last executing test programs: 2m44.884460915s ago: executing program 3 (id=627): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000580)={0x1d, r5, 0x0, {0x0, 0xff, 0x2}, 0x1}, 0x18) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfc, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xc7, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1a, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x8, 0xe1, &(0x7f00000003c0)=""/225, 0x41100, 0x53, '\x00', r5, @fallback=0x35, r7, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x0, 0x0, 0x3}, 0x10, r9, r2, 0x3, 0x0, &(0x7f0000000840)=[{0x1, 0x4, 0xd, 0x7}, {0x0, 0x4, 0x0, 0x3}, {0x3, 0x4, 0xd, 0x5}], 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000940)={'ip_vti0\x00', r8, 0x700, 0x10, 0x7, 0x9, {{0x17, 0x4, 0x0, 0x3, 0x5c, 0x66, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp_addr={0x44, 0x44, 0xb5, 0x1, 0x1, [{@private=0xa010101, 0x6121}, {@local, 0xffffffff}, {@private=0xa010101, 0xc}, {@multicast2, 0x9}, {@multicast1, 0xc107}, {@private=0xa010100, 0xcb2}, {@broadcast, 0x1}, {@empty, 0x1}]}, @ssrr={0x89, 0x3, 0xb}]}}}}}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010103}, 0x10) r10 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r11 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c796fa597f452bed6b6fbcc812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1d48f913f8b22a30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec9dd375031ba5ae65e31f00e641832d29ed658b91f33595b033222944765cb6a50d859f754ed83eefd480be0e3100965f081190bbb39a5965ceaa76975b88885041ff4e66e618d6c37c787f014eadb6c", 0x137, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r10, r11}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 2m43.68890032s ago: executing program 3 (id=629): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000580)={0x1d, r5, 0x0, {0x0, 0xff, 0x2}, 0x1}, 0x18) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfc, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xc7, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1a, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x8, 0xe1, &(0x7f00000003c0)=""/225, 0x41100, 0x53, '\x00', r5, @fallback=0x35, r6, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x0, 0x0, 0x3}, 0x10, r7, r2, 0x3, 0x0, &(0x7f0000000840)=[{0x1, 0x4, 0xd, 0x7}, {0x0, 0x4, 0x0, 0x3}, {0x3, 0x4, 0xd, 0x5}], 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0xa, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010103}, 0x10) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r9 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="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", 0x137, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r8, r9}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 2m42.329022859s ago: executing program 3 (id=631): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x4}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x68801, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0x11, 0x148, 0x148, 0x0, 0x248, 0x2a8, 0x2a8, 0x248, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {0xff}}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 2m41.462028122s ago: executing program 3 (id=634): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x4000000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2m40.376167621s ago: executing program 3 (id=635): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000340)='L', 0x1}], 0x1, 0x7fec, 0x7, 0x4) 2m39.326454408s ago: executing program 3 (id=638): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r2, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000140)={0xb}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, 0x0, 0x4008080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x26, 0x0, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x80, 0xdfe7, 0xa48}}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(r4, &(0x7f00000001c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000971bac5544ad77590779467f", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8850}, 0x24000000) 2m24.162637522s ago: executing program 32 (id=638): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r2, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000140)={0xb}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, 0x0, 0x4008080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x26, 0x0, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x80, 0xdfe7, 0xa48}}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(r4, &(0x7f00000001c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000971bac5544ad77590779467f", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8850}, 0x24000000) 27.598784222s ago: executing program 5 (id=864): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) socket(0x22, 0x2, 0x23) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xd80e, 0x3010}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 27.480431599s ago: executing program 4 (id=865): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f00000004c0)=""/102400, 0x19000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x100) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) sendto$inet6(r2, &(0x7f0000000000)="04", 0x1, 0x44001, 0x0, 0x0) close(r2) 21.290333699s ago: executing program 4 (id=873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) 20.985564584s ago: executing program 5 (id=874): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000003000/0x2000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @exit, @printk={@p, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r3}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'veth1_to_batadv\x00'}}, 0x1e) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000140)=0x11) close_range(r6, r6, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x1, 0x2, 0x32314258, 0x7, 0x4, [{0x0, 0x3}, {0x5, 0x1}, {0x8000, 0x401}, {0xfffffffd, 0x80000000}, {0x9, 0x5}, {0x1, 0xfffffffc}, {0xfff, 0xfffffff7}, {0x8, 0x3}], 0x6, 0xa, 0x8, 0x1, 0x3}}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=0x0, @ANYBLOB="000000000000000000000083019423bcb248d73c29000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1806c88137970000001400d94a501592c4cb1b5b958912000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 19.068630921s ago: executing program 4 (id=876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x9, 0x20, 0x8f, 0xff, 0x0, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x4, 0x5}, 0xe) sendmmsg$inet_sctp(r1, &(0x7f00000032c0), 0x0, 0x0) syz_usb_connect(0x2, 0x3d, 0x0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x12}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1}, 0x61) 18.060176406s ago: executing program 5 (id=877): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$qrtr(0x2a, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x5, 0x2}, {0x4}}]}}, 0xf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0xf0, r6, 0xe701ac47a3d23ccd, 0x0, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0xda, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3i\xb0Z\xbf_\xfe~gJ\x13\xfc\x15om~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\a\x00\x00\x00\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r11, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(r10, 0xffffffffffffffff, 0x0) 14.684869271s ago: executing program 0 (id=881): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x6e1cd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, r3, &(0x7f0000000180)='./file0\x00', 0x224) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181891, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r4, 0x1) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='percpu_alloc_percpu\x00', r6}, 0x18) 14.254551549s ago: executing program 5 (id=882): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xd108}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x34}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 12.873703718s ago: executing program 2 (id=884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) r3 = semget$private(0x0, 0x0, 0x587) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2b, &(0x7f0000002640), 0x42) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="08010000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000000000000a001000"/192], 0x108}}, 0x0) semop(r3, &(0x7f0000000240)=[{0x4, 0x4, 0x460f613af7347e4b}], 0x1) semctl$SETVAL(r3, 0x2, 0x8, 0x0) socket$tipc(0x1e, 0x4, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000001dc0)={0xf, 0x4, 0x100000}, 0x20) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x2}) 11.938024189s ago: executing program 0 (id=885): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r2, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000140)={0xb}) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, 0x0, 0x4008080) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x26, 0x0, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x80, 0xdfe7, 0xa48}}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(r4, &(0x7f00000001c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000971bac5544ad77590779467f", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8850}, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 11.621657104s ago: executing program 4 (id=886): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) truncate(0x0, 0xb73d) truncate(0x0, 0xf000) close(r4) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f020082395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r0, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) 10.038308121s ago: executing program 2 (id=888): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x8000) r7 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r7, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10.037407507s ago: executing program 5 (id=889): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000380)='source\xcf\x87\x86\x1bY\x0f\xde\xd6\xcd\xc0\x01\xd3\x19>K\x04\xfe\x86YG\xa5\x0f\xed\xa0\x9f\x1e\x14R\x9e\x04\xfa\xed\xd0TG&\x88\xeaz\x9aD\xf8Tt\x8c\x00{\x1fm\xfe\x9c\xf6_h\x9e\xfc\'', &(0x7f00000001c0)='sou\x01ce', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f00000003c0)="0b036800e0ff64000200475400f6a13bb10000000800", 0x16, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0xa, {0x2, 0x800, @multicast2}, 'wg0\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @broadcast}, {0x0, @remote}, 0x4a, {}, 'veth1_to_bridge\x00'}) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x2c0001) r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x141000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r8, 0xc1105511, &(0x7f0000000140)={0xa, 0x0, 0x1, 0x0, 'syz0\x00'}) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000200)={"1701d517", 0x3, 0x9, 0x1, 0x200002, 0xfffffffc, "f9a927627a359827fdc4ed7cb20708", "0600000b", "314391b4", "aa04df4e", ["e4e7d0b3748a08eb4117a58f", "a42a5eb8b07a660e2a22038e", "18ba00000000001000", "d89c2b9ee90029dabfd3b81a"]}) tkill(r7, 0xb) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 8.118721698s ago: executing program 2 (id=890): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(0x0, 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x1}, 0x40004) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x20000, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x3, 0x0, 0x100000001]}) socket$kcm(0x21, 0x2, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$kcm(r0, &(0x7f0000000c40)={&(0x7f00000000c0)=@xdp={0x2c, 0x0, r4, 0x1000000}, 0x80, 0x0}, 0x0) 7.374900785s ago: executing program 4 (id=891): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x28, 0x4, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0x72000000}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) fanotify_init(0x200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x90a03, 0x84) dup3(0xffffffffffffffff, r2, 0x0) iopl(0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="b60afff9", 0x4, 0xffffffffffffffff) keyctl$search(0xa, r4, &(0x7f00000005c0)='logon\x00', &(0x7f0000000600)={'syz', 0x3}, 0xfffffffffffffffe) r5 = getpid() prlimit64(r5, 0x2, &(0x7f0000000080)={0x3ff, 0x5}, &(0x7f0000000300)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x6a040000) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 7.36702201s ago: executing program 5 (id=892): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) 7.240561156s ago: executing program 1 (id=893): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r0, &(0x7f00000000c0)=""/177, 0xb1) read(r0, 0x0, 0x0) 7.22080937s ago: executing program 0 (id=894): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffea9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 7.178337052s ago: executing program 2 (id=895): syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x80000000000000a, 0x2, 0x0) r0 = socket(0x26, 0x6, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x148, 0x178, 0xc, 0x0, 0x178, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg1\x00', 'hsr0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000002440)='net/netlink\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r2, 0x407, 0x2000000) prctl$PR_SET_THP_DISABLE(0x29, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, 0x0, 0x0) 6.9977888s ago: executing program 1 (id=896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x9, 0x20, 0x8f, 0xff, 0x0, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x4, 0x5}, 0xe) sendmmsg$inet_sctp(r1, &(0x7f00000032c0), 0x0, 0x0) syz_usb_connect(0x2, 0x3d, 0x0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x12}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1}, 0x61) 5.507350345s ago: executing program 0 (id=897): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) r0 = socket(0x2, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x6) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) 5.330131699s ago: executing program 2 (id=898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2, 0x299}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_open_dev$dri(&(0x7f00000000c0), 0x328d, 0x0) r4 = fanotify_init(0x1, 0x2) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x41, 0x8000038, r5, 0x0) openat(r5, 0x0, 0x101000, 0x0) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r6, &(0x7f00000000c0)=""/177, 0xb1) 4.563713408s ago: executing program 1 (id=899): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r4, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x405}], 0x1}, 0x20000044) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.48655288s ago: executing program 4 (id=900): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002c00010026bd70f7fbdbdf250400002804001d00"], 0x18}, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) r1 = socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x94, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x61, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0x9}}, 0x0, @default, 0x1882, @void, @val={0x1, 0x4, [{0x79, 0x1}, {0x17, 0x1}, {0x2}, {0x4}]}, @void, @val={0x4, 0x6, {0x7, 0x4, 0x1, 0x4}}, @void, @val={0x5, 0x24, {0x6, 0xac, 0x26, "4535a7d15d92ed3883177b0403cbc09fa3dbf799bd588a59887355f0766d272c4f"}}, @val={0x25, 0x3, {0x0, 0x38, 0x6b}}, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x4}]}, 0x94}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x28, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x15}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x5) getsockopt$MRT6(r1, 0x29, 0xd0, 0x0, 0x0) 2.623434633s ago: executing program 1 (id=901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x416, 0x4, 0x3, 0x49460, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2, 0xe, @value, @void, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000003000/0x2000)=nil) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @printk={@p, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r4, r0}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'veth1_to_batadv\x00'}}, 0x1e) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000140)=0x11) close_range(r7, r7, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x1, 0x2, 0x32314258, 0x7, 0x4, [{0x0, 0x3}, {0x5, 0x1}, {0x8000, 0x401}, {0xfffffffd, 0x80000000}, {0x9, 0x5}, {0x1, 0xfffffffc}, {0xfff, 0xfffffff7}, {0x8, 0x3}], 0x6, 0xa, 0x8, 0x1, 0x3}}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=0x0, @ANYBLOB="000000000000000000000083019423bcb248d73c29000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1806c88137970000001400d94a501592c4cb1b5b958912000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.279762411s ago: executing program 1 (id=902): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x416, 0x4, 0x3, 0x49460, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2, 0xe, @value, @void, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000003000/0x2000)=nil) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @printk={@p, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r4, r0}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'veth1_to_batadv\x00'}}, 0x1e) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000140)=0x11) close_range(r7, r7, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x1, 0x2, 0x32314258, 0x7, 0x4, [{0x0, 0x3}, {0x5, 0x1}, {0x8000, 0x401}, {0xfffffffd, 0x80000000}, {0x9, 0x5}, {0x1, 0xfffffffc}, {0xfff, 0xfffffff7}, {0x8, 0x3}], 0x6, 0xa, 0x8, 0x1, 0x3}}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=0x0, @ANYBLOB="000000000000000000000083019423bcb248d73c29000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1806c88137970000001400d94a501592c4cb1b5b958912000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.048072676s ago: executing program 0 (id=903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) 548.706852ms ago: executing program 0 (id=904): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x8000) r7 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r7, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 197.036065ms ago: executing program 2 (id=905): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x88a, &(0x7f0000000140)={0x0, 0xa65a, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r2, 0x0, 0x0, 0x0, 0x24004014}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 0s ago: executing program 1 (id=906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2, 0x299}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x328d, 0x0) r5 = fanotify_init(0x1, 0x2) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r5, 0x41, 0x8000038, r6, 0x0) r7 = openat(r6, 0x0, 0x101000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, 0x0) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r8, &(0x7f00000000c0)=""/177, 0xb1) read(r8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x2, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0xab, 0x4, 0x7f, 0x6c, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x7, 0xffffff07, 0x51b}}) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000100)={r9, 0x1, 0x6, @random="360be250aa5e"}, 0x10) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r10, 0x80044d76, 0x0) gettid() kernel console output (not intermixed with test programs): arsing attributes in process `syz.1.60'. [ 129.230951][ T6163] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 129.495497][ T5884] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 129.539577][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 129.553012][ T5884] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 129.576466][ T5884] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.609706][ T5884] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 129.684059][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.842812][ T5884] usb 3-1: can't set config #27, error -71 [ 129.858130][ T5884] usb 3-1: USB disconnect, device number 4 [ 129.960593][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.834096][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 130.856154][ T24] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 130.870690][ T24] usb 1-1: config 0 has no interface number 0 [ 130.878450][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 130.902890][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 130.917247][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.928853][ T24] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 130.983605][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 131.040620][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.090075][ T24] usb 1-1: config 0 descriptor?? [ 131.122877][ T24] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 131.422995][ T5884] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 131.640655][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 131.659056][ T5884] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 131.680438][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.698447][ T5884] usb 5-1: Product: syz [ 131.714396][ T5884] usb 5-1: Manufacturer: syz [ 131.746053][ T5884] usb 5-1: SerialNumber: syz [ 131.775742][ T5884] usb 5-1: config 0 descriptor?? [ 131.934564][ T6166] delete_channel: no stack [ 131.955572][ T926] usb 1-1: USB disconnect, device number 3 [ 131.955599][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 132.059606][ T926] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 132.865340][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.919551][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.613599][ T5914] usb 5-1: USB disconnect, device number 3 [ 136.546273][ T6212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.73'. [ 137.630320][ T6212] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 137.679899][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.73'. [ 140.270693][ T5914] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.550384][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 140.581337][ T5914] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 140.694185][ T5914] usb 5-1: config 0 has no interface number 0 [ 140.734005][ T5914] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 140.793622][ T5914] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 140.868888][ T5914] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 140.938411][ T5914] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 141.064238][ T5914] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 141.387945][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.517481][ T5914] usb 5-1: config 0 descriptor?? [ 141.676878][ T6253] netlink: 'syz.2.81': attribute type 1 has an invalid length. [ 141.813000][ T5914] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 143.842487][ T926] usb 5-1: USB disconnect, device number 4 [ 143.850555][ T926] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 144.112232][ T5884] delete_channel: no stack [ 144.730860][ T5883] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 145.770784][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 145.808062][ T5883] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 145.816483][ T5883] usb 2-1: config 0 has no interface number 0 [ 145.991196][ T5883] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 146.010617][ T5883] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 146.022533][ T5883] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.039709][ T5883] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 146.159191][ T5883] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 146.217960][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.287143][ T5883] usb 2-1: config 0 descriptor?? [ 146.323187][ T5883] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 146.844948][ T5883] usb 2-1: USB disconnect, device number 4 [ 147.153570][ T5883] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 147.710967][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 148.020554][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 148.049114][ T24] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 148.059520][ T24] usb 4-1: config 0 has no interface number 0 [ 148.069571][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 148.081977][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 148.096464][ T24] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 148.108088][ T24] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 148.125046][ T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 148.135502][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.157229][ T24] usb 4-1: config 0 descriptor?? [ 148.212114][ T24] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 148.406285][ T6267] delete_channel: no stack [ 148.739126][ T6285] delete_channel: no stack [ 148.762113][ T5884] usb 4-1: USB disconnect, device number 5 [ 148.762265][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 148.778571][ T5884] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 148.880606][ T978] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 149.150590][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 149.845348][ T978] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 149.873533][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.911153][ T978] usb 2-1: Product: syz [ 149.920649][ T978] usb 2-1: Manufacturer: syz [ 149.933192][ T978] usb 2-1: SerialNumber: syz [ 149.966000][ T978] usb 2-1: config 0 descriptor?? [ 151.597112][ T5884] usb 2-1: USB disconnect, device number 5 [ 152.624627][ T6316] xt_TPROXY: Can be used only with -p tcp or -p udp [ 155.580638][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 157.242745][ T24] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 157.355743][ T24] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.381683][ T24] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.400471][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 157.449481][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.771980][ T5883] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 157.976456][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 158.250595][ T5883] usb 1-1: Using ep0 maxpacket: 8 [ 158.257429][ T5883] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 158.265846][ T5883] usb 1-1: config 0 has no interface number 0 [ 158.288120][ T5883] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 158.308345][ T5883] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 158.336334][ T5883] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 158.506998][ T24] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 158.533781][ T24] usb 2-1: USB disconnect, device number 6 [ 158.556015][ T6328] openvswitch: netlink: Message has 3 unknown bytes. [ 158.562812][ T6328] openvswitch: netlink: Actions may not be safe on all matching packets [ 158.594640][ T5883] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 158.651829][ T5883] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 158.682502][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.721466][ T5883] usb 1-1: config 0 descriptor?? [ 158.986769][ T5883] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 158.996321][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.995543][ T5883] usb 1-1: USB disconnect, device number 4 [ 160.005202][ T5883] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 161.440138][ T6359] delete_channel: no stack [ 162.512563][ T6385] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 165.802098][ T926] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 166.270627][ T5883] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 166.292315][ T926] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 166.360528][ T926] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 166.399724][ T926] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 166.419734][ T926] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 166.431216][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 166.443410][ T5883] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 166.469447][ T5883] usb 2-1: config 0 has no interface number 0 [ 166.477862][ T926] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 166.493876][ T5883] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 166.679854][ T926] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 166.693249][ T5883] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 166.711356][ T926] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 166.729167][ T926] usb 1-1: Product: syz [ 166.736291][ T5883] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 166.760733][ T926] usb 1-1: Manufacturer: syz [ 166.792443][ T5883] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 166.808390][ T926] cdc_wdm 1-1:1.0: skipping garbage [ 166.822097][ T926] cdc_wdm 1-1:1.0: skipping garbage [ 166.830704][ T5883] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 166.843796][ T926] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 166.849729][ T926] cdc_wdm 1-1:1.0: Unknown control protocol [ 166.858596][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.885012][ T5883] usb 2-1: config 0 descriptor?? [ 166.907689][ T5883] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 167.239664][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 167.246453][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 167.254965][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 167.261603][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 167.270673][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 167.277303][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 167.290584][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 167.297238][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 167.310596][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 167.317306][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 167.330580][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 167.337199][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 167.351102][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 167.357701][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 167.371180][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 167.377783][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 167.390610][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 167.397236][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 167.410638][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 167.417254][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 167.841974][ T5883] usb 1-1: USB disconnect, device number 5 [ 167.847886][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 168.760667][ T5912] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 169.315370][ T5912] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 169.446021][ T5912] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 169.472317][ T6406] delete_channel: no stack [ 169.484424][ T5914] usb 2-1: USB disconnect, device number 7 [ 169.536906][ T5912] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.809570][ T5912] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.827323][ T5914] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 169.992252][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.221136][ T5913] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 173.104657][ T5912] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.111757][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 173.124664][ T5913] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 173.163262][ T5913] usb 3-1: config 0 has no interface number 0 [ 173.169425][ T5913] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 173.200990][ T5913] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 173.235256][ T6433] delete_channel: no stack [ 173.263810][ T5912] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 173.273243][ T5913] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.320530][ T5913] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 173.334203][ T5912] usb 4-1: USB disconnect, device number 6 [ 173.440755][ T5913] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 173.580970][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.660633][ T5913] usb 3-1: config 0 descriptor?? [ 173.675072][ T6024] udevd[6024]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.730635][ T5913] usb 3-1: can't set config #0, error -71 [ 173.744670][ T5913] usb 3-1: USB disconnect, device number 5 [ 173.915404][ T6446] netlink: 32 bytes leftover after parsing attributes in process `syz.2.133'. [ 173.924461][ T6446] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.931991][ T6446] IPv6: NLM_F_CREATE should be set when creating new route [ 173.939226][ T6446] IPv6: NLM_F_CREATE should be set when creating new route [ 175.355966][ T6460] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 177.010881][ T5913] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 177.099236][ T6476] siw: device registration error -23 [ 177.190959][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 177.567622][ T5913] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 177.606331][ T5913] usb 5-1: config 0 has no interface number 0 [ 177.657094][ T5913] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 177.681383][ T5913] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 177.720515][ T5913] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 177.777624][ T5913] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 177.829097][ T5913] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 177.870812][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.889716][ T5913] usb 5-1: config 0 descriptor?? [ 177.912671][ T6485] Zero length message leads to an empty skb [ 177.925213][ T5913] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 178.165292][ T5883] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 178.570556][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 178.578489][ T5883] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 178.586855][ T5883] usb 3-1: config 0 has no interface number 0 [ 178.598583][ T5883] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 178.611170][ T5883] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 178.623287][ T5883] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 178.634381][ T5883] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 178.647419][ T5883] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 178.658583][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.670184][ T5883] usb 3-1: config 0 descriptor?? [ 178.698603][ T5883] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 178.893986][ T5883] usb 5-1: USB disconnect, device number 5 [ 179.071672][ T5883] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 179.182633][ T5913] usb 3-1: USB disconnect, device number 6 [ 179.747842][ T5913] ldusb 3-1:0.55: LD USB Device #1 now disconnected [ 180.085049][ T5912] delete_channel: no stack [ 181.051210][ T6487] delete_channel: no stack [ 181.565276][ T6509] siw: device registration error -23 [ 182.202440][ T6516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.154'. [ 182.230615][ T6516] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 182.370059][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 182.680601][ T5913] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 182.853999][ T5913] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 182.990779][ T5913] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 183.200721][ T5913] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.297082][ T5913] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 183.330735][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.417703][ T5913] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 183.791141][ T5913] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 183.860236][ T5913] usb 2-1: USB disconnect, device number 8 [ 184.008932][ T6514] openvswitch: netlink: Message has 3 unknown bytes. [ 184.016009][ T6514] openvswitch: netlink: Actions may not be safe on all matching packets [ 184.080528][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.870759][ T5912] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 186.156021][ T5912] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 186.167894][ T5912] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 186.957108][ T5912] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.171208][ T5912] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 187.251978][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.355507][ T5912] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 187.475862][ T6554] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 187.680575][ T978] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 187.902085][ T5912] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 189.270043][ T6538] openvswitch: netlink: Message has 3 unknown bytes. [ 189.276974][ T6538] openvswitch: netlink: Actions may not be safe on all matching packets [ 191.332486][ T978] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.422308][ T5912] usb 2-1: USB disconnect, device number 9 [ 191.678599][ T978] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 191.999284][ T978] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 192.008533][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.081569][ T978] usb 3-1: config 0 descriptor?? [ 192.152519][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.304567][ T978] usb 3-1: USB disconnect, device number 7 [ 193.011264][ T6582] xt_TPROXY: Can be used only with -p tcp or -p udp [ 194.373193][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.380107][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.129648][ T926] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 196.760553][ T926] usb 2-1: Using ep0 maxpacket: 8 [ 196.784574][ T926] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 196.900830][ T926] usb 2-1: config 0 has no interface number 0 [ 196.907141][ T926] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 196.919918][ T926] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 196.934473][ T926] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 196.945854][ T926] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 196.959040][ T926] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 196.968264][ T926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.338402][ T926] usb 2-1: config 0 descriptor?? [ 199.349205][ T926] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 199.440981][ T5912] usb 2-1: USB disconnect, device number 10 [ 199.540607][ T5912] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 204.850777][ T6653] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 205.986558][ T6660] vlan0: entered promiscuous mode [ 206.650557][ T5883] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 207.526632][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 207.846150][ T5883] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 207.968717][ T5883] usb 5-1: config 0 has no interface number 0 [ 208.103224][ T5883] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 208.170817][ T5883] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 208.210868][ T5883] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.240592][ T5883] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 208.263563][ T5883] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 208.732448][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.759871][ T5883] usb 5-1: config 0 descriptor?? [ 208.794606][ T5883] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 209.601236][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'. [ 209.640663][ T6681] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 210.688840][ T978] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 211.823716][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 211.830190][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 211.836853][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 211.837779][ T56] Bluetooth: hci2: command 0x0406 tx timeout [ 211.842969][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 213.547288][ T5913] usb 5-1: USB disconnect, device number 6 [ 213.570063][ T5913] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 213.600553][ T24] delete_channel: no stack [ 214.310758][ T5913] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 215.100764][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 215.261189][ T5913] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 215.502474][ T5913] usb 3-1: config 0 has no interface number 0 [ 215.508656][ T5913] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 215.537081][ T5913] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 215.551050][ T5913] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 215.562831][ T5913] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 215.593684][ T5913] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 215.651285][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.716186][ T5913] usb 3-1: config 0 descriptor?? [ 215.751198][ T5913] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 216.270852][ T6715] netlink: 32 bytes leftover after parsing attributes in process `syz.0.210'. [ 216.279884][ T6715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.287284][ T6715] IPv6: NLM_F_CREATE should be set when creating new route [ 216.294564][ T6715] IPv6: NLM_F_CREATE should be set when creating new route [ 216.432550][ T926] usb 3-1: USB disconnect, device number 8 [ 216.668245][ T926] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 216.951077][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.211'. [ 217.136642][ T6727] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 217.348082][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 217.714266][ T6718] delete_channel: no stack [ 222.260914][ T6766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.220'. [ 222.269801][ T6766] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 222.517528][ T6769] netlink: 32 bytes leftover after parsing attributes in process `syz.3.221'. [ 222.526585][ T6769] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.533842][ T6769] IPv6: NLM_F_CREATE should be set when creating new route [ 222.541101][ T6769] IPv6: NLM_F_CREATE should be set when creating new route [ 227.681385][ T5884] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 227.877501][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 227.890265][ T5884] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 227.890671][ T5913] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 227.899175][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.980831][ T5884] usb 5-1: config 0 has no interface number 0 [ 228.011449][ T5884] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 228.035262][ T5884] usb 5-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.071803][ T5884] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 228.081500][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.094653][ T5884] usb 5-1: config 0 descriptor?? [ 228.102614][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 228.113872][ T5884] ldusb 5-1:0.55: Interrupt in endpoint not found [ 228.333744][ T5913] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 228.690607][ T5913] usb 3-1: config 0 has no interface number 0 [ 228.707083][ T5913] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 228.738471][ T5913] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 228.768806][ T5913] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 228.806421][ T5913] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 228.828450][ T5913] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 228.839863][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.867014][ T5913] usb 3-1: config 0 descriptor?? [ 228.956918][ T5913] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 229.417391][ T978] usb 3-1: USB disconnect, device number 9 [ 229.997733][ T978] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 230.304560][ T978] usb 5-1: USB disconnect, device number 7 [ 231.334036][ T6806] delete_channel: no stack [ 231.970778][ T6816] netlink: 32 bytes leftover after parsing attributes in process `syz.2.233'. [ 231.979726][ T6816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.588834][ T6822] delete_channel: no stack [ 236.637376][ T6851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'. [ 236.668326][ T6846] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 236.687381][ T6851] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 236.871474][ T5884] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 237.535503][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 237.551510][ T5884] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 237.560585][ T5884] usb 3-1: config 0 has no interface number 0 [ 237.665211][ T6860] vlan0: entered promiscuous mode [ 237.728313][ T5884] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 237.770743][ T5884] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 237.784487][ T5884] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.797221][ T5884] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 237.916910][ T5884] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 238.398959][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.537930][ T5884] usb 3-1: config 0 descriptor?? [ 238.553362][ T5884] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 238.846173][ T6863] mmap: syz.3.245 (6863) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 239.255839][ T5912] usb 3-1: USB disconnect, device number 10 [ 239.846849][ T5912] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 240.060693][ T6868] netlink: 32 bytes leftover after parsing attributes in process `syz.3.246'. [ 240.069843][ T6868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.828416][ T6866] delete_channel: no stack [ 242.002035][ T6878] delete_channel: no stack [ 242.378825][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'. [ 243.632886][ T6886] delete_channel: no stack [ 244.517176][ T6899] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 244.618754][ T6904] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 250.958347][ T6932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'. [ 250.984397][ T6932] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 251.118573][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'. [ 251.241042][ T6937] netlink: 32 bytes leftover after parsing attributes in process `syz.0.262'. [ 251.332850][ T6937] netlink: 32 bytes leftover after parsing attributes in process `syz.0.262'. [ 255.812383][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.822400][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.516920][ T6956] delete_channel: no stack [ 260.024500][ T6977] vivid-009: kernel_thread() failed [ 260.101408][ T5884] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 260.172659][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.273'. [ 260.188354][ T6985] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 260.323488][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'. [ 260.509960][ T5884] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 260.627114][ T5884] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 260.638068][ T5884] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.699312][ T5884] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 261.250529][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.282978][ T5884] usb 4-1: can't set config #27, error -71 [ 261.294021][ T5884] usb 4-1: USB disconnect, device number 7 [ 261.664048][ T6994] netlink: set zone limit has 4 unknown bytes [ 263.631987][ T7005] delete_channel: no stack [ 265.343581][ T7015] netlink: set zone limit has 4 unknown bytes [ 267.014835][ T7028] netlink: 'syz.0.286': attribute type 1 has an invalid length. [ 267.543432][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 267.852348][ T24] usb 4-1: device descriptor read/64, error -71 [ 268.650589][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 268.975686][ T24] usb 4-1: device descriptor read/64, error -71 [ 269.100768][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 269.647324][ T24] usb usb4-port1: attempt power cycle [ 270.828822][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 271.286692][ T7051] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 271.402069][ T24] usb 4-1: device descriptor read/8, error -71 [ 275.690803][ T7076] netlink: 'syz.0.299': attribute type 1 has an invalid length. [ 276.057246][ T7088] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 279.484031][ T7103] input: syz1 as /devices/virtual/input/input5 [ 280.601794][ T5883] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 281.202574][ T5883] usb 1-1: Using ep0 maxpacket: 8 [ 281.238198][ T5883] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 281.274434][ T5883] usb 1-1: config 0 has no interface number 0 [ 281.337705][ T5883] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 281.379915][ T5883] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 282.440856][ T5883] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 282.467837][ T5883] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 282.481250][ T926] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 282.505059][ T5883] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 282.604070][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.622277][ T5883] usb 1-1: config 0 descriptor?? [ 282.643763][ T5883] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 283.271768][ T926] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 283.282596][ T926] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 283.293779][ T926] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 283.303399][ T926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 283.315048][ T926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 283.329027][ T926] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 283.371675][ T926] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 283.475672][ T926] usb 2-1: Product: syz [ 283.479996][ T926] usb 2-1: Manufacturer: syz [ 284.138544][ T5883] usb 1-1: USB disconnect, device number 7 [ 284.216945][ T5883] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 284.228043][ T926] cdc_wdm 2-1:1.0: skipping garbage [ 284.244881][ T926] cdc_wdm 2-1:1.0: skipping garbage [ 284.807717][ T926] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 284.814850][ T926] cdc_wdm 2-1:1.0: Unknown control protocol [ 285.154876][ T7133] delete_channel: no stack [ 286.495244][ T7150] input: syz1 as /devices/virtual/input/input6 [ 287.014810][ T926] usb 2-1: USB disconnect, device number 11 [ 287.769162][ T7155] netlink: 'syz.0.319': attribute type 1 has an invalid length. [ 288.073492][ T7140] netlink: 32 bytes leftover after parsing attributes in process `syz.2.316'. [ 288.090658][ T7140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 296.662569][ T926] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 296.775072][ T7213] input: syz1 as /devices/virtual/input/input7 [ 297.446976][ T926] usb 4-1: Using ep0 maxpacket: 8 [ 297.464687][ T926] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 297.544341][ T926] usb 4-1: config 0 has no interface number 0 [ 297.596950][ T926] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 297.629202][ T926] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 297.777321][ T926] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 297.788708][ T926] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 297.803174][ T926] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 297.821211][ T926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.861109][ T926] usb 4-1: config 0 descriptor?? [ 298.589579][ T926] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 299.657904][ T5914] usb 4-1: USB disconnect, device number 12 [ 299.681186][ T5914] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 300.240679][ T978] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 300.442962][ T978] usb 3-1: Using ep0 maxpacket: 8 [ 300.720576][ T7207] delete_channel: no stack [ 301.248504][ T978] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 301.263627][ T978] usb 3-1: config 0 has no interface number 0 [ 301.269778][ T978] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 301.282523][ T978] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 301.294166][ T978] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 301.305211][ T978] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 301.340560][ T978] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 301.349652][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.374373][ T978] usb 3-1: config 0 descriptor?? [ 301.386897][ T978] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 302.799902][ T5834] usb 3-1: USB disconnect, device number 11 [ 302.823349][ T5834] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 303.695348][ T7248] delete_channel: no stack [ 303.920956][ T5914] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 303.971497][ T978] delete_channel: no stack [ 304.111996][ T7259] netlink: 32 bytes leftover after parsing attributes in process `syz.2.347'. [ 304.179978][ T7259] netlink: 32 bytes leftover after parsing attributes in process `syz.2.347'. [ 304.182430][ T926] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 304.250799][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 304.333522][ T7261] input: syz1 as /devices/virtual/input/input8 [ 304.369984][ T5914] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 304.708111][ T5914] usb 2-1: config 0 has no interface number 0 [ 304.900921][ T5914] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 304.926564][ T5914] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 304.939404][ T5914] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 304.970866][ T926] usb 4-1: Using ep0 maxpacket: 8 [ 304.984155][ T926] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 305.063957][ T5914] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 305.078757][ T5914] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 305.091932][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.100280][ T926] usb 4-1: config 0 has no interface number 0 [ 305.288462][ T5914] usb 2-1: config 0 descriptor?? [ 305.306314][ T5914] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 305.317589][ T926] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 305.403915][ T926] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 305.435384][ T926] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 305.447026][ T926] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 305.461925][ T926] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 305.480962][ T926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.573025][ T926] usb 4-1: config 0 descriptor?? [ 306.258042][ T7272] vivid-009: kernel_thread() failed [ 306.406425][ T926] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 306.534276][ T5914] usb 2-1: USB disconnect, device number 12 [ 307.157789][ T5914] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 308.179493][ T7277] delete_channel: no stack [ 308.590493][ T978] delete_channel: no stack [ 308.608971][ T5834] usb 4-1: USB disconnect, device number 13 [ 309.300060][ T7290] delete_channel: no stack [ 309.493781][ T5834] ldusb 4-1:0.55: LD USB Device #1 now disconnected [ 312.628485][ T7318] input: syz1 as /devices/virtual/input/input9 [ 314.929600][ T7334] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 315.590522][ T978] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 315.645943][ T7332] siw: device registration error -23 [ 316.052866][ T978] usb 3-1: Using ep0 maxpacket: 8 [ 316.068441][ T978] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 316.080509][ T978] usb 3-1: config 0 has no interface number 0 [ 316.106569][ T978] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 316.139895][ T978] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 316.159256][ T978] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 316.194318][ T978] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 316.257821][ T978] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 316.267520][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.284860][ T978] usb 3-1: config 0 descriptor?? [ 316.307525][ T978] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 317.194170][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.200668][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.770604][ T978] usb 3-1: USB disconnect, device number 12 [ 319.819282][ T978] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 319.970589][ T5883] delete_channel: no stack [ 320.976176][ T7365] delete_channel: no stack [ 322.328088][ T7378] vivid-007: kernel_thread() failed [ 322.981056][ T7385] netlink: 32 bytes leftover after parsing attributes in process `syz.3.378'. [ 322.990710][ T7385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 324.134219][ T7402] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 326.200542][ T978] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 326.373214][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 326.392179][ T978] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 326.404199][ T978] usb 2-1: config 0 has no interface number 0 [ 326.440536][ T978] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 326.519390][ T978] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 326.556272][ T978] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 326.581032][ T978] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 326.642344][ T978] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 326.669854][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.698351][ T978] usb 2-1: config 0 descriptor?? [ 326.837802][ T978] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 327.760611][ T5834] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 327.788498][ T7419] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 327.980480][ T5834] usb 3-1: Using ep0 maxpacket: 8 [ 328.023652][ T5834] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 328.056787][ T5834] usb 3-1: config 0 has no interface number 0 [ 328.078075][ T5834] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 328.116006][ T5834] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 328.144430][ T5834] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 328.178230][ T5834] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 328.278678][ T5834] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 328.383067][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.594530][ T5834] usb 3-1: config 0 descriptor?? [ 330.534752][ T5914] usb 2-1: USB disconnect, device number 13 [ 330.570503][ T978] delete_channel: no stack [ 330.599382][ T5914] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 330.612038][ T7430] delete_channel: no stack [ 330.652108][ T5834] usb 3-1: can't set config #0, error -71 [ 330.667183][ T5834] usb 3-1: USB disconnect, device number 13 [ 331.379725][ T978] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 331.431026][ T7439] netlink: 32 bytes leftover after parsing attributes in process `syz.0.391'. [ 331.440337][ T7439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.755016][ T7431] delete_channel: no stack [ 331.824652][ T978] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 331.919854][ T978] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 331.949253][ T978] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.314986][ T978] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 332.368817][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.451857][ T978] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 332.576992][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 332.725521][ T7452] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 333.036323][ T7457] openvswitch: netlink: Message has 3 unknown bytes. [ 333.043516][ T7457] openvswitch: netlink: Actions may not be safe on all matching packets [ 333.454209][ T978] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 334.534200][ T7191] udevd[7191]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.635646][ T926] usb 3-1: USB disconnect, device number 14 [ 335.866067][ T926] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 336.060599][ T926] usb 3-1: Using ep0 maxpacket: 8 [ 336.072883][ T926] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 336.116803][ T926] usb 3-1: config 0 has no interface number 0 [ 336.152042][ T926] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 336.307106][ T926] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 336.432161][ T926] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 336.472603][ T926] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 336.524798][ T926] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 336.558396][ T926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.586768][ T926] usb 3-1: config 0 descriptor?? [ 336.618636][ T926] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 336.670530][ T5914] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 336.897961][ T7475] delete_channel: no stack [ 337.349696][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 338.603387][ T5914] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 338.612150][ T5914] usb 1-1: config 0 has no interface number 0 [ 338.618370][ T5914] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 338.629499][ T5914] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 338.642098][ T5914] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 338.654265][ T5914] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 338.667474][ T5914] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 338.676719][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.697934][ T5914] usb 1-1: config 0 descriptor?? [ 338.856264][ T5914] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 338.935599][ T5912] usb 3-1: USB disconnect, device number 15 [ 339.595838][ T5912] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 339.694500][ T5914] usb 1-1: USB disconnect, device number 8 [ 339.905337][ T7488] delete_channel: no stack [ 340.058580][ T5914] ldusb 1-1:0.55: LD USB Device #1 now disconnected [ 340.437173][ T7505] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 340.886418][ T7495] vlan0: entered promiscuous mode [ 340.973327][ T7505] lo speed is unknown, defaulting to 1000 [ 342.247885][ T7509] delete_channel: no stack [ 342.750475][ T5914] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 342.935559][ T5914] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 342.967319][ T5914] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 342.990455][ T5914] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.020513][ T5914] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 343.039921][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.077852][ T5914] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 343.126235][ T5914] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 343.189259][ T7191] udevd[7191]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.296878][ T5914] usb 1-1: USB disconnect, device number 9 [ 343.845217][ T7530] openvswitch: netlink: Message has 3 unknown bytes. [ 343.852506][ T7530] openvswitch: netlink: Actions may not be safe on all matching packets [ 345.040107][ T978] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 345.418749][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 348.176664][ T978] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 348.251842][ T978] usb 2-1: can't read configurations, error -71 [ 348.393388][ T7547] siw: device registration error -23 [ 350.501531][ T5883] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 350.670540][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 350.695787][ T5883] usb 2-1: no configurations [ 350.714967][ T5883] usb 2-1: can't read configurations, error -22 [ 350.871830][ T5883] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 351.223008][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 351.241677][ T5883] usb 2-1: no configurations [ 351.268968][ T5883] usb 2-1: can't read configurations, error -22 [ 351.473454][ T5883] usb usb2-port1: attempt power cycle [ 352.114473][ T5883] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 352.175301][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 352.218655][ T5883] usb 2-1: no configurations [ 352.234143][ T5883] usb 2-1: can't read configurations, error -22 [ 352.246025][ T7575] netlink: 868 bytes leftover after parsing attributes in process `syz.4.428'. [ 352.380873][ T5883] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 352.411396][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 352.422439][ T5883] usb 2-1: no configurations [ 352.432839][ T5883] usb 2-1: can't read configurations, error -22 [ 352.447830][ T5883] usb usb2-port1: unable to enumerate USB device [ 354.172777][ T7589] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 354.757965][ T7589] lo speed is unknown, defaulting to 1000 [ 354.969029][ T5835] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 355.880676][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.436'. [ 356.559933][ T7607] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 357.063614][ T7614] xt_TPROXY: Can be used only with -p tcp or -p udp [ 359.814216][ T5884] lo speed is unknown, defaulting to 1000 [ 366.370819][ T7662] delete_channel: no stack [ 370.518437][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 370.619799][ T7703] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 370.678323][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 378.030977][ T926] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 378.658833][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.665478][ T926] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 378.675747][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.735906][ T926] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 378.747361][ T926] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 378.763110][ T926] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 378.782070][ T926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.873052][ T926] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 379.089628][ T926] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 379.136526][ T5914] usb 5-1: USB disconnect, device number 8 [ 379.965364][ T7762] openvswitch: netlink: Message has 3 unknown bytes. [ 379.973294][ T7762] openvswitch: netlink: Actions may not be safe on all matching packets [ 380.187338][ T7191] udevd[7191]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.311428][ T926] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 381.520537][ T926] usb 4-1: Using ep0 maxpacket: 8 [ 381.545519][ T926] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 381.647528][ T926] usb 4-1: config 0 has no interface number 0 [ 381.664547][ T926] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 381.690061][ T926] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 382.570876][ T926] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.590466][ T926] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 382.607332][ T926] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 382.616829][ T926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.681748][ T926] usb 4-1: config 0 descriptor?? [ 382.706938][ T926] usb 4-1: can't set config #0, error -71 [ 382.755939][ T926] usb 4-1: USB disconnect, device number 14 [ 384.020542][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 387.315817][ T7805] wireguard0: entered promiscuous mode [ 387.321416][ T7805] wireguard0: entered allmulticast mode [ 387.930555][ T926] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 388.157493][ T926] usb 4-1: Using ep0 maxpacket: 8 [ 388.169835][ T926] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 388.190011][ T926] usb 4-1: config 0 has no interface number 0 [ 388.230519][ T926] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 388.302218][ T926] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 388.383768][ T926] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 388.419672][ T926] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 388.451323][ T926] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 388.490482][ T926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.524235][ T926] usb 4-1: config 0 descriptor?? [ 388.824075][ T926] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 391.894824][ T5912] usb 4-1: USB disconnect, device number 15 [ 391.894887][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 391.931854][ T5912] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 392.380355][ T5913] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 394.004569][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 394.061360][ T5913] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 394.105511][ T5913] usb 1-1: config 0 has no interface number 0 [ 394.159434][ T5913] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 394.188700][ T5913] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 394.242853][ T5913] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 394.830824][ T5913] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 395.117864][ T5913] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 395.346171][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.402699][ T5913] usb 1-1: config 0 descriptor?? [ 395.455450][ T5913] usb 1-1: can't set config #0, error -71 [ 395.486409][ T5913] usb 1-1: USB disconnect, device number 10 [ 395.623014][ T7857] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 395.830921][ T5913] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 395.894759][ T7857] lo speed is unknown, defaulting to 1000 [ 396.304645][ T5913] usb 1-1: device descriptor read/64, error -71 [ 396.662796][ T5913] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 397.218411][ T5913] usb 1-1: device descriptor read/64, error -71 [ 397.393956][ T5913] usb usb1-port1: attempt power cycle [ 397.850563][ T5913] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 397.901404][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 397.910092][ T5913] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 397.934330][ T5913] usb 1-1: config 0 has no interface number 0 [ 397.941472][ T5913] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 397.953904][ T5913] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 397.965833][ T5913] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 397.976916][ T5913] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 397.991330][ T5913] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 398.004157][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.438143][ T5913] usb 1-1: config 0 descriptor?? [ 398.449842][ T5913] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 398.488976][ T5914] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 398.671784][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 398.706818][ T5914] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 398.718110][ T5914] usb 2-1: config 0 has no interface number 0 [ 398.869872][ T5914] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 398.881180][ T5914] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 398.892871][ T5914] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 398.904227][ T5914] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 398.917265][ T5914] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 398.917295][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.933416][ T5914] usb 2-1: config 0 descriptor?? [ 398.951704][ T5913] usb 1-1: USB disconnect, device number 13 [ 398.953404][ T5914] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 398.968880][ T5913] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 400.165918][ T5914] usb 2-1: USB disconnect, device number 20 [ 400.192369][ T5914] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 400.399052][ T7882] delete_channel: no stack [ 401.188401][ T7889] delete_channel: no stack [ 401.293721][ T5835] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 402.465050][ T7907] input: syz1 as /devices/virtual/input/input10 [ 404.025438][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'. [ 404.110845][ T5884] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 404.332900][ T5884] usb 4-1: device descriptor read/64, error -71 [ 404.581321][ T5884] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 404.870480][ T5884] usb 4-1: device descriptor read/64, error -71 [ 404.981451][ T5884] usb usb4-port1: attempt power cycle [ 405.427392][ T5884] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 405.498695][ T5884] usb 4-1: device descriptor read/8, error -71 [ 406.014862][ T5884] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 406.145804][ T5884] usb 4-1: device descriptor read/8, error -71 [ 406.281105][ T5884] usb usb4-port1: unable to enumerate USB device [ 407.790541][ T5914] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 408.820738][ T7951] netlink: set zone limit has 4 unknown bytes [ 408.920465][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 408.929770][ T5914] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 408.938284][ T5914] usb 4-1: config 0 has no interface number 0 [ 408.959801][ T5914] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 410.321029][ T5914] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 410.371242][ T5914] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 410.409013][ T7959] input: syz1 as /devices/virtual/input/input11 [ 410.637434][ T5914] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 410.951983][ T5884] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 410.971461][ T5914] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 410.992726][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.004341][ T5914] usb 4-1: config 0 descriptor?? [ 411.144835][ T5914] usb 4-1: can't set config #0, error -71 [ 411.195251][ T5914] usb 4-1: USB disconnect, device number 20 [ 411.332766][ T5884] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 412.153132][ T5884] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 412.550637][ T5884] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 412.588776][ T5884] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 412.749880][ T5884] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 413.628862][ T5884] usb 3-1: string descriptor 0 read error: -71 [ 413.635221][ T5884] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 414.052575][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 414.253250][ T5884] usb 3-1: can't set config #1, error -71 [ 415.793539][ T5884] usb 3-1: USB disconnect, device number 16 [ 416.001376][ T5834] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 416.452728][ T5834] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 416.663913][ T8001] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 417.806276][ T8003] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 417.849226][ T5834] usb 5-1: config 0 has no interface number 0 [ 417.862498][ T5834] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 419.613377][ T5834] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 419.651796][ T5834] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 419.670478][ T5834] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 419.690439][ T5834] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 419.699695][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.727805][ T5834] usb 5-1: config 0 descriptor?? [ 419.740681][ T5834] usb 5-1: can't set config #0, error -71 [ 419.775375][ T5834] usb 5-1: USB disconnect, device number 9 [ 421.180615][ T5913] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 421.380521][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 421.498522][ T5913] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 421.536675][ T5913] usb 4-1: config 0 has no interface number 0 [ 421.676340][ T5913] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 421.715581][ T5913] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 421.773256][ T5913] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 421.826018][ T5913] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 421.879603][ T5913] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 421.941259][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.992569][ T8023] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 422.457765][ T5913] usb 4-1: config 0 descriptor?? [ 422.525007][ T8023] lo speed is unknown, defaulting to 1000 [ 422.565738][ T5913] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 423.524298][ T5913] usb 4-1: USB disconnect, device number 21 [ 423.541865][ T5913] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 424.609769][ T8030] delete_channel: no stack [ 425.466584][ T8045] siw: device registration error -23 [ 426.111680][ T8050] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 427.368258][ T8062] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 429.679076][ T5835] block nbd0: Receive control failed (result -107) [ 429.845293][ T8082] syz.0.550: attempt to access beyond end of device [ 429.845293][ T8082] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 429.920700][ T8075] nbd0: detected capacity change from 0 to 12 [ 430.031264][ T8085] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 430.315671][ T8012] Buffer I/O error on dev nbd0, logical block 0, async page read [ 430.556185][ T8012] Buffer I/O error on dev nbd0, logical block 1, async page read [ 430.570536][ T8082] getblk(): invalid block size 512 requested [ 430.577147][ T8082] logical block size: 1024 [ 430.591554][ T8012] Buffer I/O error on dev nbd0, logical block 2, async page read [ 430.620088][ T8012] Buffer I/O error on dev nbd0, logical block 3, async page read [ 430.640613][ T8082] CPU: 1 UID: 0 PID: 8082 Comm: syz.0.550 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 430.640640][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 430.640652][ T8082] Call Trace: [ 430.640660][ T8082] [ 430.640668][ T8082] dump_stack_lvl+0x241/0x360 [ 430.640717][ T8082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.640746][ T8082] ? __pfx__printk+0x10/0x10 [ 430.640777][ T8082] ? fs_reclaim_acquire+0x93/0x130 [ 430.640801][ T8082] bdev_getblk+0x59c/0x670 [ 430.640833][ T8082] __bread_gfp+0x86/0x400 [ 430.640853][ T8082] udf_read_tagged+0xa6/0xe00 [ 430.640911][ T8082] udf_check_anchor_block+0xb1/0x5c0 [ 430.640931][ T8082] ? __phys_addr+0xba/0x170 [ 430.640957][ T8082] ? udf_get_last_block+0x2a9/0x3c0 [ 430.641001][ T8082] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 430.641037][ T8082] ? __bread_gfp+0x23c/0x400 [ 430.641065][ T8082] udf_load_vrs+0x784/0x1150 [ 430.641113][ T8082] ? __pfx_udf_load_vrs+0x10/0x10 [ 430.641142][ T8082] ? udf_get_last_session+0x122/0x2d0 [ 430.641184][ T8082] udf_fill_super+0x5f2/0x1d80 [ 430.641229][ T8082] ? __pfx_udf_fill_super+0x10/0x10 [ 430.641263][ T8082] ? set_blocksize+0x218/0x410 [ 430.641290][ T8082] ? sb_set_blocksize+0x109/0x180 [ 430.641314][ T8082] ? setup_bdev_super+0x4e6/0x5d0 [ 430.641343][ T8082] get_tree_bdev_flags+0x490/0x5c0 [ 430.641369][ T8082] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 430.641415][ T8082] ? __pfx_udf_fill_super+0x10/0x10 [ 430.641447][ T8082] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 430.641474][ T8082] ? apparmor_capable+0x13b/0x1b0 [ 430.641506][ T8082] vfs_get_tree+0x90/0x2b0 [ 430.641541][ T8082] do_new_mount+0x2cf/0xb70 [ 430.641579][ T8082] ? __pfx_do_new_mount+0x10/0x10 [ 430.641620][ T8082] __se_sys_mount+0x38c/0x400 [ 430.641658][ T8082] ? __pfx___se_sys_mount+0x10/0x10 [ 430.641696][ T8082] ? __x64_sys_mount+0x20/0xc0 [ 430.641730][ T8082] do_syscall_64+0xf3/0x230 [ 430.641755][ T8082] ? clear_bhb_loop+0x45/0xa0 [ 430.641780][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.641808][ T8082] RIP: 0033:0x7f9c7018e169 [ 430.641831][ T8082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.641849][ T8082] RSP: 002b:00007f9c70f7c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 430.641878][ T8082] RAX: ffffffffffffffda RBX: 00007f9c703b6160 RCX: 00007f9c7018e169 [ 430.641894][ T8082] RDX: 0000200000000040 RSI: 0000200000004a00 RDI: 0000200000000500 [ 430.641908][ T8082] RBP: 00007f9c70210a68 R08: 0000000000000000 R09: 0000000000000000 [ 430.641922][ T8082] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 430.641935][ T8082] R13: 0000000000000001 R14: 00007f9c703b6160 R15: 00007ffddb2d6f78 [ 430.641967][ T8082] [ 430.646520][ T8082] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 430.940709][ T8012] Buffer I/O error on dev nbd0, logical block 4, async page read [ 430.948581][ T8012] Buffer I/O error on dev nbd0, logical block 5, async page read [ 430.979459][ T8012] Buffer I/O error on dev nbd0, logical block 6, async page read [ 430.987529][ T8082] getblk(): invalid block size 512 requested [ 431.000799][ T8012] Buffer I/O error on dev nbd0, logical block 7, async page read [ 431.014849][ T8012] Buffer I/O error on dev nbd0, logical block 0, async page read [ 431.041718][ T8012] Buffer I/O error on dev nbd0, logical block 1, async page read [ 431.123019][ T8082] logical block size: 1024 [ 431.184761][ T8088] siw: device registration error -23 [ 431.510694][ T8012] ldm_validate_partition_table(): Disk read failed. [ 431.512757][ T8082] CPU: 0 UID: 0 PID: 8082 Comm: syz.0.550 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 431.512787][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 431.512800][ T8082] Call Trace: [ 431.512810][ T8082] [ 431.512818][ T8082] dump_stack_lvl+0x241/0x360 [ 431.512859][ T8082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.512890][ T8082] ? __pfx__printk+0x10/0x10 [ 431.512924][ T8082] ? fs_reclaim_acquire+0x93/0x130 [ 431.512950][ T8082] bdev_getblk+0x59c/0x670 [ 431.512984][ T8082] __bread_gfp+0x86/0x400 [ 431.513005][ T8082] udf_read_tagged+0xa6/0xe00 [ 431.513048][ T8082] udf_check_anchor_block+0xb1/0x5c0 [ 431.513068][ T8082] ? __phys_addr+0xba/0x170 [ 431.513094][ T8082] ? udf_get_last_block+0x2a9/0x3c0 [ 431.513124][ T8082] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 431.513144][ T8082] ? __bread_gfp+0x23c/0x400 [ 431.513172][ T8082] udf_load_vrs+0xb2f/0x1150 [ 431.513224][ T8082] ? __pfx_udf_load_vrs+0x10/0x10 [ 431.513254][ T8082] ? udf_get_last_session+0x122/0x2d0 [ 431.513296][ T8082] udf_fill_super+0x5f2/0x1d80 [ 431.513340][ T8082] ? __pfx_udf_fill_super+0x10/0x10 [ 431.513373][ T8082] ? set_blocksize+0x218/0x410 [ 431.513400][ T8082] ? sb_set_blocksize+0x109/0x180 [ 431.513423][ T8082] ? setup_bdev_super+0x4e6/0x5d0 [ 431.513453][ T8082] get_tree_bdev_flags+0x490/0x5c0 [ 431.513477][ T8082] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 431.513510][ T8082] ? __pfx_udf_fill_super+0x10/0x10 [ 431.513550][ T8082] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 431.513580][ T8082] ? apparmor_capable+0x13b/0x1b0 [ 431.513615][ T8082] vfs_get_tree+0x90/0x2b0 [ 431.513647][ T8082] do_new_mount+0x2cf/0xb70 [ 431.513684][ T8082] ? __pfx_do_new_mount+0x10/0x10 [ 431.513724][ T8082] __se_sys_mount+0x38c/0x400 [ 431.513761][ T8082] ? __pfx___se_sys_mount+0x10/0x10 [ 431.513799][ T8082] ? __x64_sys_mount+0x20/0xc0 [ 431.513832][ T8082] do_syscall_64+0xf3/0x230 [ 431.513858][ T8082] ? clear_bhb_loop+0x45/0xa0 [ 431.513883][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.513904][ T8082] RIP: 0033:0x7f9c7018e169 [ 431.513927][ T8082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.513944][ T8082] RSP: 002b:00007f9c70f7c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 431.513967][ T8082] RAX: ffffffffffffffda RBX: 00007f9c703b6160 RCX: 00007f9c7018e169 [ 431.513982][ T8082] RDX: 0000200000000040 RSI: 0000200000004a00 RDI: 0000200000000500 [ 431.513997][ T8082] RBP: 00007f9c70210a68 R08: 0000000000000000 R09: 0000000000000000 [ 431.514010][ T8082] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 431.514022][ T8082] R13: 0000000000000001 R14: 00007f9c703b6160 R15: 00007ffddb2d6f78 [ 431.514054][ T8082] [ 431.514089][ T8082] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=11, location=11 [ 431.523540][ T8012] Dev nbd0: unable to read RDB block 0 [ 431.870684][ T8082] getblk(): invalid block size 512 requested [ 431.900649][ T8082] logical block size: 1024 [ 431.905102][ T8082] CPU: 0 UID: 0 PID: 8082 Comm: syz.0.550 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 431.905120][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 431.905129][ T8082] Call Trace: [ 431.905135][ T8082] [ 431.905141][ T8082] dump_stack_lvl+0x241/0x360 [ 431.905168][ T8082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.905190][ T8082] ? __pfx__printk+0x10/0x10 [ 431.905212][ T8082] ? fs_reclaim_acquire+0x93/0x130 [ 431.905229][ T8082] bdev_getblk+0x59c/0x670 [ 431.905269][ T8082] __bread_gfp+0x86/0x400 [ 431.905285][ T8082] udf_read_tagged+0xa6/0xe00 [ 431.905315][ T8082] udf_check_anchor_block+0xb1/0x5c0 [ 431.905329][ T8082] ? __phys_addr+0xba/0x170 [ 431.905348][ T8082] ? udf_get_last_block+0x2a9/0x3c0 [ 431.905371][ T8082] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 431.905385][ T8082] ? __bread_gfp+0x23c/0x400 [ 431.905405][ T8082] udf_load_vrs+0xb2f/0x1150 [ 431.905439][ T8082] ? __pfx_udf_load_vrs+0x10/0x10 [ 431.905461][ T8082] ? udf_get_last_session+0x122/0x2d0 [ 431.905490][ T8082] udf_fill_super+0x5f2/0x1d80 [ 431.905522][ T8082] ? __pfx_udf_fill_super+0x10/0x10 [ 431.905547][ T8082] ? set_blocksize+0x218/0x410 [ 431.905565][ T8082] ? sb_set_blocksize+0x109/0x180 [ 431.905582][ T8082] ? setup_bdev_super+0x4e6/0x5d0 [ 431.905603][ T8082] get_tree_bdev_flags+0x490/0x5c0 [ 431.905621][ T8082] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 431.905652][ T8082] ? __pfx_udf_fill_super+0x10/0x10 [ 431.905676][ T8082] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 431.905696][ T8082] ? apparmor_capable+0x13b/0x1b0 [ 431.905721][ T8082] vfs_get_tree+0x90/0x2b0 [ 431.905741][ T8082] do_new_mount+0x2cf/0xb70 [ 431.905768][ T8082] ? __pfx_do_new_mount+0x10/0x10 [ 431.905797][ T8082] __se_sys_mount+0x38c/0x400 [ 431.905824][ T8082] ? __pfx___se_sys_mount+0x10/0x10 [ 431.905852][ T8082] ? __x64_sys_mount+0x20/0xc0 [ 431.905876][ T8082] do_syscall_64+0xf3/0x230 [ 431.905906][ T8082] ? clear_bhb_loop+0x45/0xa0 [ 431.905922][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.905936][ T8082] RIP: 0033:0x7f9c7018e169 [ 431.905949][ T8082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.905961][ T8082] RSP: 002b:00007f9c70f7c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 431.905976][ T8082] RAX: ffffffffffffffda RBX: 00007f9c703b6160 RCX: 00007f9c7018e169 [ 431.905986][ T8082] RDX: 0000200000000040 RSI: 0000200000004a00 RDI: 0000200000000500 [ 431.905996][ T8082] RBP: 00007f9c70210a68 R08: 0000000000000000 R09: 0000000000000000 [ 431.906005][ T8082] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 431.906014][ T8082] R13: 0000000000000001 R14: 00007f9c703b6160 R15: 00007ffddb2d6f78 [ 431.906035][ T8082] [ 431.906041][ T8082] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=10, location=10 [ 432.266808][ T8082] getblk(): invalid block size 512 requested [ 432.280436][ T8082] logical block size: 1024 [ 432.285074][ T8082] CPU: 1 UID: 0 PID: 8082 Comm: syz.0.550 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 432.285094][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 432.285103][ T8082] Call Trace: [ 432.285110][ T8082] [ 432.285116][ T8082] dump_stack_lvl+0x241/0x360 [ 432.285144][ T8082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.285166][ T8082] ? __pfx__printk+0x10/0x10 [ 432.285188][ T8082] ? fs_reclaim_acquire+0x93/0x130 [ 432.285206][ T8082] bdev_getblk+0x59c/0x670 [ 432.285228][ T8082] __bread_gfp+0x86/0x400 [ 432.285242][ T8082] udf_read_tagged+0xa6/0xe00 [ 432.285271][ T8082] udf_check_anchor_block+0xb1/0x5c0 [ 432.285285][ T8082] ? __phys_addr+0xba/0x170 [ 432.285303][ T8082] ? udf_get_last_block+0x2a9/0x3c0 [ 432.285325][ T8082] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 432.285338][ T8082] ? __bread_gfp+0x23c/0x400 [ 432.285359][ T8082] udf_load_vrs+0xb2f/0x1150 [ 432.285392][ T8082] ? __pfx_udf_load_vrs+0x10/0x10 [ 432.285412][ T8082] ? udf_get_last_session+0x122/0x2d0 [ 432.285440][ T8082] udf_fill_super+0x5f2/0x1d80 [ 432.285470][ T8082] ? __pfx_udf_fill_super+0x10/0x10 [ 432.285494][ T8082] ? set_blocksize+0x218/0x410 [ 432.285512][ T8082] ? sb_set_blocksize+0x109/0x180 [ 432.285527][ T8082] ? setup_bdev_super+0x4e6/0x5d0 [ 432.285565][ T8082] get_tree_bdev_flags+0x490/0x5c0 [ 432.285584][ T8082] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 432.285617][ T8082] ? __pfx_udf_fill_super+0x10/0x10 [ 432.285640][ T8082] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 432.285661][ T8082] ? apparmor_capable+0x13b/0x1b0 [ 432.285686][ T8082] vfs_get_tree+0x90/0x2b0 [ 432.285707][ T8082] do_new_mount+0x2cf/0xb70 [ 432.285733][ T8082] ? __pfx_do_new_mount+0x10/0x10 [ 432.285763][ T8082] __se_sys_mount+0x38c/0x400 [ 432.285791][ T8082] ? __pfx___se_sys_mount+0x10/0x10 [ 432.285818][ T8082] ? __x64_sys_mount+0x20/0xc0 [ 432.285843][ T8082] do_syscall_64+0xf3/0x230 [ 432.285862][ T8082] ? clear_bhb_loop+0x45/0xa0 [ 432.285880][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.285895][ T8082] RIP: 0033:0x7f9c7018e169 [ 432.285908][ T8082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.285922][ T8082] RSP: 002b:00007f9c70f7c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 432.285939][ T8082] RAX: ffffffffffffffda RBX: 00007f9c703b6160 RCX: 00007f9c7018e169 [ 432.285951][ T8082] RDX: 0000200000000040 RSI: 0000200000004a00 RDI: 0000200000000500 [ 432.285962][ T8082] RBP: 00007f9c70210a68 R08: 0000000000000000 R09: 0000000000000000 [ 432.285971][ T8082] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 432.285980][ T8082] R13: 0000000000000001 R14: 00007f9c703b6160 R15: 00007ffddb2d6f78 [ 432.286003][ T8082] [ 432.286009][ T8082] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=9, location=9 [ 432.573772][ T8012] nbd0: unable to read partition table [ 432.590589][ T8012] nbd0: partition table beyond EOD, truncated [ 433.211675][ T8082] getblk(): invalid block size 512 requested [ 433.384483][ T8082] logical block size: 1024 [ 433.420000][ T8082] CPU: 1 UID: 0 PID: 8082 Comm: syz.0.550 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 433.420023][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 433.420033][ T8082] Call Trace: [ 433.420038][ T8082] [ 433.420044][ T8082] dump_stack_lvl+0x241/0x360 [ 433.420072][ T8082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.420094][ T8082] ? __pfx__printk+0x10/0x10 [ 433.420117][ T8082] ? fs_reclaim_acquire+0x93/0x130 [ 433.420134][ T8082] bdev_getblk+0x59c/0x670 [ 433.420156][ T8082] __bread_gfp+0x86/0x400 [ 433.420171][ T8082] udf_read_tagged+0xa6/0xe00 [ 433.420199][ T8082] udf_check_anchor_block+0xb1/0x5c0 [ 433.420212][ T8082] ? __phys_addr+0xba/0x170 [ 433.420230][ T8082] ? udf_get_last_block+0x2a9/0x3c0 [ 433.420254][ T8082] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 433.420269][ T8082] ? __bread_gfp+0x23c/0x400 [ 433.420391][ T8082] udf_load_vrs+0xc53/0x1150 [ 433.420445][ T8082] ? __pfx_udf_load_vrs+0x10/0x10 [ 433.420472][ T8082] ? udf_get_last_session+0x122/0x2d0 [ 433.420502][ T8082] udf_fill_super+0x5f2/0x1d80 [ 433.420534][ T8082] ? __pfx_udf_fill_super+0x10/0x10 [ 433.420558][ T8082] ? set_blocksize+0x218/0x410 [ 433.420576][ T8082] ? sb_set_blocksize+0x109/0x180 [ 433.420591][ T8082] ? setup_bdev_super+0x4e6/0x5d0 [ 433.420611][ T8082] get_tree_bdev_flags+0x490/0x5c0 [ 433.420629][ T8082] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 433.420652][ T8082] ? __pfx_udf_fill_super+0x10/0x10 [ 433.420674][ T8082] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 433.420694][ T8082] ? apparmor_capable+0x13b/0x1b0 [ 433.420716][ T8082] vfs_get_tree+0x90/0x2b0 [ 433.420736][ T8082] do_new_mount+0x2cf/0xb70 [ 433.420761][ T8082] ? __pfx_do_new_mount+0x10/0x10 [ 433.420788][ T8082] __se_sys_mount+0x38c/0x400 [ 433.420814][ T8082] ? __pfx___se_sys_mount+0x10/0x10 [ 433.420851][ T8082] ? __x64_sys_mount+0x20/0xc0 [ 433.420872][ T8082] do_syscall_64+0xf3/0x230 [ 433.420889][ T8082] ? clear_bhb_loop+0x45/0xa0 [ 433.420905][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.420918][ T8082] RIP: 0033:0x7f9c7018e169 [ 433.420931][ T8082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.420942][ T8082] RSP: 002b:00007f9c70f7c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 433.420957][ T8082] RAX: ffffffffffffffda RBX: 00007f9c703b6160 RCX: 00007f9c7018e169 [ 433.420967][ T8082] RDX: 0000200000000040 RSI: 0000200000004a00 RDI: 0000200000000500 [ 433.420977][ T8082] RBP: 00007f9c70210a68 R08: 0000000000000000 R09: 0000000000000000 [ 433.420985][ T8082] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 433.420993][ T8082] R13: 0000000000000001 R14: 00007f9c703b6160 R15: 00007ffddb2d6f78 [ 433.421013][ T8082] [ 433.797301][ T8082] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 433.820181][ T8082] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 433.834389][ T8082] block nbd0: Dead connection, failed to find a fallback [ 433.843352][ T8082] block nbd0: shutting down sockets [ 433.852424][ T8082] I/O error, dev nbd0, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 433.903880][ T8082] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=5, location=5 [ 434.065609][ T8096] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 434.077100][ T8082] I/O error, dev nbd0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 434.184427][ T8082] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=4, location=4 [ 434.720661][ T8082] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 434.925982][ T8082] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=3, location=3 [ 434.937105][ T8082] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 434.948471][ T8082] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 434.958669][ T8082] I/O error, dev nbd0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 434.970562][ T8082] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2, location=2 [ 435.000137][ T8082] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 435.458448][ T8082] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1, location=1 [ 435.468494][ T8082] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 435.483239][ T8082] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=0, location=0 [ 435.493077][ T8100] wireguard0: entered promiscuous mode [ 435.498896][ T8082] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 435.509536][ T8100] wireguard0: entered allmulticast mode [ 435.515927][ T8082] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 435.541909][ T8082] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 435.572852][ T8082] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=0, location=0 [ 435.588724][ T8082] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 435.609740][ T8082] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 437.098312][ T8123] netlink: set zone limit has 4 unknown bytes [ 438.238488][ T8130] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 438.252329][ T5835] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 438.513314][ T8130] lo speed is unknown, defaulting to 1000 [ 440.065763][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.072340][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.401813][ T8144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.567'. [ 443.718974][ T8155] delete_channel: no stack [ 446.415053][ T8180] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 447.112078][ T8188] input: syz1 as /devices/virtual/input/input12 [ 448.208111][ T8192] netlink: set zone limit has 4 unknown bytes [ 449.966952][ T7933] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 450.560517][ T7933] usb 4-1: Using ep0 maxpacket: 8 [ 450.577136][ T7933] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 450.614696][ T7933] usb 4-1: config 0 has no interface number 0 [ 450.655619][ T7933] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 450.697263][ T7933] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 450.718417][ T7933] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 450.744217][ T7933] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 451.031515][ T7933] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 451.640418][ T7933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.732914][ T7933] usb 4-1: config 0 descriptor?? [ 451.766299][ T7933] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 452.558391][ T7933] usb 4-1: USB disconnect, device number 22 [ 452.615050][ T7933] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 453.638127][ T8217] delete_channel: no stack [ 454.655322][ T8231] siw: device registration error -23 [ 455.051661][ T8234] syz.2.591: attempt to access beyond end of device [ 455.051661][ T8234] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 455.942417][ T8234] syz.2.591: attempt to access beyond end of device [ 455.942417][ T8234] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 456.241154][ T8234] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 456.599751][ T8234] syz.2.591: attempt to access beyond end of device [ 456.599751][ T8234] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 456.721870][ T8234] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 456.732373][ T8234] syz.2.591: attempt to access beyond end of device [ 456.732373][ T8234] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 456.745496][ T8234] syz.2.591: attempt to access beyond end of device [ 456.745496][ T8234] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 456.758530][ T8234] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 456.768374][ T8234] syz.2.591: attempt to access beyond end of device [ 456.768374][ T8234] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 456.781788][ T8234] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 456.800770][ T8234] syz.2.591: attempt to access beyond end of device [ 456.800770][ T8234] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 456.820758][ T8234] syz.2.591: attempt to access beyond end of device [ 456.820758][ T8234] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 456.834778][ T8234] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 456.844806][ T8234] syz.2.591: attempt to access beyond end of device [ 456.844806][ T8234] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 456.857857][ T8234] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 456.961125][ T8234] syz.2.591: attempt to access beyond end of device [ 456.961125][ T8234] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 457.050656][ T8234] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 457.139010][ T8246] input: syz1 as /devices/virtual/input/input13 [ 457.171345][ T8234] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 457.745629][ T8234] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 459.578933][ T8268] netlink: 'syz.1.594': attribute type 1 has an invalid length. [ 461.676517][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 462.853790][ T8281] delete_channel: no stack [ 464.910496][ T8297] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 465.623583][ T8297] lo speed is unknown, defaulting to 1000 [ 465.718637][ T8309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.610'. [ 465.748129][ T8304] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 465.765888][ T8309] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 465.768412][ T8304] netlink: 80 bytes leftover after parsing attributes in process `syz.1.609'. [ 465.986228][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.610'. [ 466.022048][ T5913] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 466.320436][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 466.757014][ T5913] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 466.782629][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.143509][ T5913] usb 4-1: config 0 has no interface number 0 [ 467.149678][ T5913] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 467.444220][ T8320] netlink: set zone limit has 4 unknown bytes [ 467.887909][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.898631][ T5913] usb 4-1: config 0 descriptor?? [ 468.025131][ T5913] ldusb 4-1:0.55: Interrupt in endpoint not found [ 468.294792][ T5913] usb 4-1: USB disconnect, device number 23 [ 469.178014][ T8335] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 469.520578][ T7933] delete_channel: no stack [ 469.616891][ T8335] lo speed is unknown, defaulting to 1000 [ 470.035262][ T8344] netlink: 'syz.3.620': attribute type 10 has an invalid length. [ 470.489925][ T8344] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 470.941669][ T5835] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 475.915633][ T8382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.628'. [ 477.693110][ T8394] bio_check_eod: 2 callbacks suppressed [ 477.693130][ T8394] syz.0.633: attempt to access beyond end of device [ 477.693130][ T8394] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 477.859987][ T8394] syz.0.633: attempt to access beyond end of device [ 477.859987][ T8394] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 478.573369][ T8394] Mount JFS Failure: -5 [ 478.644144][ T5835] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 481.666538][ T8424] input: syz1 as /devices/virtual/input/input14 [ 483.168759][ T5835] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 484.256181][ T8445] netlink: 'syz.2.647': attribute type 10 has an invalid length. [ 484.323017][ T8445] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 486.091323][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.651'. [ 486.134777][ T8458] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 486.837441][ T8464] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 489.669394][ T8477] netlink: 'syz.1.657': attribute type 10 has an invalid length. [ 489.750231][ T8477] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 494.830765][ T5884] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 494.990593][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 494.997519][ T5884] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 495.005702][ T5884] usb 3-1: config 0 has no interface number 0 [ 495.024653][ T5884] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 495.068764][ T5884] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 495.119144][ T5884] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 495.168660][ T5884] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 495.215097][ T5884] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 495.231379][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.711814][ T5884] usb 3-1: config 0 descriptor?? [ 495.770752][ T5884] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 496.020165][ T5884] usb 3-1: USB disconnect, device number 17 [ 496.020578][ T8510] delete_channel: no stack [ 496.049203][ T5884] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 496.213602][ T8520] netlink: 60 bytes leftover after parsing attributes in process `syz.1.669'. [ 498.297146][ T8527] wireguard0: entered promiscuous mode [ 498.311015][ T8527] wireguard0: entered allmulticast mode [ 498.362486][ T8536] netlink: 'syz.0.673': attribute type 10 has an invalid length. [ 498.381511][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 498.390098][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 498.399816][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 498.408885][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 498.421604][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 498.481486][ T8536] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 498.546905][ T8534] lo speed is unknown, defaulting to 1000 [ 499.744880][ T8551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.676'. [ 500.460511][ T5843] Bluetooth: hci5: command tx timeout [ 500.509961][ T8534] chnl_net:caif_netlink_parms(): no params data found [ 501.589280][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.595698][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.663828][ T5843] Bluetooth: hci5: command tx timeout [ 502.802170][ T8562] netlink: 60 bytes leftover after parsing attributes in process `syz.1.678'. [ 503.049790][ T8534] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.067553][ T8534] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.074765][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 503.083160][ T8534] bridge_slave_0: entered allmulticast mode [ 503.091511][ T8534] bridge_slave_0: entered promiscuous mode [ 503.100946][ T8534] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.109367][ T8534] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.239127][ T8534] bridge_slave_1: entered allmulticast mode [ 503.248800][ T8534] bridge_slave_1: entered promiscuous mode [ 503.380458][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 504.257264][ T9] usb 1-1: device descriptor read/all, error -71 [ 504.700533][ T5843] Bluetooth: hci5: command tx timeout [ 504.733852][ T8534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.915054][ T8534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.935451][ T8587] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 505.362781][ T8599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.687'. [ 506.790644][ T5843] Bluetooth: hci5: command tx timeout [ 506.842303][ T8534] team0: Port device team_slave_0 added [ 506.937971][ T8590] wireguard0: entered promiscuous mode [ 506.966399][ T8590] wireguard0: entered allmulticast mode [ 507.205096][ T8534] team0: Port device team_slave_1 added [ 507.834465][ T8534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.865641][ T8534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.955986][ T8534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.225827][ T8534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.893495][ T8534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.922601][ T8534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.601696][ T8632] syz.4.694: attempt to access beyond end of device [ 509.601696][ T8632] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 509.616187][ T8632] syz.4.694: attempt to access beyond end of device [ 509.616187][ T8632] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 509.629403][ T8632] Mount JFS Failure: -5 [ 510.324298][ T8534] hsr_slave_0: entered promiscuous mode [ 510.344021][ T8534] hsr_slave_1: entered promiscuous mode [ 510.352054][ T8534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.728410][ T5913] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 510.736215][ T8534] Cannot create hsr debugfs directory [ 511.047623][ T8637] wireguard0: entered promiscuous mode [ 511.053377][ T8637] wireguard0: entered allmulticast mode [ 511.163688][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 511.172357][ T5913] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 511.190395][ T5913] usb 3-1: config 0 has no interface number 0 [ 511.215219][ T5913] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 511.226939][ T5913] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 511.247853][ T5913] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 511.266409][ T5913] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 511.301388][ T5913] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 511.318881][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.495255][ T5913] usb 3-1: config 0 descriptor?? [ 511.578284][ T5913] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 511.599690][ T8646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.698'. [ 512.313160][ T978] usb 3-1: USB disconnect, device number 18 [ 512.357603][ T978] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 515.046791][ T8534] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 515.098445][ T8534] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 515.129997][ T8534] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 515.164279][ T8534] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 516.969497][ T8683] netlink: 'syz.0.707': attribute type 10 has an invalid length. [ 517.481991][ T8534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.675320][ T8534] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.754444][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.761717][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.871076][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.878266][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.091569][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 518.191202][ T8690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.709'. [ 518.890543][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 518.926554][ T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 518.939790][ T9] usb 5-1: config 0 has no interface number 0 [ 518.967610][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 519.203851][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 519.416896][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 520.102661][ T9] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 520.116859][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 520.230374][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.308081][ T9] usb 5-1: config 0 descriptor?? [ 520.519805][ T9] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 520.586500][ T8534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.930641][ T7933] usb 5-1: USB disconnect, device number 10 [ 521.954547][ T7933] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 524.104831][ T8534] veth0_vlan: entered promiscuous mode [ 524.120452][ T8534] veth1_vlan: entered promiscuous mode [ 524.344488][ T8534] veth0_macvtap: entered promiscuous mode [ 524.365468][ T8534] veth1_macvtap: entered promiscuous mode [ 525.064961][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.085111][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.136405][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.177745][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.200221][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.234077][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.261101][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.293212][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.320154][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.365878][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.455913][ T8534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.467353][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.478020][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.488096][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.498768][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.532159][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.585515][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.628257][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.799845][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.822180][ T8710] delete_channel: no stack [ 525.863916][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.916072][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.195582][ T8534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.536704][ T8534] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.554574][ T8534] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.567219][ T8534] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.511541][ T8534] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.521574][ T8737] ceph: No mds server is up or the cluster is laggy [ 527.528711][ T978] libceph: connect (1)[c::]:6789 error -101 [ 527.610551][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 528.983884][ T6370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.010750][ T8750] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 529.096273][ T6370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.143134][ T6370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.153365][ T6370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.496702][ T8784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.730'. [ 533.376853][ T8785] netlink: 80 bytes leftover after parsing attributes in process `syz.5.729'. [ 535.550690][ T8801] netlink: 80 bytes leftover after parsing attributes in process `syz.5.735'. [ 535.681127][ T5843] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 548.080087][ T8892] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 548.811391][ T8892] lo speed is unknown, defaulting to 1000 [ 550.000455][ T5843] Bluetooth: hci5: link tx timeout [ 550.020738][ T5843] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 552.527701][ T8923] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 552.800708][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 554.321659][ T8931] netlink: 16 bytes leftover after parsing attributes in process `syz.5.770'. [ 557.855184][ T8958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.779'. [ 559.671003][ T8978] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 559.961975][ T8983] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 562.955451][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.987775][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.420076][ T8990] openvswitch: netlink: Message has 3 unknown bytes. [ 563.428248][ T8990] openvswitch: netlink: Actions may not be safe on all matching packets [ 564.399237][ T8982] lo speed is unknown, defaulting to 1000 [ 564.633638][ T8994] capability: warning: `syz.1.790' uses deprecated v2 capabilities in a way that may be insecure [ 564.873953][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.792'. [ 564.944366][ T9001] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 565.016463][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'. [ 567.460874][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 567.694974][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 567.704001][ T24] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 567.775992][ T24] usb 3-1: config 0 has no interface number 0 [ 567.828616][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 568.120447][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 568.961650][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 568.990430][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 569.021052][ T24] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 569.073466][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 569.242348][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.281734][ T24] usb 3-1: config 0 descriptor?? [ 569.334395][ T24] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 570.421624][ T24] usb 3-1: USB disconnect, device number 19 [ 570.471661][ T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 570.487458][ T9032] ceph: No mds server is up or the cluster is laggy [ 570.496232][ T5884] libceph: connect (1)[c::]:6789 error -13 [ 570.508838][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 571.728466][ T5843] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 573.863866][ T9060] trusted_key: encrypted_key: insufficient parameters specified [ 574.671141][ T9060] lo speed is unknown, defaulting to 1000 [ 574.932292][ T9070] siw: device registration error -23 [ 583.649313][ T9128] netlink: 'syz.2.820': attribute type 10 has an invalid length. [ 584.932189][ T9132] overlayfs: failed to clone upperpath [ 588.980967][ T7933] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 589.510944][ T7933] usb 3-1: Using ep0 maxpacket: 8 [ 589.671330][ T7933] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 589.679940][ T7933] usb 3-1: config 0 has no interface number 0 [ 589.691571][ T7933] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 589.808599][ T7933] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 589.874839][ T7933] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 590.117433][ T7933] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 590.392294][ T8910] Bluetooth: hci5: command 0x0406 tx timeout [ 590.900457][ T7933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.919152][ T7933] usb 3-1: config 0 descriptor?? [ 591.309886][ T7933] usb 3-1: can't set config #0, error -71 [ 592.302222][ T7933] usb 3-1: USB disconnect, device number 20 [ 595.556930][ T9208] delete_channel: no stack [ 595.866466][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.841'. [ 596.847326][ T9223] syz.4.845: attempt to access beyond end of device [ 596.847326][ T9223] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 596.882386][ T9223] syz.4.845: attempt to access beyond end of device [ 596.882386][ T9223] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 596.941128][ T9223] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 596.967596][ T9223] syz.4.845: attempt to access beyond end of device [ 596.967596][ T9223] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 597.051169][ T9223] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 597.071835][ T9223] syz.4.845: attempt to access beyond end of device [ 597.071835][ T9223] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 597.096991][ T9223] syz.4.845: attempt to access beyond end of device [ 597.096991][ T9223] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 597.130667][ T9223] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 597.150761][ T9223] syz.4.845: attempt to access beyond end of device [ 597.150761][ T9223] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 597.180564][ T9223] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 597.207523][ T9223] syz.4.845: attempt to access beyond end of device [ 597.207523][ T9223] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 597.251882][ T9223] syz.4.845: attempt to access beyond end of device [ 597.251882][ T9223] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 597.265503][ T5834] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 597.280617][ T9223] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 597.320065][ T9223] syz.4.845: attempt to access beyond end of device [ 597.320065][ T9223] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 597.354991][ T9223] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 597.382713][ T9223] syz.4.845: attempt to access beyond end of device [ 597.382713][ T9223] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 597.474014][ T9217] openvswitch: netlink: Message has 3 unknown bytes. [ 597.481362][ T9217] openvswitch: netlink: Actions may not be safe on all matching packets [ 597.694760][ T9223] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 597.940257][ T9223] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 598.110724][ T5834] usb 1-1: Using ep0 maxpacket: 8 [ 598.137094][ T5834] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 598.146678][ T9223] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 598.278969][ T5834] usb 1-1: config 0 has no interface number 0 [ 598.285834][ T5834] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 598.297987][ T5834] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 598.310771][ T5834] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 598.322204][ T5834] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 598.332641][ T5834] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 598.370849][ T5834] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 598.396544][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.435474][ T5834] usb 1-1: config 0 descriptor?? [ 599.515429][ T5834] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 599.952759][ T9241] netlink: 60 bytes leftover after parsing attributes in process `syz.2.849'. [ 599.966412][ T9241] dlm: no local IP address has been set [ 599.973778][ T9241] dlm: cannot start dlm midcomms -107 [ 603.693718][ T9226] delete_channel: no stack [ 603.700483][ T5883] usb 1-1: USB disconnect, device number 16 [ 603.721246][ T5883] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 603.732694][ T9247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.851'. [ 617.750207][ T9270] libceph: connect (1)[c::]:6789 error -13 [ 617.760355][ T9270] libceph: mon0 (1)[c::]:6789 connect error [ 617.780392][ T9330] trusted_key: encrypted_key: insufficient parameters specified [ 617.882207][ T9330] lo speed is unknown, defaulting to 1000 [ 617.947055][ T9327] ceph: No mds server is up or the cluster is laggy [ 617.976809][ T9302] delete_channel: no stack [ 618.025534][ T24] libceph: connect (1)[c::]:6789 error -13 [ 618.073592][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 619.498306][ T9270] libceph: connect (1)[c::]:6789 error -13 [ 619.590749][ T9270] libceph: mon0 (1)[c::]:6789 connect error [ 621.431402][ T9342] Bluetooth: hci5: command 0x0406 tx timeout [ 623.619085][ T8910] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 624.399907][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.410474][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.366257][ T9379] vlan0: entered promiscuous mode [ 629.772777][ T9] libceph: connect (1)[c::]:6789 error -101 [ 629.795644][ T9390] ceph: No mds server is up or the cluster is laggy [ 630.783708][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 631.408394][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 631.480903][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 632.774379][ T9424] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 633.063188][ T9424] lo speed is unknown, defaulting to 1000 [ 634.097463][ T9437] bio_check_eod: 2 callbacks suppressed [ 634.097487][ T9437] syz.0.897: attempt to access beyond end of device [ 634.097487][ T9437] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 634.289989][ T9437] syz.0.897: attempt to access beyond end of device [ 634.289989][ T9437] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 634.310896][ T9437] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 634.330845][ T9437] syz.0.897: attempt to access beyond end of device [ 634.330845][ T9437] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 634.349976][ T9437] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 634.416254][ T9437] syz.0.897: attempt to access beyond end of device [ 634.416254][ T9437] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 634.541913][ T9437] syz.0.897: attempt to access beyond end of device [ 634.541913][ T9437] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 634.616735][ T9437] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 634.800609][ T9437] syz.0.897: attempt to access beyond end of device [ 634.800609][ T9437] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 635.975451][ T9437] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 636.484046][ T9437] syz.0.897: attempt to access beyond end of device [ 636.484046][ T9437] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 636.561312][ T9437] syz.0.897: attempt to access beyond end of device [ 636.561312][ T9437] nbd0: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 636.602023][ T9437] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 636.639498][ T9437] syz.0.897: attempt to access beyond end of device [ 636.639498][ T9437] nbd0: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 636.870778][ T9437] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 636.933097][ T9437] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 640.456121][ T31] INFO: task syz-executor:5830 blocked for more than 143 seconds. [ 640.508098][ T31] Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 640.768149][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 640.810435][ T31] task:syz-executor state:D stack:19576 pid:5830 tgid:5830 ppid:1 task_flags:0x400140 flags:0x00004004 [ 640.897132][ T31] Call Trace: [ 640.980403][ T31] [ 640.984645][ T31] __schedule+0x1b9a/0x5250 [ 640.989883][ T31] ? schedule+0x163/0x360 [ 641.090461][ T31] ? __pfx___schedule+0x10/0x10 [ 641.095904][ T31] ? schedule+0x90/0x360 [ 641.150455][ T31] ? schedule+0x90/0x360 [ 641.170419][ T31] schedule+0x163/0x360 [ 641.175390][ T31] v9fs_evict_inode+0x17e/0x370 [ 641.210395][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 641.216378][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 641.260535][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 641.266320][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 641.320459][ T31] evict+0x4f9/0x9b0 [ 641.325103][ T31] ? __pfx_evict+0x10/0x10 [ 641.380860][ T31] ? iput+0x713/0xa50 [ 641.385765][ T31] __dentry_kill+0x20d/0x630 [ 641.421615][ T31] ? dput+0x37/0x2b0 [ 641.426571][ T31] dput+0x19f/0x2b0 [ 641.480463][ T31] shrink_dcache_for_umount+0xb4/0x180 [ 641.487203][ T31] generic_shutdown_super+0x6a/0x2d0 [ 641.560483][ T31] kill_anon_super+0x3b/0x70 [ 641.567962][ T31] v9fs_kill_super+0x4c/0x90 [ 641.650835][ T31] deactivate_locked_super+0xc4/0x130 [ 641.677574][ T31] cleanup_mnt+0x422/0x4c0 [ 641.710783][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 641.717512][ T31] task_work_run+0x251/0x310 [ 641.759691][ T31] ? __pfx_task_work_run+0x10/0x10 [ 641.800940][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 641.807546][ T31] syscall_exit_to_user_mode+0x13f/0x340 [ 641.862387][ T31] do_syscall_64+0x100/0x230 [ 641.867891][ T31] ? clear_bhb_loop+0x45/0xa0 [ 641.950459][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.958932][ T31] RIP: 0033:0x7fc4b8b8f497 [ 641.992194][ T31] RSP: 002b:00007ffde3b3f848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 642.040557][ T31] RAX: 0000000000000000 RBX: 00007fc4b8c10854 RCX: 00007fc4b8b8f497 [ 642.100473][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde3b3f900 [ 642.109154][ T31] RBP: 00007ffde3b3f900 R08: 0000000000000000 R09: 0000000000000000 [ 642.169915][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffde3b40990 [ 642.190663][ T31] R13: 00007fc4b8c10854 R14: 0000000000075148 R15: 00007ffde3b409d0 [ 642.199713][ T31] [ 642.218416][ T31] [ 642.218416][ T31] Showing all locks held in the system: [ 642.260404][ T31] 2 locks held by kworker/0:0/9: [ 642.266197][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 642.420665][ T31] #1: ffffc900000e7c60 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 642.463650][ T31] 1 lock held by khungtaskd/31: [ 642.500928][ T31] #0: ffffffff8ed3f180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 642.600593][ T31] 2 locks held by getty/5585: [ 642.660881][ T31] #0: ffff888031fd30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 642.710542][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 642.816579][ T31] 1 lock held by syz-executor/5830: [ 642.870571][ T31] #0: ffff88803282e0e0 (&type->s_umount_key#57){+.+.}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 642.972007][ T31] 3 locks held by syz-executor/5832: [ 643.030466][ T31] #0: ffff888034304d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 643.133783][ T31] #1: ffff888034304078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60f/0x1260 [ 643.240513][ T31] #2: ffffffff8ed446b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x454/0x830 [ 643.284135][ T31] 3 locks held by kworker/0:5/5883: [ 643.317891][ T31] #0: ffff8880b8639f18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 643.340431][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41f/0x7a0 [ 643.387081][ T31] #2: ffff8880b8625958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x24c/0x10f0 [ 643.441909][ T31] 2 locks held by kworker/u8:15/6371: [ 643.450137][ T31] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 643.499419][ T31] #1: ffffc9001ae0fc60 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 643.516831][ T31] 1 lock held by syz.5.892/9439: [ 643.525448][ T31] #0: ffffffff90103248 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 643.540878][ T31] 4 locks held by syz.4.900/9448: [ 643.547239][ T31] #0: ffff888034ba4d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 643.560406][ T31] #1: ffff888034ba4078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60f/0x1260 [ 643.573967][ T31] #2: ffffffff90269568 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa6/0x240 [ 643.590535][ T31] #3: ffff888027dcdb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x71/0x690 [ 643.604129][ T31] 1 lock held by syz.2.905/9472: [ 643.613403][ T31] [ 643.616709][ T31] ============================================= [ 643.616709][ T31] [ 643.629789][ T31] NMI backtrace for cpu 0 [ 643.629813][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 643.629838][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 643.629850][ T31] Call Trace: [ 643.629859][ T31] [ 643.629868][ T31] dump_stack_lvl+0x241/0x360 [ 643.629914][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 643.629945][ T31] ? __pfx__printk+0x10/0x10 [ 643.629989][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 643.630029][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 643.630059][ T31] ? _printk+0xd5/0x120 [ 643.630089][ T31] ? __wake_up_klogd+0xcc/0x110 [ 643.630120][ T31] ? __pfx__printk+0x10/0x10 [ 643.630154][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 643.630177][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 643.630228][ T31] watchdog+0x1058/0x10a0 [ 643.630251][ T31] ? watchdog+0x1ea/0x10a0 [ 643.630280][ T31] ? __pfx_watchdog+0x10/0x10 [ 643.630300][ T31] kthread+0x7b7/0x940 [ 643.630329][ T31] ? __pfx_watchdog+0x10/0x10 [ 643.630359][ T31] ? __pfx_kthread+0x10/0x10 [ 643.630383][ T31] ? __pfx_kthread+0x10/0x10 [ 643.630409][ T31] ? __pfx_kthread+0x10/0x10 [ 643.630435][ T31] ? __pfx_kthread+0x10/0x10 [ 643.630461][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 643.630480][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 643.630508][ T31] ? __pfx_kthread+0x10/0x10 [ 643.630535][ T31] ret_from_fork+0x4b/0x80 [ 643.630555][ T31] ? __pfx_kthread+0x10/0x10 [ 643.630582][ T31] ret_from_fork_asm+0x1a/0x30 [ 643.630617][ T31] [ 643.849104][ T31] Sending NMI from CPU 0 to CPUs 1: [ 643.858599][ C1] NMI backtrace for cpu 1 [ 643.858619][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 643.858641][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 643.858653][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 643.858679][ C1] Code: cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 02 15 00 f3 0f 1e fa fb f4 cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 643.858695][ C1] RSP: 0018:ffffc90000197dc0 EFLAGS: 000002c2 [ 643.858712][ C1] RAX: e2ad4ecc41511300 RBX: ffffffff8197d17e RCX: ffffffff8c333afc [ 643.858726][ C1] RDX: 0000000000000001 RSI: ffffffff8e6ab01c RDI: ffffffff8ca1ee40 [ 643.858738][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 643.858752][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: 1ffff92000032fd2 [ 643.858765][ C1] R13: 1ffff11003ad9b40 R14: 0000000000000001 R15: dffffc0000000000 [ 643.858778][ C1] FS: 0000000000000000(0000) GS:ffff888125080000(0000) knlGS:0000000000000000 [ 643.858793][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 643.858805][ C1] CR2: 0000200000387030 CR3: 0000000034678000 CR4: 00000000003526f0 [ 643.858823][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 643.858833][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 643.858845][ C1] Call Trace: [ 643.858852][ C1] [ 643.858858][ C1] default_idle+0x13/0x20 [ 643.858881][ C1] default_idle_call+0x74/0xb0 [ 643.858933][ C1] do_idle+0x22e/0x5d0 [ 643.858958][ C1] ? __pfx_do_idle+0x10/0x10 [ 643.858987][ C1] cpu_startup_entry+0x42/0x60 [ 643.859006][ C1] start_secondary+0xfe/0x100 [ 643.859022][ C1] common_startup_64+0x13e/0x147 [ 643.859081][ C1] [ 644.256215][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 644.264991][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 644.282011][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 644.296680][ T31] Call Trace: [ 644.300611][ T31] [ 644.306099][ T31] dump_stack_lvl+0x241/0x360 [ 644.312872][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.319017][ T31] ? __pfx__printk+0x10/0x10 [ 644.324347][ T31] ? vscnprintf+0x5d/0x90 [ 644.330230][ T31] panic+0x349/0x880 [ 644.335387][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 644.341764][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 644.348776][ T31] ? __pfx_panic+0x10/0x10 [ 644.354374][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 644.361380][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 644.368044][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 644.377811][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 644.386441][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 644.395193][ T31] watchdog+0x1097/0x10a0 [ 644.399678][ T31] ? watchdog+0x1ea/0x10a0 [ 644.404776][ T31] ? __pfx_watchdog+0x10/0x10 [ 644.410360][ T31] kthread+0x7b7/0x940 [ 644.416419][ T31] ? __pfx_watchdog+0x10/0x10 [ 644.422016][ T31] ? __pfx_kthread+0x10/0x10 [ 644.427789][ T31] ? __pfx_kthread+0x10/0x10 [ 644.433946][ T31] ? __pfx_kthread+0x10/0x10 [ 644.439198][ T31] ? __pfx_kthread+0x10/0x10 [ 644.444329][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 644.450480][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 644.457484][ T31] ? __pfx_kthread+0x10/0x10 [ 644.463252][ T31] ret_from_fork+0x4b/0x80 [ 644.469327][ T31] ? __pfx_kthread+0x10/0x10 [ 644.474366][ T31] ret_from_fork_asm+0x1a/0x30 [ 644.479997][ T31] [ 644.484060][ T31] Kernel Offset: disabled [ 644.489313][ T31] Rebooting in 86400 seconds..