5888] usb 2-1: SerialNumber: syz [ 244.018897][ T5888] usb 2-1: config 0 descriptor?? [ 244.102842][ T7686] netlink: 'syz.4.364': attribute type 1 has an invalid length. [ 244.178121][ T5897] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 244.593008][ T10] ath6kl: Failed to submit usb control message: -71 [ 244.623978][ T5888] usb 2-1: Found UVC 0.00 device syz (046c:14e8) [ 244.630385][ T5888] usb 2-1: No valid video chain found. [ 244.639911][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 244.650890][ T10] ath6kl: Unable to send get target info: -71 [ 244.664559][ T5888] usb 2-1: USB disconnect, device number 17 [ 244.673316][ T10] ath6kl: Failed to init ath6kl core: -71 [ 244.728163][ T10] ath6kl_usb 4-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 244.744004][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 244.770566][ T5897] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.832488][ T5897] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.849951][ T10] usb 4-1: USB disconnect, device number 11 [ 244.888895][ T5897] usb 1-1: config 0 interface 0 has no altsetting 0 [ 244.929464][ T7694] tipc: Started in network mode [ 244.946984][ T5897] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 244.973861][ T7694] tipc: Node identity c6751650f3f3, cluster identity 4711 [ 245.013832][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.025180][ T7694] tipc: Enabled bearer , priority 0 [ 245.045523][ T5897] usb 1-1: config 0 descriptor?? [ 245.060528][ T7699] syzkaller0: entered promiscuous mode [ 245.082347][ T7699] syzkaller0: entered allmulticast mode [ 245.203188][ T7694] tipc: Resetting bearer [ 245.261389][ T7683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.294382][ T7683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.303316][ T7683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.324625][ T7691] tipc: Resetting bearer [ 245.365354][ T7683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.394944][ T7683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.422810][ T7683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.456169][ T7683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.494697][ T7683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.540801][ T7683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.550127][ T7691] tipc: Disabling bearer [ 245.612985][ T7683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.654659][ T7682] xt_CT: No such helper "snmp" [ 246.364097][ T5897] usbhid 1-1:0.0: can't add hid device: -71 [ 246.401696][ T5897] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 246.466624][ T5897] usb 1-1: USB disconnect, device number 16 [ 246.657240][ T7731] syz.4.367: attempt to access beyond end of device [ 246.657240][ T7731] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 246.736388][ T7731] EXT4-fs (nbd4): unable to read superblock [ 246.804647][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 246.953982][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 246.971402][ T10] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 246.981729][ T10] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 247.022021][ T10] usb 2-1: config 0 has no interface number 0 [ 247.062732][ T10] usb 2-1: config 0 interface 235 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 247.087912][ T10] usb 2-1: New USB device found, idVendor=2c7c, idProduct=012b, bcdDevice=5a.3e [ 247.102156][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.111857][ T10] usb 2-1: Product: syz [ 247.124821][ T10] usb 2-1: Manufacturer: syz [ 247.132077][ T10] usb 2-1: SerialNumber: syz [ 247.150735][ T10] usb 2-1: config 0 descriptor?? [ 247.173076][ T10] option 2-1:0.235: GSM modem (1-port) converter detected [ 247.464015][ T30] audit: type=1800 audit(1755427661.540:171): pid=7721 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.371" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 247.977361][ T7762] netlink: 9300 bytes leftover after parsing attributes in process `syz.5.376'. [ 248.725773][ T7766] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 249.843577][ T43] usb 2-1: USB disconnect, device number 18 [ 250.083777][ T43] option 2-1:0.235: device disconnected [ 250.429122][ T7779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.093127][ T7802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.385'. [ 252.968938][ T7810] 9pnet_fd: Insufficient options for proto=fd [ 254.938691][ T7850] kernel profiling enabled (shift: 5) [ 254.970256][ T7848] ubi31: attaching mtd0 [ 255.039163][ T7848] ubi31: scanning is finished [ 255.065542][ T7848] ubi31: empty MTD device detected [ 255.327089][ T7848] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 255.386427][ T7848] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes [ 255.438883][ T7848] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 255.496044][ T7848] ubi31: VID header offset: 514 (aligned 514), data offset: 578 [ 255.597396][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.603677][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.659518][ T7848] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 255.857467][ T7848] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 256.044995][ T7848] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3961101639 [ 256.078135][ T7848] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 256.213288][ T7870] ubi31: background thread "ubi_bgt31d" started, PID 7870 [ 256.528723][ T5956] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 256.857806][ T5956] usb 1-1: unable to get BOS descriptor or descriptor too short [ 256.889635][ T5956] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 256.934662][ T5956] usb 1-1: can't read configurations, error -71 [ 257.084131][ T7888] netlink: 'syz.1.398': attribute type 1 has an invalid length. [ 258.211435][ T7888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.720271][ T7893] bond1: (slave veth3): Enslaving as an active interface with a down link [ 261.329125][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 261.349965][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.598124][ T7901] netlink: 36 bytes leftover after parsing attributes in process `syz.0.400'. [ 261.819360][ T7920] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.404'. [ 261.904032][ T5956] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 262.274348][ T7908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.395011][ T5956] usb 6-1: Using ep0 maxpacket: 16 [ 262.403327][ T5956] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.436444][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.462509][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 262.509004][ T5956] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 262.552371][ T5956] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.608652][ T5956] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 262.632900][ T5956] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 262.669628][ T5956] usb 6-1: Manufacturer: syz [ 262.705183][ T7939] tipc: Started in network mode [ 262.720331][ T7939] tipc: Node identity 320a928c8bf9, cluster identity 4711 [ 262.762066][ T5956] usb 6-1: config 0 descriptor?? [ 262.764955][ T7939] tipc: Enabled bearer , priority 0 [ 262.794153][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 262.924346][ T7929] tipc: Resetting bearer [ 262.984511][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 263.000268][ T10] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 263.049394][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.231199][ T7928] tipc: Disabling bearer [ 263.261665][ T10] usb 5-1: Product: syz [ 263.273260][ T10] usb 5-1: Manufacturer: syz [ 263.283824][ T10] usb 5-1: SerialNumber: syz [ 263.293824][ T5956] rc_core: IR keymap rc-hauppauge not found [ 263.299733][ T5956] Registered IR keymap rc-empty [ 263.312686][ T10] usb 5-1: config 0 descriptor?? [ 263.325430][ T5956] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 263.333619][ T7955] program syz.0.409 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.484251][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 263.714537][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 263.797019][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.942934][ T10] usb 5-1: ignoring: not an USB2CAN converter [ 263.968832][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 263.973854][ T5956] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.031805][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 264.032733][ T7960] bridge0: entered promiscuous mode [ 264.056278][ T5956] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 264.062041][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 264.098840][ T7960] macsec1: entered allmulticast mode [ 264.110231][ T5956] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input9 [ 264.112383][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.129859][ T7960] bridge0: entered allmulticast mode [ 264.145899][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 264.160194][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 264.168617][ T24] usb 2-1: Manufacturer: syz [ 264.174136][ T5956] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.200081][ T24] usb 2-1: config 0 descriptor?? [ 264.214256][ T5956] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.223406][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 264.248957][ T10] usb 5-1: USB disconnect, device number 16 [ 264.284100][ T5956] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.311352][ T5956] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.384035][ T5956] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.434008][ T5956] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.438823][ T7954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.456817][ T7954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.466759][ T5956] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.535223][ T5956] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.566587][ T5956] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.623922][ T5956] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.690930][ T5956] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 264.724753][ T5956] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 264.754012][ T24] rc_core: IR keymap rc-hauppauge not found [ 264.757107][ T5956] usb 6-1: USB disconnect, device number 7 [ 264.774194][ T7986] openvswitch: netlink: Key type 16383 is out of range max 32 [ 264.797364][ T24] Registered IR keymap rc-empty [ 264.825801][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.874132][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.920882][ T24] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 265.006119][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input10 [ 265.135231][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.206724][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.254449][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.297034][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.325580][ T5956] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 265.333983][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.383925][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.447861][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.494434][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.518557][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.553093][ T5956] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 265.553904][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 265.566038][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.946167][ T5956] usb 1-1: config 0 descriptor?? [ 266.154504][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 266.237433][ T24] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 266.309209][ T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 266.388480][ T24] usb 2-1: USB disconnect, device number 19 [ 266.788004][ T7999] syz.0.417 (7999): drop_caches: 4 [ 268.227825][ T5956] razer 0003:1532:010E.000B: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0 [ 268.287350][ T5956] usb 1-1: USB disconnect, device number 19 [ 268.558561][ T8019] tipc: Enabled bearer , priority 0 [ 268.614074][ T8027] tipc: Resetting bearer [ 268.628599][ T8031] fido_id[8031]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 268.645068][ T8021] syzkaller0: entered promiscuous mode [ 268.669134][ T8021] syzkaller0: entered allmulticast mode [ 268.748307][ T8018] tipc: Resetting bearer [ 268.836624][ T8018] tipc: Disabling bearer [ 269.191655][ T8047] SET target dimension over the limit! [ 272.143539][ T8087] netlink: 24 bytes leftover after parsing attributes in process `syz.5.434'. [ 272.231185][ T8090] netlink: 'syz.3.435': attribute type 39 has an invalid length. [ 275.404843][ T8143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.446'. [ 275.415404][ T8143] sctp: [Deprecated]: syz.3.446 (pid 8143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.415404][ T8143] Use struct sctp_sack_info instead [ 275.911533][ T8156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.449'. [ 276.108775][ T8163] xt_HMARK: spi-set and port-set can't be combined [ 276.343650][ T8169] netlink: 'syz.0.450': attribute type 6 has an invalid length. [ 277.043697][ T8184] FAULT_INJECTION: forcing a failure. [ 277.043697][ T8184] name failslab, interval 1, probability 0, space 0, times 1 [ 277.056710][ T8184] CPU: 0 UID: 0 PID: 8184 Comm: syz.4.454 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 277.056734][ T8184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.056754][ T8184] Call Trace: [ 277.056765][ T8184] [ 277.056773][ T8184] dump_stack_lvl+0x189/0x250 [ 277.056810][ T8184] ? irqentry_exit+0x74/0x90 [ 277.056833][ T8184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.056875][ T8184] should_fail_ex+0x414/0x560 [ 277.056902][ T8184] should_failslab+0xa8/0x100 [ 277.056924][ T8184] __kmalloc_noprof+0xcb/0x4f0 [ 277.056942][ T8184] ? kfree+0x4d/0x440 [ 277.056966][ T8184] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 277.056997][ T8184] tomoyo_realpath_from_path+0xe3/0x5d0 [ 277.057024][ T8184] ? tomoyo_domain+0xda/0x130 [ 277.057054][ T8184] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 277.057076][ T8184] tomoyo_path_number_perm+0x1e8/0x5a0 [ 277.057099][ T8184] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 277.057138][ T8184] ? __lock_acquire+0xab9/0xd20 [ 277.057179][ T8184] ? __fget_files+0x2a/0x420 [ 277.057204][ T8184] ? __fget_files+0x2a/0x420 [ 277.057230][ T8184] ? __fget_files+0x3a0/0x420 [ 277.057249][ T8184] ? __fget_files+0x2a/0x420 [ 277.057275][ T8184] security_file_ioctl+0xcb/0x2d0 [ 277.057299][ T8184] __se_sys_ioctl+0x47/0x170 [ 277.057329][ T8184] do_syscall_64+0xfa/0x3b0 [ 277.057350][ T8184] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.057369][ T8184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.057388][ T8184] ? clear_bhb_loop+0x60/0xb0 [ 277.057412][ T8184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.057430][ T8184] RIP: 0033:0x7f68ecf8ebe9 [ 277.057450][ T8184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.057467][ T8184] RSP: 002b:00007f68eddf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.057493][ T8184] RAX: ffffffffffffffda RBX: 00007f68ed1b6180 RCX: 00007f68ecf8ebe9 [ 277.057508][ T8184] RDX: 0000200000000080 RSI: 000000004040ae79 RDI: 0000000000000009 [ 277.057520][ T8184] RBP: 00007f68eddf4090 R08: 0000000000000000 R09: 0000000000000000 [ 277.057533][ T8184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.057544][ T8184] R13: 00007f68ed1b6218 R14: 00007f68ed1b6180 R15: 00007fffb326d5f8 [ 277.057577][ T8184] [ 277.057607][ T8184] ERROR: Out of memory at tomoyo_realpath_from_path. [ 279.129604][ T8196] IPv6: addrconf: prefix option has invalid lifetime [ 279.156151][ T8200] netlink: 'syz.1.458': attribute type 10 has an invalid length. [ 279.285192][ T8200] team0: Port device dummy0 added [ 279.564714][ T8208] netlink: 'syz.5.459': attribute type 58 has an invalid length. [ 279.608555][ T8208] netlink: 20 bytes leftover after parsing attributes in process `syz.5.459'. [ 279.817054][ T8216] netlink: 'syz.4.462': attribute type 2 has an invalid length. [ 280.024405][ T5956] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 280.103693][ T8228] fuse: Bad value for 'fd' [ 280.191190][ T5956] usb 5-1: device descriptor read/64, error -71 [ 280.521352][ T5956] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 280.682775][ T8243] binder: 8242:8243 ioctl c0306201 200000000240 returned -11 [ 280.694523][ T5956] usb 5-1: device descriptor read/64, error -71 [ 280.820951][ T5956] usb usb5-port1: attempt power cycle [ 281.183814][ T5956] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 281.228070][ T5956] usb 5-1: device descriptor read/8, error -71 [ 281.483827][ T5956] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 281.515419][ T5956] usb 5-1: device descriptor read/8, error -71 [ 281.649997][ T5956] usb usb5-port1: unable to enumerate USB device [ 282.359508][ T8274] erspan0: entered promiscuous mode [ 282.383285][ T8274] erspan0: left promiscuous mode [ 282.430028][ T8276] sock: sock_timestamping_bind_phc: sock not bind to device [ 282.597587][ T8276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 282.684112][ T5928] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 282.893974][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 282.943895][ T43] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 283.224463][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 283.250529][ T5928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.328656][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 283.337237][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 283.359837][ T43] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11 [ 283.371243][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 283.381031][ T43] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 75, using maximum allowed: 30 [ 283.392931][ T5928] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 283.403387][ T43] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1048, setting to 1024 [ 283.422971][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.436467][ T43] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 283.450155][ T43] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 283.461778][ T43] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 75 [ 283.475562][ T5928] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 283.485921][ T5928] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 283.494312][ T5928] usb 4-1: Manufacturer: syz [ 283.501124][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.511754][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.525783][ T5928] usb 4-1: config 0 descriptor?? [ 283.530970][ T43] usb 2-1: Product: syz [ 283.535808][ T43] usb 2-1: Manufacturer: syz [ 283.540869][ T43] usb 2-1: SerialNumber: syz [ 283.802925][ T43] cdc_ncm 2-1:1.0: skipping garbage [ 284.003430][ T8284] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 284.010912][ T8284] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 284.770264][ T43] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 284.807809][ T43] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 284.847273][ T43] cdc_ncm 2-1:1.0: bind() failure [ 284.872259][ T43] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 284.899644][ T43] cdc_ncm 2-1:1.1: bind() failure [ 284.933622][ T43] usb 2-1: USB disconnect, device number 20 [ 284.993851][ T5928] rc_core: IR keymap rc-hauppauge not found [ 285.030317][ T5928] Registered IR keymap rc-empty [ 285.057952][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.204240][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.304971][ T5928] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 285.414905][ T5928] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 285.492379][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.603926][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.656047][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.684441][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.741610][ T8333] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 285.757651][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.815221][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.873932][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.914077][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.954293][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 286.015095][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 286.099908][ T5928] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 286.146382][ T5928] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 286.209543][ T5928] usb 4-1: USB disconnect, device number 12 [ 287.131728][ T5928] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 288.270810][ T5934] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 288.513809][ T5934] usb 1-1: Using ep0 maxpacket: 16 [ 288.537833][ T5934] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.583822][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.645316][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 288.698941][ T5934] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 288.733870][ T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 288.754748][ T5934] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.813095][ T5934] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 288.845692][ T5934] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 288.860882][ T5934] usb 1-1: Manufacturer: syz [ 288.881469][ T5934] usb 1-1: config 0 descriptor?? [ 288.904115][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 288.921861][ T43] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 288.948195][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.964246][ T43] usb 4-1: Product: syz [ 288.988243][ T43] usb 4-1: Manufacturer: syz [ 289.007390][ T43] usb 4-1: SerialNumber: syz [ 289.046082][ T43] usb 4-1: config 0 descriptor?? [ 289.116338][ T43] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 289.740925][ T8389] : entered promiscuous mode [ 293.244800][ T43] gp8psk: usb in 128 operation failed. [ 293.291454][ T43] gp8psk: usb in 137 operation failed. [ 293.320182][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 293.334807][ T43] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 293.347748][ T43] usb 4-1: media controller created [ 293.482673][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.514707][ T43] gp8psk_fe: Frontend revision 1 attached [ 293.524359][ T43] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 293.533067][ T43] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 293.848871][ T43] gp8psk: usb in 138 operation failed. [ 293.880048][ T43] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 293.933777][ T5934] rc_core: IR keymap rc-hauppauge not found [ 293.943762][ T43] gp8psk: found Genpix USB device pID = 201 (hex) [ 293.962476][ T5934] Registered IR keymap rc-empty [ 294.010832][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.020603][ T43] usb 4-1: USB disconnect, device number 13 [ 294.065979][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.145039][ T5934] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 294.200630][ T5934] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 294.354614][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.456961][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.556176][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.688540][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.795167][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.989904][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 295.043962][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 295.809268][ T43] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 295.820906][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 295.903868][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 295.924186][ T5934] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 296.041051][ T5934] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 296.068854][ T5934] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 296.116751][ T5934] usb 1-1: USB disconnect, device number 20 [ 296.192312][ T8443] program syz.5.517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.230818][ T8443] xt_ecn: cannot match TCP bits for non-tcp packets [ 296.293906][ T43] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 296.458608][ T43] usb 4-1: device descriptor read/64, error -71 [ 296.493981][ T5934] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 296.673818][ T5928] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 296.686457][ T5934] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 296.697027][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.705719][ T5934] usb 1-1: Product: syz [ 296.709976][ T5934] usb 1-1: Manufacturer: syz [ 296.715926][ T43] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 296.724781][ T5934] usb 1-1: SerialNumber: syz [ 296.759368][ T5934] usb 1-1: config 0 descriptor?? [ 296.866917][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 296.887849][ T5928] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 296.934356][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.950111][ T5928] usb 6-1: config 0 descriptor?? [ 297.599909][ T8469] loop6: detected capacity change from 0 to 63 [ 297.614742][ T5928] asus 0003:0B05:17E0.000C: item fetching failed at offset 2/5 [ 297.644857][ T5928] asus 0003:0B05:17E0.000C: Asus hid parse failed: -22 [ 297.665139][ T8469] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.694379][ T5928] asus 0003:0B05:17E0.000C: probe with driver asus failed with error -22 [ 297.744876][ T8469] Buffer I/O error on dev loop6, logical block 1, async page read [ 297.803984][ T8469] Buffer I/O error on dev loop6, logical block 2, async page read [ 297.849250][ T8469] Buffer I/O error on dev loop6, logical block 3, async page read [ 297.865564][ T5934] usb-storage 1-1:0.0: USB Mass Storage device detected [ 297.870755][ T6066] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.884695][ T8470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.922914][ T6066] Buffer I/O error on dev loop6, logical block 1, async page read [ 297.936174][ T6066] Buffer I/O error on dev loop6, logical block 2, async page read [ 297.944523][ T6066] Buffer I/O error on dev loop6, logical block 3, async page read [ 297.953612][ T8473] Buffer I/O error on dev loop6, logical block 0, async page read [ 297.961997][ T8473] Buffer I/O error on dev loop6, logical block 1, async page read [ 297.974669][ T8470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.997808][ T10] usb 6-1: USB disconnect, device number 9 [ 298.086117][ T5934] usb 1-1: USB disconnect, device number 21 [ 298.233906][ T43] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 298.403863][ T43] usb 2-1: device descriptor read/64, error -71 [ 298.463936][ T5934] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 298.523862][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 298.764557][ T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 298.848224][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.963585][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 299.087182][ T10] usb 6-1: config 1 has no interface number 0 [ 299.173836][ T43] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 299.176180][ T10] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 299.197751][ T10] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 299.212790][ T5934] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 299.214955][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.231120][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.239783][ T10] usb 6-1: Product: syz [ 299.244450][ T10] usb 6-1: Manufacturer: syz [ 299.249062][ T10] usb 6-1: SerialNumber: syz [ 299.354618][ T5934] usb 1-1: config 7 has no interface number 0 [ 299.395215][ T5934] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 299.413792][ T43] usb 2-1: device descriptor read/64, error -71 [ 299.423886][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.432018][ T5934] usb 1-1: Product: syz [ 299.437400][ T5934] usb 1-1: Manufacturer: syz [ 299.442135][ T5934] usb 1-1: SerialNumber: syz [ 299.492950][ T10] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 299.530446][ T10] usb 6-1: USB disconnect, device number 10 [ 299.550169][ T43] usb usb2-port1: attempt power cycle [ 299.711481][ T8496] netlink: 332 bytes leftover after parsing attributes in process `syz.3.530'. [ 299.720956][ T8496] netlink: 'syz.3.530': attribute type 9 has an invalid length. [ 299.728948][ T8496] netlink: 108 bytes leftover after parsing attributes in process `syz.3.530'. [ 299.738050][ T8496] netlink: 32 bytes leftover after parsing attributes in process `syz.3.530'. [ 300.358537][ T43] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 300.474523][ T43] usb 2-1: device descriptor read/8, error -71 [ 300.484506][ T5934] as10x_usb: device has been detected [ 300.490802][ T5934] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 300.527020][ T5934] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 300.587987][ T5934] as10x_usb: error during firmware upload part1 [ 300.597974][ T5934] Registered device Elgato EyeTV DTT Deluxe [ 300.604075][ T5934] usb 1-1: USB disconnect, device number 22 [ 300.653262][ T5934] Unregistered device Elgato EyeTV DTT Deluxe [ 300.674611][ T5934] as10x_usb: device has been disconnected [ 300.724752][ T43] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 300.783681][ T43] usb 2-1: device descriptor read/8, error -71 [ 301.059618][ T43] usb usb2-port1: unable to enumerate USB device [ 301.255180][ T5934] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 301.537177][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 301.832393][ T5934] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 301.886650][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 301.899949][ T43] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 301.914698][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 301.927364][ T5934] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 301.945566][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.994891][ T5934] usb 1-1: config 0 descriptor?? [ 302.030495][ T8504] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 302.049494][ T5934] hub 1-1:0.0: USB hub found [ 302.066772][ T43] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 302.078764][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.144580][ T43] usb 6-1: config 0 descriptor?? [ 302.279246][ T5934] hub 1-1:0.0: 2 ports detected [ 302.340238][ T5934] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 302.382498][ T5934] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 302.409314][ T5934] usbhid 1-1:0.0: can't add hid device: -71 [ 302.539292][ T5934] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 302.793507][ T5934] usb 1-1: USB disconnect, device number 23 [ 303.092604][ T43] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 303.185669][ T43] [drm:udl_init] *ERROR* Selecting channel failed [ 303.300365][ T43] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 303.320060][ T43] [drm] Initialized udl on minor 2 [ 303.336496][ T43] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 303.394284][ T43] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 303.416181][ T5928] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 303.434141][ T43] usb 6-1: USB disconnect, device number 11 [ 303.460675][ T5928] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 304.067426][ T8558] sctp: [Deprecated]: syz.1.545 (pid 8558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.067426][ T8558] Use struct sctp_sack_info instead [ 307.388253][ T8580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.552'. [ 308.801588][ T8580] netlink: 'syz.1.552': attribute type 10 has an invalid length. [ 308.978609][ T8580] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 309.231322][ T8580] team0: Port device virt_wifi0 added [ 309.284637][ T8580] openvswitch: netlink: Flow key attr not present in new flow. [ 309.416403][ T8594] netlink: 16 bytes leftover after parsing attributes in process `syz.4.554'. [ 309.550098][ T8597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.555'. [ 309.620786][ T8598] netlink: 120 bytes leftover after parsing attributes in process `syz.4.554'. [ 310.905473][ T5962] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 311.063870][ T5962] usb 6-1: Using ep0 maxpacket: 16 [ 311.144261][ T5962] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 311.211564][ T5962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 311.227582][ T8615] netlink: 56 bytes leftover after parsing attributes in process `syz.0.559'. [ 311.272707][ T5962] usb 6-1: SerialNumber: syz [ 311.859126][ T5962] usb 6-1: config 0 descriptor?? [ 311.876686][ T5962] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 311.895661][ T5962] usb 6-1: Detected FT232A [ 311.919339][ T5962] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 312.082004][ T5962] usb 6-1: USB disconnect, device number 12 [ 313.194876][ T5962] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 313.222032][ T5962] ftdi_sio 6-1:0.0: device disconnected [ 313.810533][ T8636] syz.0.564: attempt to access beyond end of device [ 313.810533][ T8636] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 313.823619][ T8636] EXT4-fs (nbd0): unable to read superblock [ 314.164172][ T8640] sctp: [Deprecated]: syz.5.565 (pid 8640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.164172][ T8640] Use struct sctp_sack_info instead [ 314.182931][ T8640] openvswitch: netlink: Missing key (keys=1040, expected=2000) [ 314.633021][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 314.651226][ T8645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.566'. [ 316.163264][ T30] audit: type=1326 audit(1755427730.250:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8680 comm="syz.5.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4658ebe9 code=0x7ffc0000 [ 316.205513][ T8681] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 316.344366][ T30] audit: type=1326 audit(1755427730.280:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8680 comm="syz.5.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4658ebe9 code=0x7ffc0000 [ 316.417939][ T30] audit: type=1326 audit(1755427730.290:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8680 comm="syz.5.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3c4658ebe9 code=0x7ffc0000 [ 316.466048][ T30] audit: type=1326 audit(1755427730.290:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8680 comm="syz.5.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4658ebe9 code=0x7ffc0000 [ 316.494702][ T30] audit: type=1326 audit(1755427730.290:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8680 comm="syz.5.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3c4658ebe9 code=0x7ffc0000 [ 316.517984][ T30] audit: type=1326 audit(1755427730.290:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8680 comm="syz.5.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4658ebe9 code=0x7ffc0000 [ 316.567455][ T30] audit: type=1326 audit(1755427730.290:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8680 comm="syz.5.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3c4658ebe9 code=0x7ffc0000 [ 316.589632][ T30] audit: type=1326 audit(1755427730.290:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8680 comm="syz.5.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4658ebe9 code=0x7ffc0000 [ 316.612622][ T30] audit: type=1326 audit(1755427730.290:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8680 comm="syz.5.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f3c4658ebe9 code=0x7ffc0000 [ 316.697038][ T30] audit: type=1326 audit(1755427730.290:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8680 comm="syz.5.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4658ebe9 code=0x7ffc0000 [ 316.821134][ T8690] fuse: Unknown parameter '017777777777777777777770x0000000000000007000000000000000000000000000000000000000600000000000000000000' [ 316.952358][ T8694] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 317.039094][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.045571][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.661891][ T51] block nbd5: Receive control failed (result -107) [ 317.752261][ T8700] block nbd5: shutting down sockets [ 318.013536][ T8710] pim6reg: entered allmulticast mode [ 318.027827][ T8710] pim6reg: left allmulticast mode [ 318.464085][ T8721] netlink: 272 bytes leftover after parsing attributes in process `syz.4.584'. [ 320.523875][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 321.170798][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 321.471315][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 321.500069][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 321.531586][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.567503][ T8735] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 321.586148][ T5934] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.593586][ T5934] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.647094][ T5934] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.648158][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 321.670030][ T5934] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.703017][ T5934] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.718986][ T5934] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.733774][ T5934] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.767975][ T5934] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.798424][ T5934] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.821658][ T5934] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.843160][ T5934] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.897404][ T5934] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.932483][ T5934] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.992035][ T5934] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 322.038158][ T8735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.050074][ T5934] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 322.065436][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.597'. [ 322.074807][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.597'. [ 322.083560][ T8761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.159910][ T8735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.935265][ T5934] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 322.959186][ T5934] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [] on [ 322.965738][ T8765] netlink: 56 bytes leftover after parsing attributes in process `syz.4.596'. [ 323.068424][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 323.088572][ T8735] netlink: 32 bytes leftover after parsing attributes in process `syz.3.589'. [ 323.134482][ T8735] netlink: 48 bytes leftover after parsing attributes in process `syz.3.589'. [ 323.297017][ T5888] usb 4-1: USB disconnect, device number 16 [ 324.276607][ T8802] 9pnet_fd: Insufficient options for proto=fd [ 324.454759][ T8809] nbd0: detected capacity change from 0 to 1024 [ 324.478424][ T6230] block nbd0: Send control failed (result -89) [ 324.495766][ T6230] block nbd0: Request send failed, requeueing [ 324.522593][ T51] block nbd0: Receive control failed (result -32) [ 324.542712][ T6119] block nbd0: Dead connection, failed to find a fallback [ 324.550437][ T6119] block nbd0: shutting down sockets [ 324.556218][ T6119] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.565810][ T6119] buffer_io_error: 82 callbacks suppressed [ 324.565819][ T6119] Buffer I/O error on dev nbd0, logical block 0, async page read [ 324.583848][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 324.593355][ T6230] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.607944][ T8810] nbd0: detected capacity change from 1024 to 467840 [ 324.635180][ T6230] Buffer I/O error on dev nbd0, logical block 0, async page read [ 324.674134][ T6230] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.683554][ T6230] Buffer I/O error on dev nbd0, logical block 0, async page read [ 324.694750][ T6230] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.708170][ T6230] Buffer I/O error on dev nbd0, logical block 0, async page read [ 324.723504][ T6230] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.733624][ T6230] Buffer I/O error on dev nbd0, logical block 0, async page read [ 324.741633][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 324.749118][ T6230] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.758454][ T6230] Buffer I/O error on dev nbd0, logical block 0, async page read [ 324.768279][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 324.775431][ T10] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 324.786072][ T6230] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.795653][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.804070][ T6230] Buffer I/O error on dev nbd0, logical block 0, async page read [ 324.813871][ T6230] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.823685][ T10] usb 2-1: config 0 descriptor?? [ 324.842721][ T6230] Buffer I/O error on dev nbd0, logical block 0, async page read [ 324.864114][ T6230] ldm_validate_partition_table(): Disk read failed. [ 324.878941][ T6230] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.888760][ T6230] Buffer I/O error on dev nbd0, logical block 0, async page read [ 324.899629][ T6230] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.909442][ T6230] Buffer I/O error on dev nbd0, logical block 0, async page read [ 324.917932][ T6230] Dev nbd0: unable to read RDB block 0 [ 324.924806][ T6230] nbd0: unable to read partition table [ 324.942482][ T6230] ldm_validate_partition_table(): Disk read failed. [ 324.984429][ T6230] Dev nbd0: unable to read RDB block 0 [ 324.998522][ T6230] nbd0: unable to read partition table [ 325.053043][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 325.069313][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 325.100117][ T6230] ldm_validate_partition_table(): Disk read failed. [ 325.134976][ T10] usb 2-1: USB disconnect, device number 25 [ 325.150746][ T6230] Dev nbd0: unable to read RDB block 0 [ 325.174335][ T6230] nbd0: unable to read partition table [ 325.191443][ T5208] ldm_validate_partition_table(): Disk read failed. [ 325.211064][ T5208] Dev nbd0: unable to read RDB block 0 [ 325.220666][ T5208] nbd0: unable to read partition table [ 325.243380][ T6230] ldm_validate_partition_table(): Disk read failed. [ 325.299204][ T6230] Dev nbd0: unable to read RDB block 0 [ 325.348034][ T6230] nbd0: unable to read partition table [ 325.582408][ T8821] tty tty31: ldisc open failed (-12), clearing slot 30 [ 325.845607][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'. [ 325.855561][ T8827] netlink: 48 bytes leftover after parsing attributes in process `syz.1.612'. [ 325.865655][ T8824] program syz.0.611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.900683][ T8827] vlan2: entered allmulticast mode [ 325.926847][ T8829] netlink: 80 bytes leftover after parsing attributes in process `syz.5.613'. [ 326.841709][ T8835] input: syz1 as /devices/virtual/input/input13 [ 326.855311][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.615'. [ 327.893810][ T5934] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 329.013881][ T5934] usb 6-1: Using ep0 maxpacket: 32 [ 329.035680][ T5934] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 329.123793][ T5934] usb 6-1: can't read configurations, error -22 [ 329.283807][ T5934] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 329.448063][ T5934] usb 6-1: Using ep0 maxpacket: 32 [ 329.505294][ T5934] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 329.718897][ T5934] usb 6-1: can't read configurations, error -22 [ 329.737211][ T5934] usb usb6-port1: attempt power cycle [ 329.737427][ T8887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.786959][ T8887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.863861][ T5888] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 329.994393][ T5962] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 330.051270][ T8895] netlink: 80 bytes leftover after parsing attributes in process `syz.3.632'. [ 330.109724][ T5888] usb 2-1: config 0 has no interfaces? [ 330.111510][ T5934] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 330.118473][ T5888] usb 2-1: New USB device found, idVendor=046d, idProduct=b309, bcdDevice= 0.40 [ 330.194870][ T5934] usb 6-1: Using ep0 maxpacket: 32 [ 330.216172][ T5962] usb 1-1: Using ep0 maxpacket: 16 [ 330.231158][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.237208][ T5934] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 330.264884][ T5962] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 330.321917][ T5934] usb 6-1: can't read configurations, error -22 [ 330.415264][ T5888] usb 2-1: Product: syz [ 330.499872][ T5962] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.594159][ T5934] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 330.605849][ T5888] usb 2-1: Manufacturer: syz [ 330.686108][ T5888] usb 2-1: SerialNumber: syz [ 330.698545][ T5962] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 330.708548][ T5888] usb 2-1: config 0 descriptor?? [ 330.737235][ T5934] usb 6-1: device descriptor read/8, error -71 [ 330.747381][ T5962] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 330.785214][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.848788][ T5962] usb 1-1: Product: syz [ 330.867020][ T5962] usb 1-1: Manufacturer: syz [ 330.890274][ T5962] usb 1-1: SerialNumber: syz [ 330.895292][ T5934] usb usb6-port1: unable to enumerate USB device [ 330.995777][ T5888] usb 2-1: USB disconnect, device number 26 [ 331.034248][ T8909] netlink: 'syz.3.635': attribute type 12 has an invalid length. [ 331.045862][ T8909] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.635'. [ 331.297222][ T5934] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 331.499820][ T5934] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 331.508129][ T43] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 331.547582][ T5934] usb 6-1: config 0 has no interface number 0 [ 331.583411][ T5934] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 331.617939][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.657354][ T5934] usb 6-1: Product: syz [ 331.670063][ T5934] usb 6-1: Manufacturer: syz [ 331.685812][ T5934] usb 6-1: SerialNumber: syz [ 331.703861][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 331.711324][ T5934] usb 6-1: config 0 descriptor?? [ 331.736763][ T43] usb 5-1: config 162 has an invalid interface number: 218 but max is 2 [ 331.870307][ T43] usb 5-1: config 162 has an invalid descriptor of length 109, skipping remainder of the config [ 331.897133][ T43] usb 5-1: config 162 has 1 interface, different from the descriptor's value: 3 [ 331.922222][ T43] usb 5-1: config 162 has no interface number 0 [ 332.172895][ T5934] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 332.640109][ T43] usb 5-1: config 162 interface 218 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.656713][ T5934] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 332.668156][ T43] usb 5-1: config 162 interface 218 has no altsetting 0 [ 332.675336][ T5934] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 332.683180][ T5934] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 332.694958][ T43] usb 5-1: New USB device found, idVendor=0846, idProduct=4301, bcdDevice=84.d8 [ 332.709780][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.718510][ T5934] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 332.727328][ T43] usb 5-1: Product: syz [ 332.731514][ T43] usb 5-1: Manufacturer: syz [ 332.751003][ T43] usb 5-1: SerialNumber: syz [ 332.797727][ T5962] usb 1-1: 0:2 : does not exist [ 332.850893][ T5962] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 332.888713][ T5934] usb 6-1: USB disconnect, device number 17 [ 332.917436][ T5934] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 332.963567][ T5934] keyspan 6-1:0.133: device disconnected [ 332.981476][ T43] usb 5-1: Could not find all expected endpoints [ 332.990202][ T5962] usb 1-1: USB disconnect, device number 24 [ 333.086616][ T43] usb 5-1: USB disconnect, device number 21 [ 333.227812][ T6230] udevd[6230]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 333.453866][ T5962] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 334.421594][ T5962] usb 1-1: device descriptor read/64, error -71 [ 334.820768][ T5962] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 334.833868][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 335.299036][ T5962] usb 1-1: device descriptor read/64, error -71 [ 335.354249][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 335.374830][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 335.386595][ T9] usb 2-1: config 0 has no interface number 0 [ 335.393075][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.404133][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.431799][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 335.466733][ T5962] usb usb1-port1: attempt power cycle [ 335.484994][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.561652][ T9] usb 2-1: config 0 descriptor?? [ 335.627868][ T8968] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 3, id = 0 [ 335.763874][ T5888] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 335.846910][ T5962] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 335.874578][ T5962] usb 1-1: device descriptor read/8, error -71 [ 335.958969][ T5888] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 335.966323][ T5928] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 335.978351][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.025038][ T5888] usb 4-1: config 0 descriptor?? [ 336.039497][ T5888] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 336.138456][ T5928] usb 6-1: device descriptor read/64, error -71 [ 336.312224][ T9] uclogic 0003:28BD:0094.000E: pen parameters not found [ 336.324905][ T9] uclogic 0003:28BD:0094.000E: interface is invalid, ignoring [ 336.336590][ T9] usb 2-1: USB disconnect, device number 27 [ 336.405583][ T5928] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 336.430172][ T8988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.653'. [ 336.664051][ T5928] usb 6-1: device descriptor read/64, error -71 [ 336.884351][ T5928] usb usb6-port1: attempt power cycle [ 337.152830][ T8993] evm: overlay not supported [ 337.262432][ T5888] gspca_sunplus: reg_w_riv err -71 [ 337.271200][ T5888] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 337.316610][ T5888] usb 4-1: USB disconnect, device number 17 [ 337.528073][ T5928] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 337.554974][ T5928] usb 6-1: device descriptor read/8, error -71 [ 337.719187][ T9] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 337.804126][ T5962] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 337.974937][ T9] usb 5-1: No LPM exit latency info found, disabling LPM. [ 338.039699][ T9] usb 5-1: too many configurations: 194, using maximum allowed: 8 [ 338.062981][ T5962] usb 1-1: Using ep0 maxpacket: 8 [ 338.127513][ T5962] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 338.136327][ T5962] usb 1-1: config 179 has no interface number 0 [ 338.150906][ T5962] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 338.151052][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 338.173818][ T5962] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 338.203788][ T5962] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 338.223791][ T9] usb 5-1: can't read configurations, error -61 [ 338.234448][ T5962] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 338.261425][ T5962] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 338.314191][ T5928] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 338.314722][ T5962] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 338.358480][ T9] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 338.364492][ T5928] usb 6-1: device descriptor read/8, error -71 [ 338.378475][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.399141][ T9006] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 338.478721][ T5928] usb usb6-port1: unable to enumerate USB device [ 338.526849][ T9] usb 5-1: No LPM exit latency info found, disabling LPM. [ 338.548071][ T9] usb 5-1: too many configurations: 194, using maximum allowed: 8 [ 338.564781][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 338.601158][ T9] usb 5-1: can't read configurations, error -61 [ 338.745545][ T9] usb usb5-port1: attempt power cycle [ 338.807311][ T5962] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 338.857690][ T9028] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 338.864263][ T9028] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 339.233888][ T5962] usb 2-1: device descriptor read/64, error -71 [ 339.250674][ T9028] vhci_hcd vhci_hcd.0: Device attached [ 339.281700][ T9029] vhci_hcd: connection closed [ 339.329845][ T7434] vhci_hcd: stop threads [ 339.354509][ T7434] vhci_hcd: release socket [ 339.391149][ T7434] vhci_hcd: disconnect device [ 339.443870][ T9] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 339.451719][ T5888] vhci_hcd: vhci_device speed not set [ 339.469255][ T5920] usb 1-1: USB disconnect, device number 29 [ 339.469261][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 339.488502][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 339.496883][ T5962] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 339.513478][ T9] usb 5-1: No LPM exit latency info found, disabling LPM. [ 339.524483][ T9] usb 5-1: too many configurations: 194, using maximum allowed: 8 [ 339.540303][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 339.548263][ T9] usb 5-1: can't read configurations, error -61 [ 339.643845][ T5962] usb 2-1: device descriptor read/64, error -71 [ 339.867288][ T9] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 339.921750][ T5962] usb usb2-port1: attempt power cycle [ 339.981681][ T9] usb 5-1: No LPM exit latency info found, disabling LPM. [ 339.993827][ T9] usb 5-1: too many configurations: 194, using maximum allowed: 8 [ 340.048828][ T5920] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 340.104047][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 340.117474][ T9] usb 5-1: can't read configurations, error -61 [ 340.124155][ T9] usb usb5-port1: unable to enumerate USB device [ 340.216780][ T5920] usb 6-1: Using ep0 maxpacket: 16 [ 340.248919][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 340.325176][ T5962] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 340.350693][ T5920] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 340.409568][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.424782][ T5962] usb 2-1: device descriptor read/8, error -71 [ 340.469281][ T5920] usb 6-1: config 0 descriptor?? [ 340.773848][ T5962] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 340.816652][ T9046] CIFS: VFS: Malformed UNC in devname [ 340.970767][ T5962] usb 2-1: device descriptor read/8, error -71 [ 341.377026][ T5962] usb usb2-port1: unable to enumerate USB device [ 341.803833][ T5962] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 341.873921][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 341.953827][ T5888] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 341.968144][ T5962] usb 1-1: Using ep0 maxpacket: 16 [ 341.976171][ T5962] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 341.991986][ T5962] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 342.014014][ T9] usb 4-1: device descriptor read/64, error -71 [ 342.021384][ T5962] usb 1-1: config 1 interface 0 has no altsetting 0 [ 342.049708][ T5962] usb 1-1: New USB device found, idVendor=04f2, idProduct=1125, bcdDevice= 0.40 [ 342.060575][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.071615][ T5962] usb 1-1: Product: syz [ 342.076557][ T5962] usb 1-1: Manufacturer: syz [ 342.081171][ T5962] usb 1-1: SerialNumber: syz [ 342.597231][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 342.613821][ T5888] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 342.622127][ T5888] usb 5-1: config 0 has no interface number 0 [ 342.667416][ T9066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.671052][ T5888] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 342.695075][ T5888] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 342.706847][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.716163][ T5888] usb 5-1: Product: syz [ 342.721565][ T5888] usb 5-1: Manufacturer: syz [ 342.722878][ T5920] usbhid 6-1:0.0: can't add hid device: -71 [ 342.726717][ T9066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.746670][ T5888] usb 5-1: SerialNumber: syz [ 342.753910][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 342.764816][ T5920] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 342.783222][ T5920] usb 6-1: USB disconnect, device number 22 [ 342.804091][ T5888] usb 5-1: config 0 descriptor?? [ 342.836315][ T5962] usbhid 1-1:1.0: can't add hid device: -71 [ 342.842294][ T5962] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 342.864254][ T5962] usb 1-1: USB disconnect, device number 30 [ 342.904040][ T9] usb 4-1: device descriptor read/64, error -71 [ 342.907792][ T5934] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 343.018818][ T5888] usbtouchscreen 5-1:0.214: Failed to read FW rev: 0 [ 343.027704][ T5888] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 343.037300][ T9] usb usb4-port1: attempt power cycle [ 343.073795][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 343.080384][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.092211][ T5934] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 343.101275][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.111312][ T5934] usb 2-1: config 0 descriptor?? [ 343.348372][ T9064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.357354][ T9064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.379254][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 343.417307][ T9] usb 4-1: device descriptor read/8, error -71 [ 343.576898][ T5934] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0 [ 343.611128][ T5934] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0 [ 343.631329][ T5934] hid-picolcd 0003:04D8:C002.000F: item fetching failed at offset 2/5 [ 343.640984][ T5934] hid-picolcd 0003:04D8:C002.000F: device report parse failed [ 343.659322][ T5920] usb 5-1: USB disconnect, device number 26 [ 343.665452][ T5888] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 343.668498][ T5934] hid-picolcd 0003:04D8:C002.000F: probe with driver hid-picolcd failed with error -22 [ 343.673520][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 343.734312][ T9] usb 4-1: device descriptor read/8, error -71 [ 343.740628][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 343.751433][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.679'. [ 343.765341][ T9082] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.774139][ T9082] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.782809][ T9082] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.791574][ T9082] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.855141][ T9] usb usb4-port1: unable to enumerate USB device [ 343.864842][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 343.886758][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.897231][ T5888] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 343.906564][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.922813][ T5888] usb 1-1: config 0 descriptor?? [ 344.023929][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 344.034503][ T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 344.045845][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.066744][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 344.079654][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 344.089572][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.099649][ T10] usb 6-1: Product: syz [ 344.104272][ T10] usb 6-1: Manufacturer: syz [ 344.109046][ T10] usb 6-1: SerialNumber: syz [ 344.423837][ T5888] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 344.546028][ T10] usb 6-1: 0:2 : does not exist [ 344.560905][ T10] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 344.574213][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 344.585953][ T5888] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 344.595553][ T5888] usb 5-1: config 0 has no interface number 0 [ 344.602086][ T5888] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 344.625473][ T5888] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 344.638557][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.5.681'. [ 344.638840][ T5888] usb 5-1: config 0 interface 41 has no altsetting 0 [ 344.659851][ T10] usb 6-1: USB disconnect, device number 23 [ 344.675934][ T5888] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 344.682072][ T9093] bridge0: entered promiscuous mode [ 344.693185][ T9093] macsec1: entered allmulticast mode [ 344.696613][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.709890][ T9093] bridge0: entered allmulticast mode [ 344.738036][ T9093] bridge0: port 3(macsec1) entered blocking state [ 344.742687][ T5888] usb 5-1: Product: syz [ 344.748240][ T9093] bridge0: port 3(macsec1) entered disabled state [ 344.764267][ T5888] usb 5-1: Manufacturer: syz [ 344.775329][ T5888] usb 5-1: SerialNumber: syz [ 344.775589][ T6230] udevd[6230]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 344.804960][ T9093] bridge0: left allmulticast mode [ 344.810307][ T9093] bridge0: left promiscuous mode [ 344.818033][ T5888] usb 5-1: config 0 descriptor?? [ 344.825892][ T9086] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 344.841159][ T9086] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 345.096183][ T5888] dm9601 5-1:0.41: probe with driver dm9601 failed with error -71 [ 345.173970][ T5962] usb 1-1: USB disconnect, device number 31 [ 345.184923][ T5888] sr9700 5-1:0.41: probe with driver sr9700 failed with error -71 [ 345.938680][ T5888] usb 5-1: USB disconnect, device number 27 [ 346.111928][ T10] usb 2-1: USB disconnect, device number 32 [ 346.777725][ T9109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.685'. [ 346.786638][ T9109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.685'. [ 347.229174][ T9124] gre1: entered promiscuous mode [ 347.249046][ T9124] gre1: entered allmulticast mode [ 347.699033][ T9144] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.692'. [ 349.560093][ T9150] netlink: 24 bytes leftover after parsing attributes in process `syz.4.694'. [ 349.818451][ T5888] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 350.143808][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 350.158098][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.186365][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.338539][ T5888] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 350.362630][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.958479][ T5888] usb 6-1: config 0 descriptor?? [ 350.975304][ T5888] hub 6-1:0.0: USB hub found [ 351.102255][ T9178] netlink: 'syz.4.699': attribute type 22 has an invalid length. [ 351.143941][ T9178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.699'. [ 351.165293][ T9182] netlink: 'syz.4.699': attribute type 22 has an invalid length. [ 351.183947][ T5888] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 351.233581][ T10] IPVS: starting estimator thread 0... [ 351.246418][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.699'. [ 351.365669][ T9185] IPVS: using max 27 ests per chain, 64800 per kthread [ 351.774786][ T5888] hid-generic 0003:046D:C31C.0010: item fetching failed at offset 0/1 [ 351.798391][ T5888] hid-generic 0003:046D:C31C.0010: probe with driver hid-generic failed with error -22 [ 352.070288][ T5888] usb 6-1: USB disconnect, device number 24 [ 352.630934][ T9198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.703'. [ 352.641016][ T9198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.703'. [ 352.731267][ T9206] can: request_module (can-proto-0) failed. [ 354.287531][ T5888] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 354.733673][ T5888] usb 2-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 354.742799][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.781810][ T5888] usb 2-1: Product: syz [ 354.798287][ T5888] usb 2-1: Manufacturer: syz [ 354.803140][ T5888] usb 2-1: SerialNumber: syz [ 354.935954][ T5888] usb 2-1: config 0 descriptor?? [ 354.955603][ T5888] f81232 2-1:0.0: f81232 converter detected [ 355.562280][ T5888] usb 2-1: f81232 converter now attached to ttyUSB0 [ 355.614672][ T5928] usb 2-1: USB disconnect, device number 33 [ 355.643552][ T5928] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 355.755315][ T5928] f81232 2-1:0.0: device disconnected [ 355.818256][ T9237] tipc: Enabled bearer , priority 0 [ 355.833033][ T9237] syzkaller0: entered promiscuous mode [ 355.852146][ T9240] x_tables: duplicate underflow at hook 3 [ 355.855135][ T9237] syzkaller0: entered allmulticast mode [ 355.921344][ T9234] tipc: Resetting bearer [ 355.971885][ T9234] tipc: Disabling bearer [ 357.844242][ T9263] netlink: 28 bytes leftover after parsing attributes in process `syz.5.720'. [ 357.853166][ T9263] netlink: 28 bytes leftover after parsing attributes in process `syz.5.720'. [ 358.343958][ T9275] syz.4.722: attempt to access beyond end of device [ 358.343958][ T9275] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 358.357279][ T9275] EXT4-fs (nbd4): unable to read superblock [ 358.571609][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 359.314008][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 360.306892][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 360.334400][ T10] usb 2-1: can't read configurations, error -71 [ 360.579078][ T9291] cgroup2: Unknown parameter 'favordnmods' [ 360.611278][ T9291] netlink: 'syz.3.726': attribute type 7 has an invalid length. [ 361.670727][ T9306] netlink: 52 bytes leftover after parsing attributes in process `syz.0.731'. [ 363.733961][ T9323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.734'. [ 363.743028][ T9323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.734'. [ 365.798174][ T9351] hfsplus: unable to find HFS+ superblock [ 365.879960][ T9351] netlink: 7 bytes leftover after parsing attributes in process `syz.4.742'. [ 365.890548][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 365.937952][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 365.984056][ T5920] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 366.057050][ T9357] No source specified [ 366.099458][ T9357] trusted_key: syz.4.745 sent an empty control message without MSG_MORE. [ 366.215633][ T5920] usb 1-1: config 0 has no interfaces? [ 366.682631][ T9363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.747'. [ 366.691621][ T9363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.747'. [ 366.815747][ T5920] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 366.846966][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.910774][ T5920] usb 1-1: Product: syz [ 366.915503][ T5920] usb 1-1: Manufacturer: syz [ 366.920758][ T5920] usb 1-1: SerialNumber: syz [ 366.995250][ T5920] usb 1-1: config 0 descriptor?? [ 367.240055][ T9348] 9pnet_fd: Insufficient options for proto=fd [ 367.714106][ T9376] 9pnet_fd: Insufficient options for proto=fd [ 367.730554][ T9382] IPv6: NLM_F_CREATE should be specified when creating new route [ 367.743993][ T5934] usb 1-1: USB disconnect, device number 32 [ 368.214183][ T9391] xt_SECMARK: invalid mode: 2 [ 368.472333][ T5920] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 368.659514][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 368.684347][ T5920] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 369.115687][ T9407] netlink: 204 bytes leftover after parsing attributes in process `syz.5.757'. [ 369.558075][ T5920] usb 2-1: config 0 has no interface number 0 [ 369.645226][ T5920] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 369.654816][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.663131][ T5920] usb 2-1: Product: syz [ 369.667717][ T5920] usb 2-1: Manufacturer: syz [ 369.672610][ T5920] usb 2-1: SerialNumber: syz [ 369.693887][ T5934] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 369.926836][ T5920] usb 2-1: config 0 descriptor?? [ 370.065925][ T5920] smsc95xx v2.0.0 [ 370.137193][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 370.158019][ T5934] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 370.457993][ T5934] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 370.476815][ T5934] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 370.499760][ T5934] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 371.107708][ T9415] syz.5.760: attempt to access beyond end of device [ 371.107708][ T9415] nbd5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 371.120769][ T9415] EXT4-fs (nbd5): unable to read superblock [ 371.128603][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.761'. [ 371.137596][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.761'. [ 371.390607][ T5920] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 371.407772][ T5934] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 371.437978][ T5920] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 371.578333][ T5934] usb 4-1: config 1 interface 0 has no altsetting 0 [ 371.663309][ T5920] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 371.699115][ T5934] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 371.843899][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.856023][ T5920] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 371.950532][ T5920] usb 2-1: USB disconnect, device number 36 [ 371.972949][ T5934] usb 4-1: can't set config #1, error -71 [ 372.069824][ T5934] usb 4-1: USB disconnect, device number 22 [ 372.577031][ T5920] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 373.035945][ T43] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 373.354653][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.565247][ T9445] xt_CT: No such helper "snmp_trap" [ 374.239552][ T43] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 374.271871][ T43] usb 6-1: config 1 has an invalid descriptor of length 233, skipping remainder of the config [ 374.324098][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 374.333014][ T43] usb 6-1: config 1 has no interface number 0 [ 374.393222][ T43] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 374.448806][ T43] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 374.628643][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.868248][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.877595][ T9465] netlink: 80 bytes leftover after parsing attributes in process `syz.0.771'. [ 374.914643][ T43] usb 6-1: Product: syz [ 374.914663][ T43] usb 6-1: Manufacturer: syz [ 374.914679][ T43] usb 6-1: SerialNumber: syz [ 375.011203][ T43] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 375.074190][ T43] cdc_ncm 6-1:1.1: bind() failure [ 375.183612][ T5888] usb 6-1: USB disconnect, device number 25 [ 375.451023][ T9480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.774'. [ 375.460211][ T9480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.774'. [ 375.963103][ T9482] ªªªªªªl: renamed from vlan0 (while UP) [ 375.974956][ T9477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.775'. [ 376.398594][ T9485] netlink: 116 bytes leftover after parsing attributes in process `syz.5.777'. [ 376.745742][ T9466] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.754721][ T9466] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.763422][ T9466] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.772209][ T9466] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.502012][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.567030][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.598926][ T9502] lo speed is unknown, defaulting to 1000 [ 378.615694][ T9502] lo speed is unknown, defaulting to 1000 [ 378.626679][ T9502] lo speed is unknown, defaulting to 1000 [ 378.648537][ T9502] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 378.749108][ T9502] lo speed is unknown, defaulting to 1000 [ 378.798153][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 378.798170][ T30] audit: type=1326 audit(1755427792.890:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9496 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 378.827630][ T9502] lo speed is unknown, defaulting to 1000 [ 378.895462][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 379.452631][ T9502] lo speed is unknown, defaulting to 1000 [ 379.470362][ T9502] lo speed is unknown, defaulting to 1000 [ 379.477927][ T9502] lo speed is unknown, defaulting to 1000 [ 379.520968][ T30] audit: type=1326 audit(1755427792.890:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9496 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 380.033759][ T30] audit: type=1326 audit(1755427792.890:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9496 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 380.146022][ T30] audit: type=1326 audit(1755427792.890:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9496 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 380.232375][ T30] audit: type=1326 audit(1755427792.890:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9496 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 380.325937][ T30] audit: type=1326 audit(1755427792.890:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9496 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 380.912336][ T30] audit: type=1326 audit(1755427792.890:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9496 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 380.986407][ T30] audit: type=1326 audit(1755427792.920:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9496 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 381.163771][ T30] audit: type=1326 audit(1755427793.600:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9496 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 381.186029][ T30] audit: type=1326 audit(1755427793.600:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9496 comm="syz.3.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 382.300559][ T9538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.788'. [ 382.309646][ T9538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.788'. [ 383.473072][ T9549] netlink: 36 bytes leftover after parsing attributes in process `syz.4.790'. [ 384.333402][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 385.739210][ T5934] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 386.302133][ T5934] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 386.333500][ T5934] usb 2-1: config 0 has no interface number 0 [ 386.541334][ T5934] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 386.753464][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.021060][ T5934] usb 2-1: Product: syz [ 387.037658][ T5934] usb 2-1: Manufacturer: syz [ 387.050473][ T5934] usb 2-1: SerialNumber: syz [ 387.061511][ T5934] usb 2-1: config 0 descriptor?? [ 387.086766][ T5934] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 387.153794][ T5962] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 387.445716][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.801'. [ 387.703347][ T5962] usb 1-1: Using ep0 maxpacket: 8 [ 387.941863][ T9579] Invalid ELF section header size [ 389.324267][ T9564] syz.0.797 (9564) used greatest stack depth: 14280 bytes left [ 389.358506][ T5934] gspca_spca1528: reg_w err -110 [ 389.388115][ T5962] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 389.397955][ T5934] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 389.409245][ T5962] usb 1-1: can't read configurations, error -71 [ 389.966883][ T43] usb 2-1: USB disconnect, device number 38 [ 390.064815][ T9593] syz.3.804: attempt to access beyond end of device [ 390.064815][ T9593] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 390.078293][ T9593] EXT4-fs (nbd3): unable to read superblock [ 392.461089][ T9608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.811'. [ 392.518717][ T9612] sctp: [Deprecated]: syz.0.808 (pid 9612) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.518717][ T9612] Use struct sctp_sack_info instead [ 392.816203][ T9608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.811'. [ 393.884406][ T9617] netlink: 28 bytes leftover after parsing attributes in process `syz.5.812'. [ 393.893302][ T9617] netlink: 28 bytes leftover after parsing attributes in process `syz.5.812'. [ 394.344240][ T9624] sctp: [Deprecated]: syz.0.813 (pid 9624) Use of struct sctp_assoc_value in delayed_ack socket option. [ 394.344240][ T9624] Use struct sctp_sack_info instead [ 394.988967][ T9628] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3623887940 (115964414080 ns) > initial count (54819086816 ns). Using initial count to start timer. [ 395.130835][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 395.688627][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 395.688639][ T30] audit: type=1326 audit(1755427809.470:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9632 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 395.729480][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 395.774911][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.003216][ T30] audit: type=1326 audit(1755427809.470:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9632 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 396.024714][ T30] audit: type=1326 audit(1755427809.470:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9632 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 396.046624][ T30] audit: type=1326 audit(1755427809.470:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9632 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 396.083763][ T30] audit: type=1326 audit(1755427809.470:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9632 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 396.121587][ T30] audit: type=1326 audit(1755427809.470:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9632 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f784658ebe9 code=0x7ffc0000 [ 396.121647][ T9] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 396.143025][ T30] audit: type=1326 audit(1755427809.470:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9632 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f784652add9 code=0x7ffc0000 [ 396.143071][ T30] audit: type=1326 audit(1755427809.480:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9632 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f784652add9 code=0x7ffc0000 [ 396.143112][ T30] audit: type=1326 audit(1755427809.480:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9632 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f784652add9 code=0x7ffc0000 [ 396.143154][ T30] audit: type=1326 audit(1755427809.480:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9632 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f784652add9 code=0x7ffc0000 [ 396.173715][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.238122][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.267066][ T9630] syz.5.814: attempt to access beyond end of device [ 396.267066][ T9630] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 396.280017][ T9630] (syz.5.814,9630,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 396.287527][ T9630] (syz.5.814,9630,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 396.294743][ T9630] (syz.5.814,9630,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 396.303486][ T9630] (syz.5.814,9630,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 396.414587][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.545779][ T9] usb 2-1: Product: syz [ 396.549964][ T9] usb 2-1: Manufacturer: syz [ 396.555115][ T9] usb 2-1: SerialNumber: syz [ 396.562858][ T9] usb 2-1: config 0 descriptor?? [ 397.208032][ T9] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 397.222168][ T9] gspca_sunplus: reg_r err -32 [ 397.544484][ T5962] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 397.598259][ T9652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.822'. [ 397.705809][ T5962] usb 1-1: config 9 has an invalid interface number: 8 but max is 0 [ 397.738958][ T5962] usb 1-1: config 9 has no interface number 0 [ 397.767005][ T5962] usb 1-1: config 9 interface 8 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 397.793811][ T5962] usb 1-1: config 9 interface 8 has no altsetting 0 [ 398.508083][ T9658] syz.5.821: attempt to access beyond end of device [ 398.508083][ T9658] nbd5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 398.521392][ T9658] EXT4-fs (nbd5): unable to read superblock [ 398.687113][ T5962] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a9f, bcdDevice=4f.66 [ 398.703813][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.711832][ T5962] usb 1-1: Product: syz [ 398.716198][ T5962] usb 1-1: Manufacturer: syz [ 398.735734][ T5962] usb 1-1: SerialNumber: syz [ 399.072184][ T5962] usb 1-1: USB disconnect, device number 35 [ 399.156850][ T9667] netlink: 204 bytes leftover after parsing attributes in process `syz.3.826'. [ 399.426853][ T9670] syz.5.825: attempt to access beyond end of device [ 399.426853][ T9670] loop5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 399.448301][ T9670] MINIX-fs: unable to read superblock [ 399.456469][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 399.465493][ T9674] netlink: 'syz.1.827': attribute type 1 has an invalid length. [ 399.493021][ T9674] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.827'. [ 399.507193][ T9] usb 2-1: USB disconnect, device number 39 [ 400.255147][ T9684] sctp: [Deprecated]: syz.5.828 (pid 9684) Use of struct sctp_assoc_value in delayed_ack socket option. [ 400.255147][ T9684] Use struct sctp_sack_info instead [ 401.088549][ T9690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.832'. [ 401.097769][ T9690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.832'. [ 404.135191][ T9703] loop6: detected capacity change from 0 to 2098 [ 404.585532][ T9711] syz.5.837: attempt to access beyond end of device [ 404.585532][ T9711] nbd5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 404.598776][ T9711] EXT4-fs (nbd5): unable to read superblock [ 405.443874][ T5928] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 405.624189][ T9725] fuse: Bad value for 'fd' [ 405.624867][ T9718] lo speed is unknown, defaulting to 1000 [ 405.713794][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 405.726457][ T5928] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.744769][ T5928] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 405.882994][ T5928] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 405.892485][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.007746][ T9730] netlink: 'syz.5.842': attribute type 32 has an invalid length. [ 406.015498][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.842'. [ 406.024411][ T9730] (unnamed net_device) (uninitialized): option coupled_control: invalid value (98) [ 406.195932][ T5928] usb 1-1: Product: syz [ 406.283771][ T5928] usb 1-1: Manufacturer: syz [ 406.325122][ T5928] usb 1-1: SerialNumber: syz [ 406.510765][ T9739] netlink: 52 bytes leftover after parsing attributes in process `syz.4.844'. [ 406.588061][ T9740] sctp: [Deprecated]: syz.5.843 (pid 9740) Use of struct sctp_assoc_value in delayed_ack socket option. [ 406.588061][ T9740] Use struct sctp_sack_info instead [ 407.136127][ T5928] usb 1-1: USB disconnect, device number 36 [ 407.730096][ T6230] udevd[6230]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.804599][ T9746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 407.825872][ T9755] pimreg: entered allmulticast mode [ 407.841909][ T9753] pimreg: left allmulticast mode [ 408.223887][ T5956] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 408.258769][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 408.258786][ T30] audit: type=1326 audit(1755427822.340:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9764 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ecf8ebe9 code=0x7ffc0000 [ 408.398150][ T30] audit: type=1326 audit(1755427822.340:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9764 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f68ecf8ebe9 code=0x7ffc0000 [ 408.509579][ T30] audit: type=1326 audit(1755427822.340:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9764 comm="syz.4.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ecf8ebe9 code=0x7ffc0000 [ 409.361962][ T30] audit: type=1326 audit(1755427823.440:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9793 comm="syz.4.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ecf8ebe9 code=0x7ffc0000 [ 409.441632][ T30] audit: type=1326 audit(1755427823.440:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9793 comm="syz.4.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ecf8ebe9 code=0x7ffc0000 [ 409.492157][ T30] audit: type=1326 audit(1755427823.480:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9793 comm="syz.4.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68ecf8ebe9 code=0x7ffc0000 [ 409.540951][ T30] audit: type=1326 audit(1755427823.480:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9793 comm="syz.4.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ecf8ebe9 code=0x7ffc0000 [ 409.741182][ T30] audit: type=1326 audit(1755427823.480:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9793 comm="syz.4.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ecf8ebe9 code=0x7ffc0000 [ 410.383510][ T30] audit: type=1326 audit(1755427823.480:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9793 comm="syz.4.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68ecf8ebe9 code=0x7ffc0000 [ 410.383562][ T30] audit: type=1326 audit(1755427823.510:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9793 comm="syz.4.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ecf8ebe9 code=0x7ffc0000 [ 410.410052][ T9811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.415735][ T9811] bond0: (slave rose0): Enslaving as an active interface with an up link [ 410.489177][ T9808] tty tty28: ldisc open failed (-12), clearing slot 27 [ 410.991203][ T9829] syz.0.871 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 413.236785][ T9869] netlink: 'syz.1.882': attribute type 27 has an invalid length. [ 413.453800][ T9869] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.461241][ T9869] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.543462][ T9869] [ 413.545804][ T9869] ====================================================== [ 413.552811][ T9869] WARNING: possible circular locking dependency detected [ 413.559833][ T9869] 6.16.0-syzkaller #0 Not tainted [ 413.564859][ T9869] ------------------------------------------------------ [ 413.571872][ T9869] syz.1.882/9869 is trying to acquire lock: [ 413.577764][ T9869] ffff888032280e00 (team->team_lock_key){+.+.}-{4:4}, at: team_device_event+0x182/0xa20 [ 413.587496][ T9869] [ 413.587496][ T9869] but task is already holding lock: [ 413.594844][ T9869] ffff88806c944d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 413.604574][ T9869] [ 413.604574][ T9869] which lock already depends on the new lock. [ 413.604574][ T9869] [ 413.614962][ T9869] [ 413.614962][ T9869] the existing dependency chain (in reverse order) is: [ 413.623956][ T9869] [ 413.623956][ T9869] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 413.632366][ T9869] lock_acquire+0x120/0x360 [ 413.637374][ T9869] __mutex_lock+0x182/0xe80 [ 413.642383][ T9869] dev_set_mtu+0x10e/0x260 [ 413.647309][ T9869] team_add_slave+0x8b8/0x2840 [ 413.652603][ T9869] do_set_master+0x530/0x6d0 [ 413.657699][ T9869] do_setlink+0xcf0/0x41c0 [ 413.662621][ T9869] rtnl_newlink+0x160b/0x1c70 [ 413.667803][ T9869] rtnetlink_rcv_msg+0x7cc/0xb70 [ 413.673244][ T9869] netlink_rcv_skb+0x205/0x470 [ 413.678516][ T9869] netlink_unicast+0x75c/0x8e0 [ 413.683786][ T9869] netlink_sendmsg+0x805/0xb30 [ 413.689059][ T9869] __sock_sendmsg+0x21c/0x270 [ 413.694240][ T9869] ____sys_sendmsg+0x505/0x830 [ 413.699511][ T9869] ___sys_sendmsg+0x21f/0x2a0 [ 413.704693][ T9869] __x64_sys_sendmsg+0x19b/0x260 [ 413.710141][ T9869] do_syscall_64+0xfa/0x3b0 [ 413.715149][ T9869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.721550][ T9869] [ 413.721550][ T9869] -> #0 (team->team_lock_key){+.+.}-{4:4}: [ 413.729550][ T9869] validate_chain+0xb9b/0x2140 [ 413.734821][ T9869] __lock_acquire+0xab9/0xd20 [ 413.740003][ T9869] lock_acquire+0x120/0x360 [ 413.745008][ T9869] __mutex_lock+0x182/0xe80 [ 413.750019][ T9869] team_device_event+0x182/0xa20 [ 413.755469][ T9869] notifier_call_chain+0x1b3/0x3e0 [ 413.761089][ T9869] __dev_notify_flags+0x18d/0x2e0 [ 413.766626][ T9869] netif_change_flags+0xe8/0x1a0 [ 413.772071][ T9869] do_setlink+0xc55/0x41c0 [ 413.777015][ T9869] rtnl_newlink+0x149f/0x1c70 [ 413.782201][ T9869] rtnetlink_rcv_msg+0x7cc/0xb70 [ 413.787647][ T9869] netlink_rcv_skb+0x205/0x470 [ 413.792924][ T9869] netlink_unicast+0x75c/0x8e0 [ 413.798199][ T9869] netlink_sendmsg+0x805/0xb30 [ 413.803496][ T9869] __sock_sendmsg+0x21c/0x270 [ 413.808691][ T9869] ____sys_sendmsg+0x505/0x830 [ 413.813969][ T9869] ___sys_sendmsg+0x21f/0x2a0 [ 413.819160][ T9869] __x64_sys_sendmsg+0x19b/0x260 [ 413.824617][ T9869] do_syscall_64+0xfa/0x3b0 [ 413.829629][ T9869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.836035][ T9869] [ 413.836035][ T9869] other info that might help us debug this: [ 413.836035][ T9869] [ 413.846280][ T9869] Possible unsafe locking scenario: [ 413.846280][ T9869] [ 413.853721][ T9869] CPU0 CPU1 [ 413.859085][ T9869] ---- ---- [ 413.864443][ T9869] lock(&dev_instance_lock_key#3); [ 413.869630][ T9869] lock(team->team_lock_key); [ 413.876921][ T9869] lock(&dev_instance_lock_key#3); [ 413.884649][ T9869] lock(team->team_lock_key); [ 413.889397][ T9869] [ 413.889397][ T9869] *** DEADLOCK *** [ 413.889397][ T9869] [ 413.897522][ T9869] 2 locks held by syz.1.882/9869: [ 413.902524][ T9869] #0: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 413.911559][ T9869] #1: ffff88806c944d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 413.921643][ T9869] [ 413.921643][ T9869] stack backtrace: [ 413.927525][ T9869] CPU: 1 UID: 0 PID: 9869 Comm: syz.1.882 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 413.927539][ T9869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 413.927548][ T9869] Call Trace: [ 413.927557][ T9869] [ 413.927563][ T9869] dump_stack_lvl+0x189/0x250 [ 413.927579][ T9869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.927590][ T9869] ? __pfx__printk+0x10/0x10 [ 413.927603][ T9869] ? print_lock_name+0xde/0x100 [ 413.927616][ T9869] print_circular_bug+0x2ee/0x310 [ 413.927630][ T9869] check_noncircular+0x134/0x160 [ 413.927643][ T9869] validate_chain+0xb9b/0x2140 [ 413.927656][ T9869] ? __lock_acquire+0xab9/0xd20 [ 413.927668][ T9869] __lock_acquire+0xab9/0xd20 [ 413.927678][ T9869] ? team_device_event+0x182/0xa20 [ 413.927687][ T9869] lock_acquire+0x120/0x360 [ 413.927696][ T9869] ? team_device_event+0x182/0xa20 [ 413.927706][ T9869] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 413.927724][ T9869] __mutex_lock+0x182/0xe80 [ 413.927735][ T9869] ? team_device_event+0x182/0xa20 [ 413.927746][ T9869] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 413.927760][ T9869] ? team_device_event+0x182/0xa20 [ 413.927769][ T9869] ? __pfx___mutex_lock+0x10/0x10 [ 413.927779][ T9869] ? __timer_delete_sync+0x218/0x2d0 [ 413.927797][ T9869] team_device_event+0x182/0xa20 [ 413.927807][ T9869] notifier_call_chain+0x1b3/0x3e0 [ 413.927826][ T9869] __dev_notify_flags+0x18d/0x2e0 [ 413.927843][ T9869] ? __pfx___dev_notify_flags+0x10/0x10 [ 413.927857][ T9869] ? __dev_change_flags+0x4cc/0x6d0 [ 413.927872][ T9869] ? __pfx___dev_change_flags+0x10/0x10 [ 413.927885][ T9869] ? netif_state_change+0x256/0x3a0 [ 413.927900][ T9869] netif_change_flags+0xe8/0x1a0 [ 413.927915][ T9869] do_setlink+0xc55/0x41c0 [ 413.927930][ T9869] ? trace_sched_exit_tp+0x38/0x120 [ 413.927947][ T9869] ? __pfx_do_setlink+0x10/0x10 [ 413.927961][ T9869] ? __lock_acquire+0xab9/0xd20 [ 413.927971][ T9869] ? do_raw_spin_lock+0x121/0x290 [ 413.927986][ T9869] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 413.928001][ T9869] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.928011][ T9869] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 413.928026][ T9869] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 413.928042][ T9869] ? rcu_is_watching+0x15/0xb0 [ 413.928054][ T9869] ? __mutex_lock+0xa6d/0xe80 [ 413.928064][ T9869] ? __mutex_lock+0x51b/0xe80 [ 413.928081][ T9869] ? rtnl_newlink+0x8db/0x1c70 [ 413.928105][ T9869] ? __pfx___mutex_lock+0x10/0x10 [ 413.928128][ T9869] ? ns_capable+0x8a/0xf0 [ 413.928148][ T9869] ? rtnl_link_get_net_capable+0x16a/0x350 [ 413.928172][ T9869] rtnl_newlink+0x149f/0x1c70 [ 413.928184][ T9869] ? netlink_sendmsg+0x805/0xb30 [ 413.928201][ T9869] ? __pfx_rtnl_newlink+0x10/0x10 [ 413.928219][ T9869] ? kasan_quarantine_put+0xdd/0x220 [ 413.928234][ T9869] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.928245][ T9869] ? nlmon_xmit+0xb0/0x100 [ 413.928257][ T9869] ? kmem_cache_free+0x18f/0x400 [ 413.928269][ T9869] ? __local_bh_enable_ip+0x12d/0x1c0 [ 413.928279][ T9869] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.928290][ T9869] ? __local_bh_enable_ip+0x12d/0x1c0 [ 413.928300][ T9869] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 413.928310][ T9869] ? __dev_queue_xmit+0x27e/0x3a70 [ 413.928320][ T9869] ? __dev_queue_xmit+0x27e/0x3a70 [ 413.928330][ T9869] ? __dev_queue_xmit+0x27e/0x3a70 [ 413.928339][ T9869] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 413.928350][ T9869] ? __lock_acquire+0xab9/0xd20 [ 413.928364][ T9869] ? __pfx_rtnl_newlink+0x10/0x10 [ 413.928377][ T9869] rtnetlink_rcv_msg+0x7cc/0xb70 [ 413.928390][ T9869] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 413.928402][ T9869] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 413.928414][ T9869] ? ref_tracker_free+0x63a/0x7d0 [ 413.928425][ T9869] ? __copy_skb_header+0xa7/0x550 [ 413.928435][ T9869] ? __pfx_ref_tracker_free+0x10/0x10 [ 413.928447][ T9869] netlink_rcv_skb+0x205/0x470 [ 413.928461][ T9869] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 413.928474][ T9869] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.928489][ T9869] ? netlink_deliver_tap+0x2e/0x1b0 [ 413.928503][ T9869] ? netlink_deliver_tap+0x2e/0x1b0 [ 413.928517][ T9869] netlink_unicast+0x75c/0x8e0 [ 413.928532][ T9869] netlink_sendmsg+0x805/0xb30 [ 413.928548][ T9869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.928563][ T9869] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 413.928573][ T9869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.928587][ T9869] __sock_sendmsg+0x21c/0x270 [ 413.928600][ T9869] ____sys_sendmsg+0x505/0x830 [ 413.928616][ T9869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.928632][ T9869] ? import_iovec+0x74/0xa0 [ 413.928654][ T9869] ___sys_sendmsg+0x21f/0x2a0 [ 413.928669][ T9869] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.928692][ T9869] ? __fget_files+0x2a/0x420 [ 413.928703][ T9869] ? __fget_files+0x3a0/0x420 [ 413.928716][ T9869] __x64_sys_sendmsg+0x19b/0x260 [ 413.928731][ T9869] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 413.928748][ T9869] ? rcu_is_watching+0x15/0xb0 [ 413.928759][ T9869] ? do_syscall_64+0xbe/0x3b0 [ 413.928771][ T9869] do_syscall_64+0xfa/0x3b0 [ 413.928781][ T9869] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.928791][ T9869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.928801][ T9869] ? clear_bhb_loop+0x60/0xb0 [ 413.928812][ T9869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.928829][ T9869] RIP: 0033:0x7fa5d918ebe9 [ 413.928839][ T9869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.928849][ T9869] RSP: 002b:00007fa5da034038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.928860][ T9869] RAX: ffffffffffffffda RBX: 00007fa5d93b5fa0 RCX: 00007fa5d918ebe9 [ 413.928868][ T9869] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 413.928874][ T9869] RBP: 00007fa5d9211e19 R08: 0000000000000000 R09: 0000000000000000 [ 413.928881][ T9869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.928887][ T9869] R13: 00007fa5d93b6038 R14: 00007fa5d93b5fa0 R15: 00007fff9102d3b8 [ 413.928899][ T9869] [ 414.621101][ T9869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.631445][ T9869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.649820][ T9869] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 414.677984][ T9869] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.688330][ T9869] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.697633][ T9869] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.706723][ T9869] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.721272][ T9869] ip6gre1: left allmulticast mode [ 414.728349][ T9869] vlan2: left allmulticast mode [ 414.734155][ T9869] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.743135][ T9869] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.752310][ T9869] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.761476][ T9869] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.825182][ T9879] lo speed is unknown, defaulting to 1000