last executing test programs: 4m50.775912791s ago: executing program 0 (id=1825): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000600)={0x0, 0x30b5, 0x0, 0x3, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x65}}}, &(0x7f0000000540)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r7}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@host}) (async) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000a80)={0x0, 0x0, @ioapic={0xdddd0000, 0x3, 0x9, 0x80000000, 0x0, [{0x2, 0x1, 0x2, '\x00', 0x1}, {0xb, 0x1, 0x5, '\x00', 0x4}, {0x5, 0xdd, 0x3, '\x00', 0x3}, {0x3, 0x0, 0x0, '\x00', 0x2}, {0x75, 0x4, 0xe, '\x00', 0x4}, {0xa, 0xd, 0xf3, '\x00', 0x5}, {0x0, 0x6, 0x2, '\x00', 0x8}, {0xff, 0x3, 0xff, '\x00', 0x4}, {0xb3, 0x5, 0x5, '\x00', 0x1}, {0x5, 0x1, 0x9, '\x00', 0x9f}, {0xff, 0x0, 0x6, '\x00', 0x7}, {0x5, 0x35, 0xab, '\x00', 0x2}, {0x9, 0x7, 0x44, '\x00', 0x64}, {0x5, 0x1, 0x2, '\x00', 0x75}, {0x6a, 0x1, 0xff, '\x00', 0x3}, {0xc5, 0xfc, 0x25}, {0x80, 0x4, 0x80, '\x00', 0x20}, {0x2, 0x2, 0x4, '\x00', 0x7}, {0x9, 0x93, 0x4, '\x00', 0x3}, {0x68, 0x7, 0x8, '\x00', 0x9}, {0x7f, 0x6, 0x8, '\x00', 0x6}, {0x0, 0x6, 0x40, '\x00', 0x3c}, {0x6, 0x4, 0xc4, '\x00', 0x3}, {0x6, 0x40, 0x0, '\x00', 0xa}]}}) r8 = dup(r5) syz_ublk_setup_queues(r8, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x181}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92e0, 0x0, 0x0, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x2, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0xffffffff, 0x801f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x10002, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x55, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x1, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) 4m50.148580591s ago: executing program 0 (id=1830): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x6, &(0x7f0000000600)=@raw=[@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xfffc}, @alu={0x7, 0x1, 0x7, 0x2, 0xa}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @exit={0x95, 0x0, 0x0, 0x20000000}], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 4m49.933268036s ago: executing program 0 (id=1831): r0 = syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100020a00000007050202ffff0007058202ff"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) (async) syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e6574"], 0x64}}, 0x0) (async) sendmsg(r1, &(0x7f0000000000)={0x0, 0x46, &(0x7f00000000c0), 0x1}, 0x40000) (async, rerun: 32) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (rerun: 32) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) (async) write$UHID_CREATE2(r2, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) (async) syz_usb_connect$midi(0x5, 0x2b, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000088c0d0c004000010203010902"], 0x0) (async) write$UHID_INPUT2(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x7) r3 = openat$vsock(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000000140)) (async) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x0) fcntl$getflags(r4, 0x1) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0xff00000000000000, 0x0, 0xa1, 0x0, 0x4, r5, &(0x7f0000000200)="1d", 0xfdef, 0x1100}]) 4m41.106980265s ago: executing program 0 (id=1874): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x4004004) (async) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103"], 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x18}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf2511000000180001801400020076657468304643ec4765cab79e0000000c5a4dc1506ce3ff3968294738e676ef8176739c56b26e943b8d72d2886f36c82b7ab3c47a81dfd9a91fe2ae213b1811b02192c96ad9be84ced822ffa52d804ea1747cac19bd31799be4a78883bd1c239783bbffc5d9b8bea2ddd5de1d6a293c849be42c679eeab84f990f78ca6a18125dd1b2091ee1baee6a90c35e7a0499aec32de3dee2d3404e4bd380ce114e4723f2048949e5984d1fd1b9abf72079181363547e02de144952b41bfe65f76dfeb43665e40e0313cc20b0d0aa3a4fb9486ccd61c0efcfe10205bde5e49f8663272f5296"], 0x2c}, 0x1, 0x0, 0x0, 0x4c040}, 0xc000) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4m39.628642122s ago: executing program 0 (id=1885): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="392c000013000347", 0x8}], 0x1) (async) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="392c000013000347", 0x8}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$sock(r3, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@txtime={{0x14}}], 0x14}, 0xc22476731482f0f9) socket(0x10, 0x2, 0x0) (async) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, 0x0, 0x303, 0x4000, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000040)=0x1) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000140)={0x3, 0x9dc5, 0x0, 0x0, 0xc}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="59b20200201a01001400b52103006e657464657673696d3000000000000024000e0000010000000000000d00000000000000ffffffffffffff7fbd0e"], 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x4048844) r8 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000300)={'wg0\x00'}) socket$packet(0x11, 0x2, 0x300) r9 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) fsetxattr$system_posix_acl(r9, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="0200000002000500000000000400050000000000100002000000000020"], 0x24, 0x0) (async) fsetxattr$system_posix_acl(r9, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="0200000002000500000000000400050000000000100002000000000020"], 0x24, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYRES32=r0], 0x0) 4m38.90176575s ago: executing program 0 (id=1889): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_emit_ethernet(0xb6, &(0x7f00000002c0)=ANY=[@ANYBLOB="01a82d00810010008848000000000000000000000800000f0f0000dc7ded59ecc7f4ec32a33147a57e828625e801bb4d85fd9182c80c3c29c6ca206f15fff5f6133816a7991ba3b6efe4063ac6b3486b9805cbbb1fb76449033c8902e00f3c538e641c26df55f0c107ff5cc860e27ad5994e0742236f84936a6d178295c76f32c59f989396a11d445c2a7ec306a9f4b3b6c4a1a7c70b12486929000000000000000000000000000000010100"/182], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket(0x1e, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r1, &(0x7f0000000f40)=""/243, 0xf3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000100)="93d90400", 0x4}, {&(0x7f00000002c0)="c3", 0x1}], 0x2) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000100)=@buf={0x28, &(0x7f00000000c0)="fae15e8c6a78cd8e84c267762d10e8d979fc2f76a5345cf6442091e7510667de69ea1454f9b67991"}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000407d1e383100000000000109022400010000100309040002fe0300000009210000020122050009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r7}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) 4m38.526332937s ago: executing program 32 (id=1889): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_emit_ethernet(0xb6, &(0x7f00000002c0)=ANY=[@ANYBLOB="01a82d00810010008848000000000000000000000800000f0f0000dc7ded59ecc7f4ec32a33147a57e828625e801bb4d85fd9182c80c3c29c6ca206f15fff5f6133816a7991ba3b6efe4063ac6b3486b9805cbbb1fb76449033c8902e00f3c538e641c26df55f0c107ff5cc860e27ad5994e0742236f84936a6d178295c76f32c59f989396a11d445c2a7ec306a9f4b3b6c4a1a7c70b12486929000000000000000000000000000000010100"/182], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket(0x1e, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r1, &(0x7f0000000f40)=""/243, 0xf3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000100)="93d90400", 0x4}, {&(0x7f00000002c0)="c3", 0x1}], 0x2) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000100)=@buf={0x28, &(0x7f00000000c0)="fae15e8c6a78cd8e84c267762d10e8d979fc2f76a5345cf6442091e7510667de69ea1454f9b67991"}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000407d1e383100000000000109022400010000100309040002fe0300000009210000020122050009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r7}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) 3m20.90807347s ago: executing program 5 (id=2377): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 3m20.759799722s ago: executing program 5 (id=2369): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) 3m20.602812138s ago: executing program 5 (id=2370): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x6, &(0x7f0000000600)=@raw=[@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xfffc}, @alu={0x7, 0x1, 0x7, 0x2, 0xa}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @exit], &(0x7f0000000700)='GPL\x00', 0x3010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 3m20.3901205s ago: executing program 5 (id=2373): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x2, 0xe, 0x2, 0x5}]}) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0) r1 = syz_clone(0x8000200, &(0x7f0000000180), 0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="c9edf6bf754eaeadfa91bec4dd285515ac0ad8cc0fa36aa10711a80857a47685ba26618a823e863d24d9638b85761ecbb3c5572460e8d6c53711b4b32ebd979c68a2a76dddc543cffdbc9a8fdbeb3afc99") r2 = syz_open_procfs(r1, &(0x7f0000000180)='auxv\x00') pread64(r2, &(0x7f0000001480)=""/265, 0x109, 0x6) open_tree(r2, &(0x7f0000000000)='./file0\x00', 0x9900) 3m20.330244409s ago: executing program 5 (id=2374): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000980)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000340)) close(r0) r4 = openat$vim2m(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0cc5604, &(0x7f0000000740)={0x1, @pix={0x0, 0xab4, 0x32314752, 0x7, 0x78c, 0x7fffffff, 0xa, 0x8, 0x0, 0x8, 0x2}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xa40, 0x4) recvmmsg(r5, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/221, 0xdd}, 0x5}, {{0x0, 0x0, 0x0}, 0xffffffff}], 0x2, 0x182, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r6, &(0x7f0000000300), 0x0) r7 = socket(0x10, 0x803, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff000000070581020002000705010200020007058202"], 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000680)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r9, {0xffe0}, {0x0, 0xfff1}, {0x7, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x4, 0x101, 0x5, 0x100, 0x0, [{0x2, 0x8514, 0x7, 0x1ff}, {0x401, 0x0, 0x93d, 0x5}, {0x8000, 0x9, 0xffff, 0x8}, {0xb, 0x1, 0x10, 0x3}, {0x2, 0xd, 0xfffffffe, 0x1}, {0x0, 0x3, 0x8, 0x5}]}}]}}]}, 0xa4}}, 0x24040084) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, r10, &(0x7f0000000500)='./file0\x00') sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004041) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3m19.368878146s ago: executing program 5 (id=2380): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffffe, 0x1, {0x6, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0xffffffff, {0x40, 0x0, 0xb, 0xfffc, 0x1, 0x7fff, 0x4, 0x2009a11, 0x4, 0xa000, 0x0, 0x0, 0xffffffffffffffff, 0x505, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000280), 0x40ffff, 0xa6400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000ffffaa550400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0xa, 0x8000000000000000]}}) 3m18.99123353s ago: executing program 33 (id=2380): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffffe, 0x1, {0x6, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0xffffffff, {0x40, 0x0, 0xb, 0xfffc, 0x1, 0x7fff, 0x4, 0x2009a11, 0x4, 0xa000, 0x0, 0x0, 0xffffffffffffffff, 0x505, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000280), 0x40ffff, 0xa6400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000ffffaa550400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0xa, 0x8000000000000000]}}) 41.539634489s ago: executing program 4 (id=3228): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x10001, 0x0) r1 = fsopen(&(0x7f0000000040)='ufs\x00', 0x0) r2 = getpgrp(0xffffffffffffffff) ptrace$pokeuser(0x6, r2, 0x12c, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x48c81) syz_open_dev$mtd(&(0x7f00000001c0), 0x4, 0x501000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', './file0', [{0x20, '/dev/mtd#\x00'}, {0x20, '%'}, {0x20, '[[)-}-\'&!-'}, {0x20, '/dev/bus/usb/00#/00#\x00'}], 0xa, "19d6a5d119c06664a52adc95164066c31f1f209ee91ee53b1d9ee25a6b5d9fbe89a3b97639a8588bffef4425d20e2560c466ece83cb95ec8cbfd920815e497ed48f403bdc896314ab4f3766c9972ddf2feb414c754cb5c4bec49c5"}, 0x94) r5 = openat$dsp1(0xffffff9c, &(0x7f00000002c0), 0x200, 0x0) ioctl$SOUND_PCM_READ_BITS(r5, 0x80045005, &(0x7f0000000300)) write(0xffffffffffffffff, &(0x7f0000000340)="7e94dd1351e3135463ac49fe3891e0caf6f1b5dab04078afec5880f7b458498b002676f269e08dbd4873e0ddcdb7ccecbed3bddf5928d6bacc017a70546be0304414b960446aaef40a285638d4d25693ef2fd7de0b14bec23b0c7d0e4754f4b547ab69b580ebef375fef1ebae175d198e266732eaf48dcb02ea79e30710b25bfc4de75ed3246e82428163297332c94c8ff2c318d886c1fe07c9323279e141532972ca5", 0xa3) r6 = openat$vcs(0xffffff9c, &(0x7f0000000400), 0x480080, 0x0) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000440)={0x2}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @private=0xa010101}}, 0x0, 0x0, 0x2, 0x0, "f74b0da144a5b47033ab2467767f6057dad87ca9853e17a1b1fb14f797a703e004a0b538771de0e09323b675f89476c59a12ac157c489d8ab6dc282ca185b81774f109b49153b7b22a866b888611a49b"}, 0xd8) sendmsg$NFT_BATCH(r6, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5ab}, @NFTA_SET_DESC={0x60, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x5c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x288}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbda6}]}]}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_DELCHAIN={0x88, 0x5, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan1\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x168}, 0x1, 0x0, 0x0, 0x404c800}, 0x0) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f00000007c0)={{0xf96a, 0x2, 0x3, 0x3ff, 0x49afd1b5}, [{0x2, 0x5, 0x1, 0x2}, {0xef, 0x4, 0x10, 0x9}, {0xffffffffffffffff, 0x0, 0xb, 0xf9}, {0x4, 0x92, 0x6, 0xb}, {0x0, 0x7, 0x6b, 0x6}, {0x7, 0xfffffffffffffffc, 0xca, 0x6}]}) sendmsg$nl_xfrm(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@flushpolicy={0x10, 0x1d, 0x200, 0x70bd2a, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x4000001) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r6) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r8, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff00000}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff8000}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc}, 0x20000001) r9 = syz_open_dev$mouse(&(0x7f0000000c00), 0x0, 0x2e401) ioctl$FS_IOC_GETFSUUID(r9, 0x80111500, &(0x7f0000000c40)) r10 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000c80), 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r6) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f0000000f00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x144, r11, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_IE={0xc8, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @measure_req={0x26, 0xbf, {0x9, 0x81, 0x7, "b586a8f0cc858e02fb4e8a3222c754f82ac6564626970e4f9d1ac69999bb3e33cffbb786efd8981d42d4142ed33984a47773497271c01d0f8d6655e34488c9ffca48b89b0a221c61aeab85de2833d5f257fb105303bfe50b4b163d6ca2f6431a807667e5b29bdde872d0a60538a46a9fb0b767f07485534497fdd56fda9290e42e8f62e21d029decf2d288f90c3553f404f7dcaab9f8dd3a586676aceca7d225f13a0514f0d737448a1e46760832026d11bc38d5e1f243d5aa7d3d86"}}]}, @NL80211_ATTR_SSID={0x1d, 0x34, @random="b5abca993942ff24d81f0c0624f944fd8f883ba1fffec6432e"}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "60d4d5435ee19c123646a505"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}]}, 0x144}, 0x1, 0x0, 0x0, 0x40000}, 0x20008031) ioctl$XFS_IOC_DIOINFO(r7, 0x800c581e, &(0x7f0000000f40)) openat$ppp(0xffffff9c, &(0x7f0000000f80), 0x10c80, 0x0) 40.459360788s ago: executing program 4 (id=3234): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000004200010029bd7000fcffffff030100002700010000112233445566778899aabb86dd2c00001c00002c0001d7c35fff73076dcd53aa58fe00"], 0x3c}}, 0x0) r0 = syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x2060024, 0x0, 0x1, 0x0, 0x0) fspick(r0, &(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) pipe(&(0x7f0000000040)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x3a, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40086f52, &(0x7f0000000000)={0x3f, &(0x7f00000001c0)=[{0xa, '\x00', @st={0x4, [{0x1, @svalue=0x6}, {0x3}, {0x0, @uvalue=0x645}, {0x0, @uvalue=0x9}]}, 0x7}]}) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) 39.411098994s ago: executing program 6 (id=3239): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "000000000000000000000000000000000000000000000000000000000000001200"}) 39.347823578s ago: executing program 4 (id=3240): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000000c0)=@nullb, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x2c020600) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \t'], 0x23) close(r3) r4 = syz_io_uring_setup(0xb54, &(0x7f0000000340)={0x0, 0x4e3b, 0x80, 0x2, 0x1de, 0x0, r3}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r5 = io_uring_setup(0x8, &(0x7f0000000100)={0x0, 0x8398, 0x1, 0x2, 0x2, 0x0, r4}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x28, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xd28b, r0, 0x0, 0x1ba8847c99}, 0x38) 38.967712294s ago: executing program 6 (id=3241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) r1 = socket$inet6(0xa, 0x80803, 0x84) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f0000000000)) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000020c0)={0x1, 0x0, [{0x4b564d02}]}) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) (rerun: 64) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000200)=0x1) (async) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffc, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8623, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x3, 0x367}, 0xffffffffffffffff}], 0x1, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4024587b, &(0x7f0000000b00)={{r6, &(0x7f0000000240)='#\x00', 0x801, &(0x7f0000000280)={@align=0x8000, {0x5, 0x73d, 0x100, 0x7}}, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=0x4}, 0x3, &(0x7f0000000a80)=[{0x2, 0x8c4, &(0x7f0000000340)='\x00', &(0x7f0000000380)="1e8088c3909c9bd590f5443409cdc86dba176cbbff097f7e5250bba1c5b505955233f461c555", 0x26, 0x2}, {0x1, 0x40, &(0x7f00000003c0)='$[\'@]/\x00', &(0x7f0000000440)="db9f359782080e863a975c3431f07ab6861dfeaf0f4e89e9b4e5d802741ac0cb84a2777cef40e86ee9b7d2cbefc76c0f3da33dae0c6d247f0c649fdb4692a047e9968d0d9ef7e25541cfcfaf53cd81d5e85c8fbc394ee11ba8c81cb8a68c339076dced48115ec0fef48f82abd74efe52857f3ef2e65e6f3a9fd96b210a271d450d150ae1a942d781b739b128402b49762d32487da4a20394b6a1466bcab8e31f934fb697e99b3c39b34923cbda77ccfd1db2a40f215e978d20912859bb344aadcf1970f7c7537db9354b1f4a6765b84e03ac887a169a200adcb79ab201934e66c6e3f18c671d41b24d", 0xe9, 0x20}, {0x1, 0x4, &(0x7f0000000540)='\x00', &(0x7f0000000700)="c26e132163e11593dfc6502a1815feb07237827163308b15c016acdba8b4652cd298cb8684836e45e85fdcbd0b6b725c22e741b96ba5ebf6d6be29c303b267d8f9c51447b7eb16aace1733224c85ff9049067868b61488990f1a80240e434dc56e41f3b2e9ec3eabd94b5edd30f50dca35e3c618330f3ecd7eec417eaba5f17c9d2368ee167a7b96", 0x88, 0x10}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f0000000c00000000000000fe0f004000000000", @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000f2ff000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r8, 0x0, &(0x7f0000000140)=""/164}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f0000000080)=0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000600)=@x86={0x4, 0x8, 0xc, 0x0, 0x9, 0x10, 0x5, 0xd, 0xe, 0x3, 0x6, 0xd, 0x0, 0x2, 0x612, 0x3, 0x7, 0x71, 0x2, '\x00', 0x7, 0x6}) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) 38.440806542s ago: executing program 1 (id=3243): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x44}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) migrate_pages(0x0, 0x3, 0x0, 0x0) (async) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 38.2988367s ago: executing program 3 (id=3244): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="58000000100039040200"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r2, r2) wait4(r2, 0x0, 0x2, 0x0) r3 = getpgid(0x0) syz_pidfd_open(r3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffac1414000c00028005000100000000003c0002802c0001801400030000000000000000000000ffffe000000214000400fc0200000000000000000000000000000c000280050001000000000008000740000000001c001880080001400000000008000340f300000004000240000000000800084000000000"], 0xb8}, 0x1, 0xfffff000}, 0x0) unshare(0x2a020400) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) read$FUSE(r5, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) copy_file_range(r1, &(0x7f0000000040)=0x7, r1, &(0x7f00000003c0)=0x10000, 0x5, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001f80)=ANY=[@ANYRES32=0x1, @ANYRES16=r6, @ANYBLOB="36d2f30da030b5f83706c9aca9bd8ef78d591b6deaf5dc8730720fd82f78e955a2ec00dd5975a47a1d669672fd1bd2338eb6369a8d12797a4ef4ada800d98dcbab24f4d086169964d3895aca8acc85861b196f88c84e29b8faebd8a4932c59ef1319b0aa03966797ddc5e282ee82da5cccdfcbd58c7b832bc4be93828bca51e922acc2d693f0a5125e88aacfdd48e83d425ac86f4cf741ff78a8718a3997ac28424b121c5c0db2926be109d42d", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000002140)) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)='T01\n', 0x4}], 0x1) r9 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001a00)={0x0, 0x0}, &(0x7f0000001a40)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00'}) r11 = openat$cgroup_ro(r5, &(0x7f0000001a80)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001ac0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000001bc0)=0xe4) sendmmsg$unix(r1, &(0x7f0000001cc0)=[{{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000280)="53eb84a03af545c4e3e4c84d83a4d22dfe5b1371de5885837c9c99141599a5861c3052bda7cd8b793dbc0facffa7de40c584586d3582266d5a4d3512e7c76a923d453f5e4be53cf0e026acde759d4c0da41cc37a2956b4c870bf835f2bbb89a78e1ac1c8fd81e1a5eaa575ce59ed508dd99b2d158fe9a8654e045a3a3d95e310045f0585dca42dc179304f28544906c91816692924b5bcc73a8529a6f527a3c4dd964d757c3417d24f5c2c988125789816c51a421e8e", 0xb6}, {&(0x7f0000000340)="d6df146854a099238eccd882ece1b86a1176b31d71e7c8bbbd0cb4ed9962f82229b7bedd9617ec90e862b6c7d6976c4e0b510f986b965e55e17b1813cc1886801938774aaf3f8e773ae85e077a644ab7ee9490eda7949b73b553a2d9e504b543d0ce299a4fed525a", 0x68}, {&(0x7f0000000500)="818cd075c770a0510f04adfd216e7d73928a80cb564d434ab3ff29bbccac67ffd2ea5cde9ebaedf0019614c71227aa71f1f462fe2b60e44105627130a7d623a92a9b56a81a2df4d3ddc8995645aefff360e75ad48f4ed8abd343cf28c9497c1441e6635a196fb956a728e66ba422d17fd687b6d29327732b6a544f44ca07b3e49ef5b171", 0x84}, {&(0x7f0000000700)="c7ab8ecc3755280de2a057909a88c7710cf5ff1111b467d3cea638f03699efd8dce1f1510ac9755f4c28bb8689059175b08bd04dce4f88bc833e7b8fad1fa9758052596079ed9e83057159b81501f3caba22f9cee940297b31670fbb6d10ae7f2199b402bf47e79bb550b153", 0x6c}, {&(0x7f0000000780)="d9e558d2a44f69d2cd4342253fb0d63c33b3412fc071c61405035989a5d418296880d3cd1f1304f7a37666d5caaf98b86781dfdc6c27726f46cc4339424af0830eb525ca4d68b397c7e56636b846e3f4ad68e6d790708cbb470201af1ed345b341096c834fb587976ba7c1ec6097919ffbd752b28494ac22b7b2976753bda84f82a11e12bb24b1e4811d64127797f93f06e9c8b662f4608d81dd3b53bd2131a47e978334355a5117f00b6381fc7b40fe96caf9468debade17d63b74f9d3f3bf42a1572c501556acefb3cf1567d00b955bacaf99199", 0xd5}, {&(0x7f0000000880)="b2e138fb42ca33484f6aa8f51e3d0f3b140039892c08712e8c4ce09a91e4ae5a6c99c04aef2444efc2e8763a4d254d13bf1ea2326abdc82989f6573f9a600c7686badca51d61da8dfa114a581c515a28cbccdaf0f5f3df6a3901eb692c74f57f10b7437f5c4bc8d02fb1301e6be4625bcd4d46a884f9388514fc5db965c11d0739a1ca6bebfb17b11d47b8d32aea39e03fc98fd225e643e505510d1a807024040afd3241b7b6e4d4e9aed77b6d504114228a9cf346f27895", 0xb8}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="04f4b34ad39599c5db591e9cbb68cc352f1d0677f9f8073a5d58215fbf0a47f9b09cab1b60b9feefc036b50b63903d46ce76967d774816e7d8c089e555b0e8dced9e597cd2f46700ba0c2e36f74e39b0e9fbb3ada79f89fc0f11830529b1826cfbebd0b89038c00dc4613c8da7c395acf598af9ce9e6fea5e31b", 0x7a}], 0x8, &(0x7f0000002080)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=r8, @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="670000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="18000000e7ffffff00000000", @ANYRES32=r8, @ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="340000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r11, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="180000000100000002000000", @ANYRES32=r8, @ANYRES8=r10, @ANYRES32=r7, @ANYRES16=r9, @ANYRESHEX=r10, @ANYRES32=r12, @ANYRES32=r7], 0xac, 0x20000010}}], 0x1, 0x0) write$binfmt_misc(r5, &(0x7f00000005c0)="46667313d38ebf1dafb8bbe1cb19e2c41cb5bbeade2ffe9f7d536013d1486d4ac9c206196656db2554f57346e8129269", 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000001e80)=ANY=[@ANYBLOB="18020000ff0300e313dd6302c888a3007f00000000000000936395bc75333c7f60b65ec0d0bcbf1412468c2259276a35824c8f653e2adf275792a7a914b9d8f1db289cfe5c4fbc416886d65b3d3ffee548d2243edb779007bf22a3de3bdd599b2a759bddc3e4b6b22a1ab12d925f21143e29b7b3a5a4894a2810f6dc0177caca8e394d9eb071e6f19a07bb3ab970f056b0275e216c48e4762848e1e07f04c9bfcfb69476555d67f11124b063fd575ef1776140b5579aca7705e0b933d6abfeaadb6a8701223340710d7f2cd87d"], &(0x7f00000005c0)='GPL\x00', 0x9, 0xd1, &(0x7f0000000600)=""/209, 0x40f00, 0xd7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 37.340617798s ago: executing program 1 (id=3247): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) r1 = syz_io_uring_setup(0xcfd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000240)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) sendmsg$netlink(r5, &(0x7f0000005a00)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000480)={0x120, 0x1f, 0x100, 0x70bd29, 0x25dfdbfb, "", [@nested={0x10f, 0x159, 0x0, 0x1, [@typed={0x8, 0x77, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x8d, 0x0, 0x0, @ipv4=@broadcast}, @generic="56dc9031416a27c4da778a9ab8e9edcebe308841341d33089c37a1824641bda288a00a6c50e236f9234c608c61a16469f2dac020f3f26400c7099add7682db854dcc36884a698964c635a2afba6aeb2179b3f2f1cdcb7f2cea7a7c05be91266220c63454bb392fd2fde083f8141ea29a5731a277c9e7a67f5f7b7f069641cccbefcc9e10974ebf2e370e526253681d356ad43361d63ffe4288152a93c5ab875086e6f915ee22dab9e0a13337b6c812d97e0e8c9bc8a0ee31a389c49bed91c3d2da3c42ba8910b4ea616ac81b3e4c3843c08842d1fd19928497a32e69c7aff439f909d144ba43cbb34d3f8738e54e89de66332da6ac05287cf6eb5e"]}]}, 0x120}, {&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="00001c4eb426ddc2b39524e02975de2d381b9226176715d487fca74b5766e7d473afbdbb35b6741f341c0f42b0980bcbf47a8dabe4043c03f4d5a04ac7302b1b0687d1ac9371ef3fef18e2b23c1a8d50308d8412b25a1f87d2ac"], 0x1d0}, {&(0x7f00000007c0)={0x10, 0x37, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x10}, {&(0x7f0000000800)={0x1e0, 0x32, 0x800, 0x70bd2d, 0x25dfdbff, "", [@nested={0xd0, 0x1b, 0x0, 0x1, [@generic="326c17439dab472a1886344b45", @typed={0x8, 0x38, 0x0, 0x0, @u32=0x9}, @generic="6d3c5d71c41af3a0c3692f9b79369eea15c9ca0cbc7f3efe0f528bc8ccd2dd23b7b7ece1ca72ebe2e1712f00987f9cf0ef3a64dc99196a577efb3b31574923e47627a8649de1832c141d17b7306ade563dab019394141329b0c19b465a5004a0f69c977e18317b962c093327fc654461eae607824c70c4d990021d0c1491a3f395e4eefecfc2acb31f5dfc008a7d7d5b7ef80304e0723db40922c210d7d8eb3ee917dbbbf4aa6d4a32c7d7095513dc2509da8231f4eb64"]}, @nested={0xeb, 0x5c, 0x0, 0x1, [@nested={0x4, 0x47}, @generic="7dcbc2ad283ca6e72de07daf0e4834f966dc08cb97f3581dfc8730a1ea50cd90e670de06d7a6f302b99cf1e2ea1ff30db0392cc469eb2259ae70a46abb403f00f73d0ed163ed53060b519cd04022b870e43f0bd6f3ecd181e03a", @generic="e606be8a4046c15f4fc4e1ded82617de0da4a374f2f8c6d3c147fab2bb375c2d013dd0f32b0a55017621cf7e0f77606b1657f9830f5750931bb689949f2f978493fb0be5cddb5b535c2f0b33bd104809e70373806861345433d5caefc46103c3139d0e6b01d5b204b9df9d2d7fb5bc1b05f647beb5d54f21c8bc75e8409edc3e6898c6a727ea1e4e70"]}, @typed={0x14, 0xb3, 0x0, 0x0, @ipv6=@private0}]}, 0x1e0}], 0x4, &(0x7f0000005940)=[@rights={{0x18, 0x1, 0x1, [r1, r0, r1]}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r1, r0, r0, 0xffffffffffffffff, r6]}}], 0x88, 0x40000}, 0x20044050) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "f1ea1d682a874a1d", "05daedd9443185c28acd9f4af8af1a94", "32b3e1bb", "e4ac6c17fc188934"}, 0x28) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r7, 0x100000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) syz_usb_control_io$uac2(r9, 0x0, 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r10, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x0, 0x0}], 0x1}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r11, 0x0, 0xffffffff004) 36.619951319s ago: executing program 2 (id=3249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x7b72, 0x8, 0x0, 0x17b}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcbc0, 0x8000, 0x1, 0x297}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x721b, 0x8, 0x2, 0x1ef}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88d7, 0x80000, 0x1, 0xc3}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x75db, 0x8, 0x2, 0x32f}}], 0x4, &(0x7f00000019c0)={0x2e, 0x58, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, 0x0, '\x00', {0x9, 0x19e, 0x0, &(0x7f00000009c0)=@buf_max_buf="04acc762f1ae7e0404356bb0c613345846188945b52e84075a3369915132f2cbf7bf155e710b569a90c87a77cc0c40922d7b6bc8c4af93295b8bf161f787b1c0e20bd9981c3994b7e5e80a3ef25687bd47929e3f2007e20f6429f668a8c06288ba79b531191f9580504ed6508b4cb611d767932a2687300702b4595d9fb2c7d95b40fe21a9e4256fb53e8d11f91a25ab044c74f3dafb0145e1adc72d7fa2d6c0daf731fd18cddd43bd98d0df95b5f6f3a40db93eefdf6984bce788c8e56fa881cc956ebd03c85a6354a9e9bc5f137cd4355f697e8b7d90f9d349b78d4e4c91ecaf5e54dba0607ff85b414acb6c7174534aa2cf7ffab0415a0938953a2a10006b1b5e93faadf8e178a068eb6f4fe65ec0fefcbc7abc68dbf4af773c6f1c50045ee56be33043edd35730cd8109aa4c339caf217523082984078d6971fca85ee75a60296f3a6ac66cf66407f06b14c05312547d337dd9abfe2457e885fc3570e5d6b5163002c3c52ea0988e98261e009d1df4dbad7bfa6081e2a753111262da698c71e22ff942fda2c4cb618b8273529549a1849df53c0c1bdd892a1ebbf3fee29df8ffebb62a5aca1161c2878998df22c1e4330391b60fd1521f8d2118ee6168c5f945ac8e60af8861fb8c480865521151d7e7816eac0a27f0d160b478401a4243a8cc8bbd255a3a95de74d477e166b03cd712854db81bcf4fca4ecad3ae4f8ddf012ce12e51586a38765a4a4a27bc354208cf6144f25ac7db69ca81f5d4eafd81b48024317aadafb46e6c6760fc559b205430c407b62bf0916f7f8b130bb5fe1f02df2d421376a9f234915805dd39bad3a1994bd9d70e5f35bfda0f17dac53857bf1be0252c57b00259c3994c0f6ac82bee3f5be63048cc89d4021fe95810cb95dc0a391f8650fa12ab22cade1fa26d9707dcabf4a8d626fe50bdc38309241278557a1db92fd1c301c5936811117abb2930973e0bbe0c692f3a572a2f4afb67dd3a99651cb14b9022a1f6ddac65a5723f2d8c6fd21691b78b1655e9e8ba2c2c6c91d5082a52d27add2e5e71ae9266c5478f1dc066b9269f1b43a6a1531ab8268b34080f9e1a965e8ce89b2d6089a44231ecba6ad10ebbdc2620ff222fb9cf3d01d8778d650d4cbd1c855287e10950be33e11dfeb0ae0ba682fd26f9b5ac8e414b7ea90b646736244bd2b94bf7857f0848c1d25f28f354d1b32acacc8216dda5d5323494f9d1b987ff9daa4a5ffe398537547b969c8e074b5f799633b59d13c9ae97d16f9fd3049ffd56550bc9368cac7bb7512e42490a57887c1d1f733c06fdcdc0771715ba14cc8b064028d7445d3766f589f7f6642df51be94b909e81f7517140619902d0edac02bdd27e482fe8185bb8e8145f7c332e3875b3084087cf32e4225c86b2cfb95683eda2d75c3a4f76cdf12ecb45366eaf04074d1a64ac7504bd477bd3eac0843801deca303a323d790abe379ac5aeece87e1a09b31cc1f16a3b779949cb81971dd8b369078882ca2114e959e53970353d8e7c3acac7fb4c9467ff6cdb240ae9a185f6d19ddb1c5dca185e04f7c37f3686ee9a9d8df947125f0a75a301b1805d8c470d7514f43e4b20ada5947986539995f0c91fa01e49fbba3ab779ac104a3dbcbacce1f62f0a38331edf5cd926cbc3960f7de169177f35abaf5be59441b8f3fd8c1ad423fcadf7d99e670c50ef241a4a8b661558039c7cb5f682d6ae244e14304fdf82979f094a233fb09c47ca4a9d768105dcbcd659fb7ef466f2089baf7746d95b409127e2f46639c1ce512e88f6b7a740b025e1804cc8cc480ee7fa16fa6f7598705f2bdf679f3554868692f62ab3725908fa7a36991ab4a423544c113e0e8a74f8b519c1343197c8e66b605d3923332d9c51c2b5ae37b2eaf283380bea126cedede85d2ec0942484c0d2944baa05e42b9725b79343e8fe216ea31159dec36e89c7fd169e89444cc4e074106d5d84ac4730a5cdc47c4df82432f986d310b51a435000a96f082f9b57b6295b1bf1bfb9e0c597a3be4c84b2c7ebc0405def0f68c8c9d9ee97887e6c81bb0d879589a62856e65739da52cd0bd3fb0522a8ab19e836b074563c21b3097119723d2b9974aae5133734b3d2f9ba111f3c1acfea9accd711a6f26306773546943451a607ffc2f67ab4cd2ddfc227b1d8e40c435582bde76987693eb8b3bd5540054c280c1659c1280fe02331d8df96ee88577fa32c7045d7512a634ef5d39cb983d17f3f76833d7d383ce8f31854f44e993b19b3bc10d504f88c122c7c28e0b538baa6bbef1ab9075294d2327ddb9f58aa931883abe3af5bd257f40c4da736bc3451fe425cde773de3bf0809c5bbe50eabf5a78a3537164fb82798e59137510a6c69bb109f32540e18fbf5036f2e0833da3345bc76b68b7ea1b3008865e2b6bfaf4077e3dda90556c22001f692f310836c8ee522d1b39d6adb9584faff72a04c8159bb3d9be208d6cebd52f75c6a821e29bd7ae753408bdb43426de6f0d816ea4607de65f918ae402825280fb5d31adad6ec44a3931a961a7761c5077e293301c708268ee1e8d3406c23e6f3ae369404645361595bf6db59c7182b4670897cdeb8d3f4f624324c01aeab26e1435cc5a5553348c518d1c4cea41a314f2dd922467d2231d15afdc1fbe579d9daf8c436c7b04eb51531878b183332fc7267d26125eaa0beccf605eca9d608f10fc0f2cb8b0845900ccdd1d62d56a5f33aa18da2506e082ecabe62d467116dd6cf977b29d5427754ce7c8c203c6b46bc8927f3efdbc825dd4aa1a14eb03534f6e987865159d1081e3b516771036c61aa454257d38493d9eb6acf18e442389f12d2f224a599d3556a7158de33087f3dc58193b320ab7a45ae3aa13406237e018ef298b8c3d72ba3f6edcec2e1882fbfaea67c378e28626b75eacbe900ed5351b392135224392370b33f7617984796a94599fd204f064190edd5034009138e7aeb240182a8b8f987bd8fc3fb43f2f412b19e168af0f9f6fb3a48870f4c789cd2faf376deb20652c077b48f4266486523318c984d053c14d85acb6ff2af9af95763d451fec0ea7c6a43ea3c3bdd3dd43957e7e25dac4e5c878407900b4e0e6a3f980c8e96dc3b8c88bcebdb9367cdf3239a52f777316190e93343e9369473d13e793965c64b996fe1a9892e50fc20082a404490be4385abcf4b7b19c8a455c2746a6f0128667e7a3b6421a2e5679c6ad084a309442e11038e6509a3acec4c04754035b09be7fbdfbf0224f12db2a7d67f8af4d54f777318a386d496d318a3a930b540998cbafab6488e469e6954db83d84cb305b39fa693dfae4e227eed6605e9a1a104803e79c4bc7841168f1c4c56fc61dcfd186ceebfd7edb6a7713b6b181c2166713165c6e53b9fcd621e29c4d962da791caae07a0e794f589c6282d36c4b17e0c32c5269907532b6c24a4b77b3249ed45ecedc79bd7160681d893d8ce9fa1a9a43a7020181a44d9dd854daf3289b8ec5e6b1dc595dbe5a17e89c8f4c46ccfe92172e3fe1b045fe64ca744fc8a5cdb0e10cc7ec363a2dad9f8e1af9d328f93901375c494bca3bdc194ceff6fbfab6ae0bfda379d587a9062284764c790a409f1c1f331a7089575de296c3e95892c0fe67289f77af21bd0aa3c53fdee8dccd68117b26a9497b37ded73b07d784055375f8986d104ed4a2b25d5f82ab8c7b95aa3ed7aa4d72fbfd50062d55876da4cb6a3455252bb9be72f719751db29b4de5eefa94c1f09891b6c4bb7888fa6a2ac6c29d9eff5ac8325b266bb7630c7d158cf4eecb41e404ebc2b8c56f34aa197db2e41400133393fa7d4a35f7cb5edaf29e499f560686d5007b002463607c329e9a99312534a0f9fdbcedd4ac25cd76c6238f05a499b82f1ad572e95a4fe5f470785996e01d6a54ba0b106e577a0f482009a202dfcdb169a17e18eadb6c58ce0c7fe01c5fe3aba5d24e426c249afd613a92c23da1d9df055d4494e1b5eb43409ca49396945095aa59bc9b46182b36ba960cfa642e7439e691ca4638f3c260e6121c11f9d0beab5418c7b2f8a0df5c99f970c27620feec8b8938c45442c71f155cff39b48305bc50006106f4b21aa18ce2e4001bd03d200b79c197e84727c4891bd7d9c34a0c34083b188a5b8e912ca39be0075c2959fa1010c0a2c4d40b3f8f55623ffaa16ae877e39911da445d9ab0021e54e8943f8cf74f72bf61c51318b5d6547a47b8c3f545aded31a7959fcb954ebf010a638afb86349d8a4ff3d6e9a6d9a09cabb08414c7a86a2e0e4cdc23514087581dc23286fbc9ecc1d3b8a3f2c36dbede00d0bc466fda02e6357319f841c9271a24c361e52d4a20ec1bc1fe8e26fcc958a9ef7e333dc3b75b7d7e45378a0d9a37aac5d33146ef582165bb68f4dc8747ed062b1aaa73133e6ad553ed9588e04c1e485619097590f4e1ffe896db5750a87cbf1a99d373348f5a48cb8f402a56fc1b58e89d7645a75e439cb79b72344de14c29bb47ed41c884645d28250fa05683e954eaf355b03f1aefc663661531f610d9a0c93aa7ceb3c31e01478098ba2500a017a5eedce374349f3f30ccca3e7b6d52aa0dc0f84b6a478c347e77af669ac54e0f08a85c87fc71a8aa2f900af65c115d9f09bd522de15b0841b3ff53ff33ce8e68ed9488ff89602f9e42f6f6a104259c5830f6c680781421b99e177de461b75e3507569247eadb264a95f04b96db62594058645be3e937f498418e75544a8ccefd42a7ad4e1235a1b5cd633aa802663117c73028eb5100c678e0cab114e52949cdd4dd834bf22b284641acbba208c1687d2c01bfdcc4d361059ae5f715ea13e61e99f99f31b7c97110330ed0ddcfe993afa87d47d00243a45cc8ee56094147457a9df42d7e0c0fbd571f880b22bd687dba1295486e78f2138fa6c0ff0fa1b987fa9eb5c53107771860c96696f5ba5eb4241c613fdd447b285259d258ad237c8822e72ecc720c012fd35c4301ca3e7388981c3db1989f86cd373b5b33a5d7646e87f803ce63ee831fdd4df28fa96173c830d3d50c6c989b3b74fbdda6f8bf590d3198bded16f33775e7cdb7cc5438dcfe16f8fc9c3f351c82bbe961869a56dd6cbcca53ea90807387e76f2a354ef5e7387e81566f55b84043ed92f1b57a305a84f44a4e2bf1d813d37f1cd28d1ed2c429198a1a4d5e4ed8609c603aed84ca23e52cdf112e0afcb0ef2204280cf4de42bcd59ccd3662e81346ef566b98dd7806945883dac3362923a85fc4bccadd502e4e7195486740bc77e41045b511eb6edcb1d3d31c0bd96259f1fb26811750b71d79a1937229fac162bfe3f00a91ecf1d6b69dc192a7e73b8818e0eecc07a58e70a5436ad47094f6715e57f86ce4574e28c8738c72eef0b28f4c309d518d29b5b00437c1a0d281260c85675ee6adb4a9028a6d1fb0b980a037da6c40c61c226612031bf29008585d7f6cf45e7c1d671987ec07bf558498b1dec7b24bf357e2acb37c767a1d81cceb89b53be7c32a681c835025130a55f9b6e8de86e38892ba9fccb3b4ea10cfa306facc719799b7efd530f931701c6237397422f68dabd0c9e623633d903af41741f14930b07a7c5781ad40fe7d491c48988ac8145390139b44a91e5b88abc61536ef9c892a75d0b0079afc224e19945a6ce5bd26bc00581aacd75addd493f8d0acc35f8be11e9601639d3c139a33a3e1c33272f3f2c0e760d585865f1a0862a92ae0e5e0ce44d648edd4eb423897537ca4b3c97edf048fa2bfcce2db08d4e066e3c51ef2f09d602fe33daaa2ed87"}}, &(0x7f0000001a40)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000340)={"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"}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x890601920000, 0x140000000000000, 0x1, 0x3, 0x1, 0x0, 0x0, 0xfffffffffffff806, 0x7ff, 0x9, 0x3, 0x10002, 0x1000000000007, 0x2, 0x1, 0x8], 0x0, 0x4fb40}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 36.561158039s ago: executing program 6 (id=3250): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x3, 0x5, 0x4005, 0x80000000, 0x0, 0x45, 0xfffffffffffffffd, 0x8000000000bdb], 0xd5dd0000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0xfd7f0000) 36.313632939s ago: executing program 6 (id=3251): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x1, 0x5, 0x80008000, 0x4, 0x884, 0xef2, 0xc}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40800, 0x0) read$FUSE(r1, &(0x7f0000006540)={0x2020}, 0xfffffce2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc04c565d, &(0x7f00000011c0)=@multiplanar_userptr={0x6, 0x9, 0x4, 0x0, 0xb9b, {}, {0x3, 0x0, 0xff, 0x4, 0x0, 0x5, "a00200ad"}, 0xd0d0, 0x2, {&(0x7f0000001140)=[{0x9, 0x0, {}, 0xfffffff7}, {0x8000, 0x0, {&(0x7f0000000100)}, 0x3ff}]}, 0x3, 0x0, r1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x25, "5c8309006ca6622547afb89e1e00ff000002000000335b021f5500"/37}}) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) (async) close(0x3) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/32, 0x20}], 0x2) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x200000) 35.988719805s ago: executing program 4 (id=3252): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003b79a30000000000000703000000feffff720af0fff8ffffff7ba4f0ff0000000071103f000000000c1d440500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 35.821160562s ago: executing program 6 (id=3253): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') r1 = socket$unix(0x1, 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x11, 0x7) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000180)=0x1) 35.769680718s ago: executing program 2 (id=3254): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=ANY=[@ANYBLOB="a801000016000104fdffffff00000000fc0100000000000000000000000000012001000000000000000000000000000200040000000000000000802000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000a000000102000000033000000ffffffff0000000000000000000000000400000000000000feffffffffffffff050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000020000000000000000f1ffffffffffff02000000feffffff0000000000000000900000000000000008000000fdffffff04001b0014000d00"], 0x1a8}}, 0x4808) 35.55952168s ago: executing program 2 (id=3255): syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) eventfd2(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48004}, 0x808) socket$inet6(0xa, 0x2, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000002000)={0x1, 0x0, [{0x6e0, 0x0, 0x200}]}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x4000000000006, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x32}, 0xa, @in6=@empty, 0x6, 0x4, 0x2}]}]}, 0xfc}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010001fff03000000fdfffeff00000000", @ANYRES32=0x0, @ANYBLOB="0000000040cc0300380012800b00010067656e657665000028000280140007000000000000000000000000000000000105000c21ffffffff050009000100000008000a00", @ANYRES32=r2], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 35.489902106s ago: executing program 4 (id=3256): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e86dd6008120000242b0000000000000000000000ffffac1414bbfe800000000000000097ff00000000aa3a02020100"], 0x0) 35.477917477s ago: executing program 6 (id=3257): syz_usb_connect$midi(0x2, 0x40, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4fa, 0x4201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x1, 0x5e, 0xb0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x9, [], [{{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0xf, 0xd, {0x5, 0x25, 0x1, 0x1, "cb"}}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x38, 0xbe, 0x1, {0x5, 0x25, 0x1, 0x1, "fd"}}}]}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x0, 0x0}, {0x17, &(0x7f0000000380)=@string={0x17, 0x3, "5c0894dae0a4d6733f3bda38c53ee4edea9a55d201"}}]}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000000), 0x65) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x4, 0xbf, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad, 0x3, 0x1, 0x2f, 0x40, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x47}, [@mixer_unit={0xa, 0x24, 0x4, 0x1, 0x10, "f48cad5785"}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x1, 'r'}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x4, 0x4, [0x0, 0x3, 0x8, 0x7], 0x8}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x5, 0x6, [0x6, 0x2, 0x8, 0x6, 0x4, 0xa], 0x7}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x3, 0x2, [0x7, 0x2], 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x6, 0xf, 0x6, "b7e3ea1b7c10de"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x20, 0x1, 0x5, {0x7, 0x25, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x6, 0x44, {0x7, 0x25, 0x1, 0xc, 0xf, 0x3ff}}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x311, 0xc4, 0xb5, 0x2, 0xff, 0xa0}, 0x51, &(0x7f0000000780)={0x5, 0xf, 0x51, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x81, 0xdc, 0x7, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "6cb4392a77df6a3e8bb6162bcca8e955"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0xe, 0xa}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x1, 0x4}, @wireless={0xb, 0x10, 0x1, 0x6, 0x90, 0x2, 0x1e, 0xb6d, 0x80}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x4694, 0xf011, 0x8, [0xff0000, 0x3f00]}]}, 0x4, [{0xed, &(0x7f0000000440)=@string={0xed, 0x3, "ce1e40047cf228fb7ee02909d19bef6d4cb8437746a49280fffeb8b9404ceba8582680fe1ebf5dc13425162b90d8ab69f0ca456685754bc1e00ed1ce796ecdde1a87f4c540a7ca376610d6becd00dbcd78ce2bb85fb9bcd8e2703bc90d86f487373d5db35771bed221b4b27941870f34e562829f79fc4a6c628a0bbd08328343804e29ca666112546c34f1fae5313a7e48bfe9518f0ced55e7876acc35de03fff9c68bac12abbd8cce7848eb4b943b4a13cd1afedab2b10938f4c40571fa0d80b93442962eac6a9f804682714e0560da47f34e032d0e9273fe3cbf08e10919c3f16a79b60d8314585f2ce6"}}, {0x71, &(0x7f00000003c0)=ANY=[@ANYBLOB="7103866105226a3df7eeff7f0000000000007f2f7cb6095ba275cd4d9838ebed93933dc0468dbcc5964c5348cc2eb7bcc8ea49333ad415625386314c20e114b7c5cf3c8f8990693ca2ffe68a35150d489994caed0462e39d3a0a92"]}, {0x9f, &(0x7f00000005c0)=@string={0x9f, 0x3, "984ba9ea9c0f042f2fa1d59f43a69e3059109149c2ba30ed2a38d617939fbfee91ccc39cf75ffec4d5f1a6ae96d8f18af19350504d27cdc0aa04749d625ea23b1c2fba59aeab564b78eb9c845e8fcb7d1d0ab95ae60464b27613e402f8459612b38a9d0ad078a768090c1aa778184304e5e7b60e7c5cfb124412826a4015ca7cac35caa305bf7c4bc74f600e5104d4cd111667dc7c68888dc1c6e5081e"}}, {0x4b, &(0x7f0000000680)=@string={0x4b, 0x3, "523723700e918c8614daf12668d9b7b1588c0867aba2b6668bc7039b55486a6b12ee9d642cb658de0505f94909d03c9ca54f11890f30f524fa9bd8416bdd78db7661de9a332ef77d11"}}]}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=ANY=[@ANYBLOB="3000000041000701fefffffffeffffff017c0000040042800c00018006000600060600000800028008001780040007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x1c, r2, 0x303, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x1c}}, 0x40000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0xfe, 0x7fff7ffc}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x2}, 0xfe7c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c080) 35.093664657s ago: executing program 4 (id=3258): socket$kcm(0x29, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x8824) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) close(r3) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x5840400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0xc008744c, &(0x7f0000000180)) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000040)=0xb) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000640)=0x10) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x20) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000002800)={0x2020}, 0x2020) 35.069198664s ago: executing program 3 (id=3259): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xd4839000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x1) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, &(0x7f00000002c0)) 34.838962917s ago: executing program 2 (id=3260): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private2, 0x6}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000240)={r2, 0x95}, 0x8) r3 = open(&(0x7f0000000400)='./file1\x00', 0x1, 0x0) symlink(&(0x7f00000004c0)='.\x00', &(0x7f0000000380)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(r3, &(0x7f0000000100)='./file1/file3\x00', 0x64) openat$sndtimer(0xffffff9c, &(0x7f0000000140), 0x18440) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') readv(r4, &(0x7f0000000100)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x9, 0x0, @empty, @private1, 0x1, 0x17, 0x3d, 0x8}}) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e, r7, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xf2, 0x0, 0xfffffffffffffffa}, {}, 0x81, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x2, 0xb7, 0x2, 0xfffffffe}}, 0xffffffffffffff31) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) 34.693500032s ago: executing program 1 (id=3261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000700)=""/4109, 0x100d}, {&(0x7f0000000380)=""/73, 0x49}], 0x2) open(&(0x7f0000000080)='./file0\x00', 0x420000, 0x109) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)={{0x14, 0x10, 0x4, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r2 = syz_open_dev$vim2m(&(0x7f0000000400), 0xb04e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x2, @discrete={0x2, 0x40}}) r3 = syz_usb_connect(0x4, 0x4e, &(0x7f0000000040)=ANY=[@ANYRES8=r0], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0xe4, &(0x7f0000000140)=@string={0xe4, 0x3, "de1d4f48aeea1adcbd62c202346401612948c87b42d6dfd28179787e8b81e0ccc6cfe26997acc735cbd51e29ab4589b2c2fb59b5144576cde3fc239ca915d6ed96122856c41459a2d2203b6f3c11904c88042a76666ecefe98fa5493c486905e2e05730dc0563a36005379b5431ef582a5680e86a90fa2ca1c58e373104c732ea8989f8813bbbcc022b75def7af9367f9cfb6ab3b6801ce8ebaca514ff67410b90d64888f72fdb9e51480ce3bc13d5e002cc7a016796e31c12a269d61316169b823dfb5c8fd485cab96e437dc3e9cb603d2688c169ac0737e07dca7b28f6afa50c25"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x430}}]}) syz_usb_ep_write(r3, 0x88, 0x0, 0x0) 34.678773295s ago: executing program 3 (id=3262): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x6, &(0x7f0000000600)=@raw=[@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xfffc}, @alu={0x7, 0x1, 0x7, 0x2, 0xa}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @exit], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0xfffd, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 34.503200599s ago: executing program 3 (id=3263): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) 34.159392512s ago: executing program 3 (id=3264): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904"], 0x0) (async) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0, 0x800) getsockname$packet(r0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r1, 0x1, 0x6, @remote}, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) 33.705829457s ago: executing program 2 (id=3265): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x44}}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xff) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) 33.436762015s ago: executing program 1 (id=3266): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=ANY=[@ANYBLOB="a801000016000104fdffffff00000000fc0100000000000000000000000000012001000000000000000000000000000200040000000000000000802000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000018000000102000000033000000ffffffff0000000000000000000000000400000000000000feffffffffffffff050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000020000000000000000f1ffffffffffff02000000feffffff0000000000000000900000000000000008000000fdffffff04001b0014000d00"], 0x1a8}}, 0x4808) 33.218007201s ago: executing program 2 (id=3267): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000000)=0x1, 0xfffffffffffffc84) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2400c042) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x4000000000, 0xf1, 0x0, 0x3, 0x5, 0x4005, 0x80000000, 0x9, 0x45, 0xfffffffffffffffd, 0x8000000000bdb], 0xd5dd0000, 0x1c6017}) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r5, @ANYRES8=r3, @ANYBLOB="358d", @ANYRES8=r0, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX=r7, @ANYRES8=r6, @ANYRES8=r1], 0x24}}, 0x8070) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x5840400, 0x0, 0x0, 0x0, 0x0, 0x0) 33.188842341s ago: executing program 1 (id=3268): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e86dd6008120000242b0000000000000000000000ffffac1414bbfe8000000000000000f4ff00000000aa3a02020100"], 0x0) 32.353784905s ago: executing program 1 (id=3269): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) r1 = epoll_create1(0x80000) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r3, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000ab739d40e38e83a106e8b25bc0001c0001ff060001000220000008000300ac141400000006000e00000094b8e58532778b0c6f0063c7e377c593ef5aaec09dd467dd1ae22da638ac36e40eb8baa5cdb28d7287bc1511733657b9b21502fce540f10b6494cb638c772290c4ea180ccc8105525ddf911309b1bb2569dad0aa38a189ef71fd6da6884d88eeef08de0359563937f92f973f2d71c96c69c9f44afa707ff2ff17a2b414e88f631809"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdb93b201}, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$netlink(0x10, 0x3, 0x5) bind$netlink(r8, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff}, 0xc) (async, rerun: 64) connect$netlink(r8, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x8000000}, 0xc) (rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r6) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="110e61a53806000000bffd9ff55b0ee0a800e30000000800030000000000"], 0x24}}, 0x0) (async) r10 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, &(0x7f0000000140)=0x1) (async) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x440}, {r0, 0x2031}, {r5, 0x2001}, {r8, 0x1000}, {0xffffffffffffffff, 0x5406}], 0x5, 0x0, 0x0, 0x26) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r10, 0x0) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, &(0x7f0000000000)=0x4000) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r2, &(0x7f0000000280)={0xa0002012}) (async) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r11, &(0x7f0000000600)=[{}], 0x1, 0x1ff, 0x0, 0x0) 32.21171875s ago: executing program 3 (id=3270): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x0, {{0xa, 0x4e22, 0x4001000, @mcast1, 0x3}}, {{0xa, 0x4e23, 0x5, @loopback, 0xae43}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x5, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfff0, 0x17}, @generic={0x7a, 0xa, 0x0, 0xfffffff0, 0x85ff}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 34 (id=3257): syz_usb_connect$midi(0x2, 0x40, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4fa, 0x4201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x1, 0x5e, 0xb0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x9, [], [{{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0xf, 0xd, {0x5, 0x25, 0x1, 0x1, "cb"}}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x38, 0xbe, 0x1, {0x5, 0x25, 0x1, 0x1, "fd"}}}]}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x0, 0x0}, {0x17, &(0x7f0000000380)=@string={0x17, 0x3, "5c0894dae0a4d6733f3bda38c53ee4edea9a55d201"}}]}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000000), 0x65) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x4, 0xbf, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad, 0x3, 0x1, 0x2f, 0x40, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x47}, [@mixer_unit={0xa, 0x24, 0x4, 0x1, 0x10, "f48cad5785"}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x1, 'r'}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x4, 0x4, [0x0, 0x3, 0x8, 0x7], 0x8}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x5, 0x6, [0x6, 0x2, 0x8, 0x6, 0x4, 0xa], 0x7}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x3, 0x2, [0x7, 0x2], 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x6, 0xf, 0x6, "b7e3ea1b7c10de"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x20, 0x1, 0x5, {0x7, 0x25, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x6, 0x44, {0x7, 0x25, 0x1, 0xc, 0xf, 0x3ff}}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x311, 0xc4, 0xb5, 0x2, 0xff, 0xa0}, 0x51, &(0x7f0000000780)={0x5, 0xf, 0x51, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x81, 0xdc, 0x7, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "6cb4392a77df6a3e8bb6162bcca8e955"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0xe, 0xa}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x1, 0x4}, @wireless={0xb, 0x10, 0x1, 0x6, 0x90, 0x2, 0x1e, 0xb6d, 0x80}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x4694, 0xf011, 0x8, [0xff0000, 0x3f00]}]}, 0x4, [{0xed, &(0x7f0000000440)=@string={0xed, 0x3, "ce1e40047cf228fb7ee02909d19bef6d4cb8437746a49280fffeb8b9404ceba8582680fe1ebf5dc13425162b90d8ab69f0ca456685754bc1e00ed1ce796ecdde1a87f4c540a7ca376610d6becd00dbcd78ce2bb85fb9bcd8e2703bc90d86f487373d5db35771bed221b4b27941870f34e562829f79fc4a6c628a0bbd08328343804e29ca666112546c34f1fae5313a7e48bfe9518f0ced55e7876acc35de03fff9c68bac12abbd8cce7848eb4b943b4a13cd1afedab2b10938f4c40571fa0d80b93442962eac6a9f804682714e0560da47f34e032d0e9273fe3cbf08e10919c3f16a79b60d8314585f2ce6"}}, {0x71, &(0x7f00000003c0)=ANY=[@ANYBLOB="7103866105226a3df7eeff7f0000000000007f2f7cb6095ba275cd4d9838ebed93933dc0468dbcc5964c5348cc2eb7bcc8ea49333ad415625386314c20e114b7c5cf3c8f8990693ca2ffe68a35150d489994caed0462e39d3a0a92"]}, {0x9f, &(0x7f00000005c0)=@string={0x9f, 0x3, "984ba9ea9c0f042f2fa1d59f43a69e3059109149c2ba30ed2a38d617939fbfee91ccc39cf75ffec4d5f1a6ae96d8f18af19350504d27cdc0aa04749d625ea23b1c2fba59aeab564b78eb9c845e8fcb7d1d0ab95ae60464b27613e402f8459612b38a9d0ad078a768090c1aa778184304e5e7b60e7c5cfb124412826a4015ca7cac35caa305bf7c4bc74f600e5104d4cd111667dc7c68888dc1c6e5081e"}}, {0x4b, &(0x7f0000000680)=@string={0x4b, 0x3, "523723700e918c8614daf12668d9b7b1588c0867aba2b6668bc7039b55486a6b12ee9d642cb658de0505f94909d03c9ca54f11890f30f524fa9bd8416bdd78db7661de9a332ef77d11"}}]}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=ANY=[@ANYBLOB="3000000041000701fefffffffeffffff017c0000040042800c00018006000600060600000800028008001780040007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x1c, r2, 0x303, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x1c}}, 0x40000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0xfe, 0x7fff7ffc}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x2}, 0xfe7c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c080) kernel console output (not intermixed with test programs): erialNumber: syz [ 552.702422][T14629] usb 3-1: config 0 descriptor?? [ 552.969053][T15412] bridge1: entered promiscuous mode [ 552.969102][T15412] bridge1: entered allmulticast mode [ 553.001127][T15412] team0: Port device bridge1 added [ 553.147343][T14629] airspy 3-1:0.0: Board ID: 00 [ 553.147367][T14629] airspy 3-1:0.0: Firmware version: [ 553.226331][ T992] usb 4-1: USB disconnect, device number 16 [ 553.248767][T15416] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 553.676677][T14629] airspy 3-1:0.0: usb_control_msg() failed -71 request 0e [ 553.712057][T14629] airspy 3-1:0.0: Registered as swradio24 [ 553.712078][T14629] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 553.747660][T14629] usb 3-1: USB disconnect, device number 109 [ 554.457159][T15434] loop9: detected capacity change from 0 to 7 [ 554.460008][T15434] Dev loop9: unable to read RDB block 7 [ 554.460052][T15434] loop9: unable to read partition table [ 554.460267][T15434] loop9: partition table beyond EOD, truncated [ 554.460284][T15434] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 554.612702][T15438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2879'. [ 555.013465][T15445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.017002][T15445] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.038986][T15445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.064453][T14629] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 555.165188][T15445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.167137][T15445] veth1_to_batadv: left promiscuous mode [ 555.171565][T15445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.215819][T14629] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 555.217237][T14629] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.217260][T14629] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 555.217304][T14629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.245470][T15445] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 555.245483][T15445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 555.285216][T14629] usb 5-1: config 0 descriptor?? [ 555.301360][T15445] veth1_vlan: left promiscuous mode [ 555.313496][T15445] veth0_vlan: left promiscuous mode [ 555.319731][T15445] veth0_vlan: entered promiscuous mode [ 555.330529][T15445] veth1_vlan: entered promiscuous mode [ 555.345875][T15445] veth1_macvtap: left promiscuous mode [ 555.348695][T15445] veth0_macvtap: left promiscuous mode [ 555.359338][T15445] veth0_macvtap: entered promiscuous mode [ 555.367337][T15445] veth1_macvtap: entered promiscuous mode [ 555.415749][T15445] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 555.435194][T15445] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 555.453307][T15445] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 555.514655][T15445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 555.534939][T15445] 8021q: adding VLAN 0 to HW filter on device bond2 [ 555.561893][T15445] 8021q: adding VLAN 0 to HW filter on device bond3 [ 555.613989][T15445] 8021q: adding VLAN 0 to HW filter on device bond4 [ 555.629499][T15445] 8021q: adding VLAN 0 to HW filter on device bond5 [ 555.671749][T15445] 8021q: adding VLAN 0 to HW filter on device bond6 [ 555.694172][T15445] 8021q: adding VLAN 0 to HW filter on device bond7 [ 555.705780][T14629] Bluetooth: Can't get state to change to load configuration err [ 555.705792][T14629] Bluetooth: Loading sysconfig file failed [ 555.705809][T14629] ath3k 5-1:0.0: probe with driver ath3k failed with error -16 [ 555.710267][T15445] 8021q: adding VLAN 0 to HW filter on device bond8 [ 555.744631][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 555.753788][T15445] 8021q: adding VLAN 0 to HW filter on device bond9 [ 555.782837][T15445] 8021q: adding VLAN 0 to HW filter on device bond10 [ 555.791626][T15445] veth1_to_batadv: entered promiscuous mode [ 555.802768][T15445] ipvlan2: left promiscuous mode [ 555.804705][ T7384] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 555.905313][ T8237] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 31488 - 0 [ 555.905426][ T8237] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 31488 - 0 [ 555.926243][ T8278] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 31488 - 0 [ 555.956511][ T7384] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 555.960036][ T7384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.960051][ T7384] usb 4-1: Product: syz [ 555.960059][ T7384] usb 4-1: Manufacturer: syz [ 555.960067][ T7384] usb 4-1: SerialNumber: syz [ 555.966600][ T7384] usb 4-1: config 0 descriptor?? [ 555.968689][T15443] blktrace: Concurrent blktraces are not allowed on sg0 [ 555.983969][ T7384] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 556.110965][ T7382] usb 5-1: USB disconnect, device number 14 [ 556.198361][T15456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.198635][T15456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.383243][ T7384] gspca_m5602: Failed to find a sensor [ 556.383257][ T7384] ALi m5602 4-1:0.0: ALi m5602 webcam failed [ 556.392542][ T7384] usb 4-1: USB disconnect, device number 17 [ 556.599284][T15476] loop9: detected capacity change from 0 to 7 [ 556.602682][T15476] Dev loop9: unable to read RDB block 7 [ 556.602724][T15476] loop9: unable to read partition table [ 556.602944][T15476] loop9: partition table beyond EOD, truncated [ 556.602961][T15476] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 556.784555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 556.976277][ T7382] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 557.109056][ T7382] usb 3-1: device descriptor read/64, error -71 [ 557.186650][T15499] loop9: detected capacity change from 0 to 7 [ 557.189497][T15499] Dev loop9: unable to read RDB block 7 [ 557.189539][T15499] loop9: unable to read partition table [ 557.189739][T15499] loop9: partition table beyond EOD, truncated [ 557.189774][T15499] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 557.354496][ T7382] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 557.380235][T15492] syzkaller1: entered promiscuous mode [ 557.380257][T15492] syzkaller1: entered allmulticast mode [ 557.504437][ T7382] usb 3-1: device descriptor read/64, error -71 [ 557.614925][ T7382] usb usb3-port1: attempt power cycle [ 557.714477][ T5620] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 557.835640][T15515] Invalid logical block size (4) [ 557.866142][ T5620] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 557.867217][ T5620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 557.867247][ T5620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.867274][ T5620] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 557.867305][ T5620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.869396][ T5620] usb 4-1: config 0 descriptor?? [ 557.954466][ T7382] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 557.975807][ T7382] usb 3-1: device descriptor read/8, error -71 [ 558.214669][ T7382] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 558.243596][ T7382] usb 3-1: device descriptor read/8, error -71 [ 558.283900][ T5620] hid-multitouch 0003:0457:07DA.0025: unknown main item tag 0x0 [ 558.283938][ T5620] hid-multitouch 0003:0457:07DA.0025: unknown main item tag 0x0 [ 558.283967][ T5620] hid-multitouch 0003:0457:07DA.0025: unknown main item tag 0x0 [ 558.283995][ T5620] hid-multitouch 0003:0457:07DA.0025: unknown main item tag 0x0 [ 558.284024][ T5620] hid-multitouch 0003:0457:07DA.0025: unknown main item tag 0x0 [ 558.284051][ T5620] hid-multitouch 0003:0457:07DA.0025: unknown main item tag 0x0 [ 558.284076][ T5620] hid-multitouch 0003:0457:07DA.0025: unknown main item tag 0x0 [ 558.284101][ T5620] hid-multitouch 0003:0457:07DA.0025: unknown main item tag 0x0 [ 558.284157][ T5620] hid-multitouch 0003:0457:07DA.0025: unknown main item tag 0x0 [ 558.284184][ T5620] hid-multitouch 0003:0457:07DA.0025: unknown main item tag 0x0 [ 558.292892][ T5620] hid-multitouch 0003:0457:07DA.0025: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 558.369373][ T7382] usb usb3-port1: unable to enumerate USB device [ 558.561569][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2899'. [ 558.568336][T15523] netlink: 'syz.3.2899': attribute type 4 has an invalid length. [ 558.768689][ T7382] usb 4-1: USB disconnect, device number 18 [ 558.773610][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 558.787198][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 558.796139][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 558.820462][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 558.832531][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 559.076569][T15537] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2906'. [ 559.660681][ T8237] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 559.660705][ T8237] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.770343][T15531] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.777010][T15531] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.777096][T15531] bridge_slave_0: entered allmulticast mode [ 559.778193][T15531] bridge_slave_0: entered promiscuous mode [ 559.789323][T15531] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.790766][T15531] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.790888][T15531] bridge_slave_1: entered allmulticast mode [ 559.795509][T15531] bridge_slave_1: entered promiscuous mode [ 559.863829][T15556] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 559.863845][T15556] IPv6: NLM_F_CREATE should be set when creating new route [ 559.863873][T15556] IPv6: NLM_F_CREATE should be set when creating new route [ 560.007025][ T8237] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 560.007060][ T8237] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.088157][T15564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2912'. [ 560.128123][T15531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.193971][ T8237] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 560.194041][ T8237] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.245458][T15531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.363991][T15531] team0: Port device team_slave_0 added [ 560.548847][T15531] team0: Port device team_slave_1 added [ 560.552509][T15577] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2917'. [ 560.774456][T15591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2919'. [ 560.778837][T15531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.778851][T15531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.778892][T15531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.833135][T15531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.833150][T15531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.833176][T15531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.873522][ T5617] Bluetooth: hci3: command tx timeout [ 561.009928][T15596] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2922'. [ 561.025914][ T7382] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 561.158654][ T7382] usb 5-1: device descriptor read/64, error -71 [ 561.217049][T15531] hsr_slave_0: entered promiscuous mode [ 561.217671][T15531] hsr_slave_1: entered promiscuous mode [ 561.220322][T15604] loop9: detected capacity change from 0 to 7 [ 561.221504][T15604] Dev loop9: unable to read RDB block 7 [ 561.221544][T15604] loop9: unable to read partition table [ 561.221734][T15604] loop9: partition table beyond EOD, truncated [ 561.221751][T15604] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 561.282438][T15531] debugfs: 'hsr0' already exists in 'hsr' [ 561.282459][T15531] Cannot create hsr debugfs directory [ 561.405069][ T7382] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 561.448979][T15597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2913'. [ 561.521014][T15615] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2913'. [ 561.544453][ T7382] usb 5-1: device descriptor read/64, error -71 [ 561.656699][ T7382] usb usb5-port1: attempt power cycle [ 561.671933][T15597] bond1 (unregistering): Released all slaves [ 561.714125][T15621] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2927'. [ 561.853503][T15625] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2929'. [ 562.014557][ T7382] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 562.035252][ T7382] usb 5-1: device descriptor read/8, error -71 [ 562.274413][ T7382] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 562.295140][ T7382] usb 5-1: device descriptor read/8, error -71 [ 562.406204][ T7382] usb usb5-port1: unable to enumerate USB device [ 562.780264][ T8237] bond12 (unregistering): (slave geneve11): Releasing active interface [ 562.790014][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.790173][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.817377][ T8237] bond11 (unregistering): (slave geneve10): Releasing active interface [ 562.837187][ T8237] bond10 (unregistering): (slave geneve9): Releasing active interface [ 562.868912][ T8237] bond9 (unregistering): (slave geneve8): Releasing active interface [ 562.889313][ T8237] bond8 (unregistering): (slave geneve7): Releasing active interface [ 562.912525][ T8237] bond6 (unregistering): (slave geneve6): Releasing active interface [ 562.938560][ T8237] bond4 (unregistering): (slave geneve5): Releasing active interface [ 562.948474][ T5617] Bluetooth: hci3: command tx timeout [ 562.961713][ T8237] bond3 (unregistering): (slave geneve4): Releasing active interface [ 562.986289][ T8237] bond2 (unregistering): (slave geneve3): Releasing active interface [ 563.052113][ T8237] bond1 (unregistering): (slave geneve2): Releasing active interface [ 563.192977][ T8237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.215937][ T8237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.220022][ T8237] bond0 (unregistering): Released all slaves [ 563.223832][ T8237] bond1 (unregistering): Released all slaves [ 563.259927][ T8237] bond2 (unregistering): Released all slaves [ 563.281137][ T8237] bond3 (unregistering): Released all slaves [ 563.310264][ T8237] bond4 (unregistering): Released all slaves [ 563.331599][ T8237] bond5 (unregistering): Released all slaves [ 563.361905][ T8237] bond6 (unregistering): Released all slaves [ 563.378502][ T8237] bond7 (unregistering): Released all slaves [ 563.402789][ T8237] bond8 (unregistering): Released all slaves [ 563.423443][ T8237] bond9 (unregistering): Released all slaves [ 563.454174][ T8237] bond10 (unregistering): Released all slaves [ 563.477358][ T8237] bond11 (unregistering): Released all slaves [ 563.510958][ T8237] bond12 (unregistering): Released all slaves [ 563.566693][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 563.867901][ T8237] tipc: Left network mode [ 563.947342][T15683] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2935'. [ 564.083739][T15689] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2935'. [ 564.746401][ T7384] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 564.917521][ T7384] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 564.921569][ T7384] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.921627][ T7384] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 564.921655][ T7384] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 564.921697][ T7384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.027239][ T5617] Bluetooth: hci3: command tx timeout [ 565.652687][T14629] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 565.703050][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2940'. [ 565.780531][ T7384] cxacru 4-1:1.0: send of cm 0x84 failed (-71) [ 565.780594][ T7384] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 565.781307][ T7384] cxacru 4-1:1.0: send of cm 0x88 failed (-71) [ 565.781362][ T7384] ATM dev 0: poll status: error -71 [ 565.781416][ T7384] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 565.781476][ T7384] ATM dev 0: usbatm_submit_urb: urb 0xffff888029520c00 submission failed (-8)! [ 565.781747][ T7384] ATM dev 0: usbatm_submit_urb: urb 0xffff888029520200 submission failed (-8)! [ 565.781769][ T7384] ATM dev 0: usbatm_submit_urb: urb 0xffff888029520800 submission failed (-8)! [ 565.781789][ T7384] ATM dev 0: usbatm_submit_urb: urb 0xffff888029520700 submission failed (-8)! [ 565.821511][T14629] usb 5-1: Using ep0 maxpacket: 32 [ 565.825902][ T7384] usb 4-1: USB disconnect, device number 19 [ 565.871226][T14629] usb 5-1: unable to get BOS descriptor or descriptor too short [ 565.871273][T14629] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 565.889973][T14629] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.889997][T14629] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 565.892130][T14629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.892154][T14629] usb 5-1: Product: syz [ 565.892172][T14629] usb 5-1: Manufacturer: syz [ 565.892187][T14629] usb 5-1: SerialNumber: syz [ 566.039002][ T8237] hsr_slave_0: left promiscuous mode [ 566.066017][ T8237] hsr_slave_1: left promiscuous mode [ 566.067077][ T8237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.067121][ T8237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.072998][ T8237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.073016][ T8237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.138357][ T8237] veth1_to_batadv: left promiscuous mode [ 566.138451][ T8237] veth1_macvtap: left promiscuous mode [ 566.138477][ T8237] veth0_macvtap: left promiscuous mode [ 566.138623][ T8237] veth1_vlan: left promiscuous mode [ 566.140384][ T8237] veth0_vlan: left promiscuous mode [ 566.482288][T15752] No buffer was provided with the request [ 566.537920][T15747] MPI: mpi too large (107144 bits) [ 566.803968][ T8237] team0 (unregistering): Port device team_slave_1 removed [ 566.833024][ T8237] team0 (unregistering): Port device team_slave_0 removed [ 566.988602][ T8244] IPVS: starting estimator thread 0... [ 567.074434][T15772] IPVS: using max 31 ests per chain, 74400 per kthread [ 567.104766][ T5617] Bluetooth: hci3: command tx timeout [ 567.158751][T15531] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 567.169624][T15531] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 567.182486][T15531] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 567.210054][T15531] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 567.226365][T15531] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 567.258525][T15531] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 567.263292][T15531] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 567.302487][T15531] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 567.552762][T15531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.653074][T15531] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.671917][ T8278] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.672032][ T8278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.711247][ T8237] IPVS: stop unused estimator thread 0... [ 567.714143][ T8278] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.714252][ T8278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.792369][ T5617] Bluetooth: hci0: unexpected event for opcode 0x0c7d [ 568.302412][T10933] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.325317][T14630] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 568.439863][T15531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.487413][T14630] usb 3-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 568.488841][T14630] usb 3-1: config 255 has an invalid interface number: 97 but max is 0 [ 568.488875][T14630] usb 3-1: config 255 has no interface number 0 [ 568.488892][T14630] usb 3-1: config 255 interface 97 has no altsetting 0 [ 568.491009][T14630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.491033][T14630] usb 3-1: Product: syz [ 568.491047][T14630] usb 3-1: Manufacturer: syz [ 568.491056][T14630] usb 3-1: SerialNumber: syz [ 568.524274][T14629] usb 5-1: failed waiting for Axe-Fx III to boot: -71 [ 568.524384][T14629] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 568.539041][T14629] usb 5-1: USB disconnect, device number 19 [ 568.652994][T10933] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.710846][T15814] netlink: 'syz.3.2956': attribute type 27 has an invalid length. [ 568.710867][T15814] netlink: 'syz.3.2956': attribute type 3 has an invalid length. [ 568.710881][T15814] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2956'. [ 568.751533][T15531] veth0_vlan: entered promiscuous mode [ 568.782422][T15804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2953'. [ 568.802150][T14630] rndis_host 3-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 568.838316][T14630] usb 3-1: USB disconnect, device number 114 [ 568.874828][T15814] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2956'. [ 568.908126][T10933] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.959385][T15531] veth1_vlan: entered promiscuous mode [ 569.030537][T10933] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.122706][T15531] veth0_macvtap: entered promiscuous mode [ 569.134858][T15531] veth1_macvtap: entered promiscuous mode [ 569.160574][T15531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.179078][T15531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.196474][ T8278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.196674][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.196709][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.355415][ T31] audit: type=1326 audit(1789444439.605:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15824 comm="syz.3.2959" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f370ec code=0x7ffc0000 [ 569.355447][ T31] audit: type=1326 audit(1789444439.605:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15824 comm="syz.3.2959" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f370ec code=0x7ffc0000 [ 569.358926][ T31] audit: type=1326 audit(1789444439.605:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15824 comm="syz.3.2959" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f370ec code=0x7ffc0000 [ 569.359038][ T31] audit: type=1326 audit(1789444439.605:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15824 comm="syz.3.2959" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f370ec code=0x7ffc0000 [ 569.418205][ T8278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.588380][T15827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2960'. [ 569.695962][T15827] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2960'. [ 569.696007][T15827] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2960'. [ 569.749462][T10933] bridge_slave_1: left allmulticast mode [ 569.749487][T10933] bridge_slave_1: left promiscuous mode [ 569.749686][T10933] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.779671][T10933] bridge_slave_0: left allmulticast mode [ 569.779691][T10933] bridge_slave_0: left promiscuous mode [ 569.780316][T10933] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.822305][T15827] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2960'. [ 569.822350][T15827] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2960'. [ 569.832254][T10933] dvmrp8: left allmulticast mode [ 569.976417][T15827] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2960'. [ 569.976465][T15827] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2960'. [ 570.336249][T10933] bond4 (unregistering): (slave geneve5): Releasing active interface [ 570.357504][T10933] bond3 (unregistering): (slave geneve4): Releasing active interface [ 570.379654][T10933] bond2 (unregistering): (slave geneve3): Releasing active interface [ 570.433124][T10933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.447998][T10933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.451102][T10933] bond0 (unregistering): Released all slaves [ 570.462807][T10933] bond1 (unregistering): Released all slaves [ 570.476771][T10933] bond2 (unregistering): Released all slaves [ 570.518362][T15847] netlink: 'syz.6.2962': attribute type 1 has an invalid length. [ 570.528504][T10933] bond3 (unregistering): Released all slaves [ 570.571812][T15849] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2962'. [ 570.587484][T10933] bond4 (unregistering): Released all slaves [ 570.631625][ T8239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.631644][ T8239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.843337][T15847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 570.914039][T15849] bond1: (slave geneve3): making interface the new active one [ 570.925806][T15849] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 571.266244][ T8244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.266267][ T8244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.597265][ T5682] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 571.737161][ T7382] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 571.742959][T15890] netlink: 'syz.1.2970': attribute type 10 has an invalid length. [ 571.768004][ T5682] usb 3-1: Using ep0 maxpacket: 8 [ 571.769650][ T5682] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 571.775695][ T5682] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 571.775720][ T5682] usb 3-1: config 0 has no interface number 1 [ 571.775777][ T5682] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 571.775799][ T5682] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 571.775825][ T5682] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 571.775849][ T5682] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 571.775873][ T5682] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 571.775908][ T5682] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 571.775931][ T5682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 571.775952][ T5682] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 571.778172][ T5682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.778194][ T5682] usb 3-1: Product: syz [ 571.778209][ T5682] usb 3-1: Manufacturer: syz [ 571.778223][ T5682] usb 3-1: SerialNumber: syz [ 571.828777][ T5617] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 571.828829][ T5617] Bluetooth: hci0: Injecting HCI hardware error event [ 571.830568][ T5617] Bluetooth: hci0: hardware error 0x00 [ 571.905111][ T7382] usb 5-1: Using ep0 maxpacket: 16 [ 571.908196][ T7382] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 571.953554][ T7382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.953578][ T7382] usb 5-1: Product: syz [ 571.953592][ T7382] usb 5-1: Manufacturer: syz [ 571.953606][ T7382] usb 5-1: SerialNumber: syz [ 572.032258][ T5682] usb 3-1: config 0 descriptor?? [ 572.039533][T15872] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 572.076544][ T5682] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 572.081727][T10933] hsr_slave_0: left promiscuous mode [ 572.098714][ T5682] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 572.102472][T10933] hsr_slave_1: left promiscuous mode [ 572.103337][T10933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.103357][T10933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.108431][T10933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.108471][T10933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.217546][T10933] veth1_macvtap: left promiscuous mode [ 572.217571][T10933] veth0_macvtap: left promiscuous mode [ 572.217630][T10933] veth1_vlan: left promiscuous mode [ 572.217682][T10933] veth0_vlan: left promiscuous mode [ 572.323628][ T5682] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 572.352257][ T5682] usb 3-1: USB disconnect, device number 115 [ 572.488424][ T7787] udevd[7787]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 573.020325][T10933] team0 (unregistering): Port device team_slave_1 removed [ 573.068263][T10933] team0 (unregistering): Port device team_slave_0 removed [ 573.660312][T14994] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 573.676814][T15916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 573.682605][T15916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 573.683897][T15916] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 573.693987][T15916] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 573.711255][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 573.844489][ T5746] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 573.858298][T15915] netlink: 'syz.2.2976': attribute type 1 has an invalid length. [ 573.918423][T15919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2976'. [ 573.974876][ T5746] usb 2-1: device descriptor read/64, error -71 [ 573.980362][T15915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 574.028062][T15919] bond1: (slave geneve2): making interface the new active one [ 574.029744][T15919] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 574.074725][ T5617] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 574.225074][ T5746] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 574.367069][ T5746] usb 2-1: device descriptor read/64, error -71 [ 574.450989][ T7382] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 574.478656][ T5746] usb usb2-port1: attempt power cycle [ 574.490293][ T7382] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 574.500688][ T7382] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 574.500736][ T7382] usb 5-1: media controller created [ 574.569426][ T7382] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 574.576799][ T7389] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 574.642012][T10933] IPVS: stop unused estimator thread 0... [ 574.678378][ T7382] zl10353_read_register: readreg error (reg=127, ret==-71) [ 574.724491][ T7389] usb 3-1: Using ep0 maxpacket: 8 [ 574.725204][ T7389] usb 3-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00 [ 574.726237][ T7389] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 574.726268][ T7389] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 574.726295][ T7389] usb 3-1: config 0 interface 0 has no altsetting 0 [ 574.726328][ T7389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.741707][ T7389] usb 3-1: config 0 descriptor?? [ 574.846322][ T5746] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 574.868926][ T5746] usb 2-1: device descriptor read/8, error -71 [ 574.929086][ T7382] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 574.957491][ T7382] usb 5-1: USB disconnect, device number 20 [ 575.105168][ T5746] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 575.127231][ T5746] usb 2-1: device descriptor read/8, error -71 [ 575.162022][T15949] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2983'. [ 575.236058][ T5746] usb usb2-port1: unable to enumerate USB device [ 575.279350][T15947] netlink: 'syz.4.2982': attribute type 27 has an invalid length. [ 575.279370][T15947] netlink: 'syz.4.2982': attribute type 3 has an invalid length. [ 575.279384][T15947] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2982'. [ 575.402436][T15947] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2982'. [ 575.439774][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 575.491745][ T7389] usbhid 3-1:0.0: can't add hid device: -71 [ 575.491846][ T7389] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 575.520365][ T7389] usb 3-1: USB disconnect, device number 116 [ 575.709257][T15917] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.709399][T15917] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.709519][T15917] bridge_slave_0: entered allmulticast mode [ 575.714691][T15917] bridge_slave_0: entered promiscuous mode [ 575.760417][T15917] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.760514][T15917] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.760607][T15917] bridge_slave_1: entered allmulticast mode [ 575.761582][T15917] bridge_slave_1: entered promiscuous mode [ 575.824964][ T5617] Bluetooth: hci1: command tx timeout [ 575.869901][T15917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.878668][T15917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.923484][T15917] team0: Port device team_slave_0 added [ 575.937448][T15917] team0: Port device team_slave_1 added [ 576.083364][T15917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.083382][T15917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.083410][T15917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.090007][T15917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.090021][T15917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.090048][T15917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.237806][T15917] hsr_slave_0: entered promiscuous mode [ 576.238394][T15917] hsr_slave_1: entered promiscuous mode [ 576.244994][T15917] debugfs: 'hsr0' already exists in 'hsr' [ 576.245015][T15917] Cannot create hsr debugfs directory [ 576.370374][ T4984] ldm_validate_privheads(): Disk read failed. [ 576.370440][ T4984] loop0: [ 576.370460][ T4984] loop0: partition table partially beyond EOD, truncated [ 576.688784][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 576.689132][T16005] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2993'. [ 576.905434][T16013] netlink: 'syz.6.2996': attribute type 21 has an invalid length. [ 576.925538][T16013] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2996'. [ 577.308472][T15917] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 577.308507][T15917] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.308534][T15917] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 577.324771][ T5746] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 577.478204][ T5746] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 577.479582][ T5746] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.479629][ T5746] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 577.479652][ T5746] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 577.479675][ T5746] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 577.479715][ T5746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.747027][T15917] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 577.747087][T15917] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.747114][T15917] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 577.752123][T16020] netlink: 'syz.2.2999': attribute type 6 has an invalid length. [ 577.752142][T16020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2999'. [ 577.915518][ T5617] Bluetooth: hci1: command tx timeout [ 578.033180][T15917] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 578.033217][T15917] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.033266][T15917] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 578.068967][T16035] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3001'. [ 578.208554][T15917] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 578.208591][T15917] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.208641][T15917] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 578.276150][ T4984] ldm_validate_privheads(): Disk read failed. [ 578.276239][ T4984] loop0: [ 578.276260][ T4984] loop0: partition table partially beyond EOD, truncated [ 578.461897][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8 [ 578.575532][ T7384] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 578.632153][ T5746] [drm] Initialized gud 1.0.0 for 2-1:1.0 on minor 1 [ 578.708731][T15917] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 578.709511][T16053] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3005'. [ 578.724955][ T7384] usb 3-1: Using ep0 maxpacket: 16 [ 578.738718][ T7384] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 578.755308][ T7384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.755370][ T7384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.755394][ T7384] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 578.755437][ T7384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.758022][T15917] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 578.759053][T15917] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 578.777105][ T7384] usb 3-1: config 0 descriptor?? [ 578.832872][T15917] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 578.840743][T15917] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 578.877318][T15917] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 578.878499][T15917] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 578.887616][T15917] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 579.029871][T15917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.079567][T15917] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.093426][ T8240] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.093527][ T8240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.111961][ T8240] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.112059][ T8240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.180115][T15917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.231132][T15917] veth0_vlan: entered promiscuous mode [ 579.242818][T15917] veth1_vlan: entered promiscuous mode [ 579.258940][ T5746] gud 2-1:1.0: USB-1: Invalid EDID size (ret=3) [ 579.281165][T15917] veth0_macvtap: entered promiscuous mode [ 579.294234][T15917] veth1_macvtap: entered promiscuous mode [ 579.322298][T15917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.336687][T15917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.352974][ T5682] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 579.375790][ T8239] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.397678][ T8851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.400816][ T8851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.400966][ T8851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.515389][ T5682] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 579.519056][ T5682] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.519082][ T5682] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.519102][ T5682] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 579.519138][ T5682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.556450][T10933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.556492][T10933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.583409][ T5682] usb 5-1: config 0 descriptor?? [ 579.677892][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.677914][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.786492][ T5746] Console: switching to colour frame buffer device 128x48 [ 579.806321][ T5746] gud 2-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 579.829711][ T5746] usb 2-1: USB disconnect, device number 124 [ 579.888149][ T5746] Console: switching to colour VGA+ 80x25 [ 579.995446][ T5617] Bluetooth: hci1: command tx timeout [ 580.227290][ T30] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 580.375674][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 580.376370][ T30] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 580.379107][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.379177][ T30] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 580.379219][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.394716][ T30] usb 4-1: config 0 descriptor?? [ 580.417650][ T30] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 580.623374][T16071] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 580.634243][T14630] usb 4-1: USB disconnect, device number 20 [ 580.757927][T16088] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 581.199583][ T7384] usbhid 3-1:0.0: can't add hid device: -71 [ 581.199666][ T7384] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 581.215097][ T7384] usb 3-1: USB disconnect, device number 117 [ 581.370002][ T4984] ldm_validate_privheads(): Disk read failed. [ 581.370068][ T4984] loop0: [ 581.370087][ T4984] loop0: partition table partially beyond EOD, truncated [ 581.493155][T16100] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3015'. [ 581.690997][T16114] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3019'. [ 581.929394][ T5682] usbhid 5-1:0.0: can't add hid device: -71 [ 581.929461][ T5682] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 581.933513][ T5682] usb 5-1: USB disconnect, device number 21 [ 582.064741][ T5617] Bluetooth: hci1: command tx timeout [ 582.199298][T16122] ip6tnl1: entered promiscuous mode [ 582.435643][ T5682] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 582.454179][T16127] netlink: 'syz.3.3024': attribute type 4 has an invalid length. [ 582.454248][T16129] netlink: 'syz.3.3024': attribute type 4 has an invalid length. [ 582.485247][T16127] netlink: 'syz.3.3024': attribute type 4 has an invalid length. [ 582.493416][T16129] netlink: 'syz.3.3024': attribute type 4 has an invalid length. [ 582.493494][T16129] netlink: 'syz.3.3024': attribute type 4 has an invalid length. [ 582.493566][T16129] netlink: 'syz.3.3024': attribute type 4 has an invalid length. [ 582.493633][T16129] netlink: 'syz.3.3024': attribute type 4 has an invalid length. [ 582.493700][T16129] netlink: 'syz.3.3024': attribute type 4 has an invalid length. [ 582.493766][T16129] netlink: 'syz.3.3024': attribute type 4 has an invalid length. [ 582.493833][T16129] netlink: 'syz.3.3024': attribute type 4 has an invalid length. [ 582.554413][ T7382] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 582.573611][ T4984] ldm_validate_privheads(): Disk read failed. [ 582.573674][ T4984] loop0: [ 582.573695][ T4984] loop0: partition table partially beyond EOD, truncated [ 582.626918][ T5682] usb 5-1: Using ep0 maxpacket: 32 [ 582.629005][ T5682] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 582.630166][ T5682] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 582.630189][ T5682] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 582.630208][ T5682] usb 5-1: config 2 has no interface number 0 [ 582.630245][ T5682] usb 5-1: config 2 interface 88 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 582.630272][ T5682] usb 5-1: config 2 interface 88 has no altsetting 0 [ 582.668545][ T5682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 582.668573][ T5682] usb 5-1: Product: syz [ 582.668588][ T5682] usb 5-1: Manufacturer: syz [ 582.668603][ T5682] usb 5-1: SerialNumber: syz [ 582.725754][ T5682] asix 5-1:2.88: probe with driver asix failed with error -22 [ 582.743989][ T7382] usb 3-1: unable to get BOS descriptor or descriptor too short [ 582.752574][ T7382] usb 3-1: not running at top speed; connect to a high speed hub [ 582.752609][ T7382] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 582.772300][ T7382] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 582.787446][ T7382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.787469][ T7382] usb 3-1: Product: syz [ 582.787484][ T7382] usb 3-1: Manufacturer: syz [ 582.787499][ T7382] usb 3-1: SerialNumber: syz [ 582.821216][T16124] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 583.073991][T16124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.079745][T16124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.153911][ T7382] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 583.154018][ T7382] usb 3-1: MIDIStreaming interface descriptor not found [ 583.454211][ T7382] usb 3-1: USB disconnect, device number 118 [ 583.879035][T16150] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3028'. [ 584.115007][ T30] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 584.264967][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 584.267234][ T30] usb 2-1: unable to get BOS descriptor or descriptor too short [ 584.267279][ T30] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 584.268437][ T30] usb 2-1: config 4 interface 0 has no altsetting 0 [ 584.306563][ T30] usb 2-1: string descriptor 0 read error: -22 [ 584.306654][ T30] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 584.353810][ T30] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 584.378101][ T30] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 584.378420][ T30] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 584.378464][ T30] usb 2-1: media controller created [ 584.415405][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 585.098992][ T7384] usb 5-1: USB disconnect, device number 22 [ 585.231832][T16183] loop9: detected capacity change from 0 to 7 [ 585.232825][T16183] Dev loop9: unable to read RDB block 7 [ 585.232866][T16183] loop9: unable to read partition table [ 585.233118][T16183] loop9: partition table beyond EOD, truncated [ 585.233136][T16183] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 585.504587][T14630] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 585.596666][ T7384] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 585.674162][ T30] usb 2-1: USB disconnect, device number 125 [ 585.674174][T14630] usb 3-1: unable to get BOS descriptor or descriptor too short [ 585.674213][T14630] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 585.703450][T14630] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.703475][T14630] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 585.710380][T14630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.710402][T14630] usb 3-1: Product: syz [ 585.710417][T14630] usb 3-1: Manufacturer: syz [ 585.710431][T14630] usb 3-1: SerialNumber: syz [ 585.737034][T14630] usb 3-1: 0:1 : does not exist [ 585.785099][ T7384] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 585.788822][ T7384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.788865][ T7384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.823447][ T7384] usb 4-1: config 0 descriptor?? [ 586.075693][ T7384] usbhid 4-1:0.0: can't add hid device: -71 [ 586.075796][ T7384] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 586.089454][T16188] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3040'. [ 586.113547][ T7384] usb 4-1: USB disconnect, device number 21 [ 586.548354][ T4984] ldm_validate_privheads(): Disk read failed. [ 586.548393][ T4984] loop0: [ 586.548405][ T4984] loop0: partition table partially beyond EOD, truncated [ 586.604429][ T7384] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 586.656461][ T992] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 586.755115][ T7384] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 586.756202][ T7384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.756228][ T7384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.758242][ T7384] usb 4-1: config 0 descriptor?? [ 586.814968][ T992] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 586.815956][ T992] usb 2-1: config 255 has an invalid interface number: 97 but max is 0 [ 586.815971][ T992] usb 2-1: config 255 has no interface number 0 [ 586.815986][ T992] usb 2-1: config 255 interface 97 has no altsetting 0 [ 586.817878][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.817892][ T992] usb 2-1: Product: syz [ 586.817900][ T992] usb 2-1: Manufacturer: syz [ 586.817913][ T992] usb 2-1: SerialNumber: syz [ 586.954516][ T5667] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 587.043173][ T992] rndis_host 2-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 587.050905][ T992] usb 2-1: USB disconnect, device number 126 [ 587.106554][ T5667] usb 5-1: Using ep0 maxpacket: 32 [ 587.107962][ T5667] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 587.111221][ T5667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.111246][ T5667] usb 5-1: Product: syz [ 587.111261][ T5667] usb 5-1: Manufacturer: syz [ 587.111293][ T5667] usb 5-1: SerialNumber: syz [ 587.113555][ T5667] usb 5-1: config 0 descriptor?? [ 587.122852][ T5667] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 587.167735][T16185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.170053][T16185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.579795][ T7384] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 587.583851][ T7384] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input147 [ 587.839110][T16208] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 587.910264][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 587.910310][ T30] usb 4-1: USB disconnect, device number 22 [ 588.007617][ T7382] usb 3-1: USB disconnect, device number 119 [ 588.227884][T16214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3048'. [ 588.321903][T16218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3048'. [ 588.499553][T16224] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3051'. [ 588.549880][T16203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.550314][T16203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.752607][ T4984] ldm_validate_privheads(): Disk read failed. [ 588.752672][ T4984] loop0: [ 588.752727][ T4984] loop0: partition table partially beyond EOD, truncated [ 588.774728][ T7389] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 588.780069][ T5667] gspca_ov534_9: reg_w failed -71 [ 588.904759][ T7389] usb 3-1: device descriptor read/64, error -71 [ 588.955263][T14630] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 589.014440][ T5667] gspca_ov534_9: Unknown sensor 0000 [ 589.014526][ T5667] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 589.019936][ T5667] usb 5-1: USB disconnect, device number 23 [ 589.124397][T14630] usb 2-1: Using ep0 maxpacket: 16 [ 589.127151][T14630] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 589.130826][T14630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.130858][T14630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.130879][T14630] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 589.130916][T14630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.140957][T14630] usb 2-1: config 0 descriptor?? [ 589.164499][ T7389] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 589.294462][ T7389] usb 3-1: device descriptor read/64, error -71 [ 589.410818][ T7389] usb usb3-port1: attempt power cycle [ 589.754985][ T7389] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 589.776625][ T7389] usb 3-1: device descriptor read/8, error -71 [ 590.003944][ T31] kauditd_printk_skb: 153 callbacks suppressed [ 590.003963][ T31] audit: type=1400 audit(1789444460.245:3025): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=16265 comm="syz.6.3069" [ 590.055246][ T7389] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 590.080045][ T7389] usb 3-1: device descriptor read/8, error -71 [ 590.184721][ T7389] usb usb3-port1: unable to enumerate USB device [ 590.684763][T16268] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 591.336445][T16303] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3064'. [ 591.573475][ T4984] ldm_validate_privheads(): Disk read failed. [ 591.573543][ T4984] loop0: [ 591.573563][ T4984] loop0: partition table partially beyond EOD, truncated [ 591.678544][T14630] usbhid 2-1:0.0: can't add hid device: -71 [ 591.678643][T14630] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 591.691573][T14630] usb 2-1: USB disconnect, device number 127 [ 591.785091][T16316] FAULT_INJECTION: forcing a failure. [ 591.785091][T16316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.785124][T16316] CPU: 0 UID: 0 PID: 16316 Comm: syz.2.3067 Tainted: G L syzkaller #0 PREEMPT(full) [ 591.785151][T16316] Tainted: [L]=SOFTLOCKUP [ 591.785159][T16316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 591.785170][T16316] Call Trace: [ 591.785178][T16316] [ 591.785187][T16316] dump_stack_lvl+0xe8/0x150 [ 591.785220][T16316] should_fail_ex+0x410/0x560 [ 591.785247][T16316] _copy_to_user+0x31/0xb0 [ 591.785273][T16316] simple_read_from_buffer+0xe1/0x170 [ 591.785306][T16316] proc_fail_nth_read+0x1bb/0x230 [ 591.785332][T16316] ? common_file_perm+0x20e/0x2b0 [ 591.785357][T16316] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 591.785389][T16316] ? rw_verify_area+0x24a/0x4c0 [ 591.785417][T16316] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 591.785454][T16316] vfs_read+0x213/0xa80 [ 591.785487][T16316] ? __pfx___mutex_lock+0x10/0x10 [ 591.785509][T16316] ? __pfx_vfs_read+0x10/0x10 [ 591.785539][T16316] ? __fget_files+0x2a/0x420 [ 591.785568][T16316] ? __fget_files+0x3a2/0x420 [ 591.785594][T16316] ? __fget_files+0x2a/0x420 [ 591.785630][T16316] ksys_read+0x150/0x270 [ 591.785659][T16316] ? __pfx_ksys_read+0x10/0x10 [ 591.785691][T16316] ? asm_int80_emulation+0x1a/0x20 [ 591.785717][T16316] do_int80_emulation+0x198/0x500 [ 591.785739][T16316] ? trace_irq_disable+0x3b/0x140 [ 591.785758][T16316] ? asm_int80_emulation+0x1a/0x20 [ 591.785777][T16316] ? clear_bhb_loop+0x70/0xc0 [ 591.785797][T16316] ? clear_bhb_loop+0x70/0xc0 [ 591.785822][T16316] asm_int80_emulation+0x1a/0x20 [ 591.785841][T16316] RIP: 0023:0xf71175ab [ 591.785859][T16316] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 591.785877][T16316] RSP: 002b:00000000f53ac4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 591.785898][T16316] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f53ac5d0 [ 591.785912][T16316] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 591.785923][T16316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 591.785938][T16316] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 591.785950][T16316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 591.785978][T16316] [ 592.044970][ T5682] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 592.163708][T16328] loop9: detected capacity change from 0 to 7 [ 592.171013][T16328] Dev loop9: unable to read RDB block 7 [ 592.171055][T16328] loop9: unable to read partition table [ 592.171258][T16328] loop9: partition table beyond EOD, truncated [ 592.171291][T16328] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 592.207036][ T5682] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 592.211269][ T5682] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.211314][ T5682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.219541][ T5682] usb 5-1: config 0 descriptor?? [ 592.245615][ T5682] pwc: Askey VC010 type 2 USB webcam detected. [ 592.285490][T14630] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 592.409495][T16334] fuse: Bad value for 'fd' [ 592.440087][T16333] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3072'. [ 592.440310][ T5682] pwc: recv_control_msg error -32 req 02 val 2b00 [ 592.443032][ T5682] pwc: recv_control_msg error -32 req 02 val 2700 [ 592.444681][T14630] usb 4-1: Using ep0 maxpacket: 32 [ 592.444849][ T5682] pwc: recv_control_msg error -32 req 02 val 2c00 [ 592.449359][T14630] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 592.450522][T14630] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 592.450546][T14630] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.450564][T14630] usb 4-1: config 0 has no interface number 0 [ 592.450624][T14630] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 592.467529][T14630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.467552][T14630] usb 4-1: Product: syz [ 592.467566][T14630] usb 4-1: Manufacturer: syz [ 592.467580][T14630] usb 4-1: SerialNumber: syz [ 592.469308][ T5682] pwc: recv_control_msg error -32 req 04 val 1000 [ 592.479005][T14630] usb 4-1: config 0 descriptor?? [ 592.518490][T14630] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 592.518561][T14630] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 592.521801][ T5682] pwc: recv_control_msg error -32 req 04 val 1300 [ 592.542364][ T5682] pwc: recv_control_msg error -32 req 04 val 1400 [ 592.543074][ T5682] pwc: recv_control_msg error -32 req 02 val 2000 [ 592.543688][ T5682] pwc: recv_control_msg error -32 req 02 val 2100 [ 592.548097][ T5682] pwc: recv_control_msg error -32 req 04 val 1500 [ 592.551091][ T5682] pwc: recv_control_msg error -32 req 02 val 2500 [ 592.551710][ T5682] pwc: recv_control_msg error -32 req 02 val 2400 [ 592.552315][ T5682] pwc: recv_control_msg error -32 req 02 val 2600 [ 592.553585][ T5682] pwc: recv_control_msg error -32 req 02 val 2900 [ 592.565005][ T5682] pwc: recv_control_msg error -32 req 02 val 2800 [ 592.571164][ T5682] pwc: recv_control_msg error -32 req 04 val 1100 [ 592.574680][ T5682] pwc: recv_control_msg error -32 req 04 val 1200 [ 592.582557][ T5682] pwc: Registered as video103. [ 592.596667][ T5682] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input148 [ 592.723627][T14630] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 592.746808][ T7382] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 592.920779][ T7382] usb 3-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 592.929139][ T7382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.929164][ T7382] usb 3-1: Product: syz [ 592.929179][ T7382] usb 3-1: Manufacturer: syz [ 592.929217][ T7382] usb 3-1: SerialNumber: syz [ 593.176582][T16359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3076'. [ 593.617252][ T7389] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 593.646770][T14630] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 593.646821][T14630] videodev: could not get a free minor [ 593.646834][T14630] radio-raremono 4-1:0.35: could not register video device [ 593.646908][T14630] radio-raremono 4-1:0.35: probe with driver radio-raremono failed with error -23 [ 593.650820][T14630] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 593.668429][T14630] usb 4-1: USB disconnect, device number 23 [ 593.774848][ T7389] usb 2-1: Using ep0 maxpacket: 32 [ 593.777144][ T7389] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 593.778312][ T7389] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 593.778331][ T7389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.780583][ T7389] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.780607][ T7389] usb 2-1: Product: syz [ 593.780622][ T7389] usb 2-1: Manufacturer: syz [ 593.780632][ T7389] usb 2-1: SerialNumber: syz [ 593.789693][ T7389] usb 2-1: config 0 descriptor?? [ 593.807702][ T7389] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 593.808087][ T7389] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 593.808179][ T7389] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 593.825158][ T7389] keyspan 2-1:0.0: unsupported endpoint type 0 [ 593.825349][ T7389] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 593.825429][ T7389] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 593.825526][ T7389] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 593.825624][ T7389] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 593.837887][ T7389] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 593.969788][T16378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3078'. [ 594.022442][T16381] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3079'. [ 594.065426][T14630] usb 2-1: USB disconnect, device number 2 [ 594.096045][T14630] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 594.096771][T14630] keyspan 2-1:0.0: device disconnected [ 594.204600][ T30] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 594.307556][ T4984] ldm_validate_privheads(): Disk read failed. [ 594.307623][ T4984] loop0: [ 594.307642][ T4984] loop0: partition table partially beyond EOD, truncated [ 594.355292][ T30] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 594.356833][ T30] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1536, setting to 64 [ 594.362352][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.362378][ T30] usb 4-1: Product: syz [ 594.362393][ T30] usb 4-1: Manufacturer: syz [ 594.362408][ T30] usb 4-1: SerialNumber: syz [ 594.441086][T16391] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 594.441109][T16391] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 594.442194][T16391] vhci_hcd vhci_hcd.0: Device attached [ 594.462183][T16392] usbip_core: unknown command [ 594.462195][T16392] vhci_hcd: unknown pdu 150994944 [ 594.462206][T16392] usbip_core: unknown command [ 594.467213][ T8278] vhci_hcd vhci_hcd.6: stop threads [ 594.467230][ T8278] vhci_hcd vhci_hcd.6: release socket [ 594.467291][ T8278] vhci_hcd vhci_hcd.6: disconnect device [ 594.651976][T16378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.656035][T16378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.692796][ T30] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 594.714513][ T5620] usb 5-1: USB disconnect, device number 24 [ 594.831226][ T30] usb 4-1: USB disconnect, device number 24 [ 594.931859][ T7849] udevd[7849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 594.943762][T16396] validate_nla: 62 callbacks suppressed [ 594.943778][T16396] netlink: 'syz.4.3083': attribute type 1 has an invalid length. [ 595.025371][T16400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3083'. [ 595.120684][T16396] 8021q: adding VLAN 0 to HW filter on device bond18 [ 595.160448][T16400] bond18: (slave geneve16): making interface the new active one [ 595.162795][T16400] bond18: (slave geneve16): Enslaving as an active interface with an up link [ 595.601093][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 595.690396][ T7382] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 595.723661][ T7382] usb 3-1: USB disconnect, device number 124 [ 596.174736][ T4984] ldm_validate_privheads(): Disk read failed. [ 596.174802][ T4984] loop0: [ 596.174822][ T4984] loop0: partition table partially beyond EOD, truncated [ 596.525347][T16444] netlink: 'syz.3.3095': attribute type 1 has an invalid length. [ 596.641253][T16446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3095'. [ 596.738159][T16444] bond1: (slave gretap1): making interface the new active one [ 596.743586][T16444] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 597.006466][ T30] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 597.170229][ T30] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 597.171024][ T30] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 597.171059][ T30] usb 4-1: can't read configurations, error -71 [ 597.492374][T16456] netlink: 'syz.2.3097': attribute type 1 has an invalid length. [ 597.524533][ T7382] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 597.527725][T16456] 8021q: adding VLAN 0 to HW filter on device bond2 [ 597.570967][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3097'. [ 597.586224][T16456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3097'. [ 597.622524][T16456] bond2: (slave geneve3): making interface the new active one [ 597.636457][T16456] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 597.665327][ T7382] usb 2-1: device descriptor read/64, error -71 [ 597.842267][T16460] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 597.887940][ T31] audit: type=1326 audit(1789444468.125:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16458 comm="syz.2.3099" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 597.887972][ T31] audit: type=1326 audit(1789444468.125:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16458 comm="syz.2.3099" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 597.900840][ T31] audit: type=1326 audit(1789444468.145:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16458 comm="syz.2.3099" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 597.900883][ T31] audit: type=1326 audit(1789444468.145:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16458 comm="syz.2.3099" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 597.918810][ T7382] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 597.945485][ T31] audit: type=1326 audit(1789444468.195:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16458 comm="syz.2.3099" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 597.946815][ T31] audit: type=1326 audit(1789444468.195:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16458 comm="syz.2.3099" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 597.950077][ T31] audit: type=1326 audit(1789444468.195:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16458 comm="syz.2.3099" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 597.950518][ T31] audit: type=1326 audit(1789444468.195:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16458 comm="syz.2.3099" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 598.103960][ T7382] usb 2-1: device descriptor read/64, error -71 [ 598.204641][ T7382] usb usb2-port1: attempt power cycle [ 598.204938][ T30] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 598.355136][ T30] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 598.356081][ T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.356109][ T30] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 598.356121][ T30] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 598.356133][ T30] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 598.356157][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.925190][ T7382] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 599.019610][T16484] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3105'. [ 599.019625][T16484] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3105'. [ 599.020994][T16484] deleting an unspecified loop device is not supported. [ 599.054388][ T7382] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 599.064595][T14630] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 599.081606][ T7382] usb 2-1: Using ep0 maxpacket: 8 [ 599.082159][ T7382] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 599.083754][ T7382] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 599.083777][ T7382] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 599.083799][ T7382] usb 2-1: config 1 has no interface number 0 [ 599.125752][ T7382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.125777][ T7382] usb 2-1: Product: syz [ 599.125792][ T7382] usb 2-1: Manufacturer: syz [ 599.125807][ T7382] usb 2-1: SerialNumber: syz [ 599.235608][T14630] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 599.237249][T14630] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.241630][T14630] usb 3-1: config 0 descriptor?? [ 599.363567][T16488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 599.653076][T14630] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 599.653793][T14630] [drm:udl_init] *ERROR* Selecting channel failed [ 599.672896][ T7389] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 599.718998][T14630] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 599.719063][T14630] [drm] Initialized udl on minor 1 [ 599.745780][T14630] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 599.750172][T14630] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 599.772705][T14630] usb 3-1: USB disconnect, device number 125 [ 599.781183][ T5682] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 599.855488][ T7389] usb 5-1: Using ep0 maxpacket: 32 [ 599.858336][ T7389] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 599.860198][ T7389] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 599.860264][ T7389] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 599.860302][ T7389] usb 5-1: config 2 has no interface number 0 [ 599.860425][ T7389] usb 5-1: config 2 interface 88 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 599.860469][ T7389] usb 5-1: config 2 interface 88 has no altsetting 0 [ 599.927417][ T7389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 599.927474][ T7389] usb 5-1: Product: syz [ 599.927616][ T7389] usb 5-1: Manufacturer: syz [ 599.927679][ T7389] usb 5-1: SerialNumber: syz [ 599.980918][ T7389] asix 5-1:2.88: probe with driver asix failed with error -22 [ 600.197660][ T5620] usb 5-1: USB disconnect, device number 25 [ 600.322640][T16497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 600.492917][T16501] blktrace: Concurrent blktraces are not allowed on sg0 [ 600.960703][ T5620] usb 4-1: USB disconnect, device number 26 [ 601.208680][T14630] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 601.345461][T14630] usb 5-1: device descriptor read/64, error -71 [ 601.484976][ T5620] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 601.606203][T14630] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 601.637181][ T5620] usb 4-1: Using ep0 maxpacket: 32 [ 601.639641][ T5620] usb 4-1: unable to get BOS descriptor or descriptor too short [ 601.639684][ T5620] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 601.641047][ T5620] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 601.641072][ T5620] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 601.641094][ T5620] usb 4-1: config 14 has no interface number 0 [ 601.641110][ T5620] usb 4-1: config 14 has no interface number 1 [ 601.641170][ T5620] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 601.641193][ T5620] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 601.641219][ T5620] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 601.641245][ T5620] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 601.641273][ T5620] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 601.641299][ T5620] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 601.641326][ T5620] usb 4-1: config 14 interface 57 has no altsetting 0 [ 601.641345][ T5620] usb 4-1: config 14 interface 228 has no altsetting 0 [ 601.644213][ T5620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.644238][ T5620] usb 4-1: Product: syz [ 601.644253][ T5620] usb 4-1: Manufacturer: syz [ 601.644268][ T5620] usb 4-1: SerialNumber: syz [ 601.754251][T14630] usb 5-1: device descriptor read/64, error -71 [ 601.857610][T14630] usb usb5-port1: attempt power cycle [ 602.132895][ T7382] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 602.159894][ T5620] legousbtower 4-1:14.57: interrupt endpoints not found [ 602.178207][ T7382] usb 2-1: USB disconnect, device number 6 [ 602.216003][T14630] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 602.226442][T11431] udevd[11431]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 602.253648][T14630] usb 5-1: device descriptor read/8, error -71 [ 602.494660][T14630] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 602.515376][T14630] usb 5-1: device descriptor read/8, error -71 [ 602.550160][ T5620] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 602.566313][T16533] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3119'. [ 602.576088][ T5620] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 602.639147][T14630] usb usb5-port1: unable to enumerate USB device [ 603.232720][T16539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.241060][T16539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.413810][ T992] usb 4-1: USB disconnect, device number 27 [ 603.512394][ T992] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 604.057131][T16544] loop9: detected capacity change from 0 to 7 [ 604.060895][T16544] Dev loop9: unable to read RDB block 7 [ 604.060987][T16544] loop9: unable to read partition table [ 604.061409][T16544] loop9: partition table beyond EOD, truncated [ 604.061445][T16544] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 604.155137][ T7382] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 604.246000][T16547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3123'. [ 604.321051][ T7382] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 604.324427][ T7382] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 604.324487][ T7382] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.324524][ T7382] usb 3-1: config 0 has no interface number 0 [ 604.368882][ T7382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.368927][ T7382] usb 3-1: Product: syz [ 604.368960][ T7382] usb 3-1: Manufacturer: syz [ 604.368992][ T7382] usb 3-1: SerialNumber: syz [ 604.396021][T16553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 604.437148][ T7382] usb 3-1: config 0 descriptor?? [ 604.654660][T16542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.654683][ T992] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 604.655786][T16542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.716290][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 604.727345][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 604.729213][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 604.740337][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 604.740905][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 604.807286][ T992] usb 4-1: Using ep0 maxpacket: 32 [ 604.807966][ T992] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 604.815846][ T992] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 604.815884][ T992] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 604.815904][ T992] usb 4-1: config 2 has no interface number 0 [ 604.815943][ T992] usb 4-1: config 2 interface 88 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 604.815971][ T992] usb 4-1: config 2 interface 88 has no altsetting 0 [ 604.822648][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 604.822673][ T992] usb 4-1: Product: syz [ 604.822688][ T992] usb 4-1: Manufacturer: syz [ 604.822703][ T992] usb 4-1: SerialNumber: syz [ 604.833404][ T992] asix 4-1:2.88: probe with driver asix failed with error -22 [ 605.004226][ T7382] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 605.022199][ T7382] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 82 [ 605.036688][ T7382] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 605.036760][ T7382] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 605.036826][ T7382] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 605.043072][ T7382] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 605.093347][ T7382] usb 3-1: USB disconnect, device number 126 [ 605.117109][ T7382] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 605.125334][ T7382] keyspan 3-1:0.133: device disconnected [ 605.162508][ T30] usb 4-1: USB disconnect, device number 28 [ 606.237482][ T8239] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 606.237527][ T8239] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.237552][ T8239] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 606.239585][T16583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3133'. [ 606.454340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 606.564414][ T30] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 606.718011][ T30] usb 2-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 606.723814][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.723863][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.723891][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.723927][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.784976][ T4933] Bluetooth: hci0: command tx timeout [ 606.788761][ T30] usb 2-1: config 0 descriptor?? [ 606.853627][ T8239] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 606.853661][ T8239] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.853687][ T8239] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 607.185468][T16556] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.185601][T16556] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.185758][T16556] bridge_slave_0: entered allmulticast mode [ 607.191576][T16556] bridge_slave_0: entered promiscuous mode [ 607.223186][ T30] usbhid 2-1:0.0: can't add hid device: -32 [ 607.223387][ T30] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 607.285707][ T8239] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 607.285741][ T8239] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.285767][ T8239] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 607.348215][T16556] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.348384][T16556] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.348508][T16556] bridge_slave_1: entered allmulticast mode [ 607.351201][T16556] bridge_slave_1: entered promiscuous mode [ 607.445672][ T8239] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 607.445705][ T8239] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.445731][ T8239] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 607.520790][T16556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.539328][T16556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.817374][T16556] team0: Port device team_slave_0 added [ 607.872708][T16556] team0: Port device team_slave_1 added [ 608.018599][ T4984] ldm_validate_privheads(): Disk read failed. [ 608.018663][ T4984] loop0: [ 608.021662][ T4984] loop0: partition table partially beyond EOD, truncated [ 608.286606][T16556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.286625][T16556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.286652][T16556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.332555][T16607] kAFS: unable to lookup cell '' [ 608.333503][T16556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.333517][T16556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.333544][T16556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.451123][T16614] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3139'. [ 608.502339][ T31] audit: type=1326 audit(1789444478.745:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16606 comm="syz.3.3138" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 608.502869][ T31] audit: type=1326 audit(1789444478.745:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16606 comm="syz.3.3138" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 608.530035][ T31] audit: type=1326 audit(1789444478.755:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16606 comm="syz.3.3138" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 608.530081][ T31] audit: type=1326 audit(1789444478.755:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16606 comm="syz.3.3138" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 608.530120][ T31] audit: type=1326 audit(1789444478.755:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16606 comm="syz.3.3138" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 608.580859][ T31] audit: type=1326 audit(1789444478.785:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16606 comm="syz.3.3138" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=233 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 608.580908][ T31] audit: type=1326 audit(1789444478.785:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16606 comm="syz.3.3138" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 608.580947][ T31] audit: type=1326 audit(1789444478.785:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16606 comm="syz.3.3138" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 608.580985][ T31] audit: type=1326 audit(1789444478.805:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16606 comm="syz.3.3138" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 608.581025][ T31] audit: type=1326 audit(1789444478.805:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16606 comm="syz.3.3138" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 608.708618][T16610] netlink: Failed to add helper -22 [ 608.708719][T16610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.831014][T16609] netlink: Failed to add helper -22 [ 608.831100][T16609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.858314][T16607] input: syz1 as /devices/virtual/input/input149 [ 608.879959][ T4933] Bluetooth: hci0: command tx timeout [ 608.929203][T16620] netlink: 'syz.2.3140': attribute type 1 has an invalid length. [ 608.970694][T16556] hsr_slave_0: entered promiscuous mode [ 608.973340][T16556] hsr_slave_1: entered promiscuous mode [ 608.974084][T16556] debugfs: 'hsr0' already exists in 'hsr' [ 608.974102][T16556] Cannot create hsr debugfs directory [ 608.992569][T16621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3140'. [ 609.013423][T16621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3140'. [ 609.076100][T16620] 8021q: adding VLAN 0 to HW filter on device bond3 [ 609.150355][ T5667] usb 2-1: USB disconnect, device number 7 [ 609.274342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 609.343232][ T8239] pim6reg: left allmulticast mode [ 609.343379][ T8239] dvmrp8: left allmulticast mode [ 610.319087][ T8239] bond18 (unregistering): (slave geneve16): Releasing active interface [ 610.427059][ T8239] bond17 (unregistering): (slave geneve15): Releasing active interface [ 610.478185][ T8239] bond15 (unregistering): (slave geneve14): Releasing active interface [ 610.527523][ T8239] bond13 (unregistering): (slave geneve12): Releasing active interface [ 610.560271][ T8239] bond11 (unregistering): (slave geneve11): Releasing active interface [ 610.591723][ T8239] bond10 (unregistering): (slave geneve10): Releasing active interface [ 610.622805][ T8239] bond9 (unregistering): (slave geneve9): Releasing active interface [ 610.719189][ T8239] bond7 (unregistering): (slave geneve8): Releasing active interface [ 610.829374][ T8239] bond6 (unregistering): (slave geneve7): Releasing active interface [ 610.911291][ T8239] bond5 (unregistering): (slave geneve6): Releasing active interface [ 610.948576][ T4933] Bluetooth: hci0: command tx timeout [ 611.014055][ T8239] bond4 (unregistering): (slave geneve5): Releasing active interface [ 611.103923][ T8239] bond3 (unregistering): (slave geneve4): Releasing active interface [ 611.182767][ T8239] bond2 (unregistering): (slave geneve3): Releasing active interface [ 611.258085][ T8239] bond1 (unregistering): (slave geneve2): Releasing active interface [ 611.482116][ T8239] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 611.616935][ T8239] bond0 (unregistering): Released all slaves [ 611.662842][ T8239] bond1 (unregistering): Released all slaves [ 611.790940][ T8239] bond2 (unregistering): Released all slaves [ 611.869803][ T8239] bond3 (unregistering): Released all slaves [ 611.956223][ T8239] bond4 (unregistering): Released all slaves [ 612.040214][ T8239] bond5 (unregistering): Released all slaves [ 612.105908][ T8239] bond6 (unregistering): Released all slaves [ 612.169945][ T8239] bond7 (unregistering): Released all slaves [ 612.260248][ T8239] bond8 (unregistering): Released all slaves [ 612.347158][ T8239] bond9 (unregistering): Released all slaves [ 612.430844][ T8239] bond10 (unregistering): Released all slaves [ 612.517889][ T8239] bond11 (unregistering): Released all slaves [ 612.594727][ T8239] bond12 (unregistering): Released all slaves [ 612.669413][ T8239] bond13 (unregistering): Released all slaves [ 612.755027][ T8239] bond14 (unregistering): Released all slaves [ 612.839151][ T8239] bond15 (unregistering): Released all slaves [ 612.887573][ T8239] bond16 (unregistering): Released all slaves [ 612.931623][ T8239] bond17 (unregistering): Released all slaves [ 612.984218][ T8239] bond18 (unregistering): Released all slaves [ 613.025250][ T4933] Bluetooth: hci0: command tx timeout [ 613.027778][ T7382] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 613.183094][ T4984] ldm_validate_privheads(): Disk read failed. [ 613.183161][ T4984] loop0: [ 613.183181][ T4984] loop0: partition table partially beyond EOD, truncated [ 613.207318][ T7382] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0101, bcdDevice= 0.40 [ 613.209404][ T7382] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 613.209445][ T7382] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 613.283301][ T7382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.283331][ T7382] usb 2-1: Product: syz [ 613.283340][ T7382] usb 2-1: Manufacturer: syz [ 613.283359][ T7382] usb 2-1: SerialNumber: syz [ 613.810046][ T8239] tipc: Disabling bearer [ 613.810257][ T8239] tipc: Disabling bearer [ 613.870492][ T8239] tipc: Disabling bearer [ 613.939107][ T8239] tipc: Left network mode [ 614.411153][ T7382] usb 2-1: USB disconnect, device number 8 [ 614.446033][T16660] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3150'. [ 614.446058][T16660] veth0_to_bond: default FDB implementation only supports local addresses [ 615.064562][ T7382] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 615.239749][ T7382] usb 4-1: Using ep0 maxpacket: 8 [ 615.242758][ T7382] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 615.243781][ T7382] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.243811][ T7382] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 615.243836][ T7382] usb 4-1: config 0 interface 0 has no altsetting 0 [ 615.243867][ T7382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.323273][ T7382] usb 4-1: config 0 descriptor?? [ 615.539344][T16683] loop9: detected capacity change from 0 to 7 [ 615.540245][T16683] Dev loop9: unable to read RDB block 7 [ 615.540287][T16683] loop9: unable to read partition table [ 615.540497][T16683] loop9: partition table beyond EOD, truncated [ 615.540517][T16683] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 615.727144][ T8239] hsr_slave_0: left promiscuous mode [ 615.742839][ T8239] hsr_slave_1: left promiscuous mode [ 615.743986][ T8239] batman_adv: batadv0: Interface deactivated: veth0 [ 615.744005][ T8239] batman_adv: batadv0: Removing interface: veth0 [ 615.771328][ T7382] hid (null): report_id 3688329021 is invalid [ 615.771384][ T7382] hid (null): unknown global tag 0xc [ 615.771445][ T7382] hid (null): nested delimiters [ 615.797172][ T7382] magicmouse 0003:05AC:0269.0026: report_id 3688329021 is invalid [ 615.797214][ T7382] magicmouse 0003:05AC:0269.0026: item 0 4 1 8 parsing failed [ 615.798645][ T7382] magicmouse 0003:05AC:0269.0026: magicmouse hid parse failed [ 615.798853][ T7382] magicmouse 0003:05AC:0269.0026: probe with driver magicmouse failed with error -22 [ 615.842252][ T8239] veth1_macvtap: left promiscuous mode [ 615.842284][ T8239] veth0_macvtap: left promiscuous mode [ 615.842410][ T8239] veth1_vlan: left promiscuous mode [ 615.842473][ T8239] veth0_vlan: left promiscuous mode [ 615.986327][ T5667] usb 4-1: USB disconnect, device number 29 [ 616.211781][ T4984] ldm_validate_privheads(): Disk read failed. [ 616.211967][ T4984] loop0: [ 616.211989][ T4984] loop0: partition table partially beyond EOD, truncated [ 616.670248][ T5620] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 616.836795][ T5620] usb 3-1: Using ep0 maxpacket: 16 [ 616.838490][ T5620] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 616.839484][ T5620] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 616.839509][ T5620] usb 3-1: config 127 has no interface number 0 [ 616.839538][ T5620] usb 3-1: config 127 interface 124 has no altsetting 0 [ 616.841614][ T5620] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.841639][ T5620] usb 3-1: Product: syz [ 616.841655][ T5620] usb 3-1: Manufacturer: syz [ 616.841671][ T5620] usb 3-1: SerialNumber: syz [ 616.969092][T16704] nvme_fabrics: missing parameter 'transport=%s' [ 616.969110][T16704] nvme_fabrics: missing parameter 'nqn=%s' [ 617.368268][ T5279] 8021q: adding VLAN 0 to HW filter on device eth9 [ 617.450062][T16710] kvm: emulating exchange as write [ 617.704443][ T5667] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 617.715237][ T5620] usb 3-1: reset high-speed USB device number 127 using dummy_hcd [ 617.854505][ T5620] usb 3-1: device descriptor read/64, error -71 [ 617.856222][ T5667] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 617.862099][ T5667] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.862130][ T5667] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.862167][ T5667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.875607][ T5667] usb 2-1: config 0 descriptor?? [ 618.096569][ T5620] usb 3-1: reset high-speed USB device number 127 using dummy_hcd [ 618.243013][ T8239] IPVS: stop unused estimator thread 0... [ 618.253416][T16725] loop9: detected capacity change from 0 to 7 [ 618.254441][ T5620] usb 3-1: device descriptor read/64, error -71 [ 618.271332][T16725] Dev loop9: unable to read RDB block 7 [ 618.271373][T16725] loop9: unable to read partition table [ 618.271620][T16725] loop9: partition table beyond EOD, truncated [ 618.271650][T16725] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 618.357633][ T5667] hid_parser_main: 24 callbacks suppressed [ 618.357654][ T5667] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0 [ 618.357749][T16556] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 618.357768][ T5667] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0 [ 618.393287][ T5667] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0027/input/input150 [ 618.407718][T16556] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 618.409963][T16556] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 618.452722][ T5667] cm6533_jd 0003:0D8C:0022.0027: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 618.459033][T16556] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 618.459799][T16556] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 618.495418][ T5620] usb 3-1: reset high-speed USB device number 127 using dummy_hcd [ 618.515391][ T5620] usb 3-1: device descriptor read/8, error -71 [ 618.536085][T16556] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 618.548133][T16556] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 618.607285][T16556] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 618.818114][ T5620] usb 3-1: reset high-speed USB device number 127 using dummy_hcd [ 618.837494][ T5620] usb 3-1: device descriptor read/8, error -71 [ 618.873509][T16713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.887433][T16713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.948482][ T7384] usb 2-1: USB disconnect, device number 9 [ 618.996808][ T5620] usb 3-1: USB disconnect, device number 127 [ 619.174478][ T5620] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 619.185828][T16556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.229454][T16556] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.287383][ T8851] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.287483][ T8851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.302789][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.302888][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.317180][ T5620] usb 3-1: device descriptor read/64, error -71 [ 619.555501][ T5620] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 619.796607][T16757] kAFS: unable to lookup cell '' [ 619.951015][ T31] kauditd_printk_skb: 35 callbacks suppressed [ 619.951068][ T31] audit: type=1326 audit(1789444490.195:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16756 comm="syz.2.3168" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 619.951146][ T31] audit: type=1326 audit(1789444490.195:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16756 comm="syz.2.3168" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 619.952258][ T31] audit: type=1326 audit(1789444490.195:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16756 comm="syz.2.3168" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 619.952749][ T31] audit: type=1326 audit(1789444490.195:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16756 comm="syz.2.3168" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 619.952937][ T31] audit: type=1326 audit(1789444490.195:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16756 comm="syz.2.3168" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 619.992860][ T31] audit: type=1326 audit(1789444490.215:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16756 comm="syz.2.3168" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=233 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 619.992911][ T31] audit: type=1326 audit(1789444490.215:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16756 comm="syz.2.3168" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 619.992955][ T31] audit: type=1326 audit(1789444490.215:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16756 comm="syz.2.3168" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 619.993007][ T31] audit: type=1326 audit(1789444490.215:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16756 comm="syz.2.3168" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 619.993051][ T31] audit: type=1326 audit(1789444490.215:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16756 comm="syz.2.3168" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 620.038813][T16556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.322379][T16759] input: syz1 as /devices/virtual/input/input151 [ 620.642927][T16556] veth0_vlan: entered promiscuous mode [ 620.677384][T16556] veth1_vlan: entered promiscuous mode [ 620.815103][T16556] veth0_macvtap: entered promiscuous mode [ 620.835823][T16556] veth1_macvtap: entered promiscuous mode [ 620.899332][T16556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.951988][T16556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.045931][ T8239] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.047013][ T8239] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.047282][ T8239] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.104478][ T8851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.360161][T10933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.360185][T10933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.455225][ T7384] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 621.462738][ T8278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.462757][ T8278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.620423][ T7384] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 621.623379][ T7384] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.623404][ T7384] usb 4-1: config 0 has no interfaces? [ 621.623434][ T7384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.680668][ T7384] usb 4-1: config 0 descriptor?? [ 621.930141][ T7384] usb 4-1: USB disconnect, device number 30 [ 622.066645][T14630] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 622.205421][T14630] usb 5-1: device descriptor read/64, error -71 [ 622.460885][T14630] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 622.605926][T14630] usb 5-1: device descriptor read/64, error -71 [ 622.725423][T14630] usb usb5-port1: attempt power cycle [ 622.948575][T16796] hub 1-0:1.0: USB hub found [ 622.948963][T16796] hub 1-0:1.0: 1 port detected [ 623.010036][T16802] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 623.010036][T16802] Please contact the netfilter-devel mailing list or update your nftables rules. [ 623.097257][T14630] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 623.116128][T14630] usb 5-1: device descriptor read/8, error -71 [ 623.330770][T16809] netlink: 'syz.1.3181': attribute type 1 has an invalid length. [ 623.360944][T14630] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 623.381688][T14630] usb 5-1: device descriptor read/8, error -71 [ 623.400405][T16811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3181'. [ 623.402169][T16811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3181'. [ 623.454636][T16809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 623.489600][T14630] usb usb5-port1: unable to enumerate USB device [ 623.606896][T16811] bond1: (slave geneve2): making interface the new active one [ 623.609242][T16811] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 623.748503][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3184'. [ 623.776778][T16819] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 3 out of range (1000000..45000000) [ 623.899351][T16825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3184'. [ 624.064722][T16808] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3182'. [ 624.230987][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.231046][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.738856][T16842] loop9: detected capacity change from 0 to 7 [ 624.752384][T16842] Dev loop9: unable to read RDB block 7 [ 624.752428][T16842] loop9: unable to read partition table [ 624.752629][T16842] loop9: partition table beyond EOD, truncated [ 624.773340][T16842] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 624.938443][T16849] netlink: 'syz.1.3195': attribute type 1 has an invalid length. [ 624.969845][T16849] 8021q: adding VLAN 0 to HW filter on device bond2 [ 624.986433][T16849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3195'. [ 624.987278][T16849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3195'. [ 625.114843][ T5682] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 625.155891][ T992] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 625.265767][ T5682] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 625.267355][ T5682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.267384][ T5682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.267417][ T5682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.270723][ T5682] usb 3-1: config 0 descriptor?? [ 625.334450][ T992] usb 5-1: Using ep0 maxpacket: 32 [ 625.337347][ T992] usb 5-1: unable to get BOS descriptor or descriptor too short [ 625.337393][ T992] usb 5-1: New USB device found, idVendor=06e1, idProduct=a334, bcdDevice=e5.0d [ 625.338365][ T992] usb 5-1: config 212 has an invalid interface number: 244 but max is 0 [ 625.338389][ T992] usb 5-1: config 212 has no interface number 0 [ 625.338419][ T992] usb 5-1: config 212 interface 244 has no altsetting 0 [ 625.341326][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.341350][ T992] usb 5-1: Product: syz [ 625.341364][ T992] usb 5-1: Manufacturer: syz [ 625.341379][ T992] usb 5-1: SerialNumber: syz [ 625.512402][ T5682] pyra 0003:1E7D:2CF6.0028: item fetching failed at offset 5/7 [ 625.513325][ T5682] pyra 0003:1E7D:2CF6.0028: parse failed [ 625.513407][ T5682] pyra 0003:1E7D:2CF6.0028: probe with driver pyra failed with error -22 [ 625.557677][ T8239] IPVS: starting estimator thread 0... [ 625.618286][ T992] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 625.618368][ T992] dvb-usb: bulk message failed: -22 (3/0) [ 625.655497][T16861] IPVS: using max 31 ests per chain, 74400 per kthread [ 625.657003][ T992] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 625.658590][ T992] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 625.658734][ T992] usb 5-1: media controller created [ 625.703052][ T5682] usb 3-1: USB disconnect, device number 4 [ 625.715381][ T992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 625.751469][ T992] dvb-usb: bulk message failed: -22 (6/0) [ 625.751552][ T992] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 625.773077][ T992] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input152 [ 625.792232][ T992] dvb-usb: schedule remote query interval to 150 msecs. [ 625.792252][ T992] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 625.813117][ T992] usb 5-1: USB disconnect, device number 34 [ 625.897917][ T992] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 626.062074][T16867] netlink: 'syz.1.3200': attribute type 10 has an invalid length. [ 626.108934][T16867] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.140316][T16867] bond0: (slave team0): Enslaving as an active interface with an up link [ 626.299433][ T4984] ldm_validate_privheads(): Disk read failed. [ 626.299500][ T4984] loop0: [ 626.299519][ T4984] loop0: partition table partially beyond EOD, truncated [ 626.413962][T16883] netlink: 'syz.2.3207': attribute type 1 has an invalid length. [ 626.476929][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3207'. [ 626.497279][T16886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3207'. [ 626.517108][T16883] 8021q: adding VLAN 0 to HW filter on device bond4 [ 626.604507][ T992] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 626.754398][ T992] usb 4-1: Using ep0 maxpacket: 32 [ 626.755087][ T992] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 626.756053][ T992] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 626.756076][ T992] usb 4-1: config 0 has no interface number 0 [ 626.756114][ T992] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 626.756136][ T992] usb 4-1: config 0 interface 1 has no altsetting 0 [ 626.758924][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.758950][ T992] usb 4-1: Product: syz [ 626.758966][ T992] usb 4-1: Manufacturer: syz [ 626.758981][ T992] usb 4-1: SerialNumber: syz [ 626.814485][ T992] usb 4-1: config 0 descriptor?? [ 627.056631][ T992] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 627.081357][ T992] cx231xx 4-1:0.1: Failed to read PCB config [ 627.081452][ T992] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 627.153863][ T992] usb 4-1: USB disconnect, device number 31 [ 627.350229][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3214'. [ 627.373061][T16909] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 627.504573][ T992] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 627.656606][ T992] usb 4-1: Using ep0 maxpacket: 32 [ 627.658896][ T992] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 627.660715][ T992] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 627.660740][ T992] usb 4-1: config 0 has no interface number 0 [ 627.660783][ T992] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 627.660805][ T992] usb 4-1: config 0 interface 1 has no altsetting 0 [ 627.663171][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.663195][ T992] usb 4-1: Product: syz [ 627.663210][ T992] usb 4-1: Manufacturer: syz [ 627.663225][ T992] usb 4-1: SerialNumber: syz [ 627.738369][ T992] usb 4-1: config 0 descriptor?? [ 627.957001][ T992] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 627.959153][ T992] cx231xx 4-1:0.1: Failed to read PCB config [ 627.959209][ T992] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -32 [ 628.162040][ T4984] ldm_validate_privheads(): Disk read failed. [ 628.162171][ T4984] loop0: [ 628.162226][ T4984] loop0: partition table partially beyond EOD, truncated [ 629.452121][T14630] usb 4-1: USB disconnect, device number 32 [ 629.683430][T16954] loop8: detected capacity change from 0 to 16384 [ 629.846691][T16958] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3224'. [ 629.895991][T16955] loop8: detected capacity change from 16384 to 16383 [ 630.113616][T16964] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3226'. [ 630.364992][ T992] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 630.528017][ T992] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 630.532777][ T992] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 630.532804][ T992] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.532824][ T992] usb 2-1: config 0 has no interface number 0 [ 630.532865][ T992] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 630.532891][ T992] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 630.532914][ T992] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 630.610858][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.610886][ T992] usb 2-1: Product: syz [ 630.610901][ T992] usb 2-1: Manufacturer: syz [ 630.610917][ T992] usb 2-1: SerialNumber: syz [ 630.641204][ T992] usb 2-1: config 0 descriptor?? [ 630.911745][ T4933] Bluetooth: hci3: SCO packet for unknown connection handle 2850 [ 630.911848][ T4933] Bluetooth: hci3: SCO packet for unknown connection handle 2850 [ 630.911941][ T4933] Bluetooth: hci3: SCO packet for unknown connection handle 2850 [ 630.912016][ T4933] Bluetooth: hci3: SCO packet for unknown connection handle 2850 [ 630.912104][ T4933] Bluetooth: hci3: SCO packet for unknown connection handle 2850 [ 630.912179][ T4933] Bluetooth: hci3: SCO packet for unknown connection handle 2850 [ 630.912268][ T4933] Bluetooth: hci3: SCO packet for unknown connection handle 2850 [ 630.912342][ T4933] Bluetooth: hci3: SCO packet for unknown connection handle 2850 [ 630.912431][ T4933] Bluetooth: hci3: SCO packet for unknown connection handle 2850 [ 630.912505][ T4933] Bluetooth: hci3: SCO packet for unknown connection handle 2850 [ 631.814489][T16996] hub 1-0:1.0: USB hub found [ 631.818319][T16996] hub 1-0:1.0: 1 port detected [ 632.413560][T17004] netlink: 'syz.3.3238': attribute type 1 has an invalid length. [ 632.469996][T17010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3238'. [ 632.611674][T17004] 8021q: adding VLAN 0 to HW filter on device bond2 [ 632.645688][ T4984] ldm_validate_privheads(): Disk read failed. [ 632.645766][ T4984] loop0: [ 632.645793][ T4984] loop0: partition table partially beyond EOD, truncated [ 633.111085][ T992] usb 2-1: USB disconnect, device number 10 [ 633.175986][T17010] bond2: (slave geneve2): making interface the new active one [ 633.232873][T17010] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 634.047855][T17033] loop9: detected capacity change from 0 to 7 [ 634.049979][T17033] Dev loop9: unable to read RDB block 7 [ 634.050022][T17033] loop9: unable to read partition table [ 634.050222][T17033] loop9: partition table beyond EOD, truncated [ 634.050240][T17033] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 634.144346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 634.313305][T17030] netlink: 'syz.3.3244': attribute type 2 has an invalid length. [ 634.574933][ T7384] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 634.706350][ T7384] usb 4-1: device descriptor read/64, error -71 [ 634.712925][T17037] dlm: non-version read from control device 8224 [ 634.785175][ T992] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 634.934418][ T992] usb 2-1: Using ep0 maxpacket: 16 [ 634.935222][ T992] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 634.936254][ T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 634.938347][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.938372][ T992] usb 2-1: Product: syz [ 634.938386][ T992] usb 2-1: Manufacturer: syz [ 634.938402][ T992] usb 2-1: SerialNumber: syz [ 634.943075][ T992] usb 2-1: config 0 descriptor?? [ 634.999145][ T7384] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 635.013525][ T992] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 635.013562][ T992] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 635.134451][ T7384] usb 4-1: device descriptor read/64, error -71 [ 635.244915][ T7384] usb usb4-port1: attempt power cycle [ 635.499855][T17043] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901993312 (7803986624 ns) > initial count (6429106268 ns). Using initial count to start timer. [ 635.551360][T17043] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 635.598701][ T7384] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 635.615146][ T7384] usb 4-1: device descriptor read/8, error -71 [ 635.652600][ T992] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 635.856376][ T7384] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 635.878946][ T7384] usb 4-1: device descriptor read/8, error -71 [ 635.984719][ T7384] usb usb4-port1: unable to enumerate USB device [ 636.094496][T17052] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3254'. [ 636.127770][ T992] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 636.127824][ T992] em28xx 2-1:0.0: board has no eeprom [ 636.425971][T17056] netlink: 'syz.2.3255': attribute type 1 has an invalid length. [ 636.456748][ T992] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 636.456854][ T992] em28xx 2-1:0.0: dvb set to bulk mode. [ 636.457279][ T5667] em28xx 2-1:0.0: Binding DVB extension [ 636.522627][T17061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3255'. [ 636.585269][ T992] usb 2-1: USB disconnect, device number 11 [ 636.592882][ T992] em28xx 2-1:0.0: Disconnecting em28xx [ 636.681191][T17056] 8021q: adding VLAN 0 to HW filter on device bond5 [ 636.751860][ T5667] em28xx 2-1:0.0: Registering input extension [ 636.770421][ T992] em28xx 2-1:0.0: Closing input extension [ 636.879573][ T992] em28xx: Freeing device [ 637.512919][ T4984] ldm_validate_privheads(): Disk read failed. [ 637.512984][ T4984] loop0: [ 637.513004][ T4984] loop0: partition table partially beyond EOD, truncated [ 637.694342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 638.075611][ T992] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 638.186111][T17088] loop6: detected capacity change from 0 to 524288000 [ 638.225384][ T992] usb 4-1: Using ep0 maxpacket: 32 [ 638.226201][ T992] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 638.228319][ T992] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.230399][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.230421][ T992] usb 4-1: Product: syz [ 638.230436][ T992] usb 4-1: Manufacturer: syz [ 638.230449][ T992] usb 4-1: SerialNumber: syz [ 638.233690][ T992] usb 4-1: config 0 descriptor?? [ 638.385866][T17088] Invalid logical block size (255) [ 638.458364][ T992] usb 4-1: USB disconnect, device number 37 [ 638.533971][T17091] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3266'. [ 638.834347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 639.194340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 639.254341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 639.364347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 658.413364][ C0] sched: DL replenish lagged too much [ 671.144123][ T5617] Bluetooth: hci5: command 0x0406 tx timeout [ 684.008787][T15916] Bluetooth: hci3: command 0x0406 tx timeout [ 687.855938][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.872270][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 699.024059][T15912] Bluetooth: hci1: command 0x0406 tx timeout [ 747.329538][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.336755][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.654940][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.669262][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 822.064339][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 822.077539][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16952/1:b..l P17100/1:b..l P5278/1:b..l [ 822.087913][ C1] rcu: (detected by 1, t=10504 jiffies, g=123937, q=2473 ncpus=2) [ 822.095814][ C1] task:dhcpcd state:R running task stack:25288 pid:5278 tgid:5278 ppid:1 task_flags:0x400140 flags:0x00080800 [ 822.109309][ C1] Call Trace: [ 822.112587][ C1] [ 822.115526][ C1] __schedule+0x17db/0x58f0 [ 822.120073][ C1] ? __pfx___schedule+0x10/0x10 [ 822.124940][ C1] ? __lock_acquire+0x747/0x2de0 [ 822.129897][ C1] preempt_schedule_irq+0x4b/0x90 [ 822.134942][ C1] irqentry_exit+0x14f/0x910 [ 822.139542][ C1] ? trace_irq_disable+0x3b/0x140 [ 822.144579][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 822.150562][ C1] RIP: 0010:page_ext_lookup+0x87/0x180 [ 822.156027][ C1] Code: 48 c1 e8 03 42 80 3c 28 00 74 0c 48 c7 c7 80 65 a4 9a e8 6c 30 f4 ff 48 8b 05 45 cb 60 18 48 85 c0 74 36 4e 8d 34 f0 4c 89 f0 <48> c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 46 30 f4 ff 4d 8b 36 [ 822.175636][ C1] RSP: 0018:ffffc900033f7258 EFLAGS: 00000286 [ 822.181708][ C1] RAX: ffff88823ffe3000 RBX: 0000000000080967 RCX: ffff88802c05ddc0 [ 822.189681][ C1] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000000000 [ 822.197653][ C1] RBP: 0000000000000000 R08: ffffffff8241df0e R09: 0000000000000000 [ 822.205625][ C1] R10: 0000000000000010 R11: ffffffff81b285d0 R12: 0000000000080967 [ 822.213602][ C1] R13: dffffc0000000000 R14: ffff88823ffe3000 R15: 0000000000001000 [ 822.221587][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 822.227747][ C1] ? __update_page_owner_free_handle+0x2e/0x4a0 [ 822.234001][ C1] ? page_ext_lookup+0x4d/0x180 [ 822.238859][ C1] ? __update_page_owner_free_handle+0x2e/0x4a0 [ 822.245105][ C1] __update_page_owner_free_handle+0x13a/0x4a0 [ 822.251268][ C1] ? page_ext_put+0x97/0xc0 [ 822.255786][ C1] __reset_page_owner+0x85/0x1f0 [ 822.260733][ C1] __free_frozen_pages+0xc93/0xd90 [ 822.265864][ C1] __slab_free+0x274/0x2c0 [ 822.270282][ C1] ? lock_acquire+0x115/0x350 [ 822.274969][ C1] ? qlist_free_all+0x8e/0x100 [ 822.279741][ C1] qlist_free_all+0x99/0x100 [ 822.284338][ C1] kasan_quarantine_reduce+0x148/0x160 [ 822.289811][ C1] __kasan_slab_alloc+0x22/0x80 [ 822.294669][ C1] __kmalloc_node_track_caller_noprof+0x44b/0x720 [ 822.301090][ C1] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 822.307679][ C1] ? alloc_skb_with_frags+0xc6/0x760 [ 822.312970][ C1] ? alloc_skb_with_frags+0xc6/0x760 [ 822.318271][ C1] __alloc_skb+0x2c1/0x7a0 [ 822.322699][ C1] alloc_skb_with_frags+0xc6/0x760 [ 822.327830][ C1] sock_alloc_send_pskb+0x878/0x990 [ 822.333062][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 822.338801][ C1] ? __lock_acquire+0x747/0x2de0 [ 822.343751][ C1] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 822.349835][ C1] unix_dgram_sendmsg+0x4da/0x17b0 [ 822.354976][ C1] ? lock_acquire+0x115/0x350 [ 822.359664][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 822.365226][ C1] ? aa_sock_msg_perm+0x129/0x210 [ 822.370263][ C1] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 822.375830][ C1] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 822.381741][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 822.386780][ C1] sock_write_iter+0x2de/0x3e0 [ 822.391558][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 822.396871][ C1] do_iter_readv_writev+0x612/0x8c0 [ 822.402076][ C1] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 822.407803][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 822.413186][ C1] ? security_file_permission+0x75/0x260 [ 822.418833][ C1] ? rw_verify_area+0x203/0x4c0 [ 822.423704][ C1] vfs_writev+0x343/0x990 [ 822.428053][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 822.432933][ C1] ? import_ubuf+0xfb/0x1d0 [ 822.437455][ C1] do_writev+0x154/0x2e0 [ 822.441711][ C1] ? __pfx_do_writev+0x10/0x10 [ 822.446483][ C1] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 822.452130][ C1] do_syscall_64+0x166/0x520 [ 822.456731][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.462799][ C1] ? clear_bhb_loop+0x70/0xc0 [ 822.467484][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.473383][ C1] RIP: 0033:0x7f2d0df1e407 [ 822.477800][ C1] RSP: 002b:00007ffd32689d00 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 822.486215][ C1] RAX: ffffffffffffffda RBX: 00007f2d0de94780 RCX: 00007f2d0df1e407 [ 822.494187][ C1] RDX: 0000000000000005 RSI: 00007ffd32689d60 RDI: 000000000000000a [ 822.502158][ C1] RBP: 000055944470f870 R08: 0000000000000000 R09: 0000000000000000 [ 822.510129][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000559473257220 [ 822.518098][ C1] R13: 000000000000012c R14: 0000000000004801 R15: 0000559473250284 [ 822.526087][ C1] [ 822.529111][ C1] task:syz-executor state:R running task stack:25544 pid:17100 tgid:17100 ppid:15917 task_flags:0x400040 flags:0x08080000 [ 822.542601][ C1] Call Trace: [ 822.545881][ C1] [ 822.548832][ C1] __schedule+0x17db/0x58f0 [ 822.553379][ C1] ? __lock_acquire+0x747/0x2de0 [ 822.558326][ C1] ? __lock_acquire+0x747/0x2de0 [ 822.563275][ C1] ? __pfx___schedule+0x10/0x10 [ 822.568147][ C1] ? __lock_acquire+0x747/0x2de0 [ 822.573099][ C1] preempt_schedule_irq+0x4b/0x90 [ 822.578130][ C1] irqentry_exit+0x14f/0x910 [ 822.582724][ C1] ? trace_irq_disable+0x3b/0x140 [ 822.587757][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 822.593742][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 822.599031][ C1] Code: ff ff ff e8 f0 c9 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 42 b5 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 07 3a da [ 822.618652][ C1] RSP: 0018:ffffc9000f56f860 EFLAGS: 00000296 [ 822.624733][ C1] RAX: 5dd7b248b8b0d600 RBX: 0000000000000000 RCX: 0000000000000046 [ 822.632705][ C1] RDX: 0000000041c7ed29 RSI: ffffffff8e6fe7fc RDI: ffffffff8c6d9a80 [ 822.640678][ C1] RBP: ffff88807f67ddc0 R08: ffffffff8177f1df R09: 0000000000000000 [ 822.648655][ C1] R10: ffffc9000f56f998 R11: ffffffff81b285d0 R12: ffffffff8ed5c8a0 [ 822.656631][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 822.664613][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 822.670774][ C1] ? unwind_next_frame+0x8f/0x2550 [ 822.675899][ C1] ? stack_trace_save+0xa9/0x100 [ 822.680850][ C1] ? unwind_next_frame+0x8f/0x2550 [ 822.685970][ C1] unwind_next_frame+0xac/0x2550 [ 822.690917][ C1] ? unwind_next_frame+0x8f/0x2550 [ 822.696043][ C1] ? __unwind_start+0x514/0x660 [ 822.700909][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 822.707074][ C1] arch_stack_walk+0x11b/0x150 [ 822.711850][ C1] ? stack_trace_save+0xa9/0x100 [ 822.716809][ C1] stack_trace_save+0xa9/0x100 [ 822.721589][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 822.726971][ C1] ? __lock_acquire+0x747/0x2de0 [ 822.732187][ C1] save_stack+0x122/0x230 [ 822.736525][ C1] ? __pfx_save_stack+0x10/0x10 [ 822.741398][ C1] ? page_ext_put+0x97/0xc0 [ 822.745914][ C1] __reset_page_owner+0x71/0x1f0 [ 822.750862][ C1] __free_frozen_pages+0xc93/0xd90 [ 822.755997][ C1] __slab_free+0x274/0x2c0 [ 822.760432][ C1] qlist_free_all+0x99/0x100 [ 822.765029][ C1] ? do_getname+0x2e/0x250 [ 822.769455][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 822.775109][ C1] kasan_quarantine_reduce+0x148/0x160 [ 822.780588][ C1] __kasan_slab_alloc+0x22/0x80 [ 822.785454][ C1] kmem_cache_alloc_noprof+0x2b9/0x600 [ 822.790933][ C1] ? do_getname+0x2e/0x250 [ 822.795361][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 822.801008][ C1] ? do_getname+0x2e/0x250 [ 822.805443][ C1] do_getname+0x2e/0x250 [ 822.809696][ C1] ? __se_sys_symlinkat+0x22/0x2b0 [ 822.814819][ C1] __se_sys_symlinkat+0x2e/0x2b0 [ 822.819772][ C1] __do_fast_syscall_32+0x27a/0x6a0 [ 822.824983][ C1] ? do_fast_syscall_32+0x33/0x70 [ 822.830016][ C1] ? irqentry_exit+0x10f/0x910 [ 822.834787][ C1] ? trace_irq_disable+0x3b/0x140 [ 822.839821][ C1] do_fast_syscall_32+0x33/0x70 [ 822.844681][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 822.851016][ C1] RIP: 0023:0xf702f0ec [ 822.855095][ C1] RSP: 002b:00000000f754fd78 EFLAGS: 00000206 ORIG_RAX: 0000000000000130 [ 822.863512][ C1] RAX: ffffffffffffffda RBX: 00000000f754fe54 RCX: 00000000ffffff9c [ 822.871485][ C1] RDX: 00000000f72330c5 RSI: 000000000000002c RDI: 00000000f754fe54 [ 822.879461][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 822.887432][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 822.895406][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 822.903397][ C1] [ 822.906414][ C1] task:syz.4.3221 state:R running task stack:20840 pid:16952 tgid:16952 ppid:16556 task_flags:0x40064c flags:0x08080001 [ 822.919898][ C1] Call Trace: [ 822.923178][ C1] [ 822.926115][ C1] __schedule+0x17db/0x58f0 [ 822.930639][ C1] ? __lock_acquire+0x747/0x2de0 [ 822.935600][ C1] ? __lock_acquire+0x747/0x2de0 [ 822.940544][ C1] ? __pfx___schedule+0x10/0x10 [ 822.945414][ C1] ? __lock_acquire+0x747/0x2de0 [ 822.950371][ C1] preempt_schedule_irq+0x4b/0x90 [ 822.955404][ C1] irqentry_exit+0x14f/0x910 [ 822.959996][ C1] ? trace_irq_disable+0x3b/0x140 [ 822.965027][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 822.971015][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 822.976307][ C1] Code: ff ff ff e8 f0 c9 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 42 b5 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 07 3a da [ 822.995917][ C1] RSP: 0000:ffffc9000592ede0 EFLAGS: 00000292 [ 823.001989][ C1] RAX: fd5a648273649000 RBX: 0000000000000000 RCX: 0000000000000046 [ 823.009960][ C1] RDX: 00000000105209fd RSI: ffffffff8e6fe7fc RDI: ffffffff8c6d9a80 [ 823.017967][ C1] RBP: ffff8880320f8000 R08: ffffffff8177f1df R09: 0000000000000000 [ 823.025941][ C1] R10: ffffc9000592ef18 R11: ffffffff81b285d0 R12: ffffffff8ed5c8a0 [ 823.033912][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 823.041888][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 823.048052][ C1] ? unwind_next_frame+0x8f/0x2550 [ 823.053180][ C1] ? __fput+0x675/0xa50 [ 823.057346][ C1] ? unwind_next_frame+0x8f/0x2550 [ 823.062476][ C1] unwind_next_frame+0xac/0x2550 [ 823.067430][ C1] ? unwind_next_frame+0x8f/0x2550 [ 823.072559][ C1] ? finish_dput+0x1a/0x260 [ 823.077080][ C1] ? unwind_next_frame+0x8f/0x2550 [ 823.082211][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 823.088431][ C1] arch_stack_walk+0x11b/0x150 [ 823.093212][ C1] ? __fput+0x675/0xa50 [ 823.097386][ C1] stack_trace_save+0xa9/0x100 [ 823.102170][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 823.107563][ C1] ? stack_depot_save_flags+0xa5/0x7f0 [ 823.113039][ C1] save_stack+0x122/0x230 [ 823.117381][ C1] ? __pfx_save_stack+0x10/0x10 [ 823.122238][ C1] ? free_unref_folios+0xdc2/0x14e0 [ 823.127444][ C1] ? folios_put_refs+0x9e9/0xb30 [ 823.132393][ C1] ? shmem_undo_range+0x4e6/0x15d0 [ 823.137511][ C1] ? shmem_evict_inode+0x247/0xae0 [ 823.142634][ C1] ? evict+0x624/0xb50 [ 823.146710][ C1] ? dentry_kill+0x1b9/0x880 [ 823.151308][ C1] ? finish_dput+0x1a/0x260 [ 823.155822][ C1] ? __fput+0x675/0xa50 [ 823.160000][ C1] ? page_ext_put+0x97/0xc0 [ 823.164516][ C1] __reset_page_owner+0x71/0x1f0 [ 823.169463][ C1] free_unref_folios+0xdc2/0x14e0 [ 823.174510][ C1] ? folios_put_refs+0x991/0xb30 [ 823.179465][ C1] folios_put_refs+0x9e9/0xb30 [ 823.184253][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 823.189552][ C1] ? folio_batch_remove_exceptionals+0x183/0x1f0 [ 823.195897][ C1] shmem_undo_range+0x4e6/0x15d0 [ 823.200855][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 823.206286][ C1] ? __lock_acquire+0x747/0x2de0 [ 823.211236][ C1] ? stack_trace_save+0xa9/0x100 [ 823.216194][ C1] shmem_evict_inode+0x247/0xae0 [ 823.221153][ C1] ? inode_wait_for_writeback+0x16d/0x3b0 [ 823.226877][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 823.232356][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 823.238427][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 823.243475][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 823.248603][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 823.254089][ C1] evict+0x624/0xb50 [ 823.258001][ C1] ? __pfx_evict+0x10/0x10 [ 823.262427][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 823.267555][ C1] ? _raw_spin_unlock+0x28/0x50 [ 823.272416][ C1] ? iput+0xb84/0xf00 [ 823.276417][ C1] dentry_kill+0x1b9/0x880 [ 823.280843][ C1] finish_dput+0x1a/0x260 [ 823.285185][ C1] __fput+0x675/0xa50 [ 823.289186][ C1] task_work_run+0x1d9/0x270 [ 823.293790][ C1] ? __pfx_task_work_run+0x10/0x10 [ 823.298907][ C1] ? do_exit+0x735/0x2360 [ 823.303238][ C1] ? kmem_cache_free+0x182/0x650 [ 823.308177][ C1] ? put_net+0x16a/0x260 [ 823.312433][ C1] do_exit+0x73a/0x2360 [ 823.316600][ C1] ? __pfx_do_exit+0x10/0x10 [ 823.321193][ C1] ? proc_coredump_connector+0x187/0x4e0 [ 823.326851][ C1] do_group_exit+0x22d/0x2f0 [ 823.331453][ C1] get_signal+0x121b/0x12c0 [ 823.335984][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 823.341546][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 823.347729][ C1] irqentry_exit+0x2ba/0x910 [ 823.352330][ C1] ? trace_irq_disable+0x3b/0x140 [ 823.357366][ C1] asm_exc_page_fault+0x26/0x30 [ 823.362221][ C1] RIP: 0023:0xf7f560ec [ 823.366288][ C1] RSP: 002b:0000000000000030 EFLAGS: 00010206 [ 823.372360][ C1] RAX: 0000000000000000 RBX: 0000000040000000 RCX: 0000000000000030 [ 823.380337][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 823.388311][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 823.396281][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 823.404253][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 823.412242][ C1] [ 823.415260][ C1] rcu: rcu_preempt kthread starved for 6854 jiffies! g123937 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 823.426277][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 823.436245][ C1] rcu: RCU grace-period kthread stack dump: [ 823.442128][ C1] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 823.455621][ C1] Call Trace: [ 823.458899][ C1] [ 823.461832][ C1] __schedule+0x17db/0x58f0 [ 823.466376][ C1] ? __pfx___schedule+0x10/0x10 [ 823.471242][ C1] ? lock_acquire+0x115/0x350 [ 823.475930][ C1] ? schedule+0x90/0x2b0 [ 823.480188][ C1] schedule+0x164/0x2b0 [ 823.484357][ C1] schedule_timeout+0x152/0x2c0 [ 823.489216][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 823.494599][ C1] ? __pfx_process_timeout+0x10/0x10 [ 823.499904][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 823.505724][ C1] ? prepare_to_swait_event+0x322/0x350 [ 823.511294][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 823.516161][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 823.522319][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 823.527604][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 823.532825][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 823.537420][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 823.542625][ C1] ? __kthread_parkme+0x71/0x1f0 [ 823.547576][ C1] ? __kthread_parkme+0x199/0x1f0 [ 823.552623][ C1] kthread+0x38b/0x480 [ 823.556695][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 823.561988][ C1] ? __pfx_kthread+0x10/0x10 [ 823.566594][ C1] ret_from_fork+0x514/0xb70 [ 823.571193][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 823.576320][ C1] ? __switch_to+0xc89/0x1420 [ 823.581020][ C1] ? __pfx_kthread+0x10/0x10 [ 823.585619][ C1] ret_from_fork_asm+0x1a/0x30 [ 823.590413][ C1] [ 823.593432][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 823.599749][ C1] Sending NMI from CPU 1 to CPUs 0: [ 823.604971][ C0] NMI backtrace for cpu 0 [ 823.604992][ C0] CPU: 0 UID: 0 PID: 8240 Comm: kworker/u8:16 Tainted: G L syzkaller #0 PREEMPT(full) [ 823.605044][ C0] Tainted: [L]=SOFTLOCKUP [ 823.605058][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 823.605070][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 823.605098][ C0] RIP: 0010:lock_acquire+0x5/0x350 [ 823.605118][ C0] Code: 11 a9 00 ff 00 ff 0f 95 c0 c3 cc cc cc cc cc 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 58 4c 89 cb 45 89 c7 41 89 cd [ 823.605134][ C0] RSP: 0018:ffffc90000006a60 EFLAGS: 00000046 [ 823.605149][ C0] RAX: 8000000001000301 RBX: 0000000000000046 RCX: 0000000000000000 [ 823.605161][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880b8628298 [ 823.605173][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 823.605184][ C0] R10: dffffc0000000000 R11: ffffffff81b422d0 R12: dffffc0000000000 [ 823.605198][ C0] R13: 0000000000000000 R14: ffff8880b8628280 R15: ffff8880b86282d4 [ 823.605211][ C0] FS: 0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 [ 823.605237][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 823.605250][ C0] CR2: 00000000f7186380 CR3: 000000007a0d4000 CR4: 00000000003526f0 [ 823.605266][ C0] Call Trace: [ 823.605273][ C0] [ 823.605281][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 823.605306][ C0] ? hrtimer_interrupt+0xfd/0xaa0 [ 823.605330][ C0] hrtimer_interrupt+0xfd/0xaa0 [ 823.605354][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 823.605370][ C0] ? sched_clock+0x41/0x60 [ 823.605393][ C0] ? sched_clock_cpu+0x74/0x440 [ 823.605412][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 823.605435][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 823.605456][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 823.605473][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 823.605492][ C0] RIP: 0010:enqueue_to_backlog+0x6af/0xef0 [ 823.605519][ C0] Code: 89 da e8 44 6f f7 ff b8 01 00 00 00 eb 32 e8 98 9c 15 f8 e8 c3 c6 32 02 4d 85 f6 0f 84 4e fe ff ff e8 85 9c 15 f8 fb 4c 89 e0 <48> c1 e8 03 0f b6 04 28 84 c0 0f 85 bd 04 00 00 41 89 1c 24 31 c0 [ 823.605533][ C0] RSP: 0018:ffffc90000006cc8 EFLAGS: 00000246 [ 823.605548][ C0] RAX: ffffc90000006d58 RBX: 00000000000dc17a RCX: ffff88802d909f40 [ 823.605560][ C0] RDX: 8000000000000300 RSI: 0000000000000100 RDI: 0000000000000000 [ 823.605572][ C0] RBP: dffffc0000000000 R08: 0000000000000100 R09: 1ffffffff20f456f [ 823.605585][ C0] R10: dffffc0000000000 R11: fffffbfff20f4570 R12: ffffc90000006d58 [ 823.605597][ C0] R13: ffff8881a230ec80 R14: 0000000000000200 R15: 0000000000000000 [ 823.605618][ C0] ? enqueue_to_backlog+0x6ab/0xef0 [ 823.605646][ C0] netif_rx_internal+0x120/0x550 [ 823.605668][ C0] ? __pfx_netif_rx_internal+0x10/0x10 [ 823.605687][ C0] ? eth_type_trans+0x352/0x800 [ 823.605712][ C0] ? rcu_is_watching+0x16/0xb0 [ 823.605734][ C0] __netif_rx+0x7e/0xd0 [ 823.605758][ C0] loopback_xmit+0x43b/0x660 [ 823.605779][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 823.605809][ C0] __dev_queue_xmit+0x14c0/0x3820 [ 823.605835][ C0] ? synproxy_pernet+0x23/0x240 [ 823.605856][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 823.605878][ C0] ? ipv4_synproxy_hook+0x246/0xd10 [ 823.605898][ C0] ? __lock_acquire+0x747/0x2de0 [ 823.605917][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 823.605940][ C0] ? __pfx_nf_confirm+0x10/0x10 [ 823.605958][ C0] ? lock_acquire+0x40/0x350 [ 823.605986][ C0] ? ip_finish_output2+0x972/0x10b0 [ 823.606005][ C0] ip_finish_output2+0xbda/0x10b0 [ 823.606022][ C0] ? ip_finish_output2+0x3de/0x10b0 [ 823.606043][ C0] ip_output+0x29f/0x450 [ 823.606066][ C0] ? ip_output+0x5a/0x450 [ 823.606091][ C0] synproxy_send_client_synack+0x89b/0xde0 [ 823.606117][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 823.606135][ C0] ? nft_tproxy_eval+0x718/0x1c80 [ 823.606154][ C0] ? synproxy_pernet+0x45/0x270 [ 823.606177][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 823.606200][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 823.606274][ C0] ? nf_ip_checksum+0x13c/0x510 [ 823.606302][ C0] nft_synproxy_do_eval+0x335/0x550 [ 823.606326][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 823.606347][ C0] ? __ip_vs_conn_in_get+0xa6/0x10f0 [ 823.606373][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 823.606401][ C0] nft_do_chain+0x48d/0x1b10 [ 823.606430][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 823.606468][ C0] nft_do_chain_inet+0x360/0x4b0 [ 823.606490][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 823.606518][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 823.606539][ C0] nf_hook_slow+0xc5/0x220 [ 823.606558][ C0] NF_HOOK+0x21f/0x3c0 [ 823.606579][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 823.606599][ C0] ? NF_HOOK+0x9e/0x3c0 [ 823.606618][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 823.606639][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 823.606662][ C0] ? ip_local_deliver+0x113/0x190 [ 823.606683][ C0] NF_HOOK+0x336/0x3c0 [ 823.606704][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 823.606723][ C0] ? NF_HOOK+0x9e/0x3c0 [ 823.606741][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 823.606761][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 823.606781][ C0] ? ip_rcv_core+0x88d/0xd50 [ 823.606803][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 823.606822][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 823.606842][ C0] process_backlog+0xa6b/0x18b0 [ 823.606863][ C0] ? process_backlog+0x3de/0x18b0 [ 823.606887][ C0] __napi_poll+0xaa/0x330 [ 823.606905][ C0] net_rx_action+0x61d/0xf50 [ 823.606929][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 823.606946][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 823.606979][ C0] ? net_tx_action+0xbff/0xc30 [ 823.606999][ C0] handle_softirqs+0x226/0x860 [ 823.607023][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 823.607048][ C0] __irq_exit_rcu+0xcb/0x220 [ 823.607070][ C0] irq_exit_rcu+0x9/0x30 [ 823.607090][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 823.607108][ C0] [ 823.607115][ C0] [ 823.607128][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 823.607147][ C0] RIP: 0010:rcu_is_watching+0x69/0xb0 [ 823.607168][ C0] Code: f7 e8 4b 6c 8b 00 48 c7 c3 18 1a 96 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 35 8b 03 65 48 ff 0d 97 81 e8 11 <74> 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f e9 d5 9a 3b 0a cc e8 0f 07 [ 823.607185][ C0] RSP: 0018:ffffc9000540e998 EFLAGS: 00000286 [ 823.607201][ C0] RAX: 0000000000a704ec RBX: ffff8880b8633a18 RCX: 8000000000000001 [ 823.607215][ C0] RDX: ffffffff910c9af6 RSI: ffffffff8c6d9a60 RDI: ffffffff8c6d9a20 [ 823.607228][ C0] RBP: 0000000000000000 R08: 0000000000000015 R09: 0000000000000000 [ 823.607245][ C0] R10: ffffc9000540eb18 R11: ffffffff81b285d0 R12: dffffc0000000000 [ 823.607258][ C0] R13: ffffffff8177f1df R14: ffffffff8e7487d0 R15: dffffc0000000000 [ 823.607273][ C0] ? unwind_next_frame+0x8f/0x2550 [ 823.607294][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 823.607316][ C0] ? rcu_is_watching+0x16/0xb0 [ 823.607336][ C0] lock_release+0x4b/0x3c0 [ 823.607354][ C0] ? unwind_next_frame+0x8f/0x2550 [ 823.607374][ C0] ? unwind_next_frame+0x8f/0x2550 [ 823.607394][ C0] unwind_next_frame+0x1baa/0x2550 [ 823.607416][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 823.607441][ C0] ? unwind_next_frame+0x8f/0x2550 [ 823.607462][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 823.607479][ C0] arch_stack_walk+0x11b/0x150 [ 823.607501][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 823.607528][ C0] stack_trace_save+0xa9/0x100 [ 823.607554][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 823.607585][ C0] kasan_save_track+0x3e/0x80 [ 823.607603][ C0] ? kasan_save_track+0x3e/0x80 [ 823.607619][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 823.607637][ C0] ? __kmalloc_noprof+0x36b/0x720 [ 823.607653][ C0] ? cfg80211_inform_single_bss_data+0x990/0x1be0 [ 823.607675][ C0] ? cfg80211_inform_bss_data+0x263/0x3cc0 [ 823.607696][ C0] ? cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 823.607718][ C0] ? ieee80211_bss_info_update+0x791/0xa50 [ 823.607738][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 [ 823.607758][ C0] ? ieee80211_iface_work+0x78a/0x1010 [ 823.607778][ C0] ? cfg80211_wiphy_work+0x29e/0x420 [ 823.607801][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 823.607823][ C0] ? worker_thread+0xa47/0xfb0 [ 823.607844][ C0] ? kthread+0x38b/0x480 [ 823.607859][ C0] ? ret_from_fork+0x514/0xb70 [ 823.607874][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 823.607919][ C0] __kasan_kmalloc+0x93/0xb0 [ 823.607939][ C0] __kmalloc_noprof+0x36b/0x720 [ 823.607955][ C0] ? __kmalloc_noprof+0x1ab/0x720 [ 823.607970][ C0] ? cfg80211_inform_single_bss_data+0x990/0x1be0 [ 823.607992][ C0] ? cfg80211_inform_single_bss_data+0x990/0x1be0 [ 823.608017][ C0] cfg80211_inform_single_bss_data+0x990/0x1be0 [ 823.608044][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 823.608078][ C0] ? _ieee802_11_parse_elems_full+0x2c0/0x48f0 [ 823.608105][ C0] ? cfg80211_inform_bss_data+0x24b/0x3cc0 [ 823.608130][ C0] cfg80211_inform_bss_data+0x263/0x3cc0 [ 823.608165][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 823.608204][ C0] ? __lock_acquire+0x747/0x2de0 [ 823.608257][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 823.608282][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 823.608304][ C0] ieee80211_bss_info_update+0x791/0xa50 [ 823.608326][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 823.608345][ C0] ? sta_info_get+0x4f/0x300 [ 823.608370][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 823.608393][ C0] ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 [ 823.608417][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 823.608442][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 823.608460][ C0] ? __lock_acquire+0x747/0x2de0 [ 823.608478][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 823.608508][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 823.608531][ C0] ? kcov_remote_start+0x9c/0x7e0 [ 823.608562][ C0] ? kcov_remote_start+0x1a6/0x7e0 [ 823.608591][ C0] ieee80211_iface_work+0x78a/0x1010 [ 823.608616][ C0] cfg80211_wiphy_work+0x29e/0x420 [ 823.608642][ C0] ? process_scheduled_works+0x97a/0x1630 [ 823.608664][ C0] process_scheduled_works+0xc3d/0x1630 [ 823.608700][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 823.608725][ C0] ? assign_work+0x3cf/0x5d0 [ 823.608749][ C0] worker_thread+0xa47/0xfb0 [ 823.608783][ C0] kthread+0x38b/0x480 [ 823.608799][ C0] ? __pfx_worker_thread+0x10/0x10 [ 823.608820][ C0] ? __pfx_kthread+0x10/0x10 [ 823.608838][ C0] ret_from_fork+0x514/0xb70 [ 823.608855][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 823.608881][ C0] ? __switch_to+0xc89/0x1420 [ 823.608904][ C0] ? __pfx_kthread+0x10/0x10 [ 823.608921][ C0] ret_from_fork_asm+0x1a/0x30 [ 823.608953][ C0]