last executing test programs: 13m42.667946479s ago: executing program 3 (id=197): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)="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", 0xfd29}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(r0) 13m37.777140775s ago: executing program 3 (id=202): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd, 0x5, "fee8a2ab6447a4b4e00d9683dda1af1ea09de2b7fb0a010000000000000000030000000000000000000180000000000010000000001300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000007fff]}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88501) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "280901dce108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x5cd) 13m37.565406268s ago: executing program 3 (id=203): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x85ca29b1f9d82eff, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@ipv6_newaddr={0x48, 0x14, 0x1, 0x70bd25, 0x2, {0xa, 0x10, 0x20, 0xd4c39a650bf1d256}, [@IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_FLAGS={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0xfffffffb, 0x35, 0xfffff801}}]}, 0x48}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000044) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4140aecd, &(0x7f0000000080)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x500, 0xf0, 0x220, 0xffffffff, 0x0, 0x220, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [0xff000000], [0x0, 0x0, 0x0, 0xffffffff], 'batadv0\x00', 'veth0_to_batadv\x00', {}, {}, 0x0, 0xe}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x13, @ipv6=@mcast1, @ipv4=@rand_addr=0x64010102, @port=0x4e22, @port=0x4e24}}}, {{@ipv6={@dev, @loopback, [0x0, 0xff000000], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x9b86c7bda936e6b2, @ipv4=@private=0xa010101, @ipv6=@private0, @icmp_id=0x64, @port=0x4e21}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0x0, 0xff, 0xff000000], [0xff, 0xffffffff, 0xffffffff], 'batadv0\x00', 'team0\x00', {}, {0xff}, 0x3b, 0x3, 0x1, 0x14}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0x8, 0x18c, 0x40}}, @common=@inet=@set1={{0x28}, {{0x4, 0x3}}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @ipv6=@mcast1, @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0xffffff00], [0x0, 0x0, 0x0, 0xff], 'veth0_vlan\x00', 'pim6reg\x00', {}, {}, 0x8}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r8, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 13m35.601608482s ago: executing program 3 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r4, 0xee00, 0xffffffffffffffff) 13m34.126957589s ago: executing program 3 (id=211): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) 13m33.427891488s ago: executing program 3 (id=213): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)="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", 0xfd29}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(r0) 13m18.284659732s ago: executing program 32 (id=213): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)="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", 0xfd29}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(r0) 7m35.281783147s ago: executing program 2 (id=1054): mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x803, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) shutdown(0xffffffffffffffff, 0x1) 7m34.04200582s ago: executing program 2 (id=1057): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805fd05a607f"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="af97adc5"], 0x4) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x28, 0x12, 0xff05, 0x40000, 0x4, {0x0, 0x0, 0x4a00, 0x0, 0x2045, 0x2000}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000002c0)='lowerdir', &(0x7f0000000300)='./file1\x00', r4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0114020000ff000000030000000100000f040000000a0000000100000000000000"], 0x0, 0x30, 0x0, 0x1}, 0x28) r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) 7m29.302690243s ago: executing program 2 (id=1073): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 7m28.946272621s ago: executing program 2 (id=1075): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0xfffffffffffffe6c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r4, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES64=r0, @ANYRES32, @ANYBLOB="003a000000177b00000020000000050000000000000000f1ff000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = dup3(r7, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x10, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYRESDEC=r8], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r10}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@initdev, @in=@dev}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0}}, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000002b000b0021ec17b80a247ef03434c68a55cc0400000000ffdbdf2501000000"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0xa040) 7m27.647885946s ago: executing program 2 (id=1081): r0 = syz_io_uring_setup(0x494, &(0x7f0000000200)={0x0, 0x7278, 0x400, 0x1, 0x385}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r3 = epoll_create1(0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r4, 0x0) socket$inet6(0xa, 0x4, 0x400) recvmmsg(r4, &(0x7f0000000080), 0x72a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x60002004}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') io_uring_enter(r0, 0x26c8, 0x0, 0x1, 0x0, 0x10) 7m24.263924771s ago: executing program 2 (id=1087): socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mknod(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) chmod(&(0x7f0000000080)='./file1\x00', 0x1258bab1c8332e9a) lchown(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e6520436170"], 0xb8) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000300)}, 0x0) 7m8.708988851s ago: executing program 33 (id=1087): socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mknod(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) chmod(&(0x7f0000000080)='./file1\x00', 0x1258bab1c8332e9a) lchown(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e6520436170"], 0xb8) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000300)}, 0x0) 6m37.195624389s ago: executing program 4 (id=1186): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0xffffffffffffffff, 0x9, 0x2001) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001000/0x1000)=nil}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x40000, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) (async) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0xffffffffffffffff, 0x9, 0x2001) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) (async) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001000/0x1000)=nil}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x40000, 0x1}) (async) 6m36.615896167s ago: executing program 4 (id=1187): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xfffffffffffffca1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) fchdir(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 6m32.01343746s ago: executing program 4 (id=1193): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805fd05a607f"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="af97adc5"], 0x4) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x28, 0x12, 0xff05, 0x40000, 0x4, {0x0, 0x0, 0x4a00, 0x0, 0x2045, 0x2000}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x612100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f00000002c0)='lowerdir', &(0x7f0000000300)='./file1\x00', r4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0114020000ff000000030000000100000f040000000a0000000100000000000000"], 0x0, 0x30, 0x0, 0x1}, 0x28) r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) 6m21.316041568s ago: executing program 4 (id=1211): openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0xfffffffd, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, 0x0) timer_create(0x6, &(0x7f0000000080)={0x0, 0x33, 0x2, @thr={&(0x7f0000000000)="6aea9a", 0x0}}, &(0x7f0000000140)) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x4181) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0x3, 0xfffffffb}) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r4, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001840), 0x3b, 0x0) 6m16.933924112s ago: executing program 4 (id=1214): socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = fanotify_init(0x0, 0x800) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x240c40, 0x16) fanotify_mark(r1, 0x641, 0x1021, r2, 0x0) fanotify_mark(r1, 0x90, 0x20, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mknod(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) chmod(&(0x7f0000000080)='./file1\x00', 0x1258bab1c8332e9a) lchown(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e65204361707455"], 0xb8) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r5, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000300)}, 0x0) 6m15.337176604s ago: executing program 4 (id=1216): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd8, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000840}, 0x4) sendmmsg$sock(r0, &(0x7f0000000b80)=[{{&(0x7f0000000640)=@hci={0x1f, 0x4, 0x4}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000006c0)="c5951f7e3790ffb7e68a7ac26c984eb5e5d1afbc73efd7c2e25d751562c180fea59455a601eade3782bec0559ad07c5afd420978895216301bbad9f74a4b7a47cedc2aa2e2153b141f5ab631afeb43794922dc946bed4156ad16c1783efd6244769d5c2cb6923418b1479d38ace66d2b438cb5d7b0fd26466e910d4d339fcb688b9778175d617ef4f8a2b8a9000c14ecc8f073490e475cd0d15b13209aa2470bc7ac70eb4e7f5769b28ddab90610cb10d1b0251ec90e4bd4e85fd143f3e8bfc589c0549bc698f1b73aa169c0fd73135afd075fa42dfa900e3e", 0xd9}, {&(0x7f00000007c0)="d5f5b07dc73639571fef2c6b58434d3101423795f7affda93f00589928da9a340c030e1aa3d0b6e357c7dde0740cd6e5856a748298975095dc322d413fc1d4d992adc83b7414ed6350dc68e8020816043567450803d4dcfb149404bd3dfce59aba", 0x61}, {&(0x7f0000000840)="897b9ac0670b8d420fd7fbfc79c6be7b44f886b90f5df3c79def8dfe763ce7297e73cb267d6a46a318794c026d969b418e30fef26297ce4c0927701a286b973a1f021a2d2b3ad03f3ebc1f9ce62231568441a71ff29f2dd209c2272d4afcb0e2096961900d13cdfde2038c0917dd5d8309ce72b6457b1a705485ec2116f01e8f24fa78a7815b615207de1c29", 0x8c}, {&(0x7f0000000900)="8aafc9f95499f37f1cddce521d5de1df2cc4cf75846527abbd35b4ccf2d44ddc699c4cf0b88b665ac4b90bb8f99c324817d2ea4b837581c7", 0x38}, {&(0x7f0000000940)="2bda51a0c14456c15757bee84485c88d00d60d034d9b5a9335cb682ee2861a0ccc1cc76e5f55e9c6a9e95735586457e00f8f9cc1d62b0b063ff76577bed4ff", 0x3f}, {&(0x7f0000000980)="77d72df6f4a66900ac3d67e4e1db2d6c31949f83116377be4a0e14d95117b2f997c5f2ccfb2d30", 0x27}, {&(0x7f00000009c0)="2d28018e8fafc4ee9541d5e3d600dd40ce500aca7c0aeba5c6947d297aa47f416aebfa17b36ae7616a0033afe38a352db44d2cbff4d7188e75f905e6fdcd7e4f697b14a47bca077921d32165fa29497a94cbb8f1be", 0x55}], 0x7, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x2b}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xfc9d}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xe}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xc0}}], 0x1, 0x40800) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x2, 0xa, 0x2a, 0x6, 0xa, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x6e6bbb, 0x0, {0x6, 0x33, 0x2, 0xf, 0x0, 0x9, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}}]}, 0x50}}, 0x20000090) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000f00)=0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r2, 0x0) 5m59.116223513s ago: executing program 34 (id=1216): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd8, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000840}, 0x4) sendmmsg$sock(r0, &(0x7f0000000b80)=[{{&(0x7f0000000640)=@hci={0x1f, 0x4, 0x4}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000006c0)="c5951f7e3790ffb7e68a7ac26c984eb5e5d1afbc73efd7c2e25d751562c180fea59455a601eade3782bec0559ad07c5afd420978895216301bbad9f74a4b7a47cedc2aa2e2153b141f5ab631afeb43794922dc946bed4156ad16c1783efd6244769d5c2cb6923418b1479d38ace66d2b438cb5d7b0fd26466e910d4d339fcb688b9778175d617ef4f8a2b8a9000c14ecc8f073490e475cd0d15b13209aa2470bc7ac70eb4e7f5769b28ddab90610cb10d1b0251ec90e4bd4e85fd143f3e8bfc589c0549bc698f1b73aa169c0fd73135afd075fa42dfa900e3e", 0xd9}, {&(0x7f00000007c0)="d5f5b07dc73639571fef2c6b58434d3101423795f7affda93f00589928da9a340c030e1aa3d0b6e357c7dde0740cd6e5856a748298975095dc322d413fc1d4d992adc83b7414ed6350dc68e8020816043567450803d4dcfb149404bd3dfce59aba", 0x61}, {&(0x7f0000000840)="897b9ac0670b8d420fd7fbfc79c6be7b44f886b90f5df3c79def8dfe763ce7297e73cb267d6a46a318794c026d969b418e30fef26297ce4c0927701a286b973a1f021a2d2b3ad03f3ebc1f9ce62231568441a71ff29f2dd209c2272d4afcb0e2096961900d13cdfde2038c0917dd5d8309ce72b6457b1a705485ec2116f01e8f24fa78a7815b615207de1c29", 0x8c}, {&(0x7f0000000900)="8aafc9f95499f37f1cddce521d5de1df2cc4cf75846527abbd35b4ccf2d44ddc699c4cf0b88b665ac4b90bb8f99c324817d2ea4b837581c7", 0x38}, {&(0x7f0000000940)="2bda51a0c14456c15757bee84485c88d00d60d034d9b5a9335cb682ee2861a0ccc1cc76e5f55e9c6a9e95735586457e00f8f9cc1d62b0b063ff76577bed4ff", 0x3f}, {&(0x7f0000000980)="77d72df6f4a66900ac3d67e4e1db2d6c31949f83116377be4a0e14d95117b2f997c5f2ccfb2d30", 0x27}, {&(0x7f00000009c0)="2d28018e8fafc4ee9541d5e3d600dd40ce500aca7c0aeba5c6947d297aa47f416aebfa17b36ae7616a0033afe38a352db44d2cbff4d7188e75f905e6fdcd7e4f697b14a47bca077921d32165fa29497a94cbb8f1be", 0x55}], 0x7, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x2b}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xfc9d}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xe}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xc0}}], 0x1, 0x40800) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x2, 0xa, 0x2a, 0x6, 0xa, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x6e6bbb, 0x0, {0x6, 0x33, 0x2, 0xf, 0x0, 0x9, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}}]}, 0x50}}, 0x20000090) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000f00)=0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r2, 0x0) 2m26.696600994s ago: executing program 1 (id=1649): landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x18c) sendfile(r0, r0, 0x0, 0xb) accept$inet6(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x1c) close_range(r0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x1008c69) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000240)={0xfffffffffffff001, 0x0, 0x0, r4, 0xc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2m25.980499573s ago: executing program 1 (id=1651): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x3ff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x82, 0x1a2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000179000/0x2000)=nil, 0x2000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x1, 0x0, 0x6083, 0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) sendmmsg(r4, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="5ce19df0e25d846bf10100000f0000001fba81c87955bcbb0ec90468576da553380d27e37ed736bd394b2077fb3eee49d2aaac77676b2036fdd3ce968c30c285641a60d93a25035fd8a9d09147d0787b88b8fd54fb5152e4511d813b5f8d57d9b837965427dda6d0b8921212e6aec00597f6542cafaaec4c2fa46729ac3a803a5c"], 0x10}}], 0x2, 0x48d4) r6 = syz_open_dev$vim2m(&(0x7f00000005c0), 0x1ff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0d05640, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), r7) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r8, 0xc008561b, &(0x7f0000007c40)={0x98f908, 0x5}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9e00400ad1e0100"], 0x9) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x10) 2m23.814253951s ago: executing program 1 (id=1658): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x501c0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$P9_RREADLINK(r1, &(0x7f0000001280)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 2m22.006153673s ago: executing program 1 (id=1661): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x12, 0x12, 0x9, "8f4d0ae712e9db98522e581d38bc7144bf538c7f69bbd403c90d84d1ac2043bdc97f98fe08a0bc708006e5a2838642f4cfedac8bb9c5e434a7221790f5576253", "031438010ea45ca40e4044320f0daefce75ff1110800c67fee7e5069e11393f07a308a1cfe04000400a7ee5efa19e8055f9863d7802e0021d55e71b67800", "30d511dd8225bcd90de20e62aa8aa993618164198dae9f38b908ae00f1515b68", [0x2d01, 0x5]}) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) 2m21.725110393s ago: executing program 1 (id=1665): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0xfdfdffffffffffff) 2m19.16511354s ago: executing program 1 (id=1668): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000002f4d01000000000000000000000000c42897d8f2f4f764477eea47d5", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES8=r0, @ANYBLOB="42f1b602879416d403e8e33d5a40867e5faf2e78edb72f05630652ca08d67315f47a9f7214afd5163fa7fa4461787b7e7ed2dd109c228c533699accf6d47436a20deb1134ecdbe4a498fdb3897b9980d6ba42ef02f9ccb1f49100a0b79d85ea05c8d1cb20b754e95aa195604c58a37ac3c9b24a9d04c719d174329a080de2fcf66edfac94bb46638e258f69787fc5f7198a9727384c239575ffe81b455022833c40a9bd8917e97f8f8cc00fa4357deef1b5c125f8d54663104c7dff238801d0be29153ba2bf9a8a2004cc4c82cead8e4a4fa3d8742d91fbe486ad81a91b5b832b5443a8d17c79e0206a5c280e08afebbd1723d9d1264"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x6008005) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x40400c4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f0000000180), 0x80000000, 0x103001) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) 2m3.690502741s ago: executing program 35 (id=1668): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000002f4d01000000000000000000000000c42897d8f2f4f764477eea47d5", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES8=r0, @ANYBLOB="42f1b602879416d403e8e33d5a40867e5faf2e78edb72f05630652ca08d67315f47a9f7214afd5163fa7fa4461787b7e7ed2dd109c228c533699accf6d47436a20deb1134ecdbe4a498fdb3897b9980d6ba42ef02f9ccb1f49100a0b79d85ea05c8d1cb20b754e95aa195604c58a37ac3c9b24a9d04c719d174329a080de2fcf66edfac94bb46638e258f69787fc5f7198a9727384c239575ffe81b455022833c40a9bd8917e97f8f8cc00fa4357deef1b5c125f8d54663104c7dff238801d0be29153ba2bf9a8a2004cc4c82cead8e4a4fa3d8742d91fbe486ad81a91b5b832b5443a8d17c79e0206a5c280e08afebbd1723d9d1264"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x6008005) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x40400c4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f0000000180), 0x80000000, 0x103001) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) 2.974678641s ago: executing program 7 (id=1999): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 2.913663089s ago: executing program 8 (id=2000): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000020000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000850000001100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2.779971449s ago: executing program 5 (id=2001): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000001a80)={0x6, 'rose0\x00', {0x2}, 0x869}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000001ac0)={0x0, 'veth0_vlan\x00', {0x3}, 0x2}) 2.580017278s ago: executing program 7 (id=2004): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x8000) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f000000b2c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004d00)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0) 2.519746304s ago: executing program 8 (id=2005): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000ff6bd4f541a1fc94c900000800", @ANYRES32=r2], 0x24}}, 0x0) 2.10396795s ago: executing program 8 (id=2007): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) unshare(0x20000400) bind$can_j1939(r0, &(0x7f0000000440)={0x1d, r1, 0x0, {0x2, 0x0, 0x3}, 0x2}, 0x18) 2.103803567s ago: executing program 0 (id=2008): sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x44, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30}, 0x4048800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 2.10357647s ago: executing program 5 (id=2009): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x24}, 0x94) 1.886385692s ago: executing program 8 (id=2011): socket$netlink(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x14, 0x0, 0x110, 0x7, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x404c050}, 0x8804) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 1.871574276s ago: executing program 5 (id=2012): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4], 0x5c}}, 0x0) 1.715718289s ago: executing program 0 (id=2013): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0xfffffffffffff2b}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x100, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, '\x00', 0x29}, 0x3}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000680)="e8d5b23341ca2005478d63675bfb46a8a8408192aecbe47fa8e33d5d858c35f387817d3ea8a3190bb0ba482b1fe0a41ae2e41c60772cc4c4df594be54e217521", 0x40}, {&(0x7f0000000c00)="de06d7c0f63c8dcf89efd1ecec11bc5e44b55ed2ef610a4b8e0dc68d8656264f7ceab08fa652088b32e084028fea254a162e5305554212296838ae98d5decb63197b2cf60134a1b9cb080b4e851cf7faefc889dec38fec7874038c79f9f19af85fd7aea4b7ffd3fd929264013aa452020d84b2e03fb4fd5912fecf4116cf42dd65a1333afbcffd305105474f1216174cc7e9a3346f1b28", 0x97}, {&(0x7f00000007c0)="ba8ca6c0964f7c73e4bc27b0d660fa7abfb79523b174e410f27b", 0x1a}, {&(0x7f0000000dc0)="de2a616c70b6c0dcb80516b26aba51bce3025a7df1053327a75b45cdb19d77cc84b00a0dde561852a5f9974f5741037cb844873c52d3435e0d0c48f79c220e14e3e042123ef376b5e8d7dbf3806074c614b40b709805830780ce801264a66c273c7a13bbc4f712818992f8511046021cbf3607d0ace2a052cc4244dc59667a137aa944cead541cb09b1359320522a9d6e38783012b5bf9f91977d8e4356a578e4690a9834d7913da936f0302a0a157347f7e746b209f8582d3558c41a82e020623", 0x125}, {&(0x7f0000000900)="330373b6204d692464b27dafc0befa100925116ec43e4eb1e765384b5ef0f9bb4c09a152c8eb", 0x26}], 0x5, &(0x7f00000009c0)=[@dstopts_2292={{0xb8, 0x29, 0x4, {0x2e, 0x13, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x3b, 0x6}}, @generic={0x7, 0x61, "8093d6953e3cf69f8741e27308de243698099e6f9e3703cf9552657db2edc4002bff008bdf72be72e6b97dab5d4a0b91368071aca885def2fc50e3d8ed58b9b40f4a336aeefa8ba4d60e016c9f52021b41c43590eee6591dbc9305a06921cf0bea"}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x1ff}, @generic={0xf, 0x3, "21c8d5"}, @calipso={0x7, 0x18, {0x0, 0x4, 0x90, 0x3ff, [0x8, 0x9]}}, @pad1, @enc_lim={0x4, 0x1, 0x81}, @jumbo={0xc2, 0x4, 0x7fff}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x2e, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0xf0}}], 0x3, 0x24000045) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e21, 0x5, @local, 0x2}, 0x1c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x4}, 0x2f) syz_emit_ethernet(0xc6, &(0x7f0000000cc0)={@random="796e3ca426ea", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x90, 0x11, 0x0, @local, @mcast2, {[@routing={0x21, 0x0, 0x2, 0x81}, @hopopts={0x0, 0x1, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x3a, 0x4, 0x2, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2]}], {0x4e20, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0xfffffffd, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x34, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0xb}, @typed={0x4, 0xe3, 0x0, 0x0, @binary}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x4811}, 0x4008094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x20040804) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1.531579508s ago: executing program 7 (id=2015): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=@newtfilter={0x68, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3c, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_FD={0x8}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.50904305s ago: executing program 5 (id=2016): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) 1.41198642s ago: executing program 6 (id=2017): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0xfffffffffffffffd, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, 0x0, 0xffffffffffffffff, {0x1}, 0x2}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80001}, 0xee) 1.172349348s ago: executing program 0 (id=2018): socket$kcm(0x10, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket(0x10, 0x80002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f0000000000)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.154846386s ago: executing program 5 (id=2019): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 1.099907028s ago: executing program 6 (id=2020): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='ext4_es_shrink_scan_exit\x00', r0}, 0x18) 1.099551247s ago: executing program 7 (id=2021): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000040100000f1f7000095"], &(0x7f0000000480)='GPL\x00', 0x8, 0x1009, &(0x7f0000002a80)=""/4105, 0x40f00, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 819.31148ms ago: executing program 6 (id=2022): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000480)={@random="e90dacb3d700", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x9, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 812.015429ms ago: executing program 7 (id=2023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 755.454528ms ago: executing program 8 (id=2024): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e24, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abc079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3dbe041875c000000000000000a00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7c2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1f, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0xac, [0x3]}]}}}}}}}, 0x0) 663.854213ms ago: executing program 5 (id=2025): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301}], {0x14}}, 0x3c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001001700"], 0x1c}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r8, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) write(r4, 0x0, 0x0) tee(r3, r7, 0x8f5, 0x100000000000000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, 0x0, 0x60800) write$cgroup_type(r7, &(0x7f0000000180), 0x9) write(r5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 663.631264ms ago: executing program 0 (id=2026): unshare(0x24020400) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$alg(r0, 0x0, 0x0) 595.456489ms ago: executing program 6 (id=2027): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) r1 = accept4(r0, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000000)=0x80, 0x800) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000080)={@local, @loopback, @multicast1}, 0xc) 474.486356ms ago: executing program 7 (id=2028): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="010000002100000000000000000000008580000075220000a500000023000000a9"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='afs_call_state\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r1, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0xffffff98) write(r4, 0x0, 0x0) close(r6) bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x18) 404.007294ms ago: executing program 0 (id=2029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xc0}}, 0x0) 403.69687ms ago: executing program 8 (id=2030): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r1, 0x0, 0x40040) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x220, 0x100, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000240)="0014", 0x2, 0x4040081, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x10102, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000280)=@rose={'rose', 0x0}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40002}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x464, 0x2, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8880}, 0x8040) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmsg$nl_route(r8, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000004380)={0x0}, 0x1, 0x0, 0x0, 0x400a001}, 0x20001840) recvmmsg$unix(r8, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/14, 0xe}], 0x1}}], 0x1, 0x10101, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 291.958398ms ago: executing program 6 (id=2031): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) accept4$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000180)=0x1c, 0x180800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_NH_ID={0x8, 0x1e, 0x800}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x1}}]}, 0x30}}, 0x4000050) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = socket$kcm(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7090000000000001801000020646c0a00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000d00)=r6, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r7, 0x0, 0x0, 0x40000000, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x10000, 0x12) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c630faca20180c20000000800450000240000e0000011"], 0x0) getsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) unshare(0x400) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$bt_hci(r11, 0x11e, 0x1, 0x0, &(0x7f0000000300)) splice(r10, 0x0, 0xffffffffffffffff, 0x0, 0x480000000102, 0x0) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@ptr={0x6, 0x0, 0x0, 0x2, 0x5}, @func={0x800005, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f, 0x61]}}, &(0x7f0000000240)=""/15, 0x34, 0xf, 0x1, 0x0, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, r12, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 184.431174ms ago: executing program 0 (id=2032): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r1, 0x439, 0xfffffffe, 0x20000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x4004000) 0s ago: executing program 6 (id=2033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0xc, 0x0, &(0x7f0000000140)) kernel console output (not intermixed with test programs): r_oss: invalid OSS volume 'DIG' [ 706.253277][T11476] netlink: 'syz.1.1360': attribute type 1 has an invalid length. [ 706.349584][T11477] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 707.009467][ T5842] Bluetooth: hci2: command tx timeout [ 707.044952][T11486] FAULT_INJECTION: forcing a failure. [ 707.044952][T11486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.058349][T11486] CPU: 1 UID: 0 PID: 11486 Comm: syz.6.1364 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 707.058375][T11486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 707.058386][T11486] Call Trace: [ 707.058395][T11486] [ 707.058404][T11486] dump_stack_lvl+0x189/0x250 [ 707.058436][T11486] ? __pfx____ratelimit+0x10/0x10 [ 707.058459][T11486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 707.058482][T11486] ? __pfx__printk+0x10/0x10 [ 707.058537][T11486] should_fail_ex+0x414/0x560 [ 707.058566][T11486] _copy_to_user+0x31/0xb0 [ 707.058597][T11486] simple_read_from_buffer+0xe1/0x170 [ 707.058625][T11486] proc_fail_nth_read+0x1df/0x250 [ 707.058654][T11486] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 707.058683][T11486] ? rw_verify_area+0x258/0x650 [ 707.058713][T11486] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 707.058738][T11486] vfs_read+0x200/0x980 [ 707.058774][T11486] ? __pfx___mutex_lock+0x10/0x10 [ 707.058798][T11486] ? __pfx_vfs_read+0x10/0x10 [ 707.058828][T11486] ? __fget_files+0x2a/0x420 [ 707.058857][T11486] ? __fget_files+0x3a0/0x420 [ 707.058877][T11486] ? __fget_files+0x2a/0x420 [ 707.058916][T11486] ksys_read+0x145/0x250 [ 707.058933][T11486] ? __fget_files+0x3a0/0x420 [ 707.058956][T11486] ? __pfx_ksys_read+0x10/0x10 [ 707.058981][T11486] ? do_syscall_64+0xbe/0x3b0 [ 707.059008][T11486] do_syscall_64+0xfa/0x3b0 [ 707.059036][T11486] ? lockdep_hardirqs_on+0x9c/0x150 [ 707.059057][T11486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.059076][T11486] ? clear_bhb_loop+0x60/0xb0 [ 707.059100][T11486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.059118][T11486] RIP: 0033:0x7f244c58d5fc [ 707.059136][T11486] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 707.059152][T11486] RSP: 002b:00007f244d3da030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 707.059173][T11486] RAX: ffffffffffffffda RBX: 00007f244c7b5fa0 RCX: 00007f244c58d5fc [ 707.059186][T11486] RDX: 000000000000000f RSI: 00007f244d3da0a0 RDI: 0000000000000004 [ 707.059198][T11486] RBP: 00007f244d3da090 R08: 0000000000000000 R09: 0000000000000000 [ 707.059209][T11486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.059219][T11486] R13: 00007f244c7b6038 R14: 00007f244c7b5fa0 R15: 00007ffdcb835128 [ 707.059251][T11486] [ 707.439424][ T7377] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 707.599428][ T7377] usb 1-1: Using ep0 maxpacket: 32 [ 707.612298][ T7377] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 707.631215][ T7377] usb 1-1: config 0 has no interface number 0 [ 707.651444][ T7377] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 707.688699][ T7377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.714116][ T78] bridge_slave_1: left allmulticast mode [ 707.716989][ T7377] usb 1-1: Product: syz [ 707.734129][ T7377] usb 1-1: Manufacturer: syz [ 707.735894][ T78] bridge_slave_1: left promiscuous mode [ 707.744500][ T7377] usb 1-1: SerialNumber: syz [ 707.754748][ T7377] usb 1-1: config 0 descriptor?? [ 707.781254][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.803121][ T78] bridge_slave_0: left allmulticast mode [ 707.813264][ T7377] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 707.822942][ T7377] usb 1-1: selecting invalid altsetting 1 [ 707.823588][ T78] bridge_slave_0: left promiscuous mode [ 707.828761][ T7377] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 707.855593][ T7377] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 707.857351][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.873946][ T7377] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 707.879437][ T43] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 707.888649][ T7377] usb 1-1: media controller created [ 707.976303][ T7377] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 708.198286][ T43] usb 7-1: device descriptor read/64, error -71 [ 708.479382][ T43] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 708.649601][ T43] usb 7-1: device descriptor read/64, error -71 [ 708.789742][ T43] usb usb7-port1: attempt power cycle [ 709.093405][ T7377] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 709.099880][ T5842] Bluetooth: hci2: command tx timeout [ 709.110832][ T7377] zl10353_read_register: readreg error (reg=127, ret==-110) [ 709.209448][ T43] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 709.234237][ T43] usb 7-1: device descriptor read/8, error -71 [ 709.320618][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.374577][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.393815][ T78] bond0 (unregistering): Released all slaves [ 709.457286][T11499] team0: No ports can be present during mode change [ 709.506300][T11447] chnl_net:caif_netlink_parms(): no params data found [ 709.509474][ T43] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 709.533085][ T43] usb 7-1: device descriptor read/8, error -71 [ 709.639905][ T43] usb usb7-port1: unable to enumerate USB device [ 709.722280][ T78] hsr_slave_0: left promiscuous mode [ 709.740734][ T78] hsr_slave_1: left promiscuous mode [ 709.763358][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.802964][T11514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1370'. [ 709.833023][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.609978][T11522] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 711.169548][ T5842] Bluetooth: hci2: command tx timeout [ 713.125808][ T78] team0 (unregistering): Port device team_slave_1 removed [ 713.496141][T11546] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 714.341741][ T78] team0 (unregistering): Port device team_slave_0 removed [ 714.428133][ T7377] usb 1-1: USB disconnect, device number 25 [ 714.920073][ T7377] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 715.081783][ T7377] usb 7-1: Using ep0 maxpacket: 32 [ 715.092401][ T7377] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 716.041170][ T7377] usb 7-1: config 0 has no interface number 0 [ 716.066123][ T7377] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 716.076110][ T7377] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.084925][ T7377] usb 7-1: Product: syz [ 716.089242][ T7377] usb 7-1: Manufacturer: syz [ 716.436213][ T7377] usb 7-1: SerialNumber: syz [ 716.461323][ T7377] usb 7-1: config 0 descriptor?? [ 716.477006][ T7377] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 716.486096][ T7377] usb 7-1: selecting invalid altsetting 1 [ 716.494094][ T7377] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 716.509063][ T7377] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 716.563288][ T7377] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 716.578026][ T7377] usb 7-1: media controller created [ 716.616572][ T7377] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 718.100518][ T7377] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 718.112233][ T7377] zl10353_read_register: readreg error (reg=127, ret==-110) [ 718.585371][T11447] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.594780][T11447] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.603568][T11447] bridge_slave_0: entered allmulticast mode [ 718.612712][T11447] bridge_slave_0: entered promiscuous mode [ 718.624067][T11447] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.631991][T11447] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.639857][T11447] bridge_slave_1: entered allmulticast mode [ 718.648691][T11447] bridge_slave_1: entered promiscuous mode [ 718.914037][T11575] [U] [ 719.979628][T11576] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1384'. [ 720.228585][ T7377] usb 7-1: USB disconnect, device number 10 [ 720.698921][T11447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.780998][T11577] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1384'. [ 720.848106][T11581] team0: No ports can be present during mode change [ 720.881916][T11447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.327447][T11447] team0: Port device team_slave_0 added [ 724.004365][T11447] team0: Port device team_slave_1 added [ 724.926893][T11630] netlink: 'syz.0.1395': attribute type 3 has an invalid length. [ 727.334937][T11645] team0: No ports can be present during mode change [ 727.392697][T11447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.399711][T11447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.509014][T11447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.573234][T11447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.593985][T11447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.665024][T11447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.911757][ T5897] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 727.998345][T11447] hsr_slave_0: entered promiscuous mode [ 728.032401][T11447] hsr_slave_1: entered promiscuous mode [ 728.043202][T11447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 728.054302][T11447] Cannot create hsr debugfs directory [ 728.063392][ T5897] usb 1-1: device descriptor read/64, error -71 [ 728.342643][ T5897] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 728.598919][ T5897] usb 1-1: device descriptor read/64, error -71 [ 728.733185][ T5897] usb usb1-port1: attempt power cycle [ 729.935818][ T5897] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 729.971408][T11665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1404'. [ 730.001827][ T5897] usb 1-1: device descriptor read/8, error -71 [ 731.201938][ T5897] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 731.478302][ T5897] usb 1-1: device descriptor read/8, error -71 [ 731.582372][ T5897] usb usb1-port1: unable to enumerate USB device [ 731.921101][T11684] loop9: detected capacity change from 0 to 7 [ 731.929699][T11684] buffer_io_error: 4 callbacks suppressed [ 731.929741][T11684] Buffer I/O error on dev loop9, logical block 0, async page read [ 731.944000][T11684] Buffer I/O error on dev loop9, logical block 0, async page read [ 731.952183][T11684] Buffer I/O error on dev loop9, logical block 0, async page read [ 731.960405][T11684] Buffer I/O error on dev loop9, logical block 0, async page read [ 731.969038][T11684] Buffer I/O error on dev loop9, logical block 0, async page read [ 731.977700][T11684] Buffer I/O error on dev loop9, logical block 0, async page read [ 731.986440][T11684] Buffer I/O error on dev loop9, logical block 0, async page read [ 731.994673][T11684] ldm_validate_partition_table(): Disk read failed. [ 732.001823][T11684] Buffer I/O error on dev loop9, logical block 0, async page read [ 732.010320][T11684] Buffer I/O error on dev loop9, logical block 0, async page read [ 732.018923][T11684] Buffer I/O error on dev loop9, logical block 0, async page read [ 732.027229][T11684] Dev loop9: unable to read RDB block 0 [ 732.033621][T11684] loop9: unable to read partition table [ 732.039880][T11684] loop9: partition table beyond EOD, truncated [ 732.046379][T11684] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 732.046379][T11684] ) failed (rc=-5) [ 733.734144][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 733.831049][T11674] Bluetooth: hci1: Opcode 0x0401 failed: -110 [ 735.136189][T11696] netlink: 316 bytes leftover after parsing attributes in process `syz.0.1410'. [ 736.086412][T11699] netlink: 'syz.1.1411': attribute type 3 has an invalid length. [ 737.474638][T11447] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 737.546910][T11447] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 737.777868][T11447] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 739.195717][T11447] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 740.720013][T11722] tty tty31: ldisc open failed (-12), clearing slot 30 [ 741.343263][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1422'. [ 744.191110][T11447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.287711][T11447] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.572875][T11770] netlink: 316 bytes leftover after parsing attributes in process `syz.0.1427'. [ 746.608257][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.616130][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.085348][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.092872][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.461982][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 747.504430][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.511624][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.621949][T11781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1429'. [ 747.686549][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 747.743903][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.856112][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 747.894032][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.921395][ T10] usb 6-1: config 0 descriptor?? [ 748.002780][ T10] usb 6-1: can't set config #0, error -71 [ 748.026556][ T10] usb 6-1: USB disconnect, device number 16 [ 750.652167][T11447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.855845][T11799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1432'. [ 750.915232][T11799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1432'. [ 750.928519][T11806] netlink: 'syz.0.1433': attribute type 75 has an invalid length. [ 751.183883][ T7377] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 751.506756][ T7377] usb 1-1: too many endpoints for config 0 interface 0 altsetting 255: 33, using maximum allowed: 30 [ 751.567988][ T7377] usb 1-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 751.603919][ T7377] usb 1-1: config 0 interface 0 has no altsetting 0 [ 751.635424][ T7377] usb 1-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 751.675486][ T7377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.726184][ T7377] usb 1-1: config 0 descriptor?? [ 751.944084][ T7377] usbhid 1-1:0.0: can't add hid device: -71 [ 751.979248][ T7377] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 752.235130][ T7377] usb 1-1: USB disconnect, device number 30 [ 753.440424][T11447] veth0_vlan: entered promiscuous mode [ 753.640029][T11447] veth1_vlan: entered promiscuous mode [ 755.486913][T11447] veth0_macvtap: entered promiscuous mode [ 755.591042][T11447] veth1_macvtap: entered promiscuous mode [ 755.745115][T11447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.773940][T11447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.859288][T11447] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.149176][T11447] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.333266][T11447] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.455418][T11447] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.249583][ T6008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.355575][ T5952] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 757.384656][ T6008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.614998][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 758.512344][ T5897] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 759.268301][ T5952] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 759.308651][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.349436][ T6008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.553647][ T5897] usb 7-1: Using ep0 maxpacket: 32 [ 759.605930][ T5952] usb 2-1: Product: syz [ 759.610790][ T5952] usb 2-1: Manufacturer: syz [ 759.616197][ T6008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.626670][ T5952] usb 2-1: SerialNumber: syz [ 759.632441][ T5897] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 759.641484][ T5897] usb 7-1: config 0 has no interface number 0 [ 759.657544][ T5897] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 759.667854][ T5952] r8152-cfgselector 2-1: Unknown version 0x0000 [ 759.675402][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.683447][ T5897] usb 7-1: Product: syz [ 759.687937][ T5952] r8152-cfgselector 2-1: config 0 descriptor?? [ 759.696403][ T5897] usb 7-1: Manufacturer: syz [ 759.705422][ T5897] usb 7-1: SerialNumber: syz [ 759.724002][ T5897] usb 7-1: config 0 descriptor?? [ 759.777100][ T5897] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 759.824777][ T5897] usb 7-1: selecting invalid altsetting 1 [ 759.830652][ T5897] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 759.898543][ T5897] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 760.275887][T11873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.955348][ T5897] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 761.884327][ T10] r8152-cfgselector 2-1: USB disconnect, device number 28 [ 761.970982][ T5897] usb 7-1: media controller created [ 762.238739][T11909] FAULT_INJECTION: forcing a failure. [ 762.238739][T11909] name failslab, interval 1, probability 0, space 0, times 0 [ 762.343678][T11909] CPU: 0 UID: 0 PID: 11909 Comm: syz.7.1453 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 762.343709][T11909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 762.343722][T11909] Call Trace: [ 762.343731][T11909] [ 762.343740][T11909] dump_stack_lvl+0x189/0x250 [ 762.343770][T11909] ? __pfx____ratelimit+0x10/0x10 [ 762.343791][T11909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 762.343815][T11909] ? __pfx__printk+0x10/0x10 [ 762.343838][T11909] ? __mutex_trylock_common+0x153/0x260 [ 762.343869][T11909] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 762.343906][T11909] should_fail_ex+0x414/0x560 [ 762.343937][T11909] should_failslab+0xa8/0x100 [ 762.343963][T11909] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 762.343985][T11909] ? __alloc_skb+0x112/0x2d0 [ 762.344011][T11909] ? hci_sock_sendmsg+0x549/0xef0 [ 762.344056][T11909] __alloc_skb+0x112/0x2d0 [ 762.344090][T11909] hci_mgmt_cmd+0x1ca/0xef0 [ 762.344119][T11909] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 762.344156][T11909] hci_sock_sendmsg+0x6ca/0xef0 [ 762.344192][T11909] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 762.344227][T11909] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 762.344247][T11909] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 762.344276][T11909] __sock_sendmsg+0x21c/0x270 [ 762.344306][T11909] sock_write_iter+0x258/0x330 [ 762.344333][T11909] ? __pfx_sock_write_iter+0x10/0x10 [ 762.344371][T11909] ? bpf_lsm_file_permission+0x9/0x20 [ 762.344393][T11909] ? security_file_permission+0x75/0x290 [ 762.344429][T11909] vfs_write+0x54b/0xa90 [ 762.344455][T11909] ? __pfx_sock_write_iter+0x10/0x10 [ 762.344479][T11909] ? __pfx_vfs_write+0x10/0x10 [ 762.344514][T11909] ? __fget_files+0x2a/0x420 [ 762.344549][T11909] ksys_write+0x145/0x250 [ 762.344572][T11909] ? __pfx_ksys_write+0x10/0x10 [ 762.344595][T11909] ? rcu_is_watching+0x15/0xb0 [ 762.344624][T11909] ? do_syscall_64+0xbe/0x3b0 [ 762.344652][T11909] do_syscall_64+0xfa/0x3b0 [ 762.344673][T11909] ? lockdep_hardirqs_on+0x9c/0x150 [ 762.344695][T11909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.344715][T11909] ? clear_bhb_loop+0x60/0xb0 [ 762.344741][T11909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.344761][T11909] RIP: 0033:0x7f0094f8ebe9 [ 762.344779][T11909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.344796][T11909] RSP: 002b:00007f0095daa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 762.344819][T11909] RAX: ffffffffffffffda RBX: 00007f00951b5fa0 RCX: 00007f0094f8ebe9 [ 762.344834][T11909] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000006 [ 762.344847][T11909] RBP: 00007f0095daa090 R08: 0000000000000000 R09: 0000000000000000 [ 762.344859][T11909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.344871][T11909] R13: 00007f00951b6038 R14: 00007f00951b5fa0 R15: 00007ffcda051aa8 [ 762.344908][T11909] [ 762.841568][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 764.376788][ T5897] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 764.384733][ T5897] zl10353_read_register: readreg error (reg=127, ret==-71) [ 764.393465][ T5897] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 765.962404][ T5897] usb 7-1: USB disconnect, device number 11 [ 768.845993][T11906] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 769.076341][T11906] usb 2-1: Using ep0 maxpacket: 16 [ 769.115522][T11906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.909382][T11906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.932640][T11906] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 771.232398][T11906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.258651][T11906] usb 2-1: config 0 descriptor?? [ 771.588286][T11906] usbhid 2-1:0.0: can't add hid device: -71 [ 771.654459][T11906] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 771.785299][T11906] usb 2-1: USB disconnect, device number 29 [ 772.008526][ T5897] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 772.177980][T11982] team0: No ports can be present during mode change [ 772.256475][ T5897] usb 8-1: Using ep0 maxpacket: 32 [ 772.275083][ T5897] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 772.296322][T11906] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 772.308172][ T5897] usb 8-1: config 0 has no interface number 0 [ 772.345985][ T5897] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 772.365378][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.397883][ T5897] usb 8-1: Product: syz [ 772.402219][ T5897] usb 8-1: Manufacturer: syz [ 772.422511][ T5897] usb 8-1: SerialNumber: syz [ 772.443030][ T5897] usb 8-1: config 0 descriptor?? [ 772.469220][ T5897] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 772.494513][ T5897] usb 8-1: selecting invalid altsetting 1 [ 772.501013][T11906] usb 2-1: Using ep0 maxpacket: 32 [ 772.517216][ T5897] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 772.517388][T11906] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 772.558063][ T5897] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 772.571676][T11906] usb 2-1: config 0 has no interface number 0 [ 772.599940][ T5897] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 772.617359][T11906] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 772.634781][T11906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.646826][ T5897] usb 8-1: media controller created [ 772.878136][T11906] usb 2-1: Product: syz [ 772.882394][T11906] usb 2-1: Manufacturer: syz [ 772.904236][T11906] usb 2-1: SerialNumber: syz [ 772.927736][T11906] usb 2-1: config 0 descriptor?? [ 772.997596][T11993] FAULT_INJECTION: forcing a failure. [ 772.997596][T11993] name failslab, interval 1, probability 0, space 0, times 0 [ 773.011066][T11993] CPU: 1 UID: 0 PID: 11993 Comm: syz.7.1470 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 773.011093][T11993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 773.011106][T11993] Call Trace: [ 773.011115][T11993] [ 773.011124][T11993] dump_stack_lvl+0x189/0x250 [ 773.011153][T11993] ? __pfx____ratelimit+0x10/0x10 [ 773.011177][T11993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 773.011201][T11993] ? __pfx__printk+0x10/0x10 [ 773.011236][T11993] ? __pfx___might_resched+0x10/0x10 [ 773.011256][T11993] ? fs_reclaim_acquire+0x7d/0x100 [ 773.011287][T11993] should_fail_ex+0x414/0x560 [ 773.011315][T11993] ? file_tty_write+0x2a8/0x990 [ 773.011339][T11993] should_failslab+0xa8/0x100 [ 773.011364][T11993] __kvmalloc_node_noprof+0x161/0x5f0 [ 773.011387][T11993] ? file_tty_write+0x2a8/0x990 [ 773.011419][T11993] file_tty_write+0x2a8/0x990 [ 773.011458][T11993] vfs_write+0x54b/0xa90 [ 773.011474][T11993] ? trace_irq_disable+0x37/0x110 [ 773.011509][T11993] ? __pfx_tty_write+0x10/0x10 [ 773.011536][T11993] ? __pfx_vfs_write+0x10/0x10 [ 773.011586][T11993] ksys_write+0x145/0x250 [ 773.011610][T11993] ? __pfx_ksys_write+0x10/0x10 [ 773.011637][T11993] ? do_syscall_64+0xbe/0x3b0 [ 773.011666][T11993] do_syscall_64+0xfa/0x3b0 [ 773.011690][T11993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.011709][T11993] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 773.011728][T11993] ? clear_bhb_loop+0x60/0xb0 [ 773.011753][T11993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.011773][T11993] RIP: 0033:0x7f0094f8ebe9 [ 773.011792][T11993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.011810][T11993] RSP: 002b:00007f0095d68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 773.011832][T11993] RAX: ffffffffffffffda RBX: 00007f00951b6180 RCX: 00007f0094f8ebe9 [ 773.011847][T11993] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000008 [ 773.011860][T11993] RBP: 00007f0095d68090 R08: 0000000000000000 R09: 0000000000000000 [ 773.011873][T11993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.011884][T11993] R13: 00007f00951b6218 R14: 00007f00951b6180 R15: 00007ffcda051aa8 [ 773.011922][T11993] [ 773.907541][T11906] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 773.918361][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 773.932999][T11906] usb 2-1: selecting invalid altsetting 1 [ 773.947444][T11906] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 774.438834][T11906] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 774.474826][T11906] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 774.505004][T11906] usb 2-1: media controller created [ 774.601921][T11906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 774.936081][ T5897] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 774.956565][ T5897] zl10353_read_register: readreg error (reg=127, ret==-71) [ 774.991500][ T5897] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 775.020886][T12006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.060301][T12006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.216679][ T7377] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 775.398625][ T7377] usb 7-1: New USB device found, idVendor=8420, idProduct=157a, bcdDevice=77.64 [ 775.425303][ T7377] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.447204][ T7377] usb 7-1: Product: syz [ 775.473338][ T7377] usb 7-1: Manufacturer: syz [ 775.505887][ T7377] usb 7-1: SerialNumber: syz [ 775.565453][ T5990] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 775.573648][T11906] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 775.582507][ T7377] usb 7-1: config 0 descriptor?? [ 775.584698][ T5897] usb 8-1: USB disconnect, device number 2 [ 775.606575][T11906] zl10353_read_register: readreg error (reg=127, ret==-71) [ 775.627012][T11906] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 775.770440][ T5990] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 775.828154][ T5990] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 775.850653][ T7377] usb 7-1: USB disconnect, device number 12 [ 775.875254][ T5990] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 775.913907][T11906] usb 2-1: USB disconnect, device number 30 [ 775.943350][ T5990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.006147][T12012] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 776.015224][T12009] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 776.063270][ T5990] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 776.296290][ T5990] usb 6-1: USB disconnect, device number 17 [ 778.148124][T12009] tipc: Can't bind to reserved service type 2 [ 778.199217][T12009] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1477'. [ 778.360824][T12045] _Z`Ԁ@: entered promiscuous mode [ 779.257306][T12065] sg_write: data in/out 8156/14 bytes for SCSI command 0x0-- guessing data in; [ 779.257306][T12065] program syz.0.1489 not setting count and/or reply_len properly [ 779.298831][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 779.667077][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 779.675101][ T24] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 779.687013][ T24] usb 7-1: config 0 has no interface number 0 [ 779.793559][ T24] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 779.819662][ T5990] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 779.841275][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.863442][ T5990] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 779.878818][ T24] usb 7-1: Product: syz [ 779.892998][ T24] usb 7-1: Manufacturer: syz [ 779.919277][ T24] usb 7-1: SerialNumber: syz [ 779.950744][ T24] usb 7-1: config 0 descriptor?? [ 779.979974][ T24] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 780.005312][ T24] usb 7-1: selecting invalid altsetting 1 [ 780.019256][ T24] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 780.043775][ T24] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 780.063332][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 780.073186][ T24] usb 7-1: media controller created [ 780.160395][T11906] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 780.407347][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 780.415228][T12082] fido_id[12082]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 780.487119][T11906] usb 8-1: Using ep0 maxpacket: 32 [ 780.513506][T11906] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 780.562491][T11906] usb 8-1: config 0 has no interface number 0 [ 780.608589][T11906] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 780.647266][T11906] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.647298][T11906] usb 8-1: Product: syz [ 780.647314][T11906] usb 8-1: Manufacturer: syz [ 780.647330][T11906] usb 8-1: SerialNumber: syz [ 780.663875][T11906] usb 8-1: config 0 descriptor?? [ 780.694091][T11906] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 780.694126][T11906] usb 8-1: selecting invalid altsetting 1 [ 780.694143][T11906] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 780.712574][T11906] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 780.713207][T11906] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 780.713291][T11906] usb 8-1: media controller created [ 780.799130][T11906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 780.827142][ T5990] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 781.217151][ T5990] usb 6-1: Using ep0 maxpacket: 8 [ 781.233276][ T5990] usb 6-1: config 0 has an invalid interface number: 150 but max is 0 [ 781.233440][ T5990] usb 6-1: config 0 has an invalid interface number: 112 but max is 0 [ 781.233525][ T5990] usb 6-1: config 0 has an invalid interface number: 3 but max is 0 [ 781.233669][ T5990] usb 6-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 781.233718][ T5990] usb 6-1: config 0 has no interface number 0 [ 781.233806][ T5990] usb 6-1: config 0 has no interface number 1 [ 781.233850][ T5990] usb 6-1: config 0 has no interface number 2 [ 781.234412][ T5990] usb 6-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 781.234491][ T5990] usb 6-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 781.234759][ T5990] usb 6-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 781.234907][ T5990] usb 6-1: config 0 interface 150 has no altsetting 0 [ 781.235013][ T5990] usb 6-1: config 0 interface 112 has no altsetting 0 [ 781.235229][ T5990] usb 6-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 781.235315][ T5990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.327315][T12105] FAULT_INJECTION: forcing a failure. [ 781.327315][T12105] name fail_futex, interval 1, probability 0, space 0, times 1 [ 781.327402][T12105] CPU: 1 UID: 0 PID: 12105 Comm: syz.7.1492 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 781.327427][T12105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 781.327440][T12105] Call Trace: [ 781.327448][T12105] [ 781.327457][T12105] dump_stack_lvl+0x189/0x250 [ 781.327487][T12105] ? __pfx____ratelimit+0x10/0x10 [ 781.327516][T12105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 781.327538][T12105] ? __pfx__printk+0x10/0x10 [ 781.327575][T12105] ? bpf_trace_run2+0x186/0x4b0 [ 781.327605][T12105] should_fail_ex+0x414/0x560 [ 781.327633][T12105] get_futex_key+0x8dd/0x1640 [ 781.327657][T12105] ? __pfx_bpf_trace_run2+0x10/0x10 [ 781.327691][T12105] ? __bpf_trace_contention_end+0xcd/0x130 [ 781.327719][T12105] ? __pfx_get_futex_key+0x10/0x10 [ 781.327754][T12105] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 781.327788][T12105] futex_wake+0xf8/0x500 [ 781.327824][T12105] ? __pfx_futex_wake+0x10/0x10 [ 781.327857][T12105] ? __lock_acquire+0xab9/0xd20 [ 781.327890][T12105] do_futex+0x395/0x420 [ 781.327923][T12105] ? __pfx_do_futex+0x10/0x10 [ 781.327952][T12105] ? __might_fault+0xb0/0x130 [ 781.327976][T12105] mm_release+0x188/0x390 [ 781.327998][T12105] ? __pfx_mm_release+0x10/0x10 [ 781.328020][T12105] ? lockdep_hardirqs_on+0x9c/0x150 [ 781.328056][T12105] exit_mm+0xa8/0x2c0 [ 781.328086][T12105] ? __pfx_exit_mm+0x10/0x10 [ 781.328117][T12105] ? rcu_is_watching+0x15/0xb0 [ 781.328144][T12105] do_exit+0x648/0x22e0 [ 781.328180][T12105] ? do_raw_spin_lock+0x121/0x290 [ 781.328207][T12105] ? __pfx_do_exit+0x10/0x10 [ 781.328253][T12105] do_group_exit+0x21c/0x2d0 [ 781.328282][T12105] ? lockdep_hardirqs_on+0x9c/0x150 [ 781.328306][T12105] get_signal+0x125e/0x1310 [ 781.328355][T12105] arch_do_signal_or_restart+0x9a/0x750 [ 781.328388][T12105] ? __fget_files+0x2a/0x420 [ 781.328414][T12105] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 781.328463][T12105] ? exit_to_user_mode_loop+0x40/0x110 [ 781.328488][T12105] exit_to_user_mode_loop+0x75/0x110 [ 781.328509][T12105] do_syscall_64+0x2bd/0x3b0 [ 781.328532][T12105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.328552][T12105] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 781.328571][T12105] ? clear_bhb_loop+0x60/0xb0 [ 781.328597][T12105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.328617][T12105] RIP: 0033:0x7f0094f8ebe9 [ 781.328636][T12105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.328656][T12105] RSP: 002b:00007f0095d68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 781.328679][T12105] RAX: fffffffffffffe00 RBX: 00007f00951b6180 RCX: 00007f0094f8ebe9 [ 781.328695][T12105] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000008 [ 781.328708][T12105] RBP: 00007f0095d68090 R08: 0000000000000000 R09: 0000000000000000 [ 781.328721][T12105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.328733][T12105] R13: 00007f00951b6218 R14: 00007f00951b6180 R15: 00007ffcda051aa8 [ 781.328776][T12105] [ 781.379447][ T5990] usb 6-1: config 0 descriptor?? [ 781.510755][ T24] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 781.510860][ T24] zl10353_read_register: readreg error (reg=127, ret==-110) [ 781.732677][ T5990] usb 6-1: string descriptor 0 read error: -71 [ 781.860511][ T5990] usb 6-1: USB disconnect, device number 18 [ 781.931521][T11906] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 781.931591][T11906] zl10353_read_register: readreg error (reg=127, ret==-71) [ 781.932815][T11906] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 782.311899][T11906] usb 8-1: USB disconnect, device number 3 [ 782.367829][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 782.448149][T12118] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1500'. [ 782.520880][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 782.520969][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 782.520994][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.559305][ T10] usb 1-1: config 0 descriptor?? [ 782.917441][ T5990] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 783.164091][ T5990] usb 2-1: config 0 has an invalid interface number: 90 but max is 0 [ 783.164182][ T5990] usb 2-1: config 0 has no interface number 0 [ 783.226875][ T10] ath6kl: Failed to submit usb control message: -71 [ 783.226987][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 783.227025][ T10] ath6kl: Unable to send get target info: -71 [ 783.236522][ T5990] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=de.7f [ 783.236612][ T5990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.236693][ T5990] usb 2-1: Product: syz [ 783.236775][ T5990] usb 2-1: Manufacturer: syz [ 783.236848][ T5990] usb 2-1: SerialNumber: syz [ 783.241133][ T10] ath6kl: Failed to init ath6kl core: -71 [ 783.245525][ T10] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 783.316936][ T10] usb 1-1: USB disconnect, device number 31 [ 783.318517][ T5990] usb 2-1: config 0 descriptor?? [ 783.544811][ T5990] cdc_subset 2-1:0.90: probe with driver cdc_subset failed with error -22 [ 783.751795][ T5990] usb 2-1: USB disconnect, device number 31 [ 786.162369][T12167] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 789.526650][T12196] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1520'. [ 791.868351][ T24] usb 7-1: USB disconnect, device number 13 [ 792.003211][T12217] loop2: detected capacity change from 0 to 7 [ 792.013639][T12217] Dev loop2: unable to read RDB block 7 [ 792.059544][T12217] loop2: unable to read partition table [ 792.101364][T12217] loop2: partition table beyond EOD, truncated [ 792.111738][T12217] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 792.299125][T11906] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 792.753400][T11906] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 792.790158][T11906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.803400][T11906] usb 1-1: Product: syz [ 792.807624][T11906] usb 1-1: Manufacturer: syz [ 792.814240][T11906] usb 1-1: SerialNumber: syz [ 792.846561][T11906] usb 1-1: config 0 descriptor?? [ 792.904239][T11906] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 793.468807][T11906] gspca_sunplus: reg_r err -110 [ 793.488746][T11906] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 793.567447][T12249] 9pnet_fd: Insufficient options for proto=fd [ 793.657709][T12245] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 793.703828][T12245] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 794.366325][T12252] overlayfs: statfs failed on './file0' [ 794.507570][T12245] overlayfs: statfs failed on './file0' [ 795.084111][ T5965] usb 1-1: USB disconnect, device number 32 [ 795.375511][T12277] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1542'. [ 795.401713][T12279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1542'. [ 795.448944][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 795.579092][ T5965] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 795.649013][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 795.671082][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 795.928432][ T10] usb 7-1: config 0 has no interface number 0 [ 795.968978][ T5965] usb 1-1: Using ep0 maxpacket: 16 [ 796.051700][ T5965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.088163][ T10] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 796.118979][ T5965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.139031][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.164601][ T5965] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 796.178306][ T10] usb 7-1: Product: syz [ 796.457870][ T10] usb 7-1: Manufacturer: syz [ 796.473187][ T5965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.495030][ T10] usb 7-1: SerialNumber: syz [ 796.512994][ T10] usb 7-1: config 0 descriptor?? [ 796.527873][ T5965] usb 1-1: config 0 descriptor?? [ 796.575120][ T10] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 796.575153][ T10] usb 7-1: selecting invalid altsetting 1 [ 796.575202][ T10] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 796.591003][ T10] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 796.626231][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 796.626327][ T10] usb 7-1: media controller created [ 796.675195][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 797.012024][ T5965] playstation 0003:054C:05C4.0013: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 797.342452][ T5965] playstation 0003:054C:05C4.0013: Failed to retrieve feature with reportID 18: -71 [ 797.393858][ T5965] playstation 0003:054C:05C4.0013: Failed to retrieve DualShock4 pairing info: -71 [ 797.409205][T11906] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 797.495517][T12310] [U] [ 797.729356][T11906] usb 6-1: config 0 has an invalid interface number: 76 but max is 0 [ 797.729910][T11906] usb 6-1: config 0 has no interface number 0 [ 797.730621][T11906] usb 6-1: config 0 interface 76 has no altsetting 0 [ 797.762314][T11906] usb 6-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=e6.39 [ 797.762477][T11906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.762677][T11906] usb 6-1: Product: syz [ 797.762885][T11906] usb 6-1: Manufacturer: syz [ 797.763117][T11906] usb 6-1: SerialNumber: syz [ 797.866310][T11906] usb 6-1: config 0 descriptor?? [ 798.382632][ T5990] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 798.391531][ T10] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 798.391596][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 798.415184][ T5965] playstation 0003:054C:05C4.0013: Failed to get MAC address from DualShock4 [ 798.415225][ T5965] playstation 0003:054C:05C4.0013: Failed to create dualshock4. [ 798.434443][ T5965] playstation 0003:054C:05C4.0013: probe with driver playstation failed with error -71 [ 798.472894][ T5965] usb 1-1: USB disconnect, device number 33 [ 798.712378][ T5990] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 798.712676][ T5990] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 798.712844][ T5990] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 798.717067][ T5990] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 798.717628][ T5990] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 798.862761][ T5990] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 798.863656][ T5990] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 798.864043][ T5990] usb 2-1: Product: syz [ 798.865074][ T5990] usb 2-1: Manufacturer: syz [ 799.282103][ T5990] cdc_wdm 2-1:1.0: skipping garbage [ 799.282129][ T5990] cdc_wdm 2-1:1.0: skipping garbage [ 799.296632][T11906] kvaser_usb 6-1:0.76: error -ENODEV: Cannot get usb endpoint(s) [ 799.297335][ T5990] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 799.297356][ T5990] cdc_wdm 2-1:1.0: Unknown control protocol [ 799.349735][T11906] usb 6-1: USB disconnect, device number 19 [ 799.633375][T11906] usb 2-1: USB disconnect, device number 32 [ 800.708948][T12329] ceph: No mds server is up or the cluster is laggy [ 802.799796][T11906] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 802.968869][T11906] usb 1-1: Using ep0 maxpacket: 16 [ 803.010765][T11906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.010853][T11906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.011104][T11906] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 803.011157][T11906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.105423][T11906] usb 1-1: config 0 descriptor?? [ 803.620350][T11906] playstation 0003:054C:05C4.0014: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 803.809755][T11906] playstation 0003:054C:05C4.0014: Failed to retrieve feature with reportID 18: -71 [ 803.809793][T11906] playstation 0003:054C:05C4.0014: Failed to retrieve DualShock4 pairing info: -71 [ 803.809862][T11906] playstation 0003:054C:05C4.0014: Failed to get MAC address from DualShock4 [ 803.809880][T11906] playstation 0003:054C:05C4.0014: Failed to create dualshock4. [ 803.903050][T11906] playstation 0003:054C:05C4.0014: probe with driver playstation failed with error -71 [ 804.301427][T11906] usb 1-1: USB disconnect, device number 34 [ 804.648499][T12362] fido_id[12362]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 805.414654][T12388] overlay: filesystem on ./file0/file0 not supported [ 805.950655][ T5924] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 806.999997][ T5924] usb 8-1: Using ep0 maxpacket: 32 [ 807.027371][ T5924] usb 8-1: config 0 has an invalid interface number: 196 but max is 0 [ 807.049973][ T5924] usb 8-1: config 0 has no interface number 0 [ 807.073109][ T5924] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 807.106994][ T5924] usb 8-1: config 0 interface 196 has no altsetting 0 [ 807.140445][ T5924] usb 8-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 807.612612][ T7377] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 807.621409][ T5924] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.630978][ T5924] usb 8-1: Product: syz [ 807.635193][ T5924] usb 8-1: Manufacturer: syz [ 807.639819][ T5924] usb 8-1: SerialNumber: syz [ 807.668540][ T5924] usb 8-1: config 0 descriptor?? [ 807.707580][T12401] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 807.985839][T12399] Cannot find set identified by id 0 to match [ 808.071491][ T5924] ipheth 8-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 808.079267][ T5924] ipheth 8-1:0.196: probe with driver ipheth failed with error -71 [ 808.089125][ T10] usb 7-1: USB disconnect, device number 14 [ 808.095184][ T7377] usb 1-1: Using ep0 maxpacket: 32 [ 809.041552][ T7377] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 809.046794][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.049872][ T7377] usb 1-1: config 0 has no interface number 0 [ 809.056486][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.430360][ T5924] usb 8-1: USB disconnect, device number 5 [ 809.700107][T12429] netlink: 'syz.6.1569': attribute type 3 has an invalid length. [ 809.701230][ T7377] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 809.752864][ T7377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.796749][ T7377] usb 1-1: Product: syz [ 809.817074][ T7377] usb 1-1: Manufacturer: syz [ 809.862281][ T7377] usb 1-1: SerialNumber: syz [ 809.911734][ T7377] usb 1-1: config 0 descriptor?? [ 809.933764][ T7377] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 809.970334][ T7377] usb 1-1: selecting invalid altsetting 1 [ 810.028797][ T7377] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 810.101318][ T7377] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 810.123474][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1571'. [ 810.160800][ T7377] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 810.181059][ T7377] usb 1-1: media controller created [ 810.325326][ T7377] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 810.480888][ T7377] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 810.507621][ T7377] zl10353_read_register: readreg error (reg=127, ret==-71) [ 810.547609][ T7377] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 810.701507][ T5924] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 810.779900][ T7377] usb 1-1: USB disconnect, device number 35 [ 810.861332][ T5924] usb 8-1: device descriptor read/64, error -71 [ 811.110631][ T5924] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 811.263697][ T5924] usb 8-1: device descriptor read/64, error -71 [ 811.393760][ T5924] usb usb8-port1: attempt power cycle [ 811.660565][ T7377] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 811.741835][ T5924] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 811.834485][ T5924] usb 8-1: device descriptor read/8, error -71 [ 811.851048][ T7377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.886781][ T7377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.916103][ T7377] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 813.080692][ T7377] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 813.089984][ T7377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.900901][ T5924] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 814.293372][ T5924] usb 8-1: device descriptor read/8, error -71 [ 814.318204][ T7377] usb 2-1: config 0 descriptor?? [ 814.351304][ T7377] usb 2-1: can't set config #0, error -71 [ 814.359335][ T7377] usb 2-1: USB disconnect, device number 33 [ 814.408320][ T5924] usb usb8-port1: unable to enumerate USB device [ 814.576570][T12495] netlink: 'syz.1.1584': attribute type 3 has an invalid length. [ 814.914861][T12505] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1586'. [ 815.130841][T10507] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 815.200882][ T5924] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 816.201918][T10507] usb 2-1: Using ep0 maxpacket: 16 [ 816.207329][ T5924] usb 8-1: Using ep0 maxpacket: 16 [ 816.301522][T10507] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.312962][ T5924] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.426312][T10507] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.441918][ T5924] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.553793][T10507] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 816.570038][ T5924] usb 8-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 816.652534][T10507] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.671989][ T5924] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.894795][T10507] usb 2-1: config 0 descriptor?? [ 817.000463][ T5924] usb 8-1: config 0 descriptor?? [ 817.949494][T10507] playstation 0003:054C:05C4.0015: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0 [ 818.061475][T10507] playstation 0003:054C:05C4.0015: Failed to retrieve feature with reportID 18: -71 [ 818.101156][T10507] playstation 0003:054C:05C4.0015: Failed to retrieve DualShock4 pairing info: -71 [ 818.161209][T10507] playstation 0003:054C:05C4.0015: Failed to get MAC address from DualShock4 [ 818.210974][T10507] playstation 0003:054C:05C4.0015: Failed to create dualshock4. [ 818.428915][T12505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.438029][T12505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.810711][T12528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.819936][T12528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.977943][T10507] playstation 0003:054C:05C4.0015: probe with driver playstation failed with error -71 [ 819.008695][T10507] usb 2-1: USB disconnect, device number 34 [ 819.251365][ T43] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 819.434377][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 819.480837][ T43] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 820.486438][ T43] usb 6-1: config 0 has no interface number 0 [ 820.670669][ T5924] usbhid 8-1:0.0: can't add hid device: -71 [ 820.691507][ T5924] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 820.790552][ T5924] usb 8-1: USB disconnect, device number 10 [ 820.911938][ T43] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 820.921260][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.937214][ T43] usb 6-1: Product: syz [ 820.943598][ T43] usb 6-1: Manufacturer: syz [ 820.948447][ T43] usb 6-1: SerialNumber: syz [ 820.970363][ T43] usb 6-1: config 0 descriptor?? [ 821.137133][ T43] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 821.202063][ T43] usb 6-1: selecting invalid altsetting 1 [ 821.308810][ T43] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 821.550605][ T43] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 822.754513][ T43] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 824.698785][ T43] usb 6-1: media controller created [ 824.750081][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 824.812423][ T43] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 824.823184][ T43] zl10353_read_register: readreg error (reg=127, ret==-71) [ 824.831166][ T43] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 826.382563][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 826.412910][ T43] usb 6-1: USB disconnect, device number 20 [ 826.959842][T12564] ALSA: mixer_oss: invalid OSS volume '' [ 830.792556][ T5990] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 831.574153][T12608] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 831.875627][ T43] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 832.073275][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.097320][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 832.136928][ T43] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 832.158541][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.184318][ T43] usb 2-1: config 0 descriptor?? [ 832.216976][ T43] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 832.532799][ T5990] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 832.693005][ T5990] usb 6-1: Using ep0 maxpacket: 32 [ 832.709022][ T5990] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 832.730981][ T5990] usb 6-1: config 0 has no interface number 0 [ 832.751579][ T5990] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 832.795349][T10507] usb 2-1: USB disconnect, device number 35 [ 832.808406][ T5990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.829494][ T5990] usb 6-1: Product: syz [ 832.842482][ T5990] usb 6-1: Manufacturer: syz [ 832.870497][ T5990] usb 6-1: SerialNumber: syz [ 832.920852][ T5990] usb 6-1: config 0 descriptor?? [ 832.970374][ T5990] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 833.002759][ T5990] usb 6-1: selecting invalid altsetting 1 [ 833.008893][ T5990] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 833.740426][ T5842] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 834.670025][ T7377] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 837.146052][ T5990] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 837.294888][ T5990] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 837.308009][ T5990] usb 6-1: media controller created [ 837.432515][ T5990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 837.583679][ T5990] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 837.616210][ T5990] zl10353_read_register: readreg error (reg=127, ret==-71) [ 837.693043][ T5990] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 838.715424][T12675] binder: 12672:12675 ioctl 4018620d 0 returned -22 [ 839.658679][ T5990] usb 6-1: USB disconnect, device number 22 [ 840.139868][T12681] netlink: 'syz.7.1626': attribute type 3 has an invalid length. [ 844.405064][T12733] loop9: detected capacity change from 0 to 7 [ 844.414120][T12733] buffer_io_error: 4 callbacks suppressed [ 844.414164][T12733] Buffer I/O error on dev loop9, logical block 0, async page read [ 844.428451][T12733] Buffer I/O error on dev loop9, logical block 0, async page read [ 844.437504][T12733] Buffer I/O error on dev loop9, logical block 0, async page read [ 844.446243][T12733] Buffer I/O error on dev loop9, logical block 0, async page read [ 844.454806][T12733] Buffer I/O error on dev loop9, logical block 0, async page read [ 844.463214][T12733] Buffer I/O error on dev loop9, logical block 0, async page read [ 844.471910][T12733] Buffer I/O error on dev loop9, logical block 0, async page read [ 844.480565][T12733] ldm_validate_partition_table(): Disk read failed. [ 844.487645][T12733] Buffer I/O error on dev loop9, logical block 0, async page read [ 844.496015][T12733] Buffer I/O error on dev loop9, logical block 0, async page read [ 844.504548][T12733] Buffer I/O error on dev loop9, logical block 0, async page read [ 844.512955][T12733] Dev loop9: unable to read RDB block 0 [ 844.520031][T12733] loop9: unable to read partition table [ 844.526609][T12733] loop9: partition table beyond EOD, truncated [ 844.533018][T12733] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 844.533018][T12733] ) failed (rc=-5) [ 848.905574][ T30] audit: type=1326 audit(1755623031.963:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12755 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4518ebe9 code=0x7ffc0000 [ 849.239841][ T5952] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 849.566987][ T30] audit: type=1326 audit(1755623032.003:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12755 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4518ebe9 code=0x7ffc0000 [ 849.634612][ T30] audit: type=1326 audit(1755623032.013:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12755 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f8c4518ebe9 code=0x7ffc0000 [ 849.785984][ T30] audit: type=1326 audit(1755623032.013:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12755 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4518ebe9 code=0x7ffc0000 [ 849.819806][ T30] audit: type=1326 audit(1755623032.013:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12755 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4518ebe9 code=0x7ffc0000 [ 849.851658][ T5952] usb 2-1: device descriptor read/64, error -71 [ 851.065087][ T30] audit: type=1326 audit(1755623032.013:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12755 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8c4518ebe9 code=0x7ffc0000 [ 851.231210][ T30] audit: type=1326 audit(1755623032.013:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12755 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4518ebe9 code=0x7ffc0000 [ 851.260274][ T5952] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 851.434839][ T30] audit: type=1326 audit(1755623032.013:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12755 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4518ebe9 code=0x7ffc0000 [ 851.464927][ T30] audit: type=1326 audit(1755623032.033:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12755 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8c4518ebe9 code=0x7ffc0000 [ 851.495061][ T30] audit: type=1326 audit(1755623032.033:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12755 comm="syz.1.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4518ebe9 code=0x7ffc0000 [ 851.665165][ T5952] usb 2-1: device descriptor read/64, error -71 [ 851.777430][ T5952] usb usb2-port1: attempt power cycle [ 852.469615][T12790] loop6: detected capacity change from 0 to 6656 [ 852.489458][ T7377] IPVS: starting estimator thread 0... [ 852.510968][T12790] buffer_io_error: 4 callbacks suppressed [ 852.510987][T12790] Buffer I/O error on dev loop6, logical block 0, async page read [ 852.535439][T12790] Buffer I/O error on dev loop6, logical block 0, async page read [ 852.566158][T12790] Buffer I/O error on dev loop6, logical block 0, async page read [ 852.605441][T12790] Buffer I/O error on dev loop6, logical block 0, async page read [ 852.613456][T12790] Buffer I/O error on dev loop6, logical block 0, async page read [ 852.626870][T12793] IPVS: using max 28 ests per chain, 67200 per kthread [ 852.666979][T12790] Buffer I/O error on dev loop6, logical block 0, async page read [ 852.685493][T12790] Buffer I/O error on dev loop6, logical block 0, async page read [ 852.704423][T12790] Buffer I/O error on dev loop6, logical block 0, async page read [ 852.737775][T12790] ldm_validate_partition_table(): Disk read failed. [ 852.757478][T12790] Buffer I/O error on dev loop6, logical block 0, async page read [ 852.779965][T12790] Buffer I/O error on dev loop6, logical block 0, async page read [ 852.802355][T12790] Dev loop6: unable to read RDB block 0 [ 852.831909][T12790] loop6: unable to read partition table [ 852.858084][T12790] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 852.967079][ T5206] ldm_validate_partition_table(): Disk read failed. [ 852.986424][ T5206] Dev loop6: unable to read RDB block 0 [ 853.015615][ T5206] loop6: unable to read partition table [ 853.218329][T12802] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1652'. [ 853.759529][ T5842] Bluetooth: hci4: command 0x1003 tx timeout [ 853.775349][ T5840] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 856.872413][T12851] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1663'. [ 857.034416][T12838] ALSA: mixer_oss: invalid OSS volume '' [ 857.040197][T12838] ALSA: mixer_oss: invalid OSS volume '' [ 859.929319][T12875] tipc: Started in network mode [ 859.934586][T12875] tipc: Node identity d23692227c44, cluster identity 4711 [ 860.071870][T12875] tipc: Enabled bearer , priority 0 [ 860.088708][T12878] syzkaller0: entered promiscuous mode [ 860.094472][T12878] syzkaller0: entered allmulticast mode [ 861.076175][ T5924] tipc: Node number set to 2926744098 [ 861.380223][T12871] tipc: Resetting bearer [ 861.656622][T12871] tipc: Disabling bearer [ 861.690463][T12889] team0: No ports can be present during mode change [ 861.761392][T12894] loop9: detected capacity change from 0 to 7 [ 861.771404][T12894] buffer_io_error: 23 callbacks suppressed [ 861.771449][T12894] Buffer I/O error on dev loop9, logical block 0, async page read [ 861.786747][T12894] Buffer I/O error on dev loop9, logical block 0, async page read [ 861.795480][T12894] Buffer I/O error on dev loop9, logical block 0, async page read [ 861.804172][T12894] Buffer I/O error on dev loop9, logical block 0, async page read [ 861.812944][T12894] Buffer I/O error on dev loop9, logical block 0, async page read [ 861.822085][T12894] Buffer I/O error on dev loop9, logical block 0, async page read [ 861.831003][T12894] Buffer I/O error on dev loop9, logical block 0, async page read [ 861.839414][T12894] ldm_validate_partition_table(): Disk read failed. [ 861.847033][T12894] Buffer I/O error on dev loop9, logical block 0, async page read [ 861.856054][T12894] Buffer I/O error on dev loop9, logical block 0, async page read [ 861.864708][T12894] Buffer I/O error on dev loop9, logical block 0, async page read [ 861.873564][T12894] Dev loop9: unable to read RDB block 0 [ 861.880853][T12894] loop9: unable to read partition table [ 861.887690][T12894] loop9: partition table beyond EOD, truncated [ 861.894154][T12894] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 861.894154][T12894] ) failed (rc=-5) [ 863.093823][T12904] netlink: 'syz.7.1671': attribute type 34 has an invalid length. [ 864.706476][ T5924] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 865.299040][ T5924] usb 6-1: device descriptor read/64, error -71 [ 865.615595][ T5924] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 865.853708][ T5924] usb 6-1: device descriptor read/64, error -71 [ 866.051885][ T5924] usb usb6-port1: attempt power cycle [ 866.856630][ T5924] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 866.929507][ T5924] usb 6-1: device descriptor read/8, error -71 [ 867.484169][ T5924] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 868.137654][T12936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 869.153761][ T5924] usb 6-1: device descriptor read/8, error -71 [ 869.236713][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 869.236734][ T30] audit: type=1400 audit(1755623052.291:39): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=12940 comm="syz.6.1680" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 869.243970][T12949] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 869.278029][ T5924] usb usb6-port1: unable to enumerate USB device [ 869.417623][T12955] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1684'. [ 869.586687][T12949] team0: No ports can be present during mode change [ 870.136544][T12966] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1685'. [ 870.816235][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.829117][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.022824][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 871.356949][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 871.374220][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 871.391300][ T10] usb 7-1: config 0 has no interface number 0 [ 871.414234][ T10] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 871.433815][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.459489][ T10] usb 7-1: Product: syz [ 871.471746][ T10] usb 7-1: Manufacturer: syz [ 871.492842][ T10] usb 7-1: SerialNumber: syz [ 871.525383][ T10] usb 7-1: config 0 descriptor?? [ 871.566513][ T10] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 871.609616][ T10] usb 7-1: selecting invalid altsetting 1 [ 871.623823][ T10] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 871.665526][ T10] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 871.693116][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 871.718755][ T10] usb 7-1: media controller created [ 871.804042][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 874.950408][ T10] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 875.017426][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 875.462815][ T10] usb 7-1: USB disconnect, device number 15 [ 875.777661][ T5990] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 875.956511][T13009] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551487) [ 875.967729][T13009] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 876.045127][ T5990] usb 6-1: Using ep0 maxpacket: 16 [ 876.138326][ T5990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.185323][ T5990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.227527][ T5990] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 876.236755][ T5990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.265775][T13013] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 876.360749][ T5990] usb 6-1: config 0 descriptor?? [ 878.211424][T13025] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 878.220912][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 878.229339][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 878.238386][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 878.248445][ T5990] playstation 0003:054C:05C4.0016: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.5-1/input0 [ 878.273149][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 879.318381][ T6449] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.953841][ T5990] playstation 0003:054C:05C4.0016: Failed to retrieve feature with reportID 18: -71 [ 880.016740][ T5990] playstation 0003:054C:05C4.0016: Failed to retrieve DualShock4 pairing info: -71 [ 880.056461][ T5990] playstation 0003:054C:05C4.0016: Failed to get MAC address from DualShock4 [ 880.116326][ T5990] playstation 0003:054C:05C4.0016: Failed to create dualshock4. [ 880.154667][ T5990] playstation 0003:054C:05C4.0016: probe with driver playstation failed with error -71 [ 880.390247][ T6449] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.438217][ T5990] usb 6-1: USB disconnect, device number 27 [ 880.488163][ T5840] Bluetooth: hci3: command tx timeout [ 880.820265][T13056] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 882.570658][ T5840] Bluetooth: hci3: command tx timeout [ 882.905114][ T6449] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.337405][ T7377] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 883.617627][ T6449] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.864450][T13085] FAULT_INJECTION: forcing a failure. [ 883.864450][T13085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 883.878382][T13085] CPU: 1 UID: 0 PID: 13085 Comm: syz.0.1712 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 883.878406][T13085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 883.878417][T13085] Call Trace: [ 883.878425][T13085] [ 883.878433][T13085] dump_stack_lvl+0x189/0x250 [ 883.878464][T13085] ? __pfx____ratelimit+0x10/0x10 [ 883.878487][T13085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 883.878508][T13085] ? __pfx__printk+0x10/0x10 [ 883.878548][T13085] should_fail_ex+0x414/0x560 [ 883.878575][T13085] _copy_to_user+0x31/0xb0 [ 883.878605][T13085] simple_read_from_buffer+0xe1/0x170 [ 883.878632][T13085] proc_fail_nth_read+0x1df/0x250 [ 883.878657][T13085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 883.878684][T13085] ? rw_verify_area+0x258/0x650 [ 883.878712][T13085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 883.878737][T13085] vfs_read+0x200/0x980 [ 883.878773][T13085] ? __pfx___mutex_lock+0x10/0x10 [ 883.878796][T13085] ? __pfx_vfs_read+0x10/0x10 [ 883.878827][T13085] ? __fget_files+0x2a/0x420 [ 883.878854][T13085] ? __fget_files+0x3a0/0x420 [ 883.878894][T13085] ? __fget_files+0x2a/0x420 [ 883.878924][T13085] ksys_read+0x145/0x250 [ 883.878947][T13085] ? __pfx_ksys_read+0x10/0x10 [ 883.878973][T13085] ? do_syscall_64+0xbe/0x3b0 [ 883.879000][T13085] do_syscall_64+0xfa/0x3b0 [ 883.879019][T13085] ? lockdep_hardirqs_on+0x9c/0x150 [ 883.879039][T13085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.879058][T13085] ? clear_bhb_loop+0x60/0xb0 [ 883.879083][T13085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.879102][T13085] RIP: 0033:0x7fcdb638d5fc [ 883.879121][T13085] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 883.879139][T13085] RSP: 002b:00007fcdb7152030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 883.879160][T13085] RAX: ffffffffffffffda RBX: 00007fcdb65b6090 RCX: 00007fcdb638d5fc [ 883.879174][T13085] RDX: 000000000000000f RSI: 00007fcdb71520a0 RDI: 000000000000000a [ 883.879186][T13085] RBP: 00007fcdb7152090 R08: 0000000000000000 R09: 0000000000000000 [ 883.879199][T13085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.879210][T13085] R13: 00007fcdb65b6128 R14: 00007fcdb65b6090 R15: 00007ffc30547128 [ 883.879246][T13085] [ 884.115241][ C1] vkms_vblank_simulate: vblank timer overrun [ 884.580522][T13096] loop9: detected capacity change from 0 to 7 [ 884.589289][T13096] buffer_io_error: 4 callbacks suppressed [ 884.589334][T13096] Buffer I/O error on dev loop9, logical block 0, async page read [ 884.603691][T13096] Buffer I/O error on dev loop9, logical block 0, async page read [ 884.611987][T13096] Buffer I/O error on dev loop9, logical block 0, async page read [ 884.620771][T13096] Buffer I/O error on dev loop9, logical block 0, async page read [ 884.629628][T13096] Buffer I/O error on dev loop9, logical block 0, async page read [ 884.637903][T13096] Buffer I/O error on dev loop9, logical block 0, async page read [ 884.646219][T13096] Buffer I/O error on dev loop9, logical block 0, async page read [ 884.654443][T13096] ldm_validate_partition_table(): Disk read failed. [ 884.661427][T13096] Buffer I/O error on dev loop9, logical block 0, async page read [ 884.670069][T13096] Buffer I/O error on dev loop9, logical block 0, async page read [ 884.678361][T13096] Buffer I/O error on dev loop9, logical block 0, async page read [ 884.686965][T13096] Dev loop9: unable to read RDB block 0 [ 884.693710][T13096] loop9: unable to read partition table [ 884.700168][T13096] loop9: partition table beyond EOD, truncated [ 884.706529][T13096] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 884.706529][T13096] ) failed (rc=-5) [ 884.782750][ T5842] Bluetooth: hci3: command tx timeout [ 885.219118][ T5990] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 885.701296][ T5990] usb 1-1: unable to get BOS descriptor or descriptor too short [ 885.970957][ T5990] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 886.013959][ T5990] usb 1-1: can't read configurations, error -71 [ 886.381999][T13024] chnl_net:caif_netlink_parms(): no params data found [ 886.531315][ T7377] usb 6-1: unable to get BOS descriptor or descriptor too short [ 886.549685][ T7377] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 886.557602][ T7377] usb 6-1: can't read configurations, error -71 [ 886.671308][T13110] netlink: 'syz.7.1717': attribute type 3 has an invalid length. [ 886.868880][ T5842] Bluetooth: hci3: command tx timeout [ 887.548726][T13119] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1720'. [ 889.471746][T13024] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.504075][T13024] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.529185][T13024] bridge_slave_0: entered allmulticast mode [ 889.565692][T13024] bridge_slave_0: entered promiscuous mode [ 889.650905][ T6449] bridge_slave_1: left allmulticast mode [ 889.677973][ T6449] bridge_slave_1: left promiscuous mode [ 889.703349][ T6449] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.828675][ T6449] bridge_slave_0: left allmulticast mode [ 889.843674][ T6449] bridge_slave_0: left promiscuous mode [ 889.850762][ T6449] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.850552][T13161] ALSA: mixer_oss: invalid OSS volume '' [ 894.859469][T13176] [U] [ 896.990193][ T5937] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 897.185598][ T5937] usb 7-1: Using ep0 maxpacket: 16 [ 897.209205][ T5937] usb 7-1: unable to get BOS descriptor or descriptor too short [ 897.235539][ T5937] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 897.248800][ T5937] usb 7-1: can't read configurations, error -71 [ 897.301781][ T6449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 897.311222][ T6449] bond_slave_0: left promiscuous mode [ 897.316898][ T6449] bond_slave_0: left allmulticast mode [ 897.325732][ T6449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.337995][ T6449] bond_slave_1: left promiscuous mode [ 897.345093][ T6449] bond_slave_1: left allmulticast mode [ 897.353120][ T6449] bond0 (unregistering): Released all slaves [ 897.530092][ T6449] bond1 (unregistering): Released all slaves [ 897.551374][T13024] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.558821][T13024] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.566618][T13024] bridge_slave_1: entered allmulticast mode [ 897.575083][T13024] bridge_slave_1: entered promiscuous mode [ 897.592388][T13192] ip6gretap1: entered allmulticast mode [ 897.858496][ T6449] tipc: Left network mode [ 897.867846][T13024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.939336][ T6449] IPVS: stopping master sync thread 8127 ... [ 897.958437][T13024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.002801][T13214] netlink: 'syz.5.1746': attribute type 2 has an invalid length. [ 898.110905][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1749'. [ 898.178487][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1749'. [ 898.369298][T13216] syzkaller0: entered promiscuous mode [ 898.388700][T13216] syzkaller0: entered allmulticast mode [ 898.441105][T13227] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 898.758688][T13024] team0: Port device team_slave_0 added [ 898.872009][T13024] team0: Port device team_slave_1 added [ 898.999201][ T6449] mac80211_hwsim hwsim6 wlan0 (unregistering): left allmulticast mode [ 901.140817][T13259] capability: warning: `syz.5.1756' uses 32-bit capabilities (legacy support in use) [ 901.279862][T13247] bridge0: port 3(syz_tun) entered blocking state [ 901.287063][T13247] bridge0: port 3(syz_tun) entered disabled state [ 901.310508][T13247] syz_tun: entered allmulticast mode [ 901.317103][T13247] syz_tun: entered promiscuous mode [ 901.336148][T13247] bridge0: port 3(syz_tun) entered blocking state [ 901.342838][T13247] bridge0: port 3(syz_tun) entered forwarding state [ 901.721695][T13024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.728920][T13024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.763185][T13267] input: syz0 as /devices/virtual/input/input42 [ 901.780339][T13024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.863798][ T6449] hsr_slave_0: left promiscuous mode [ 901.896092][ T6449] hsr_slave_1: left promiscuous mode [ 901.908279][ T6449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.939201][ T6449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.963846][ T6449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 901.979367][ T6449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.039703][ T6449] veth1_macvtap: left promiscuous mode [ 902.048415][ T6449] veth0_macvtap: left promiscuous mode [ 902.055252][ T5990] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 902.068561][ T6449] veth1_vlan: left promiscuous mode [ 903.110699][ T7377] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 903.171304][ T5990] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 903.182790][ T5990] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 903.197328][ T5990] usb 1-1: config 0 interface 0 has no altsetting 0 [ 903.204187][ T5990] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 903.213383][ T5990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.340544][ T7377] usb 6-1: Using ep0 maxpacket: 16 [ 903.363306][ T7377] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 903.787623][ T5990] usb 1-1: config 0 descriptor?? [ 903.794359][T13270] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 903.810390][ T7377] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 903.838298][ T7377] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 904.008697][ T7377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.025204][ T7377] usb 6-1: Product: syz [ 904.029613][ T7377] usb 6-1: Manufacturer: syz [ 904.037489][ T7377] usb 6-1: SerialNumber: syz [ 904.569378][T13270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.619852][T13270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.638205][ T7377] usb 6-1: can't set config #1, error -71 [ 904.668769][ T7377] usb 6-1: USB disconnect, device number 30 [ 904.671420][ T5990] usbhid 1-1:0.0: can't add hid device: -71 [ 904.684212][ T5990] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 904.721508][ T5990] usb 1-1: USB disconnect, device number 38 [ 904.888582][ T6449] team0 (unregistering): Port device vlan0 removed [ 905.407821][ T6449] team0 (unregistering): Port device team_slave_1 removed [ 905.496867][T13287] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1761'. [ 905.510660][ T6449] team0 (unregistering): Port device team_slave_0 removed [ 906.307910][T13024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.315278][T13024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.353768][T13024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.680251][T13024] hsr_slave_0: entered promiscuous mode [ 906.738604][T13024] hsr_slave_1: entered promiscuous mode [ 906.779640][T13024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 906.820879][T13024] Cannot create hsr debugfs directory [ 907.910785][ T7377] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 908.080833][ T7377] usb 8-1: Using ep0 maxpacket: 16 [ 908.107702][ T7377] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.213439][ T7377] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.841473][T13322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 909.849098][T13322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.285332][ T7377] usb 8-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 910.303603][ T7377] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.339500][ T7377] usb 8-1: config 0 descriptor?? [ 910.719460][ T7377] usbhid 8-1:0.0: can't add hid device: -71 [ 910.761989][ T7377] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 911.620655][ T7377] usb 8-1: USB disconnect, device number 12 [ 912.310660][T13024] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 912.350695][T13338] team0: No ports can be present during mode change [ 912.377285][T13024] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 912.409115][T13024] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 912.442648][T13024] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 913.115432][T13024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.274435][T13024] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.355512][ T6449] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.362690][ T6449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.415595][ T6449] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.423000][ T6449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.674413][T13355] netlink: 316 bytes leftover after parsing attributes in process `syz.6.1772'. [ 914.758700][T13024] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 914.843802][T13024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 914.947677][T13363] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20006 [ 915.111790][T10507] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 915.356281][T10507] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 915.384259][T10507] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 915.415214][T10507] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 915.445360][T10507] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 915.496647][T10507] usb 7-1: SerialNumber: syz [ 915.736388][T13361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.746651][T13361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.892704][T10507] usb 7-1: USB disconnect, device number 18 [ 916.070976][T13381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1776'. [ 916.202071][T13024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.305497][T13413] netlink: 316 bytes leftover after parsing attributes in process `syz.5.1782'. [ 921.345330][T10507] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 921.587352][T10507] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.706078][ T5937] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 921.719430][T10507] usb 8-1: config 0 interface 0 has no altsetting 0 [ 921.746100][T10507] usb 8-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 922.681339][T10507] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.043716][T13427] netlink: 'syz.0.1786': attribute type 1 has an invalid length. [ 923.060769][T13427] xt_SECMARK: invalid mode: 2 [ 923.384371][T13024] veth0_vlan: entered promiscuous mode [ 923.480793][T13024] veth1_vlan: entered promiscuous mode [ 923.663673][T10507] usb 8-1: Product: syz [ 923.682771][ T5937] usb 6-1: Using ep0 maxpacket: 32 [ 923.689825][T10507] usb 8-1: Manufacturer: syz [ 923.808868][ T5937] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 923.820905][T10507] usb 8-1: SerialNumber: syz [ 924.150137][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 924.186377][T10507] usb 8-1: config 0 descriptor?? [ 924.342522][T10507] usb 8-1: can't set config #0, error -71 [ 924.502103][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 924.581510][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 924.797827][T10507] usb 8-1: USB disconnect, device number 13 [ 924.881388][T11141] udevd[11141]: setting owner of /dev/bus/usb/008/013 to uid=0, gid=0 failed: No such file or directory [ 924.902597][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 925.336222][T13024] veth0_macvtap: entered promiscuous mode [ 925.564612][T13024] veth1_macvtap: entered promiscuous mode [ 925.579980][ T5937] usb 6-1: string descriptor 0 read error: -71 [ 925.604983][ T5937] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 925.731160][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.910057][ T5937] usb 6-1: config 0 descriptor?? [ 926.084277][T13024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.115713][ T5937] usb 6-1: can't set config #0, error -71 [ 926.122487][T13447] FAULT_INJECTION: forcing a failure. [ 926.122487][T13447] name failslab, interval 1, probability 0, space 0, times 0 [ 926.352851][ T5937] usb 6-1: USB disconnect, device number 31 [ 926.451000][T13447] CPU: 1 UID: 0 PID: 13447 Comm: syz.5.1792 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 926.451031][T13447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 926.451044][T13447] Call Trace: [ 926.451051][T13447] [ 926.451060][T13447] dump_stack_lvl+0x189/0x250 [ 926.451090][T13447] ? __pfx____ratelimit+0x10/0x10 [ 926.451112][T13447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 926.451134][T13447] ? __pfx__printk+0x10/0x10 [ 926.451162][T13447] ? __pfx___might_resched+0x10/0x10 [ 926.451183][T13447] ? fs_reclaim_acquire+0x7d/0x100 [ 926.451210][T13447] should_fail_ex+0x414/0x560 [ 926.451237][T13447] should_failslab+0xa8/0x100 [ 926.451261][T13447] __kmalloc_noprof+0xcb/0x4f0 [ 926.451278][T13447] ? tomoyo_encode+0x28b/0x550 [ 926.451308][T13447] tomoyo_encode+0x28b/0x550 [ 926.451340][T13447] tomoyo_realpath_from_path+0x58d/0x5d0 [ 926.451379][T13447] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 926.451401][T13447] tomoyo_path_number_perm+0x1e8/0x5a0 [ 926.451425][T13447] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 926.451464][T13447] ? __lock_acquire+0xab9/0xd20 [ 926.451509][T13447] ? __fget_files+0x2a/0x420 [ 926.451535][T13447] ? __fget_files+0x2a/0x420 [ 926.451554][T13447] ? __fget_files+0x3a0/0x420 [ 926.451573][T13447] ? __fget_files+0x2a/0x420 [ 926.451597][T13447] security_file_ioctl+0xcb/0x2d0 [ 926.451622][T13447] __se_sys_ioctl+0x47/0x170 [ 926.451653][T13447] do_syscall_64+0xfa/0x3b0 [ 926.451677][T13447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.451696][T13447] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 926.451723][T13447] ? clear_bhb_loop+0x60/0xb0 [ 926.451746][T13447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.451765][T13447] RIP: 0033:0x7fba4998ebe9 [ 926.451783][T13447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 926.451798][T13447] RSP: 002b:00007fba4a80a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 926.451819][T13447] RAX: ffffffffffffffda RBX: 00007fba49bb5fa0 RCX: 00007fba4998ebe9 [ 926.451833][T13447] RDX: 0000200000000180 RSI: 000000004008af13 RDI: 0000000000000003 [ 926.451844][T13447] RBP: 00007fba4a80a090 R08: 0000000000000000 R09: 0000000000000000 [ 926.451856][T13447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.451868][T13447] R13: 00007fba49bb6038 R14: 00007fba49bb5fa0 R15: 00007fff65734e58 [ 926.451905][T13447] [ 926.915257][T13447] ERROR: Out of memory at tomoyo_realpath_from_path. [ 927.094958][T13024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 927.158657][T13024] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.193053][T13024] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.203484][T13024] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.213953][T13024] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.793496][ T5924] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 928.701863][T13468] netlink: 316 bytes leftover after parsing attributes in process `syz.5.1795'. [ 929.775236][ T5924] usb 1-1: unable to read config index 0 descriptor/all [ 929.782644][ T5924] usb 1-1: can't read configurations, error -71 [ 930.034056][ T6146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.069300][ T6146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.206711][T13481] [U] [ 931.209468][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.864219][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.870625][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.216011][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.558455][T13496] input: syz0 as /devices/virtual/input/input43 [ 933.693896][T13500] netlink: 'syz.6.1802': attribute type 4 has an invalid length. [ 935.071885][T13508] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1802'. [ 935.283748][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 935.475010][T13535] netlink: 324 bytes leftover after parsing attributes in process `syz.8.1807'. [ 935.496385][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 935.557004][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 935.594328][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 935.601990][ T10] usb 1-1: can't read configurations, error -71 [ 935.763675][ T5990] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 935.944329][ T5990] usb 9-1: Using ep0 maxpacket: 16 [ 936.695543][ T5990] usb 9-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 936.723868][ T5990] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 936.734079][ T24] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 936.762217][ T5990] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 936.818363][T13558] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 936.825359][T13558] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 936.840534][ T5990] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.860107][ T5990] usb 9-1: Product: syz [ 936.872255][T13560] tipc: Enabling of bearer rejected, failed to enable media [ 936.889326][T13558] vhci_hcd vhci_hcd.0: Device attached [ 936.914490][ T5990] usb 9-1: Manufacturer: syz [ 936.919372][ T5990] usb 9-1: SerialNumber: syz [ 936.951233][ T24] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 936.970114][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.019550][ T24] usb 6-1: Product: syz [ 937.042303][ T24] usb 6-1: Manufacturer: syz [ 937.072165][ T24] usb 6-1: SerialNumber: syz [ 937.123944][ T24] usb 6-1: config 0 descriptor?? [ 937.134016][ T5924] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 937.169982][T13561] vhci_hcd: connection reset by peer [ 937.181156][ T24] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 937.244206][ T5990] usb 9-1: 0:2 : does not exist [ 937.246535][ T49] vhci_hcd: stop threads [ 937.283846][ T49] vhci_hcd: release socket [ 937.295753][ T49] vhci_hcd: disconnect device [ 937.296558][ T5990] usb 9-1: 5:0: failed to get current value for ch 1 (-22) [ 937.384167][ T5990] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5) [ 937.406356][ T5990] usb 9-1: 5:0: failed to get current value for ch 1 (-22) [ 937.430113][ T5990] usb 9-1: 5:0: cannot get min/max values for control 8 (id 5) [ 937.448860][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1816'. [ 937.734114][ T5990] usb 9-1: USB disconnect, device number 2 [ 938.619888][T13586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 938.642883][T13586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 940.591599][ T7377] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 940.746488][ T24] gspca_sunplus: reg_r err -110 [ 940.752496][ T24] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 941.210128][T10507] usb 6-1: USB disconnect, device number 32 [ 941.404336][ T7377] usb 7-1: Using ep0 maxpacket: 16 [ 941.442914][ T7377] usb 7-1: config 8 has an invalid interface number: 206 but max is 0 [ 941.509904][ T7377] usb 7-1: config 8 has no interface number 0 [ 941.564402][ T7377] usb 7-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 941.677494][ T7377] usb 7-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 941.775686][ T7377] usb 7-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 941.796770][T11141] udevd[11141]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 941.953906][ T7377] usb 7-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 1024 [ 942.009104][ T7377] usb 7-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 942.083203][ T7377] usb 7-1: config 8 interface 206 has no altsetting 0 [ 942.109020][ T7377] usb 7-1: string descriptor 0 read error: -71 [ 942.139240][ T7377] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 942.170816][ T7377] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.309810][T13606] netlink: 'syz.7.1823': attribute type 9 has an invalid length. [ 942.318705][T13606] netlink: 'syz.7.1823': attribute type 6 has an invalid length. [ 942.357211][ T7377] usb 7-1: can't set config #8, error -71 [ 942.405343][ T24] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 942.429400][ T5924] vhci_hcd: vhci_device speed not set [ 942.634143][ T7377] usb 7-1: USB disconnect, device number 19 [ 942.673050][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 943.008467][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.020555][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.045710][ T24] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 943.155257][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.396079][ T24] usb 1-1: config 0 descriptor?? [ 943.846068][T13599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.887627][T13599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.957531][T13599] tipc: Started in network mode [ 944.015761][T13599] tipc: Node identity fa7136f32729, cluster identity 4711 [ 944.061562][T13599] tipc: Enabled bearer , priority 0 [ 944.125133][T13625] syzkaller0: entered promiscuous mode [ 944.130813][T13625] syzkaller0: entered allmulticast mode [ 944.642817][T13629] netlink: 'syz.6.1831': attribute type 10 has an invalid length. [ 944.706915][T13629] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1831'. [ 944.775098][T13629] team0: entered promiscuous mode [ 945.164862][T13629] team_slave_0: entered promiscuous mode [ 945.179851][ T7377] tipc: Node number set to 3713545971 [ 945.199007][T13629] team_slave_1: entered promiscuous mode [ 945.236080][T13629] team0: entered allmulticast mode [ 945.242115][T13629] team_slave_0: entered allmulticast mode [ 945.249497][T13629] team_slave_1: entered allmulticast mode [ 945.263235][T13629] bridge0: port 3(team0) entered blocking state [ 945.272085][T13629] bridge0: port 3(team0) entered disabled state [ 945.300008][T13629] bridge0: port 3(team0) entered blocking state [ 945.306961][T13629] bridge0: port 3(team0) entered forwarding state [ 946.261798][T13644] input: syz0 as /devices/virtual/input/input45 [ 946.631878][T13597] tipc: Resetting bearer [ 950.431365][ T24] usbhid 1-1:0.0: can't add hid device: -32 [ 950.465833][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 951.180132][ T5990] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 951.667257][T13597] tipc: Disabling bearer [ 953.520263][ T24] usb 1-1: USB disconnect, device number 43 [ 954.969796][T13676] netlink: 'syz.6.1842': attribute type 4 has an invalid length. [ 954.978779][T13678] binder: 13677:13678 ioctl c0487c04 200000000700 returned -22 [ 954.988411][T13676] netlink: 14085 bytes leftover after parsing attributes in process `syz.6.1842'. [ 954.999611][T13678] binder: 13677:13678 ioctl 6410 0 returned -22 [ 955.030052][T13678] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1843'. [ 955.336124][ T7377] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 955.516973][ T24] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 955.520990][ T7377] usb 7-1: Using ep0 maxpacket: 32 [ 955.588743][ T7377] usb 7-1: config 0 has an invalid interface number: 220 but max is 3 [ 955.618586][ T7377] usb 7-1: config 0 has an invalid interface number: 69 but max is 3 [ 955.653950][ T7377] usb 7-1: config 0 has an invalid interface number: 254 but max is 3 [ 955.680093][ T7377] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 955.695809][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 955.707269][ T7377] usb 7-1: config 0 has an invalid interface number: 54 but max is 3 [ 955.721189][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 955.733600][ T24] usb 1-1: config 0 has no interface number 0 [ 955.745278][ T7377] usb 7-1: config 0 has an invalid interface number: 106 but max is 3 [ 955.759456][ T24] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 955.784132][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.805356][ T24] usb 1-1: Product: syz [ 955.814928][ T24] usb 1-1: Manufacturer: syz [ 955.825718][ T24] usb 1-1: SerialNumber: syz [ 955.846528][ T24] usb 1-1: config 0 descriptor?? [ 955.862036][ T24] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 955.894242][ T24] usb 1-1: selecting invalid altsetting 1 [ 955.898327][ T7377] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 955.917623][ T24] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 955.989437][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 956.014281][ T7377] usb 7-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 956.049947][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 956.063529][ T7377] usb 7-1: config 0 has no interface number 0 [ 956.206927][ T24] usb 1-1: media controller created [ 957.191204][ T7377] usb 7-1: config 0 has no interface number 1 [ 957.223251][ T7377] usb 7-1: config 0 has no interface number 2 [ 957.235212][ T7377] usb 7-1: config 0 has no interface number 3 [ 958.192636][ T7377] usb 7-1: config 0 has no interface number 4 [ 958.199054][ T7377] usb 7-1: config 0 interface 220 altsetting 6 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 958.210241][ T7377] usb 7-1: config 0 interface 220 altsetting 6 endpoint 0xF has invalid maxpacket 58733, setting to 64 [ 958.222704][ T7377] usb 7-1: config 0 interface 220 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 958.233824][ T7377] usb 7-1: config 0 interface 220 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 958.481554][ T7377] usb 7-1: config 0 interface 220 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 958.493122][ T7377] usb 7-1: config 0 interface 69 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 1024 [ 958.504597][ T7377] usb 7-1: config 0 interface 69 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 958.552955][ T7377] usb 7-1: config 0 interface 69 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 958.592505][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 958.609226][T13705] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1847'. [ 958.639010][ T7377] usb 7-1: config 0 interface 69 altsetting 9 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 958.712903][ T7377] usb 7-1: config 0 interface 69 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 958.860359][ T7377] usb 7-1: config 0 interface 69 altsetting 9 has 6 endpoint descriptors, different from the interface descriptor's value: 14 [ 958.873918][ T7377] usb 7-1: too many endpoints for config 0 interface 254 altsetting 48: 198, using maximum allowed: 30 [ 958.889461][ T7377] usb 7-1: config 0 interface 254 altsetting 48 has a duplicate endpoint with address 0x3, skipping [ 958.901904][ T7377] usb 7-1: config 0 interface 254 altsetting 48 has an invalid descriptor for endpoint zero, skipping [ 958.919749][ T24] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 958.939158][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 958.940829][ T7377] usb 7-1: config 0 interface 254 altsetting 48 has a duplicate endpoint with address 0x6, skipping [ 958.967215][ T24] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 959.037674][ T7377] usb 7-1: config 0 interface 254 altsetting 48 endpoint 0x5 has an invalid bInterval 59, changing to 9 [ 959.126232][ T7377] usb 7-1: config 0 interface 254 altsetting 48 has a duplicate endpoint with address 0x1, skipping [ 959.173783][ T24] usb 1-1: USB disconnect, device number 44 [ 959.223189][ T7377] usb 7-1: config 0 interface 254 altsetting 48 has a duplicate endpoint with address 0x3, skipping [ 959.300210][ T7377] usb 7-1: config 0 interface 254 altsetting 48 has 8 endpoint descriptors, different from the interface descriptor's value: 198 [ 959.455757][ T7377] usb 7-1: config 0 interface 54 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 959.476165][ T7377] usb 7-1: config 0 interface 54 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 959.527407][ T7377] usb 7-1: config 0 interface 54 altsetting 5 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 959.596141][ T7377] usb 7-1: config 0 interface 54 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 959.647001][ T7377] usb 7-1: config 0 interface 54 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 959.707638][ T7377] usb 7-1: config 0 interface 54 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 959.771837][ T7377] usb 7-1: config 0 interface 54 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 959.842571][ T7377] usb 7-1: config 0 interface 54 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 959.905050][ T7377] usb 7-1: config 0 interface 54 altsetting 5 endpoint 0x84 has an invalid bInterval 179, changing to 11 [ 959.937603][T13730] pim6reg1: entered promiscuous mode [ 959.966172][ T7377] usb 7-1: config 0 interface 54 altsetting 5 endpoint 0x84 has invalid maxpacket 51104, setting to 1024 [ 959.966267][T13730] pim6reg1: entered allmulticast mode [ 960.368561][ T7377] usb 7-1: config 0 interface 54 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 960.379575][ T7377] usb 7-1: config 0 interface 54 altsetting 5 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 960.406254][ T7377] usb 7-1: config 0 interface 106 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 960.588680][ T7377] usb 7-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 960.632035][ T7377] usb 7-1: config 0 interface 106 altsetting 0 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 960.680178][T13732] netlink: 'syz.0.1854': attribute type 2 has an invalid length. [ 960.826291][ T7377] usb 7-1: config 0 interface 106 altsetting 0 endpoint 0x83 has invalid maxpacket 26328, setting to 1024 [ 960.837901][ T7377] usb 7-1: config 0 interface 106 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 960.848892][ T7377] usb 7-1: config 0 interface 106 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 960.862948][ T7377] usb 7-1: config 0 interface 220 has no altsetting 0 [ 960.870413][ T7377] usb 7-1: config 0 interface 69 has no altsetting 0 [ 960.878239][ T7377] usb 7-1: config 0 interface 254 has no altsetting 0 [ 960.885099][ T7377] usb 7-1: config 0 interface 54 has no altsetting 0 [ 960.897837][ T7377] usb 7-1: string descriptor 0 read error: -71 [ 960.904331][ T7377] usb 7-1: New USB device found, idVendor=0db0, idProduct=3821, bcdDevice=8e.9f [ 960.924025][ T7377] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.958015][ T7377] usb 7-1: config 0 descriptor?? [ 960.977008][ T7377] usb 7-1: can't set config #0, error -71 [ 960.996873][ T7377] usb 7-1: USB disconnect, device number 20 [ 961.295128][T13746] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1859'. [ 961.888919][T13757] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 962.071282][T13757] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 962.595092][ T7377] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 962.611108][T13758] : entered promiscuous mode [ 963.328162][T13762] netlink: 316 bytes leftover after parsing attributes in process `syz.6.1862'. [ 964.236787][ T7377] usb 8-1: Using ep0 maxpacket: 16 [ 964.248484][ T7377] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.544610][ T7377] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 964.554714][ T7377] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 964.568247][ T7377] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.594351][ T7377] usb 8-1: config 0 descriptor?? [ 964.624907][ T7377] usb 8-1: can't set config #0, error -71 [ 964.668635][ T7377] usb 8-1: USB disconnect, device number 14 [ 965.078595][T13785] fuse: Bad value for 'fd' [ 965.400936][T13790] netlink: 'syz.6.1871': attribute type 2 has an invalid length. [ 965.454624][T13790] 9pnet_fd: Insufficient options for proto=fd [ 968.206768][T13818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1880'. [ 968.221365][T13818] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1880'. [ 968.308504][T13820] netlink: 'syz.6.1881': attribute type 12 has an invalid length. [ 970.420635][T13845] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 972.328890][T13850] QAT: failed to copy from user cfg_data. [ 973.758315][T13872] netlink: 'syz.5.1892': attribute type 1 has an invalid length. [ 973.822662][T13872] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1892'. [ 973.939795][T13878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1893'. [ 974.782010][ T5842] Bluetooth: hci3: link tx timeout [ 974.788769][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 974.806514][ T5842] Bluetooth: hci3: link tx timeout [ 974.813444][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 975.098085][T13898] QAT: failed to copy from user cfg_data. [ 976.888053][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 977.584336][T13932] tipc: Started in network mode [ 977.594225][T13932] tipc: Node identity ac14140f, cluster identity 4711 [ 978.159391][T13932] tipc: New replicast peer: 172.30.0.7 [ 978.207487][T13932] tipc: Enabled bearer , priority 10 [ 978.350575][T13941] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1909'. [ 979.111588][T13943] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 979.218445][ T43] tipc: Node number set to 2886997007 [ 979.358198][T10507] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 979.528496][T10507] usb 1-1: Invalid ep0 maxpacket: 64 [ 979.585357][T13951] IPVS: set_ctl: invalid protocol: 44 172.30.0.9:20008 [ 979.605039][T13953] QAT: failed to copy from user cfg_data. [ 979.678454][T10507] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 979.785712][ T30] audit: type=1326 audit(1755623162.829:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13956 comm="syz.6.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244c58ebe9 code=0x7ffc0000 [ 979.864215][ T30] audit: type=1326 audit(1755623162.829:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13956 comm="syz.6.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244c58ebe9 code=0x7ffc0000 [ 979.918530][T10507] usb 1-1: Invalid ep0 maxpacket: 64 [ 980.034756][T10507] usb usb1-port1: attempt power cycle [ 980.087254][ T30] audit: type=1326 audit(1755623162.879:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13956 comm="syz.6.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f244c58d550 code=0x7ffc0000 [ 980.109067][ T10] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 980.228504][ T5924] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 980.347000][ T30] audit: type=1326 audit(1755623162.879:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13956 comm="syz.6.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f244c58e7eb code=0x7ffc0000 [ 980.480433][T10507] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 980.495118][ T30] audit: type=1326 audit(1755623162.879:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13956 comm="syz.6.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f244c58e7eb code=0x7ffc0000 [ 980.796150][ T30] audit: type=1326 audit(1755623162.879:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13956 comm="syz.6.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f244c58e7eb code=0x7ffc0000 [ 980.818453][ T5924] usb 7-1: Using ep0 maxpacket: 32 [ 980.824575][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 980.831756][T10507] usb 1-1: Invalid ep0 maxpacket: 64 [ 980.846024][ T5924] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 980.858721][ T10] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 980.880548][ T10] usb 8-1: config 0 has no interface number 0 [ 980.888728][ T5924] usb 7-1: config 0 has no interface number 0 [ 980.895292][ T10] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 980.905801][ T5924] usb 7-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.918014][ T30] audit: type=1326 audit(1755623162.879:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13956 comm="syz.6.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f244c58e7eb code=0x7ffc0000 [ 980.941702][ T5924] usb 7-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.953920][ T10] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 980.963390][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.974880][ T30] audit: type=1326 audit(1755623163.129:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13956 comm="syz.6.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f244c58e7eb code=0x7ffc0000 [ 980.988362][ T5924] usb 7-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 981.009441][ T10] usb 8-1: Product: syz [ 981.013789][T10507] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 981.022932][ T10] usb 8-1: Manufacturer: syz [ 981.028044][ T10] usb 8-1: SerialNumber: syz [ 981.033389][ T30] audit: type=1326 audit(1755623163.209:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13956 comm="syz.6.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f244c58e7eb code=0x7ffc0000 [ 981.056395][T10507] usb 1-1: Invalid ep0 maxpacket: 64 [ 981.066129][T10507] usb usb1-port1: unable to enumerate USB device [ 981.067331][ T30] audit: type=1326 audit(1755623163.289:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13956 comm="syz.6.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f244c58e7eb code=0x7ffc0000 [ 981.075711][ T5924] usb 7-1: config 0 interface 2 has no altsetting 0 [ 981.122240][ T10] usb 8-1: config 0 descriptor?? [ 981.207675][ T10] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 981.231736][ T5924] usb 7-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 981.244527][ T10] em28xx 8-1:0.132: Video interface 132 found: [ 981.251849][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.289252][ T5924] usb 7-1: config 0 descriptor?? [ 981.438508][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 981.550861][ T10] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 981.596759][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 981.617547][ T24] usb 9-1: New USB device found, idVendor=06a3, idProduct=0cd7, bcdDevice= 0.00 [ 981.631004][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.643049][ T24] usb 9-1: config 0 descriptor?? [ 981.719535][ T5924] usbhid 7-1:0.2: can't add hid device: -71 [ 981.752788][ T5924] usbhid 7-1:0.2: probe with driver usbhid failed with error -71 [ 981.786811][ T5924] usb 7-1: USB disconnect, device number 21 [ 982.055022][T13968] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1917'. [ 982.104357][ T24] usbhid 9-1:0.0: can't add hid device: -71 [ 982.125197][ T24] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 982.157276][ T24] usb 9-1: USB disconnect, device number 3 [ 982.725495][T13997] [U] [ 982.878945][ T10] em28xx 8-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 982.895082][T13957] em28xx 8-1:0.132: failed to trigger read from i2c address 0x2 (error=-5) [ 982.936963][ T10] em28xx 8-1:0.132: board has no eeprom [ 983.659067][ T10] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 983.667064][ T10] em28xx 8-1:0.132: analog set to bulk mode. [ 983.717536][T10507] em28xx 8-1:0.132: Registering V4L2 extension [ 983.799736][ T10] usb 8-1: USB disconnect, device number 15 [ 983.854023][ T10] em28xx 8-1:0.132: Disconnecting em28xx [ 986.524373][T14006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1926'. [ 987.334822][T10507] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 987.347683][T10507] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 987.365414][T10507] em28xx 8-1:0.132: No AC97 audio processor [ 987.459092][ T5937] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 987.513251][T10507] usb 8-1: Decoder not found [ 987.518209][T10507] em28xx 8-1:0.132: failed to create media graph [ 987.556449][T14040] input: syz0 as /devices/virtual/input/input46 [ 987.567775][T10507] em28xx 8-1:0.132: V4L2 device video103 deregistered [ 987.736425][ T5937] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 987.756283][T10507] em28xx 8-1:0.132: Remote control support is not available for this card. [ 987.798466][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.857254][ T10] em28xx 8-1:0.132: Closing input extension [ 987.872978][ T5937] usb 1-1: config 0 descriptor?? [ 987.954692][ T5937] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 987.991767][ T10] em28xx 8-1:0.132: Freeing device [ 988.144270][ T5937] usb 1-1: Detected FT232B [ 988.533343][ T5937] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 988.549726][ T5937] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 988.635805][T14056] overlayfs: failed to clone upperpath [ 989.522367][ T5937] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 989.712917][ T5937] usb 1-1: USB disconnect, device number 49 [ 989.753431][ T5937] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 989.792487][ T5937] ftdi_sio 1-1:0.0: device disconnected [ 990.069567][T14068] netlink: 'syz.5.1940': attribute type 13 has an invalid length. [ 990.230078][T14072] netlink: 'syz.0.1941': attribute type 1 has an invalid length. [ 990.266031][T14072] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1941'. [ 990.271315][T14077] netlink: set zone limit has 4 unknown bytes [ 990.516752][T14084] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1944'. [ 990.909388][T14081] netlink: 'syz.0.1941': attribute type 3 has an invalid length. [ 991.379797][T14115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1953'. [ 991.472105][T14115] netlink: 324 bytes leftover after parsing attributes in process `syz.5.1953'. [ 992.657769][T14146] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1962'. [ 993.035763][T14158] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1967'. [ 993.306400][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.493544][T14169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1972'. [ 993.797976][T14190] netlink: 146780 bytes leftover after parsing attributes in process `syz.5.1976'. [ 994.312445][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1983'. [ 994.523364][T14211] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 995.314926][T14240] netlink: 'syz.7.1992': attribute type 4 has an invalid length. [ 995.381421][T14240] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1992'. [ 996.205641][T14278] tipc: Started in network mode [ 996.254646][T14278] tipc: Node identity 4, cluster identity 4711 [ 996.299631][T14278] tipc: Node number set to 4 [ 996.618214][T14293] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2010'. [ 996.665247][T14298] netlink: 'syz.0.2008': attribute type 1 has an invalid length. [ 997.095132][T14309] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 997.256337][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2016'. [ 998.130703][ T5990] IPVS: starting estimator thread 0... [ 998.230314][T14344] IPVS: using max 25 ests per chain, 60000 per kthread [ 998.410002][T14354] netlink: 'syz.8.2030': attribute type 10 has an invalid length. [ 998.465511][T14355] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2028'. [ 998.500623][T14355] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2028'. [ 998.518286][T14354] team0: Port device dummy0 added [ 998.582312][T14354] netlink: 'syz.8.2030': attribute type 10 has an invalid length. [ 998.601721][T14354] [ 998.604120][T14354] ====================================================== [ 998.611188][T14354] WARNING: possible circular locking dependency detected [ 998.618346][T14354] 6.16.0-syzkaller #0 Not tainted [ 998.623401][T14354] ------------------------------------------------------ [ 998.630472][T14354] syz.8.2030/14354 is trying to acquire lock: [ 998.636582][T14354] ffff888079940e00 (team->team_lock_key#9){+.+.}-{4:4}, at: team_device_event+0x182/0xa20 [ 998.646577][T14354] [ 998.646577][T14354] but task is already holding lock: [ 998.654242][T14354] ffff888068940d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 998.664157][T14354] [ 998.664157][T14354] which lock already depends on the new lock. [ 998.664157][T14354] [ 998.674603][T14354] [ 998.674603][T14354] the existing dependency chain (in reverse order) is: [ 998.683656][T14354] [ 998.683656][T14354] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 998.692335][T14354] lock_acquire+0x120/0x360 [ 998.697409][T14354] __mutex_lock+0x182/0xe80 [ 998.702624][T14354] dev_set_mtu+0x10e/0x260 [ 998.707708][T14354] team_add_slave+0x8b8/0x2840 [ 998.713058][T14354] do_set_master+0x530/0x6d0 [ 998.718212][T14354] do_setlink+0xcf0/0x41c0 [ 998.723200][T14354] rtnl_newlink+0x160b/0x1c70 [ 998.728455][T14354] rtnetlink_rcv_msg+0x7cc/0xb70 [ 998.733966][T14354] netlink_rcv_skb+0x205/0x470 [ 998.739305][T14354] netlink_unicast+0x75c/0x8e0 [ 998.744629][T14354] netlink_sendmsg+0x805/0xb30 [ 998.749935][T14354] __sock_sendmsg+0x21c/0x270 [ 998.755237][T14354] ____sys_sendmsg+0x505/0x830 [ 998.760563][T14354] ___sys_sendmsg+0x21f/0x2a0 [ 998.765872][T14354] __x64_sys_sendmsg+0x19b/0x260 [ 998.771384][T14354] do_syscall_64+0xfa/0x3b0 [ 998.776434][T14354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.782890][T14354] [ 998.782890][T14354] -> #0 (team->team_lock_key#9){+.+.}-{4:4}: [ 998.791358][T14354] validate_chain+0xb9b/0x2140 [ 998.796651][T14354] __lock_acquire+0xab9/0xd20 [ 998.801964][T14354] lock_acquire+0x120/0x360 [ 998.806990][T14354] __mutex_lock+0x182/0xe80 [ 998.812024][T14354] team_device_event+0x182/0xa20 [ 998.817488][T14354] notifier_call_chain+0x1b3/0x3e0 [ 998.823152][T14354] __dev_notify_flags+0x18d/0x2e0 [ 998.828890][T14354] netif_change_flags+0xe8/0x1a0 [ 998.834363][T14354] do_setlink+0xc55/0x41c0 [ 998.839309][T14354] rtnl_newlink+0x160b/0x1c70 [ 998.844514][T14354] rtnetlink_rcv_msg+0x7cc/0xb70 [ 998.849980][T14354] netlink_rcv_skb+0x205/0x470 [ 998.855294][T14354] netlink_unicast+0x75c/0x8e0 [ 998.860937][T14354] netlink_sendmsg+0x805/0xb30 [ 998.866260][T14354] __sock_sendmsg+0x21c/0x270 [ 998.871470][T14354] ____sys_sendmsg+0x505/0x830 [ 998.876785][T14354] ___sys_sendmsg+0x21f/0x2a0 [ 998.882057][T14354] __x64_sys_sendmsg+0x19b/0x260 [ 998.887645][T14354] do_syscall_64+0xfa/0x3b0 [ 998.892681][T14354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.899132][T14354] [ 998.899132][T14354] other info that might help us debug this: [ 998.899132][T14354] [ 998.909629][T14354] Possible unsafe locking scenario: [ 998.909629][T14354] [ 998.917172][T14354] CPU0 CPU1 [ 998.922551][T14354] ---- ---- [ 998.928092][T14354] lock(&dev_instance_lock_key#3); [ 998.933399][T14354] lock(team->team_lock_key#9); [ 998.940981][T14354] lock(&dev_instance_lock_key#3); [ 998.948754][T14354] lock(team->team_lock_key#9); [ 998.953825][T14354] [ 998.953825][T14354] *** DEADLOCK *** [ 998.953825][T14354] [ 998.961996][T14354] 2 locks held by syz.8.2030/14354: [ 998.967302][T14354] #0: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 998.976654][T14354] #1: ffff888068940d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 998.987156][T14354] [ 998.987156][T14354] stack backtrace: [ 998.993062][T14354] CPU: 1 UID: 0 PID: 14354 Comm: syz.8.2030 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 998.993082][T14354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 998.993092][T14354] Call Trace: [ 998.993098][T14354] [ 998.993107][T14354] dump_stack_lvl+0x189/0x250 [ 998.993129][T14354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 998.993146][T14354] ? __pfx__printk+0x10/0x10 [ 998.993167][T14354] ? print_lock_name+0xde/0x100 [ 998.993187][T14354] print_circular_bug+0x2ee/0x310 [ 998.993209][T14354] check_noncircular+0x134/0x160 [ 998.993231][T14354] validate_chain+0xb9b/0x2140 [ 998.993251][T14354] ? __lock_acquire+0xab9/0xd20 [ 998.993271][T14354] __lock_acquire+0xab9/0xd20 [ 998.993287][T14354] ? team_device_event+0x182/0xa20 [ 998.993301][T14354] lock_acquire+0x120/0x360 [ 998.993314][T14354] ? team_device_event+0x182/0xa20 [ 998.993330][T14354] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 998.993364][T14354] __mutex_lock+0x182/0xe80 [ 998.993380][T14354] ? team_device_event+0x182/0xa20 [ 998.993397][T14354] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 998.993418][T14354] ? team_device_event+0x182/0xa20 [ 998.993432][T14354] ? __pfx___mutex_lock+0x10/0x10 [ 998.993448][T14354] ? __timer_delete_sync+0x218/0x2d0 [ 998.993475][T14354] team_device_event+0x182/0xa20 [ 998.993491][T14354] notifier_call_chain+0x1b3/0x3e0 [ 998.993511][T14354] __dev_notify_flags+0x18d/0x2e0 [ 998.993534][T14354] ? __pfx___dev_notify_flags+0x10/0x10 [ 998.993555][T14354] ? __dev_change_flags+0x4cc/0x6d0 [ 998.993579][T14354] ? __pfx___dev_change_flags+0x10/0x10 [ 998.993605][T14354] netif_change_flags+0xe8/0x1a0 [ 998.993629][T14354] do_setlink+0xc55/0x41c0 [ 998.993652][T14354] ? bpf_trace_run2+0x186/0x4b0 [ 998.993675][T14354] ? bpf_trace_run2+0x186/0x4b0 [ 998.993694][T14354] ? __pfx_do_setlink+0x10/0x10 [ 998.993715][T14354] ? __pfx_bpf_trace_run2+0x10/0x10 [ 998.993735][T14354] ? _printk+0xcf/0x120 [ 998.993751][T14354] ? __pfx____ratelimit+0x10/0x10 [ 998.993767][T14354] ? __bpf_trace_contention_end+0xcd/0x130 [ 998.993786][T14354] ? __bpf_trace_contention_end+0xdc/0x130 [ 998.993803][T14354] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 998.993823][T14354] ? __mutex_trylock_common+0x153/0x260 [ 998.993845][T14354] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 998.993872][T14354] ? rcu_is_watching+0x15/0xb0 [ 998.993889][T14354] ? trace_contention_end+0x39/0x120 [ 998.993907][T14354] ? __mutex_lock+0x330/0xe80 [ 998.993927][T14354] ? rtnl_newlink+0x8db/0x1c70 [ 998.993946][T14354] ? rcu_is_watching+0x15/0xb0 [ 998.993962][T14354] ? __pfx___mutex_lock+0x10/0x10 [ 998.993983][T14354] ? ns_capable+0x8a/0xf0 [ 998.993998][T14354] ? rtnl_link_get_net_capable+0x16a/0x350 [ 998.994022][T14354] rtnl_newlink+0x160b/0x1c70 [ 998.994041][T14354] ? netlink_sendmsg+0x805/0xb30 [ 998.994067][T14354] ? __pfx_rtnl_newlink+0x10/0x10 [ 998.994095][T14354] ? kasan_quarantine_put+0xdd/0x220 [ 998.994118][T14354] ? lockdep_hardirqs_on+0x9c/0x150 [ 998.994136][T14354] ? nlmon_xmit+0xb0/0x100 [ 998.994154][T14354] ? kmem_cache_free+0x18f/0x400 [ 998.994172][T14354] ? __local_bh_enable_ip+0x12d/0x1c0 [ 998.994189][T14354] ? lockdep_hardirqs_on+0x9c/0x150 [ 998.994205][T14354] ? __local_bh_enable_ip+0x12d/0x1c0 [ 998.994220][T14354] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 998.994237][T14354] ? __dev_queue_xmit+0x27e/0x3a70 [ 998.994253][T14354] ? __dev_queue_xmit+0x27e/0x3a70 [ 998.994267][T14354] ? __dev_queue_xmit+0x27e/0x3a70 [ 998.994283][T14354] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 998.994300][T14354] ? __lock_acquire+0xab9/0xd20 [ 998.994328][T14354] ? __pfx_rtnl_newlink+0x10/0x10 [ 998.994348][T14354] rtnetlink_rcv_msg+0x7cc/0xb70 [ 998.994369][T14354] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 998.994388][T14354] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 998.994406][T14354] ? ref_tracker_free+0x63a/0x7d0 [ 998.994423][T14354] ? __copy_skb_header+0xa7/0x550 [ 998.994438][T14354] ? __pfx_ref_tracker_free+0x10/0x10 [ 998.994459][T14354] netlink_rcv_skb+0x205/0x470 [ 998.994486][T14354] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 998.994506][T14354] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 998.994531][T14354] ? netlink_deliver_tap+0x2e/0x1b0 [ 998.994551][T14354] ? netlink_deliver_tap+0x2e/0x1b0 [ 998.994573][T14354] netlink_unicast+0x75c/0x8e0 [ 998.994596][T14354] netlink_sendmsg+0x805/0xb30 [ 998.994621][T14354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 998.994645][T14354] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 998.994661][T14354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 998.994683][T14354] __sock_sendmsg+0x21c/0x270 [ 998.994702][T14354] ____sys_sendmsg+0x505/0x830 [ 998.994728][T14354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 998.994753][T14354] ? import_iovec+0x74/0xa0 [ 998.994775][T14354] ___sys_sendmsg+0x21f/0x2a0 [ 998.994799][T14354] ? __pfx____sys_sendmsg+0x10/0x10 [ 998.994835][T14354] ? __fget_files+0x2a/0x420 [ 998.994851][T14354] ? __fget_files+0x3a0/0x420 [ 998.994878][T14354] __x64_sys_sendmsg+0x19b/0x260 [ 998.994902][T14354] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 998.994929][T14354] ? rcu_is_watching+0x15/0xb0 [ 998.994947][T14354] ? do_syscall_64+0xbe/0x3b0 [ 998.994965][T14354] do_syscall_64+0xfa/0x3b0 [ 998.994981][T14354] ? lockdep_hardirqs_on+0x9c/0x150 [ 998.994997][T14354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.995012][T14354] ? clear_bhb_loop+0x60/0xb0 [ 998.995029][T14354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.995045][T14354] RIP: 0033:0x7f092118ebe9 [ 998.995061][T14354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 998.995076][T14354] RSP: 002b:00007f092201d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 998.995093][T14354] RAX: ffffffffffffffda RBX: 00007f09213b5fa0 RCX: 00007f092118ebe9 [ 998.995106][T14354] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000005 [ 998.995116][T14354] RBP: 00007f0921211e19 R08: 0000000000000000 R09: 0000000000000000 [ 998.995127][T14354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 998.995136][T14354] R13: 00007f09213b6038 R14: 00007f09213b5fa0 R15: 00007fffb79a3138 [ 998.995154][T14354] [ 999.654623][T14354] team0: Port device dummy0 removed [ 999.678999][T14354] bond0: (slave dummy0): Enslaving as an active interface with an up link