last executing test programs: 12.669444543s ago: executing program 3 (id=2868): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4(r0, 0x0, &(0x7f00000004c0), 0x80000) bind$can_j1939(r1, &(0x7f0000000500)={0x1d, 0x0, 0x0, {0x1, 0x1}, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x6c}}, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0xf, 0x2, 0x201, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x1}, [@typed={0x8, 0x12b, 0x0, 0x0, @fd=r0}, @generic="8e1779e45bd1be4a5b2b90d6008f2351abaf39262c94df4d8f7f535cae2132972f241d9a462a4a9090af6ed8322ca55914e0c5"]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x20, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x20}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x91}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c0040800500010005000000"], 0x3c}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) connect$nfc_llcp(r1, &(0x7f0000000880)={0x27, r10, 0xffffffffffffffff, 0x4, 0xbf, 0x2, "376eea3c16a5500e2acc30f4df1b1aaf114458c5d93fba36d331e969d7988d77f61b39c2be457c25978f00d6370e642db9ba0e26a92f9793337692116694df", 0xa}, 0x60) r11 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r11, 0x8915, &(0x7f0000002400)={'veth0_virt_wifi\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r12) syz_init_net_socket$ax25(0x3, 0x5, 0x0) 11.154332011s ago: executing program 0 (id=2872): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180000001800ff006d0000008500000008000000667ddf6a534b07d8234a1f3c2d8e6da800641fe49307a6b4748f1aca1c0cfbdef2983f58870c792bbf14954dee5925229e580f0417b66f0000a6768559da023bdee2144d5fe220af603068669dbbc2839fc8cdb2c03c71ec0e2a722917d20f54367df73ef4aa6db2fa0b7772a5025214831453a31ebce08e306779b41503e28ad25c00"/163, @ANYRES16], &(0x7f0000000080)='GPL\x00', 0x3, 0x24, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000340)=[{0x5, 0x2, 0x10, 0x8}, {0x5, 0x4, 0x2, 0xc}, {0x3, 0x4, 0xf, 0x5}, {0x4, 0x3, 0x7, 0x3}, {0x0, 0x3, 0x8, 0x9}, {0x5, 0x3, 0x7, 0x6}], 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x1}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x8004) openat$cgroup_pressure(r1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x5fc, 0x83, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}}}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000e2ff092c0000001187089de54384e700010000000000000000000000000a"], 0x28}}, 0x40880) pipe(&(0x7f0000000080)) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a000001", 0x2c}], 0x1}, 0x0) 9.217247839s ago: executing program 0 (id=2877): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, 0x0, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 8.40450159s ago: executing program 4 (id=2879): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) 8.312649559s ago: executing program 1 (id=2880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, 0x0, 0x100, 0x70bd25, 0x7, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "b2b4004324bf264ebf03f4e6e6e4ac58052cbb25711b7198c2637078621b0b"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb55}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8001}, 0x4008000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x208, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x40) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) fcntl$addseals(r5, 0x409, 0x7) ftruncate(r5, 0x40) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0) socket(0x1f, 0xa, 0x10003) read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020}, 0x2020) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) syz_open_dev$tty1(0xc, 0x4, 0x1) 8.184905894s ago: executing program 0 (id=2881): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x391180, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@fallback=r1, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$rds(0x15, 0x5, 0x0) splice(r4, 0x0, r3, 0x0, 0x361, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)={0x1134, 0x1f, 0x1, 0x0, 0x80000, "", [@nested={0x1122, 0x0, 0x0, 0x1, [@typed={0x14, 0x403, 0x0, 0x0, @ipv6=@loopback}, @nested={0x1031, 0x88, 0x0, 0x1, [@generic="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", @generic="8a2a8fc97724bf5b1306575a97e58a2473cec4b75f6bc3bed9c4d6a52cbdbe9c17a52c6d522e9918b7be38982e"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b504681000000000000009ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817"]}]}, 0x1134}], 0x1, 0x0, 0x0, 0x20000004}, 0x140000c4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000ffff000000000000", @ANYRES32, @ANYBLOB="0600feff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000010300"/21], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x3, 0x0, r2, 0x5e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x2}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0xc, 0x5, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}, 0x10) 7.659789491s ago: executing program 2 (id=2882): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) syz_emit_ethernet(0xd2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "5a8874", 0x9c, 0x88, 0x0, @private2, @mcast2, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "1102a8887a2c9305895b8cb59331cdffdf8e04142a112e9e8a24dbc3ec49d3a4", "2db6a193bcc7961b3d7ffdd654edbf06b88768a543517e85683cba3eacfc34c915f14e6909b49f9237345255b67d8e45", "381da35b3b5c874ffc044f7e6bdb47fd7e6379a64c0cc354322238af", {"a263753d250cfb21bd9221645c29f7d3", "432c3aac2290feba17bfa3643cdcbbfd"}}}}}}}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x2a) ioctl$TIOCSERGETLSR(r0, 0x5459, 0x0) 6.021799386s ago: executing program 2 (id=2883): socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) shutdown(0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x3}, &(0x7f00000000c0)=0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000480)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)="c7f6317b2bee543d8f13a46256204e482bfd2b6e691e3159e010fa1fd73e2ff30640a5a8e46900de69efe08665303d2d0cecdf63f1e435431fa9b1bdc2f44db3937ce72312c111f787b7f6dc88d23bb847e6e7e04f6559fcb93f883ff8018ee1b42b887394aa6faf15988ea5534ab8777974111e142463494185e32f25b032a2eba26311f3864ede7c20185ba95b35c61cabc4cfda8dd2dab16ad3977df2f79e338938b8017da64ad2a0b42d9618092a7e596a20c4bceba2e2f2e28e3f082af5054a04bfd79bff97a105f27fe20068c39fa6bcf11a7da9531f", 0xd9}, {&(0x7f0000000600)="2c4155c4495008afb4e5bd5c68ff7dbaff9aaf65c3b7285fd6e8509c5edb6ee88ba9636dbfd1423e3fd9f8b618022daeefdc15ecba20977224b910aa0a0fc965e03c5668c51c0468c8ae6526f2761eb18acb172eb98c1b875659fbc02d349fef024be770bf85d4132c4e60bb4892911c86e0c8be789cbce30929fa6f966ab0e4dfe0aa70b284cf69fa0af5722397bf666ee71b39b9a428cdde8af1c547bcd2a424c564ae82a06d5d7c5d548908e8eaa0c46fa5f9820da36fb3c760d17f3a1901e6527a710a95eb5f9105a837e94b6303db608f3ee3b8cf265fec8e88753d6c284b0216b5f455eaf0c3", 0xe9}, {&(0x7f0000000400)="593a082a5d9f82c9e84e117681a1f954edc15a0ed30048079767d855b169f79f0a92b6a04be99e2d5349ac077c3109eaa5a2cf9e63406c958f22701f27b80bc6b6c660f5", 0x44}, {&(0x7f0000000700)="a00d80e9b5a52ab92079271fdc18c2ec457fc1a7d82741459fb72ee63c1fdd7e4ce9f94faa6ff0bb0c288499d20753e0871159ff2ecf9aa35f08b8a79aac1f99328b42742f9bbeca83db98253e987cba90b4aa17e7d25d668a823acd06042d28d56dddf339882b64d6821eb797a59eda217a5f4d0c36df695bb4274338d462f2709a61035f41b1a17332b9a6ac95112339766a31b631c5bfe8897516a2d4", 0x9e}, {&(0x7f00000007c0)="58f1763ac5eb016277728b5c046a4143696b2b64d0ce9ba42103e2c07203798f290574fe14267c4cca3c6a2edb8f426d6c4b5f04fdd0807574061c036908c664b35c36b2e28443a80ade2a33934387d1b78b02ae84227cdc8b59cf65b76c6aeaeefa4334dc135bedb998559ffee208a4eb1140c150a4c15b266ba601dd80858bec3cb3c156d09465eeb017137e75a2c89cf1a9048f2d4d240ca63f986db6b9a33f39b9d5162036013a76a032430f8c5904cd80b4099474e3860946151bae6874b04c", 0xc2}, {&(0x7f00000008c0)="e30871994ba0ae435b96eef27246bbe8ed52564da1d04162bdcd94ad95e7a46531a0968f54174584bcd2b2f66f7530ada26dea06c4d62c8c5ed09cd6324e3adf2c3455523959f6827e92bd46275b7045bb5d25f936d9fa4320a3fbe891390aefc293e360f3a80786d7b1fc309763f05c69af8435b4dd2e9e8189c57a0fbb13cb5da2ffb08e080356e479d0f99ebbc8b88bbb2df36ee1059422816b8986b1619a", 0xa0}], 0x6, &(0x7f0000000280)=[@assoc={0x18, 0x117, 0x4, 0x406c}, @assoc={0x18, 0x117, 0x4, 0xfffffff8}], 0x30, 0x880}], 0x1, 0x40800) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) getpriority(0x0, 0x18) add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000009c0)="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", 0x6f8, 0xfffffffffffffff8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 5.386456328s ago: executing program 2 (id=2884): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22f7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES16=r1], 0x54}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1}) close_range(r6, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 5.380490722s ago: executing program 4 (id=2885): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) r2 = gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 5.343183581s ago: executing program 3 (id=2886): ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) 4.446394407s ago: executing program 2 (id=2887): creat(&(0x7f0000000000)='./file0\x00', 0x40) r0 = socket$can_j1939(0x1d, 0x2, 0x7) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x81) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x22, 0x2, 0x24) write(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000080)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="850000008a000080760000000000000027000000000000009500000000000000ff7fa2e090afdf522238f3139e3be85b9e943fb471041d8b71a2690debcad49f40fe3cd9d642c24fd682cd01f709a51b2ab09c3e7f721783f9"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x51, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) r5 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) socket$alg(0x26, 0x5, 0x0) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x20, 0x0, &(0x7f0000000200)=0xfffffffffffffce0) mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1400, &(0x7f0000000500)={[{'rdma'}]}) 4.429043728s ago: executing program 1 (id=2888): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f00000001c0)=""/11, 0xb, 0x0, &(0x7f0000000340)=""/58, 0x3a}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22f7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYRES16, @ANYRESOCT=r5, @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r6], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000050000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c000440000000000000000214000000110001"], 0xe4}}, 0x200000d4) sendfile(r8, r7, 0x0, 0x20000023893) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000500)="5f0921bc35e849a2de69de4da1638f3909fd8282247b11a0d695b53a74cd424581d26f", 0x23) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="020114004f0018000e3580009f0001140000002f0604ac14141de0000003808a8972bd0b72e41082b9a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x484dbf74264d8f11}, 0x20040851) 4.402887979s ago: executing program 4 (id=2889): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, &(0x7f0000000100), 0x9) 4.302748943s ago: executing program 3 (id=2890): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) 3.376516179s ago: executing program 3 (id=2891): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.313455937s ago: executing program 0 (id=2892): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2}, 0x94) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r3, r2}, 0xc) 3.260638284s ago: executing program 2 (id=2893): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) syz_emit_ethernet(0xd2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "5a8874", 0x9c, 0x88, 0x0, @private2, @mcast2, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "1102a8887a2c9305895b8cb59331cdffdf8e04142a112e9e8a24dbc3ec49d3a4", "2db6a193bcc7961b3d7ffdd654edbf06b88768a543517e85683cba3eacfc34c915f14e6909b49f9237345255b67d8e45", "381da35b3b5c874ffc044f7e6bdb47fd7e6379a64c0cc354322238af", {"a263753d250cfb21bd9221645c29f7d3", "432c3aac2290feba17bfa3643cdcbbfd"}}}}}}}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) 3.214431549s ago: executing program 4 (id=2894): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180000001800ff006d0000008500000008000000667ddf6a534b07d8234a1f3c2d8e6da800641fe49307a6b4748f1aca1c0cfbdef2983f58870c792bbf14954dee5925229e580f0417b66f0000a6768559da023bdee2144d5fe220af603068669dbbc2839fc8cdb2c03c71ec0e2a722917d20f54367df73ef4aa6db2fa0b7772a5025214831453a31ebce08e306779b41503e28ad25c00"/163, @ANYRES16], &(0x7f0000000080)='GPL\x00', 0x3, 0x24, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000340)=[{0x5, 0x2, 0x10, 0x8}, {0x5, 0x4, 0x2, 0xc}, {0x3, 0x4, 0xf, 0x5}, {0x4, 0x3, 0x7, 0x3}, {0x0, 0x3, 0x8, 0x9}, {0x5, 0x3, 0x7, 0x6}], 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x1}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x8004) openat$cgroup_pressure(r1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x5fc, 0x83, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}}}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000e2ff092c0000001187089de54384e700010000000000000000000000000a"], 0x28}}, 0x40880) pipe(&(0x7f0000000080)) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a000001", 0x2c}], 0x1}, 0x0) 3.151090266s ago: executing program 3 (id=2895): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70fd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 2.909970216s ago: executing program 0 (id=2896): socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) shutdown(0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x3}, &(0x7f00000000c0)=0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000480)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)="c7f6317b2bee543d8f13a46256204e482bfd2b6e691e3159e010fa1fd73e2ff30640a5a8e46900de69efe08665303d2d0cecdf63f1e435431fa9b1bdc2f44db3937ce72312c111f787b7f6dc88d23bb847e6e7e04f6559fcb93f883ff8018ee1b42b887394aa6faf15988ea5534ab8777974111e142463494185e32f25b032a2eba26311f3864ede7c20185ba95b35c61cabc4cfda8dd2dab16ad3977df2f79e338938b8017da64ad2a0b42d9618092a7e596a20c4bceba2e2f2e28e3f082af5054a04bfd79bff97a105f27fe20068c39fa6bcf11a7da9531f", 0xd9}, {&(0x7f0000000600)="2c4155c4495008afb4e5bd5c68ff7dbaff9aaf65c3b7285fd6e8509c5edb6ee88ba9636dbfd1423e3fd9f8b618022daeefdc15ecba20977224b910aa0a0fc965e03c5668c51c0468c8ae6526f2761eb18acb172eb98c1b875659fbc02d349fef024be770bf85d4132c4e60bb4892911c86e0c8be789cbce30929fa6f966ab0e4dfe0aa70b284cf69fa0af5722397bf666ee71b39b9a428cdde8af1c547bcd2a424c564ae82a06d5d7c5d548908e8eaa0c46fa5f9820da36fb3c760d17f3a1901e6527a710a95eb5f9105a837e94b6303db608f3ee3b8cf265fec8e88753d6c284b0216b5f455eaf0c3", 0xe9}, {&(0x7f0000000400)="593a082a5d9f82c9e84e117681a1f954edc15a0ed30048079767d855b169f79f0a92b6a04be99e2d5349ac077c3109eaa5a2cf9e63406c958f22701f27b80bc6b6c660f5", 0x44}, {&(0x7f0000000700)="a00d80e9b5a52ab92079271fdc18c2ec457fc1a7d82741459fb72ee63c1fdd7e4ce9f94faa6ff0bb0c288499d20753e0871159ff2ecf9aa35f08b8a79aac1f99328b42742f9bbeca83db98253e987cba90b4aa17e7d25d668a823acd06042d28d56dddf339882b64d6821eb797a59eda217a5f4d0c36df695bb4274338d462f2709a61035f41b1a17332b9a6ac95112339766a31b631c5bfe8897516a2d4", 0x9e}, {&(0x7f00000007c0)="58f1763ac5eb016277728b5c046a4143696b2b64d0ce9ba42103e2c07203798f290574fe14267c4cca3c6a2edb8f426d6c4b5f04fdd0807574061c036908c664b35c36b2e28443a80ade2a33934387d1b78b02ae84227cdc8b59cf65b76c6aeaeefa4334dc135bedb998559ffee208a4eb1140c150a4c15b266ba601dd80858bec3cb3c156d09465eeb017137e75a2c89cf1a9048f2d4d240ca63f986db6b9a33f39b9d5162036013a76a032430f8c5904cd80b4099474e3860946151bae6874b04c", 0xc2}, {&(0x7f00000008c0)="e30871994ba0ae435b96eef27246bbe8ed52564da1d04162bdcd94ad95e7a46531a0968f54174584bcd2b2f66f7530ada26dea06c4d62c8c5ed09cd6324e3adf2c3455523959f6827e92bd46275b7045bb5d25f936d9fa4320a3fbe891390aefc293e360f3a80786d7b1fc309763f05c69af8435b4dd2e9e8189c57a0fbb13cb5da2ffb08e080356e479d0f99ebbc8b88bbb2df36ee1059422816b8986b1619a", 0xa0}], 0x6, &(0x7f0000000280)=[@assoc={0x18, 0x117, 0x4, 0x406c}, @assoc={0x18, 0x117, 0x4, 0xfffffff8}], 0x30, 0x880}], 0x1, 0x40800) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) getpriority(0x0, 0x18) add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000009c0)="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", 0x6f8, 0xfffffffffffffff8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 2.677639274s ago: executing program 1 (id=2897): openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) close(0xffffffffffffffff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) 2.501839669s ago: executing program 4 (id=2898): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22f7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES16=r1], 0x54}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1}) close_range(r6, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 2.067385386s ago: executing program 1 (id=2899): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x1, 0x70fd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 2.056260522s ago: executing program 3 (id=2900): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.698271101s ago: executing program 0 (id=2901): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xc00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 1.680619206s ago: executing program 2 (id=2902): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x391180, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@fallback=r1, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$rds(0x15, 0x5, 0x0) splice(r4, 0x0, r3, 0x0, 0x361, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)={0x1134, 0x1f, 0x1, 0x0, 0x80000, "", [@nested={0x1122, 0x0, 0x0, 0x1, [@typed={0x14, 0x403, 0x0, 0x0, @ipv6=@loopback}, @nested={0x1031, 0x88, 0x0, 0x1, [@generic="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", @generic="8a2a8fc97724bf5b1306575a97e58a2473cec4b75f6bc3bed9c4d6a52cbdbe9c17a52c6d522e9918b7be38982e"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b504681000000000000009ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817"]}]}, 0x1134}], 0x1, 0x0, 0x0, 0x20000004}, 0x140000c4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000ffff000000000000", @ANYRES32, @ANYBLOB="0600feff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000010300"/25], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x3, 0x0, r2, 0x5e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x2}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0xc, 0x5, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}, 0x10) 1.199057624s ago: executing program 4 (id=2903): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x3, @rand_addr=0x64010102}}, 0x1e) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x5, 0x9, 0x4, {0x2, @win={{0x9, 0x6, 0x56, 0x9}, 0x5, 0x4, &(0x7f0000000180)={{0xc61, 0x0, 0x2, 0x3}, &(0x7f0000000140)={{0x100, 0x1dc, 0x7, 0x10}, &(0x7f0000000100)={{0xa7, 0x20, 0xfffffffd, 0x8}}}}, 0x4, 0x0, 0x2}}, 0x81ff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x59455247}}) 1.122467412s ago: executing program 1 (id=2904): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(r0, 0x20c2789fb6c04185, &(0x7f0000000300)={0x3d7f4931, 0x3}, &(0x7f0000000340)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000a, 0x42032, 0xffffffffffffffff, 0x180000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000790000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="15000000", @ANYRES16, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2002, 0x0) write$UHID_CREATE(r5, &(0x7f0000000180)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x5, 0x50b, 0x9, 0xc, 0x2}}, 0x120) splice(r4, 0x0, r6, &(0x7f0000000140), 0x4, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000400000000070000000900010073797a30000000003c000000090a010400000000000000000700000408000a40000000000900020073797a31000000000900010073797a300000000008000540000000063c0000001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c0000800800018004000100140000001000010000000000000000000084000a"], 0xc0}}, 0x0) 0s ago: executing program 1 (id=2905): openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) fremovexattr(0xffffffffffffffff, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x1800, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), &(0x7f0000000400)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)=r3}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000061c0)="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", 0x2000, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000140)={0x5, 0x80000000, 0x3}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0xe697, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 149661][T12045] do_syscall_64+0xfa/0x3b0 [ 669.149681][T12045] ? lockdep_hardirqs_on+0x9c/0x150 [ 669.149701][T12045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.149719][T12045] ? clear_bhb_loop+0x60/0xb0 [ 669.149743][T12045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.149762][T12045] RIP: 0033:0x7f5a15d8d5fc [ 669.149779][T12045] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 669.149795][T12045] RSP: 002b:00007f5a16c71030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 669.149816][T12045] RAX: ffffffffffffffda RBX: 00007f5a15fb5fa0 RCX: 00007f5a15d8d5fc [ 669.149831][T12045] RDX: 000000000000000f RSI: 00007f5a16c710a0 RDI: 0000000000000005 [ 669.149843][T12045] RBP: 00007f5a16c71090 R08: 0000000000000000 R09: 0000000000000000 [ 669.149855][T12045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 669.149866][T12045] R13: 00007f5a15fb6038 R14: 00007f5a15fb5fa0 R15: 00007fffb15e92b8 [ 669.149899][T12045] [ 671.516911][T12067] random: crng reseeded on system resumption [ 671.922683][T12071] netlink: 'syz.2.1685': attribute type 1 has an invalid length. [ 671.930726][T12071] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1685'. [ 672.500078][T12080] syzkaller1: entered promiscuous mode [ 672.505813][T12080] syzkaller1: entered allmulticast mode [ 673.157727][T12075] IPVS: set_ctl: invalid protocol: 10 0.0.1.0:64512 [ 673.470188][T12090] netlink: 360 bytes leftover after parsing attributes in process `syz.0.1693'. [ 676.518208][ T9] hid-generic 0000:FFFFFFFF:0000.000F: unknown main item tag 0x0 [ 677.496960][ T9] hid-generic 0000:FFFFFFFF:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 677.661323][T12104] netlink: 512 bytes leftover after parsing attributes in process `syz.0.1698'. [ 678.260530][T12103] fido_id[12103]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 679.128282][T12120] --map-set only usable from mangle table [ 679.386461][T12122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 682.814856][ T5848] hid-generic 0000:FFFFFFFF:0000.0010: unknown main item tag 0x0 [ 683.039460][ T5848] hid-generic 0000:FFFFFFFF:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 683.346512][T12161] xt_CT: You must specify a L4 protocol and not use inversions on it [ 686.786836][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'. [ 686.804109][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'. [ 686.861555][T12199] input: syz0 as /devices/virtual/input/input44 [ 687.380694][ T5848] hid-generic 0000:FFFFFFFF:0000.0011: unknown main item tag 0x0 [ 687.521478][ T5848] hid-generic 0000:FFFFFFFF:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 688.649593][T12215] netlink: 'syz.0.1726': attribute type 1 has an invalid length. [ 688.741193][T12220] netlink: 'syz.1.1728': attribute type 1 has an invalid length. [ 688.741911][T12210] fido_id[12210]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 688.862705][T12215] 8021q: adding VLAN 0 to HW filter on device bond4 [ 688.907117][T12225] bond4: (slave dummy0): Releasing active interface [ 689.387413][T12218] bond4: (slave veth5): Enslaving as an active interface with a down link [ 689.417113][T12220] 8021q: adding VLAN 0 to HW filter on device bond7 [ 689.495153][T12224] bond7: (slave veth7): Enslaving as an active interface with a down link [ 691.129585][T12215] bond1: (slave dummy0): Releasing active interface [ 691.170404][T12215] bond4: (slave dummy0): making interface the new active one [ 691.184218][T12215] dummy0: entered promiscuous mode [ 691.193905][T12215] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 691.353319][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1736'. [ 692.496245][T12256] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 692.503026][T12256] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 692.561105][T12256] vhci_hcd vhci_hcd.0: Device attached [ 692.698237][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 692.815700][ T977] vhci_hcd: vhci_device speed not set [ 692.879797][ T977] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 693.414343][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 693.424808][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 693.451049][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 693.460121][ T5848] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 693.477151][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 693.486746][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.495063][ T9] usb 2-1: Product: syz [ 693.502651][ T9] usb 2-1: Manufacturer: syz [ 693.508182][ T9] usb 2-1: SerialNumber: syz [ 693.690086][ T5848] usb 3-1: config 0 has no interfaces? [ 693.874734][ T5848] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 694.075149][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.088069][ T9] usb 2-1: 0:2 : does not exist [ 694.131686][ T5848] usb 3-1: config 0 descriptor?? [ 694.185870][ T9] usb 2-1: USB disconnect, device number 18 [ 694.286508][T12259] udevd[12259]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 694.400905][ T5931] usb 3-1: USB disconnect, device number 21 [ 694.480521][T12257] vhci_hcd: connection reset by peer [ 694.484590][ T977] vhci_hcd: vhci_device speed not set [ 694.615817][ T6039] vhci_hcd: stop threads [ 694.634705][ T6039] vhci_hcd: release socket [ 694.784090][ T6039] vhci_hcd: disconnect device [ 694.790016][ T977] usb 37-1: device descriptor read/64, error -71 [ 697.098850][ T977] vhci_hcd: vhci_device speed not set [ 697.208301][T12301] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1745'. [ 697.217496][T12301] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1745'. [ 697.984246][T12307] xt_TCPMSS: Only works on TCP SYN packets [ 699.751545][T12315] xt_CT: You must specify a L4 protocol and not use inversions on it [ 702.036506][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 702.036547][ T30] audit: type=1326 audit(1755689299.757:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12327 comm="syz.2.1753" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a15d8ebe9 code=0x0 [ 702.457759][T12333] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 702.703846][T12342] x_tables: duplicate underflow at hook 2 [ 703.168110][T12346] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1757'. [ 703.178151][T12338] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1757'. [ 703.187581][T12338] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1757'. [ 703.377454][ T977] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 703.431466][ T5848] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 703.602486][ T5848] usb 1-1: Using ep0 maxpacket: 32 [ 703.633512][ T5848] usb 1-1: config 0 has an invalid interface number: 63 but max is 0 [ 703.647417][ T5848] usb 1-1: config 0 has no interface number 0 [ 703.653573][ T5848] usb 1-1: config 0 interface 63 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 703.668048][ T5848] usb 1-1: config 0 interface 63 has no altsetting 0 [ 704.263602][ T5848] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0023, bcdDevice=40.69 [ 704.283824][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.288001][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 704.327294][ T977] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 704.336848][ T977] usb 3-1: config 0 has no interface number 0 [ 704.350354][ T5848] usb 1-1: Product: syz [ 704.564748][ T5848] usb 1-1: Manufacturer: syz [ 704.569489][ T5848] usb 1-1: SerialNumber: syz [ 704.578653][ T977] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 704.591604][ T5848] usb 1-1: config 0 descriptor?? [ 704.629208][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.703871][ T977] usb 3-1: Product: syz [ 704.747082][ T977] usb 3-1: Manufacturer: syz [ 704.803761][ T977] usb 3-1: SerialNumber: syz [ 704.804967][ T5848] kvaser_usb 1-1:0.63: error -ENODEV: Cannot get usb endpoint(s) [ 704.927786][ T977] usb 3-1: config 0 descriptor?? [ 704.977564][ T977] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 704.998140][ T5926] usb 1-1: USB disconnect, device number 45 [ 705.041967][ T977] usb 3-1: selecting invalid altsetting 1 [ 705.061331][ T977] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 705.106187][ T977] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 705.137287][ T977] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 705.157363][ T977] usb 3-1: media controller created [ 705.343316][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 707.054786][T12386] tipc: Started in network mode [ 707.060238][T12386] tipc: Node identity 063b3ee02fa4, cluster identity 4711 [ 707.069554][T12386] tipc: Enabled bearer , priority 0 [ 707.118999][T12386] syzkaller0: entered promiscuous mode [ 707.124794][T12386] syzkaller0: entered allmulticast mode [ 707.279383][ T977] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 707.356618][ T977] zl10353_read_register: readreg error (reg=127, ret==-71) [ 707.376397][T12389] cgroup: Invalid name [ 707.382110][ T977] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 707.698471][T12398] netlink: 'syz.0.1772': attribute type 10 has an invalid length. [ 707.746026][ T977] usb 3-1: USB disconnect, device number 22 [ 708.313669][ T9] tipc: Node number set to 698302176 [ 708.372825][ T5848] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 708.601180][T12385] tipc: Resetting bearer [ 708.693739][ T5848] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 709.242246][T12383] tipc: Resetting bearer [ 709.266731][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.287793][T12383] tipc: Disabling bearer [ 709.296235][ T5848] usb 4-1: config 0 descriptor?? [ 709.444079][T12417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1778'. [ 710.387047][T12433] binder: BINDER_SET_CONTEXT_MGR already set [ 710.393157][T12433] binder: 12430:12433 ioctl 4018620d 200000000040 returned -16 [ 710.406711][T12433] binder: 12430:12433 ioctl c0306201 2000000001c0 returned -22 [ 710.921135][ T9] usb 4-1: USB disconnect, device number 16 [ 711.362889][T12448] Can't find a SQUASHFS superblock on nullb0 [ 712.773077][T12456] sctp: [Deprecated]: syz.0.1789 (pid 12456) Use of int in max_burst socket option deprecated. [ 712.773077][T12456] Use struct sctp_assoc_value instead [ 712.870606][T12464] No control pipe specified [ 714.367791][ T9] hid-generic 0000:FFFFFFFF:0000.0012: unknown main item tag 0x0 [ 714.405481][ T9] hid-generic 0000:FFFFFFFF:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 716.244770][ T13] dummy0: left promiscuous mode [ 717.343624][T12508] netlink: 'syz.4.1802': attribute type 20 has an invalid length. [ 718.959732][T12530] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=71 (142 ns) > initial count (64 ns). Using initial count to start timer. [ 720.175432][ T5848] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 720.748111][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.760777][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.774838][ T5848] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 720.782744][ T5926] hid-generic 0000:FFFFFFFF:0000.0013: unknown main item tag 0x0 [ 720.795773][ T5848] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 720.805380][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.851177][ T5848] usb 1-1: config 0 descriptor?? [ 720.898005][ T5926] hid-generic 0000:FFFFFFFF:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 721.097985][T12562] cgroup: noprefix used incorrectly [ 721.117616][ T5848] usbhid 1-1:0.0: can't add hid device: -71 [ 721.123637][ T5848] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 721.144095][ T5848] usb 1-1: USB disconnect, device number 46 [ 721.875092][T12579] netlink: 'syz.4.1821': attribute type 20 has an invalid length. [ 722.204635][ T5848] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 722.419574][ T5848] usb 1-1: Using ep0 maxpacket: 16 [ 722.564181][ T5848] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.583199][ T5848] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 722.792140][ T5848] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 722.818201][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.857390][ T5848] usb 1-1: config 0 descriptor?? [ 723.030061][T12589] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 725.051283][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 725.057696][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 725.714765][ T5848] usb 1-1: USB disconnect, device number 47 [ 726.629592][T12608] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1829'. [ 726.638839][T12608] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1829'. [ 726.745132][T12609] FAULT_INJECTION: forcing a failure. [ 726.745132][T12609] name fail_futex, interval 1, probability 0, space 0, times 0 [ 726.758135][T12609] CPU: 1 UID: 0 PID: 12609 Comm: syz.3.1830 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 726.758159][T12609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 726.758171][T12609] Call Trace: [ 726.758178][T12609] [ 726.758186][T12609] dump_stack_lvl+0x189/0x250 [ 726.758217][T12609] ? __pfx____ratelimit+0x10/0x10 [ 726.758237][T12609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 726.758257][T12609] ? __pfx__printk+0x10/0x10 [ 726.758297][T12609] should_fail_ex+0x414/0x560 [ 726.758323][T12609] get_futex_key+0x1a8/0x1640 [ 726.758352][T12609] ? refill_pi_state_cache+0x93/0x180 [ 726.758382][T12609] ? __pfx_get_futex_key+0x10/0x10 [ 726.758404][T12609] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 726.758427][T12609] ? __asan_memset+0x22/0x50 [ 726.758458][T12609] futex_requeue+0x25b/0x1870 [ 726.758502][T12609] ? __pfx_futex_requeue+0x10/0x10 [ 726.758539][T12609] ? finish_task_switch+0x266/0x950 [ 726.758574][T12609] ? rcu_is_watching+0x15/0xb0 [ 726.758596][T12609] ? trace_sched_exit_tp+0x38/0x120 [ 726.758624][T12609] ? __schedule+0x16c8/0x4c90 [ 726.758652][T12609] do_futex+0x362/0x420 [ 726.758683][T12609] ? __pfx_do_futex+0x10/0x10 [ 726.758716][T12609] __se_sys_futex+0x36f/0x400 [ 726.758748][T12609] ? __pfx___se_sys_futex+0x10/0x10 [ 726.758770][T12609] ? schedule+0x15e/0x360 [ 726.758786][T12609] ? preempt_count_add+0x9e/0x1a0 [ 726.758814][T12609] ? __x64_sys_futex+0x21/0xf0 [ 726.758847][T12609] do_syscall_64+0xfa/0x3b0 [ 726.758870][T12609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.758888][T12609] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 726.758907][T12609] ? clear_bhb_loop+0x60/0xb0 [ 726.758930][T12609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.758949][T12609] RIP: 0033:0x7f4cb898ebe9 [ 726.758966][T12609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.758983][T12609] RSP: 002b:00007f4cb9866038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 726.759004][T12609] RAX: ffffffffffffffda RBX: 00007f4cb8bb6090 RCX: 00007f4cb898ebe9 [ 726.759019][T12609] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc [ 726.759031][T12609] RBP: 00007f4cb9866090 R08: 0000200000048000 R09: 0000000000000000 [ 726.759044][T12609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.759056][T12609] R13: 00007f4cb8bb6128 R14: 00007f4cb8bb6090 R15: 00007ffecfb58db8 [ 726.759088][T12609] [ 727.384285][T12615] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 728.099372][T12627] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 728.853951][ T30] audit: type=1326 audit(1755689324.919:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12628 comm="syz.4.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04538ebe9 code=0x7ffc0000 [ 728.900844][ T1209] hid-generic 0000:FFFFFFFF:0000.0014: unknown main item tag 0x0 [ 728.934372][ T30] audit: type=1326 audit(1755689324.919:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12628 comm="syz.4.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04538ebe9 code=0x7ffc0000 [ 728.964656][ T1209] hid-generic 0000:FFFFFFFF:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 728.996163][ T30] audit: type=1326 audit(1755689324.919:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12628 comm="syz.4.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7ff04538ebe9 code=0x7ffc0000 [ 729.221175][ T30] audit: type=1326 audit(1755689324.919:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12628 comm="syz.4.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04538ebe9 code=0x7ffc0000 [ 729.267886][ T30] audit: type=1326 audit(1755689324.919:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12628 comm="syz.4.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04538ebe9 code=0x7ffc0000 [ 730.453181][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1840'. [ 730.538483][ T30] audit: type=1326 audit(1755689324.919:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12628 comm="syz.4.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7ff04538ebe9 code=0x7ffc0000 [ 730.561107][ T30] audit: type=1326 audit(1755689324.919:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12628 comm="syz.4.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04538ebe9 code=0x7ffc0000 [ 730.583809][ T30] audit: type=1326 audit(1755689324.919:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12628 comm="syz.4.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04538ebe9 code=0x7ffc0000 [ 730.606073][ T30] audit: type=1326 audit(1755689324.919:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12628 comm="syz.4.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff04538ebe9 code=0x7ffc0000 [ 730.628818][ T30] audit: type=1326 audit(1755689324.919:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12628 comm="syz.4.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04538ebe9 code=0x7ffc0000 [ 733.241960][T12694] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1855'. [ 733.289835][T12694] bond1: (slave dummy0): Releasing active interface [ 733.837935][T12694] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1855'. [ 733.867721][T12694] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1855'. [ 733.877012][T12694] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1855'. [ 735.423425][ T5931] hid-generic 0000:FFFFFFFF:0000.0015: unknown main item tag 0x0 [ 735.616964][ T5931] hid-generic 0000:FFFFFFFF:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 738.118902][T12740] erofs (device nbd2): cannot find valid erofs superblock [ 738.402088][T12756] netlink: 'syz.2.1868': attribute type 20 has an invalid length. [ 740.899250][T12765] loop2: detected capacity change from 0 to 7 [ 740.940630][T12765] loop2: [ 740.944004][T12765] loop2: partition table partially beyond EOD, truncated [ 742.118723][T12781] openvswitch: netlink: Missing key (keys=40, expected=100) [ 742.204254][T12786] netlink: 'syz.3.1878': attribute type 1 has an invalid length. [ 742.240023][T12786] 8021q: adding VLAN 0 to HW filter on device bond2 [ 743.509066][ T5848] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 743.517654][T12786] bond2: (slave veth5): Enslaving as an active interface with a down link [ 743.724510][ T5848] usb 1-1: Using ep0 maxpacket: 8 [ 743.998192][ T5848] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.008710][ T5848] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 744.018736][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.030400][ T5848] usb 1-1: config 0 descriptor?? [ 744.068949][ T5848] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 744.237396][ C0] hrtimer: interrupt took 23763 ns [ 744.670247][ T977] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 744.674423][ T5848] gspca_vc032x: reg_r err -110 [ 744.732752][ T5848] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 744.804394][ T5926] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 744.921662][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 744.928515][ T977] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 744.937903][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.949016][ T977] usb 5-1: config 0 descriptor?? [ 744.960175][ T977] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 744.978283][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 744.992938][ T5926] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 745.002257][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.010762][ T5926] usb 3-1: Product: syz [ 745.014976][ T5926] usb 3-1: Manufacturer: syz [ 745.020068][ T5926] usb 3-1: SerialNumber: syz [ 745.027706][ T5926] usb 3-1: config 0 descriptor?? [ 745.253327][ T5926] powermate: unknown product id 0240 [ 745.265286][ T5926] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input45 [ 745.281225][ C1] powermate: config urb returned -71 [ 745.286804][ C1] powermate: config urb returned -71 [ 745.292413][ C1] powermate: config urb returned -71 [ 745.297901][ C1] powermate: config urb returned -71 [ 745.308810][ T5926] usb 3-1: USB disconnect, device number 23 [ 745.314759][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 745.434749][ T5909] usb 1-1: USB disconnect, device number 48 [ 745.699405][T12817] netlink: 'syz.1.1889': attribute type 1 has an invalid length. [ 745.765217][T12817] 8021q: adding VLAN 0 to HW filter on device bond8 [ 745.896638][ T977] gspca_sonixj: reg_r err -71 [ 745.901455][ T977] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 746.159585][ T977] usb 5-1: USB disconnect, device number 17 [ 746.303994][T12826] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 746.985378][T12834] x_tables: duplicate underflow at hook 2 [ 747.310804][T12817] bond8: (slave dummy0): making interface the new active one [ 747.342636][T12817] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 747.486515][T12841] netlink: 'syz.3.1894': attribute type 29 has an invalid length. [ 747.519857][T12841] netlink: 'syz.3.1894': attribute type 29 has an invalid length. [ 747.596255][T12849] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 748.596036][T12866] overlayfs: missing 'lowerdir' [ 748.733723][T12868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1901'. [ 751.443020][ T5848] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 751.561631][T12900] can0: slcan on ttyS3. [ 751.757341][ T5848] usb 1-1: device descriptor read/64, error -71 [ 751.808133][T12900] can0 (unregistered): slcan off ttyS3. [ 752.127359][ T5848] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 752.243861][T12906] ubi31: attaching mtd0 [ 752.260559][T12906] ubi31: scanning is finished [ 752.265253][T12906] ubi31: empty MTD device detected [ 752.315875][ T977] hid-generic 0000:FFFFFFFF:0000.0016: unknown main item tag 0x0 [ 752.331455][ T5848] usb 1-1: device descriptor read/64, error -71 [ 752.365185][ T977] hid-generic 0000:FFFFFFFF:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 752.444852][T12911] veth0_to_bridge: entered promiscuous mode [ 752.493254][ T5848] usb usb1-port1: attempt power cycle [ 752.554602][T12911] netdevsim netdevsim2 : set [1, 0] type 2 family 0 port 6081 - 0 [ 752.608304][T12911] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.617094][T12911] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.666866][T12911] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.689729][T12911] geneve2: entered promiscuous mode [ 752.716129][T12911] geneve2: entered allmulticast mode [ 752.740176][T12911] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.756361][T12906] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 752.794245][T12911] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.819400][T12906] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 752.840670][T12911] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.852211][T12906] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 752.877580][T12906] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 752.885426][T12911] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.905093][T12906] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 752.918447][ T5848] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 752.937336][T12906] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 752.946468][ T5848] usb 1-1: device descriptor read/8, error -71 [ 752.972499][T12906] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1459033142 [ 753.016124][T12906] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 753.039573][T12910] veth0_to_bridge: left promiscuous mode [ 753.071894][T12917] ubi31: background thread "ubi_bgt31d" started, PID 12917 [ 753.196243][ T5848] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 753.224347][ T5848] usb 1-1: device descriptor read/8, error -71 [ 753.370392][ T5848] usb usb1-port1: unable to enumerate USB device [ 755.107546][T12937] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 755.752906][T12940] netlink: 'syz.0.1919': attribute type 10 has an invalid length. [ 757.390273][T12960] xt_CT: You must specify a L4 protocol and not use inversions on it [ 758.473493][T12966] tipc: Started in network mode [ 758.522209][T12966] tipc: Node identity 9e44b9976a52, cluster identity 4711 [ 758.529550][T12966] tipc: Enabled bearer , priority 0 [ 758.553459][T12966] syzkaller0: entered promiscuous mode [ 758.558975][T12966] syzkaller0: entered allmulticast mode [ 758.620948][T12966] tipc: Resetting bearer [ 758.765741][T12965] tipc: Resetting bearer [ 759.609934][T12965] tipc: Disabling bearer [ 760.413657][T12988] netlink: 'syz.2.1936': attribute type 4 has an invalid length. [ 760.550008][T12989] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 761.049048][T12997] loop2: detected capacity change from 0 to 7 [ 761.068842][T12997] loop2: [ 761.075891][T12997] loop2: partition table partially beyond EOD, truncated [ 761.207241][T13000] wg1 speed is unknown, defaulting to 1000 [ 761.216850][T13000] wg1 speed is unknown, defaulting to 1000 [ 761.261490][T13000] wg1 speed is unknown, defaulting to 1000 [ 761.393396][T13000] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 761.655701][T13000] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 761.759743][T13004] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 761.766295][T13004] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 761.791936][T13006] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 761.798449][T13006] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 761.836892][T13006] vhci_hcd vhci_hcd.0: Device attached [ 761.850430][T13004] vhci_hcd vhci_hcd.0: Device attached [ 761.896810][T13000] wg1 speed is unknown, defaulting to 1000 [ 761.907474][T13007] vhci_hcd: connection closed [ 761.908901][T13005] vhci_hcd: connection closed [ 761.912599][T13000] wg1 speed is unknown, defaulting to 1000 [ 761.924535][ T6039] vhci_hcd: stop threads [ 761.928814][ T6039] vhci_hcd: release socket [ 761.934508][ T6039] vhci_hcd: disconnect device [ 761.942596][T13000] wg1 speed is unknown, defaulting to 1000 [ 761.948747][ T6039] vhci_hcd: stop threads [ 761.953089][ T6039] vhci_hcd: release socket [ 761.962339][T13000] wg1 speed is unknown, defaulting to 1000 [ 761.968943][ T6039] vhci_hcd: disconnect device [ 761.978441][T13000] wg1 speed is unknown, defaulting to 1000 [ 762.080187][ T1209] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 762.264786][ T1209] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 762.288307][ T1209] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 762.311369][ T1209] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 762.324006][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 762.335068][ T1209] usb 3-1: SerialNumber: syz [ 762.382480][ T1209] usb 3-1: bad CDC descriptors [ 762.389202][ T1209] usb-storage 3-1:1.0: USB Mass Storage device detected [ 762.406188][ T1209] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 762.418447][ T1209] scsi host1: usb-storage 3-1:1.0 [ 766.455583][ T5909] usb 3-1: USB disconnect, device number 24 [ 767.673529][T13047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1950'. [ 768.788427][T13062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1953'. [ 770.184487][T13077] netlink: 'syz.4.1958': attribute type 1 has an invalid length. [ 770.229354][T13077] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1958'. [ 774.213266][T13110] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 779.240422][T13145] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1976'. [ 779.396924][T13150] ieee802154 phy1 wpan1: encryption failed: -22 [ 779.475829][ T1209] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 779.730772][ T1209] usb 3-1: Using ep0 maxpacket: 16 [ 779.739797][ T1209] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 779.753501][ T1209] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.765453][ T1209] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 779.778210][ T1209] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 779.794004][ T1209] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 779.912701][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 779.921634][ T1209] usb 3-1: SerialNumber: syz [ 779.935922][ T1209] hub 3-1:1.0: bad descriptor, ignoring hub [ 779.942260][ T1209] hub 3-1:1.0: probe with driver hub failed with error -5 [ 780.066855][T13157] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 780.540080][ T1209] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 780.703174][T13153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1979'. [ 780.904020][T13159] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 781.163041][ T1209] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 781.333901][ T1209] usb 1-1: Using ep0 maxpacket: 32 [ 781.342152][ T1209] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 781.350465][ T1209] usb 1-1: config 0 has no interface number 0 [ 781.369293][ T1209] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 781.414982][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.450194][ T1209] usb 1-1: Product: syz [ 781.461130][ T1209] usb 1-1: Manufacturer: syz [ 781.466625][ T1209] usb 1-1: SerialNumber: syz [ 781.488877][ T1209] usb 1-1: config 0 descriptor?? [ 781.519400][ T1209] smsc95xx v2.0.0 [ 782.501650][T13177] veth0_to_bridge: entered promiscuous mode [ 782.545653][T13177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.546675][ T1209] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 782.573683][T13177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.573754][T13177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.573785][T13177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.575403][T13177] geneve2: entered promiscuous mode [ 782.575425][T13177] geneve2: entered allmulticast mode [ 782.602979][ T1209] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 782.606365][T13177] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.606404][T13177] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.606432][T13177] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.606485][T13177] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.724495][T13176] veth0_to_bridge: left promiscuous mode [ 783.037574][ T5895] usb 3-1: USB disconnect, device number 25 [ 783.043692][ T1209] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 783.067529][ T1209] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 783.127618][ T1209] usb 1-1: USB disconnect, device number 53 [ 783.259213][T13188] kAFS: Can only specify source 'none' with -o dyn [ 783.916989][T13198] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 785.151703][T13203] fuse: Bad value for 'fd' [ 785.215024][T13209] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1995'. [ 785.711377][T13209] bridge0: port 3(macvlan4) entered blocking state [ 785.721282][T13209] bridge0: port 3(macvlan4) entered disabled state [ 785.733336][T13209] macvlan4: entered allmulticast mode [ 785.739990][T13209] bridge0: entered allmulticast mode [ 785.834896][T13209] macvlan4: left allmulticast mode [ 785.840185][T13209] bridge0: left allmulticast mode [ 786.048887][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'. [ 786.392471][T13225] ip6gretap0: entered promiscuous mode [ 786.411739][T13228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2000'. [ 786.424572][T13225] ip6gretap0: left promiscuous mode [ 787.107614][T13248] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 789.115958][T13262] fuse: Bad value for 'fd' [ 790.746148][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 793.250310][T13308] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 793.252215][T13305] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 793.264707][T13303] x_tables: ip_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 793.294438][T13305] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 793.312360][T13305] overlayfs: conflicting lowerdir path [ 794.035723][ T1209] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 794.729694][T13316] fuse: Bad value for 'fd' [ 795.208787][ T1209] usb 1-1: config 0 interface 0 altsetting 227 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 795.228269][ T1209] usb 1-1: config 0 interface 0 altsetting 227 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 795.263766][ T1209] usb 1-1: config 0 interface 0 has no altsetting 0 [ 795.286408][ T1209] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 795.353259][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.475353][ T1209] usb 1-1: config 0 descriptor?? [ 795.657144][T13310] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 796.314274][ T1209] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input48 [ 796.796250][ T5191] bcm5974 1-1:0.0: could not read from device [ 796.883944][ T5191] bcm5974 1-1:0.0: could not read from device [ 796.948120][ T1209] usb 1-1: USB disconnect, device number 54 [ 797.727865][T13349] ubi: mtd0 is already attached to ubi31 [ 798.654796][T13345] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 799.031241][T13353] loop2: detected capacity change from 0 to 7 [ 799.209931][T13359] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2032'. [ 799.239641][T13353] loop2: p4 [ 799.243686][T13353] loop2: partition table partially beyond EOD, truncated [ 799.292142][T13353] loop2: p4 size 4294967295 extends beyond EOD, truncated [ 799.531248][ T5206] loop2: p4 [ 799.551326][ T5206] loop2: partition table partially beyond EOD, truncated [ 799.594093][ T5206] loop2: p4 size 4294967295 extends beyond EOD, truncated [ 800.222743][T13361] fuse: Bad value for 'fd' [ 800.239100][T12259] udevd[12259]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 800.362435][T12259] udevd[12259]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 801.652725][T13377] netlink: 'syz.3.2039': attribute type 4 has an invalid length. [ 802.068614][T13386] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 803.102270][ T1209] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 803.292852][ T1209] usb 2-1: Using ep0 maxpacket: 8 [ 803.640959][ T1209] usb 2-1: config 0 has an invalid interface number: 228 but max is 0 [ 803.802913][ T1209] usb 2-1: config 0 has no interface number 0 [ 803.809491][ T1209] usb 2-1: config 0 interface 228 has no altsetting 0 [ 803.822757][ T1209] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 803.837322][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.857332][ T1209] usb 2-1: Product: syz [ 803.859776][T13399] netlink: 'syz.2.2045': attribute type 10 has an invalid length. [ 803.863840][ T1209] usb 2-1: Manufacturer: syz [ 803.884948][ T1209] usb 2-1: SerialNumber: syz [ 803.893916][T13399] bridge_slave_1: left allmulticast mode [ 803.899582][T13399] bridge_slave_1: left promiscuous mode [ 803.906729][ T1209] usb 2-1: config 0 descriptor?? [ 803.928615][ T1209] go7007 2-1:0.228: probe with driver go7007 failed with error -12 [ 803.960903][T13399] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.084191][ T5926] usb 2-1: USB disconnect, device number 19 [ 805.282915][T13399] bridge_slave_1: entered promiscuous mode [ 805.307632][T13399] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 806.179497][T13420] input: syz1 as /devices/virtual/input/input49 [ 809.301603][T13456] tipc: Started in network mode [ 809.322046][T13456] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 809.329361][T13456] tipc: Enabled bearer , priority 0 [ 809.783428][T13466] dvmrp1: entered allmulticast mode [ 810.567618][ T5926] tipc: Node number set to 11578026 [ 812.640292][T13480] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 815.760518][T13511] netlink: 'syz.0.2073': attribute type 20 has an invalid length. [ 816.480993][T13510] ip6gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 819.237657][T13531] Cannot find del_set index 2 as target [ 820.925237][T13537] tipc: Started in network mode [ 820.930370][T13537] tipc: Node identity e221a01a426e, cluster identity 4711 [ 820.940378][T13537] tipc: Enabled bearer , priority 0 [ 821.014108][T13540] syzkaller0: entered promiscuous mode [ 821.049618][T13540] syzkaller0: entered allmulticast mode [ 821.111732][T13537] tipc: Resetting bearer [ 821.158856][T13536] tipc: Resetting bearer [ 821.354036][T13536] tipc: Disabling bearer [ 821.550638][T13546] veth0_to_bridge: entered promiscuous mode [ 821.599254][T13547] geneve2: entered promiscuous mode [ 821.620017][T13547] geneve2: entered allmulticast mode [ 822.462382][T13544] veth0_to_bridge: left promiscuous mode [ 823.005046][T13578] binder: 13571:13578 ioctl c0306201 200000000240 returned -11 [ 823.036805][T13580] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2093'. [ 823.059463][T13580] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2093'. [ 823.230153][ T5926] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 823.581034][ T5926] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 823.592733][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.614179][ T5926] usb 3-1: Product: syz [ 823.623658][ T5926] usb 3-1: Manufacturer: syz [ 823.649883][ T5926] usb 3-1: SerialNumber: syz [ 823.672838][ T5926] usb 3-1: config 0 descriptor?? [ 823.755151][ T5926] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 026 [ 823.958839][T13594] macvlan2: entered allmulticast mode [ 824.028324][T13594] bond0: entered allmulticast mode [ 824.038543][ T5926] (null): failure reading functionality [ 824.082781][T13594] bond_slave_0: entered allmulticast mode [ 824.137318][T13594] bond_slave_1: entered allmulticast mode [ 824.235403][ T5926] i2c i2c-1: connected i2c-tiny-usb device [ 824.366309][T13594] batadv0: entered allmulticast mode [ 824.371143][ T5926] usb 3-1: USB disconnect, device number 26 [ 824.460109][T13594] netdevsim netdevsim0 : entered allmulticast mode [ 824.499577][T13594] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 824.546959][T13594] bridge0: port 3(macvlan2) entered blocking state [ 824.556757][T13594] bridge0: port 3(macvlan2) entered disabled state [ 824.591318][T13594] macvlan2: entered promiscuous mode [ 824.599295][T13594] bridge0: port 3(macvlan2) entered blocking state [ 824.605939][T13594] bridge0: port 3(macvlan2) entered forwarding state [ 824.718190][T13603] netlink: 'syz.1.2098': attribute type 1 has an invalid length. [ 824.895716][T13607] overlayfs: missing 'lowerdir' [ 825.037775][T13607] No source specified [ 825.147941][T13603] 8021q: adding VLAN 0 to HW filter on device bond9 [ 825.489849][T13608] bond9: (slave veth9): Enslaving as an active interface with a down link [ 825.847834][T13613] overlayfs: failed to decode file handle (len=24, type=251, flags=0, err=-22) [ 825.870269][T13613] No source specified [ 826.319395][T13621] xt_l2tp: missing protocol rule (udp|l2tpip) [ 827.800459][ T5895] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 827.956186][ T5895] usb 1-1: device descriptor read/64, error -71 [ 827.989611][T13639] tun0: tun_chr_ioctl cmd 1074025675 [ 828.011916][T13639] tun0: persist enabled [ 828.025325][T13640] gre2: entered allmulticast mode [ 828.058320][T13639] tun0: tun_chr_ioctl cmd 1074025675 [ 828.082507][T13639] tun0: persist enabled [ 828.226004][ T5895] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 828.426144][ T5895] usb 1-1: device descriptor read/64, error -71 [ 828.533007][ T5926] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 828.552445][ T5895] usb usb1-port1: attempt power cycle [ 828.708300][ T5926] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 830.244653][ T5926] usb 5-1: config 0 has no interface number 0 [ 830.250769][ T5926] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 830.265355][ T5926] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 830.275250][ T5926] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 830.286824][ T5926] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 830.307164][ T5926] usb 5-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 830.317179][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.317281][ T5895] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 830.325724][ T5926] usb 5-1: Product: syz [ 830.337636][ T5926] usb 5-1: Manufacturer: syz [ 830.342694][ T5926] usb 5-1: SerialNumber: syz [ 830.394158][ T5926] usb 5-1: config 0 descriptor?? [ 830.470168][ T5926] xpad 5-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 830.486832][ T5895] usb 1-1: device descriptor read/8, error -71 [ 830.979723][ T5926] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.237/input/input51 [ 831.009695][T13664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2117'. [ 831.065817][T13665] 9pnet_fd: Insufficient options for proto=fd [ 831.077216][T13664] vlan2: entered promiscuous mode [ 831.393093][T13670] bridge4: entered promiscuous mode [ 831.410307][T13670] bridge4: entered allmulticast mode [ 831.553521][T13670] team0: Port device bridge4 added [ 832.179528][ T5895] usb 5-1: USB disconnect, device number 18 [ 832.308784][T13675] loop8: detected capacity change from 0 to 8 [ 832.343772][T13675] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 [ 832.388612][T13675] loop8: p1 start 3674210304 is beyond EOD, truncated [ 832.403050][T13675] loop8: p2 start 2946521549 is beyond EOD, truncated [ 832.420831][T13675] loop8: p3 start 3210040201 is beyond EOD, truncated [ 832.453138][T13675] loop8: p4 start 2187423751 is beyond EOD, truncated [ 832.492652][ T5926] hid-generic 0000:FFFFFFFF:0000.0017: unknown main item tag 0x0 [ 832.535042][ T5926] hid-generic 0000:FFFFFFFF:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 832.670228][T13675] loop8: p5 start 1210360614 is beyond EOD, truncated [ 832.966609][T13675] loop8: p6 start 4163130221 is beyond EOD, truncated [ 833.033891][T13675] loop8: p7 start 65302515 is beyond EOD, truncated [ 833.045737][T13675] loop8: p8 start 365161308 is beyond EOD, truncated [ 833.137769][T13691] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 833.483469][T13675] loop8: p9 start 986802111 is beyond EOD, truncated [ 834.685083][T13708] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 835.481860][ T5895] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 835.856248][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 835.864465][ T5895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.875350][ T5895] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 835.888316][ T5895] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 835.898915][ T5848] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 835.912722][T13723] binder: 13722:13723 unknown command 0 [ 835.923109][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.950462][ T5895] usb 3-1: config 0 descriptor?? [ 835.969900][T13723] binder: 13722:13723 ioctl c0306201 200000000080 returned -22 [ 836.398094][ T5848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.402996][T13712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.423729][ T5848] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 836.449219][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.466804][T13712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.485070][ T5848] usb 5-1: config 0 descriptor?? [ 836.511199][ T5848] pwc: Askey VC010 type 2 USB webcam detected. [ 836.948993][ T5848] pwc: recv_control_msg error -32 req 02 val 2b00 [ 836.956358][ T5848] pwc: recv_control_msg error -32 req 02 val 2700 [ 836.980190][ T5848] pwc: recv_control_msg error -32 req 02 val 2c00 [ 837.090086][ T5848] pwc: recv_control_msg error -32 req 04 val 1000 [ 837.327312][ T5848] pwc: recv_control_msg error -32 req 04 val 1400 [ 837.339330][ T5848] pwc: recv_control_msg error -32 req 02 val 2000 [ 837.349494][ T5848] pwc: recv_control_msg error -32 req 02 val 2100 [ 837.572448][ T5848] pwc: recv_control_msg error -32 req 02 val 2500 [ 837.580865][ T5848] pwc: recv_control_msg error -32 req 02 val 2400 [ 837.592104][ T5848] pwc: recv_control_msg error -32 req 02 val 2600 [ 837.600199][ T5848] pwc: recv_control_msg error -32 req 02 val 2900 [ 837.607296][ T5848] pwc: recv_control_msg error -32 req 02 val 2800 [ 837.616335][ T5848] pwc: recv_control_msg error -32 req 04 val 1100 [ 837.830899][T13734] netlink: 'syz.3.2135': attribute type 1 has an invalid length. [ 838.125323][T13734] 8021q: adding VLAN 0 to HW filter on device bond3 [ 838.969065][ T5926] usb 3-1: USB disconnect, device number 27 [ 839.161207][ T5848] pwc: recv_control_msg error -71 req 04 val 1200 [ 839.210053][ T5848] pwc: Registered as video103. [ 839.274860][ T5848] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input52 [ 840.355552][ T5848] usb 5-1: USB disconnect, device number 19 [ 840.824197][T13765] siw: device registration error -23 [ 840.934457][T13765] netlink: 'syz.0.2141': attribute type 64 has an invalid length. [ 841.000654][T13765] netlink: 'syz.0.2141': attribute type 4 has an invalid length. [ 841.124579][T13765] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2141'. [ 841.734111][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2146'. [ 843.239232][T13786] IPv6: addrconf: prefix option has invalid lifetime [ 843.332215][T13791] xt_CT: You must specify a L4 protocol and not use inversions on it [ 843.595922][T13795] syzkaller0: entered promiscuous mode [ 843.611684][T13795] syzkaller0: entered allmulticast mode [ 844.417609][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2153'. [ 844.460743][T13802] ip6gretap0: entered promiscuous mode [ 844.488940][T13802] ip6gretap0: left promiscuous mode [ 845.091781][T13811] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 845.616153][T13805] mmap: syz.4.2155 (13805): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 847.718288][T13831] xt_TCPMSS: Only works on TCP SYN packets [ 851.011290][T13866] netlink: 'syz.0.2170': attribute type 1 has an invalid length. [ 851.269919][T13866] 8021q: adding VLAN 0 to HW filter on device bond5 [ 851.938521][T13871] bond4: (slave dummy0): Releasing active interface [ 851.983292][T13871] bond5: (slave dummy0): making interface the new active one [ 852.004342][T13871] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 852.222630][T13882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.502429][T13896] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2179'. [ 854.665436][T13896] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2179'. [ 856.280247][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2185'. [ 856.319911][T13917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2185'. [ 856.405737][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 856.598866][T13922] loop9: detected capacity change from 0 to 7 [ 856.609703][T13922] buffer_io_error: 11 callbacks suppressed [ 856.609742][T13922] Buffer I/O error on dev loop9, logical block 0, async page read [ 856.624322][T13922] Buffer I/O error on dev loop9, logical block 0, async page read [ 856.633337][T13922] Buffer I/O error on dev loop9, logical block 0, async page read [ 856.642342][T13922] Buffer I/O error on dev loop9, logical block 0, async page read [ 856.651100][T13922] Buffer I/O error on dev loop9, logical block 0, async page read [ 856.659735][T13922] Buffer I/O error on dev loop9, logical block 0, async page read [ 856.671465][T13922] Buffer I/O error on dev loop9, logical block 0, async page read [ 856.679731][T13922] ldm_validate_partition_table(): Disk read failed. [ 856.686973][T13922] Buffer I/O error on dev loop9, logical block 0, async page read [ 856.695596][T13922] Buffer I/O error on dev loop9, logical block 0, async page read [ 856.704169][T13922] Buffer I/O error on dev loop9, logical block 0, async page read [ 856.713099][T13922] Dev loop9: unable to read RDB block 0 [ 856.720702][T13922] loop9: unable to read partition table [ 856.727855][T13922] loop9: partition table beyond EOD, truncated [ 856.734113][T13922] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 856.734113][T13922] ) failed (rc=-5) [ 857.130594][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 857.130611][ T30] audit: type=1800 audit(1755689444.912:484): pid=13923 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2185" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 857.659361][ T5848] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 858.171508][ T5848] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 858.231200][ T5848] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 858.263705][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.285321][ T5848] usb 3-1: Product: syz [ 858.289533][ T5848] usb 3-1: Manufacturer: syz [ 858.324681][ T5848] usb 3-1: SerialNumber: syz [ 858.371230][ T5848] usb 3-1: config 0 descriptor?? [ 859.589408][ T5848] powermate: unknown product id 0240 [ 859.602961][ T5848] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input54 [ 859.624949][ C0] powermate: config urb returned -71 [ 859.631254][ C0] powermate: config urb returned -71 [ 859.636720][ C0] powermate: config urb returned -71 [ 859.642063][ C0] powermate: config urb returned -71 [ 859.839264][ T5848] usb 3-1: USB disconnect, device number 28 [ 859.845253][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 859.914549][T13945] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2194'. [ 862.035018][T13974] @: renamed from vlan0 [ 862.090140][T13978] x_tables: duplicate underflow at hook 4 [ 865.557285][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2208'. [ 867.255035][T14039] netlink: 512 bytes leftover after parsing attributes in process `syz.3.2212'. [ 867.586217][T14044] xt_TCPMSS: Only works on TCP SYN packets [ 870.127425][T14064] tipc: Enabling of bearer rejected, failed to enable media [ 870.495580][T14071] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2221'. [ 870.504815][T14071] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2221'. [ 871.321173][T14072] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2225'. [ 871.511079][T14080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2229'. [ 871.511496][T14081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2229'. [ 872.119114][T14077] bridge3: entered promiscuous mode [ 872.124410][T14077] bridge3: entered allmulticast mode [ 872.225633][T14067] netlink: 'syz.1.2225': attribute type 1 has an invalid length. [ 872.233419][T14067] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2225'. [ 872.359858][T14077] team0: Port device bridge3 added [ 872.735626][T14091] bridge4: entered promiscuous mode [ 872.777126][T14091] bridge4: entered allmulticast mode [ 873.730117][T14091] team0: Port device bridge4 added [ 874.788558][T14110] bond3: option mode: unable to set because the bond device is up [ 874.906228][T14113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2238'. [ 874.916509][T14113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2238'. [ 878.052175][ T5848] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 878.351765][T14134] team0: Caught tx_queue_len zero misconfig [ 878.832366][ T5848] usb 2-1: Using ep0 maxpacket: 16 [ 878.965720][ T5848] usb 2-1: unable to get BOS descriptor or descriptor too short [ 878.987702][ T5848] usb 2-1: config 7 interface 0 has no altsetting 0 [ 879.011356][ T5848] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=8f.26 [ 879.046603][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.308915][ T5848] usb 2-1: Product: syz [ 879.380371][ T5848] usb 2-1: Manufacturer: syz [ 879.396449][ T5848] usb 2-1: SerialNumber: syz [ 879.983567][ T5848] usb 2-1: USB disconnect, device number 20 [ 882.595079][T14169] netlink: 'syz.2.2252': attribute type 29 has an invalid length. [ 882.603583][T14169] netlink: 'syz.2.2252': attribute type 29 has an invalid length. [ 885.246932][T14188] netlink: 'syz.1.2258': attribute type 1 has an invalid length. [ 885.276685][T14192] loop2: detected capacity change from 0 to 7 [ 885.338252][T14192] Dev loop2: unable to read RDB block 7 [ 885.354328][T14188] 8021q: adding VLAN 0 to HW filter on device bond10 [ 885.382019][T14192] loop2: unable to read partition table [ 885.388845][T14192] loop2: partition table beyond EOD, truncated [ 885.399613][T14194] bond10: (slave veth11): Enslaving as an active interface with a down link [ 885.408459][T14192] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 885.453523][T14196] bond8: (slave dummy0): Releasing active interface [ 885.508264][T14196] bond10: (slave dummy0): making interface the new active one [ 885.519898][T14196] dummy0: entered promiscuous mode [ 885.525891][T14196] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 885.565609][T14198] macvlan2: entered allmulticast mode [ 885.611265][T14198] bond0: entered allmulticast mode [ 885.620658][T14198] bond_slave_0: entered allmulticast mode [ 885.634674][T14198] bond_slave_1: entered allmulticast mode [ 885.701338][T14198] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 885.711750][T14208] netlink: 360 bytes leftover after parsing attributes in process `syz.1.2264'. [ 885.722340][T14198] bridge0: port 3(macvlan2) entered blocking state [ 885.733017][T14198] bridge0: port 3(macvlan2) entered disabled state [ 885.749306][ T5848] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 886.071856][T14198] macvlan2: entered promiscuous mode [ 886.136916][T14198] bond0: entered promiscuous mode [ 886.191909][T14198] bond_slave_0: entered promiscuous mode [ 886.301440][T14198] bond_slave_1: entered promiscuous mode [ 886.640292][T14218] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2265'. [ 886.739877][T14217] xt_CT: You must specify a L4 protocol and not use inversions on it [ 887.148673][ T5848] usb 3-1: device descriptor read/64, error -71 [ 887.228809][T14223] xt_CT: You must specify a L4 protocol and not use inversions on it [ 887.859540][ T5848] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 888.507855][ T5848] usb 3-1: device descriptor read/64, error -71 [ 888.891702][ T5848] usb usb3-port1: attempt power cycle [ 890.049903][T14243] batadv_slave_0: entered promiscuous mode [ 890.180821][T14243] batadv_slave_0: left promiscuous mode [ 891.219158][T14260] FAULT_INJECTION: forcing a failure. [ 891.219158][T14260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.273778][T14260] CPU: 1 UID: 0 PID: 14260 Comm: syz.4.2280 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 891.273805][T14260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 891.273818][T14260] Call Trace: [ 891.273826][T14260] [ 891.273835][T14260] dump_stack_lvl+0x189/0x250 [ 891.273863][T14260] ? __pfx____ratelimit+0x10/0x10 [ 891.273885][T14260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 891.273907][T14260] ? __pfx__printk+0x10/0x10 [ 891.273934][T14260] ? cec_claim_log_addrs+0x1e3/0x310 [ 891.273966][T14260] should_fail_ex+0x414/0x560 [ 891.273992][T14260] _copy_to_user+0x31/0xb0 [ 891.274021][T14260] cec_ioctl+0x21c6/0x2f20 [ 891.274054][T14260] ? __pfx_cec_ioctl+0x10/0x10 [ 891.274078][T14260] ? do_vfs_ioctl+0xf37/0x1990 [ 891.274115][T14260] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 891.274149][T14260] ? kasan_quarantine_put+0xdd/0x220 [ 891.274188][T14260] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 891.274210][T14260] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 891.274231][T14260] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 891.274250][T14260] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 891.274271][T14260] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 891.274289][T14260] ? smack_log+0xef/0x3f0 [ 891.274318][T14260] ? __pfx_smack_log+0x10/0x10 [ 891.274344][T14260] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 891.274370][T14260] ? smk_access+0x14c/0x4e0 [ 891.274412][T14260] ? smack_file_ioctl+0x2a9/0x340 [ 891.274433][T14260] ? __pfx_smack_file_ioctl+0x10/0x10 [ 891.274463][T14260] ? __fget_files+0x2a/0x420 [ 891.274483][T14260] ? __fget_files+0x3a0/0x420 [ 891.274503][T14260] ? __fget_files+0x2a/0x420 [ 891.274528][T14260] ? bpf_lsm_file_ioctl+0x9/0x20 [ 891.274550][T14260] ? __pfx_cec_ioctl+0x10/0x10 [ 891.274573][T14260] __se_sys_ioctl+0xfc/0x170 [ 891.274603][T14260] do_syscall_64+0xfa/0x3b0 [ 891.274623][T14260] ? lockdep_hardirqs_on+0x9c/0x150 [ 891.274643][T14260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.274662][T14260] ? clear_bhb_loop+0x60/0xb0 [ 891.274686][T14260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.274705][T14260] RIP: 0033:0x7ff04538ebe9 [ 891.274721][T14260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.274739][T14260] RSP: 002b:00007ff0435ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 891.274759][T14260] RAX: ffffffffffffffda RBX: 00007ff0455b5fa0 RCX: 00007ff04538ebe9 [ 891.274774][T14260] RDX: 0000200000000140 RSI: 00000000c05c6104 RDI: 0000000000000008 [ 891.274787][T14260] RBP: 00007ff0435ee090 R08: 0000000000000000 R09: 0000000000000000 [ 891.274800][T14260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.274812][T14260] R13: 00007ff0455b6038 R14: 00007ff0455b5fa0 R15: 00007fffdcfc6b78 [ 891.274844][T14260] [ 891.276932][T14257] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 891.884147][T14258] No source specified [ 893.281032][T14275] No source specified [ 893.805336][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2288'. [ 894.012596][T14297] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2289'. [ 894.605035][T14308] netlink: 'syz.4.2291': attribute type 1 has an invalid length. [ 895.374265][ T5926] hid-generic 0000:FFFFFFFF:0000.0018: unknown main item tag 0x0 [ 895.620054][ T5926] hid-generic 0000:FFFFFFFF:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 896.322028][T14308] 8021q: adding VLAN 0 to HW filter on device bond5 [ 896.412045][T14318] bond5: (slave veth9): Enslaving as an active interface with a down link [ 896.453332][T14319] bond4: (slave dummy0): Releasing active interface [ 896.486929][T14319] bond5: (slave dummy0): making interface the new active one [ 896.516222][T14319] dummy0: entered promiscuous mode [ 896.521744][T14319] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 896.940812][T14335] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 899.707150][T14363] FAULT_INJECTION: forcing a failure. [ 899.707150][T14363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 899.720919][T14363] CPU: 0 UID: 0 PID: 14363 Comm: syz.2.2306 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 899.720944][T14363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 899.720956][T14363] Call Trace: [ 899.720964][T14363] [ 899.720971][T14363] dump_stack_lvl+0x189/0x250 [ 899.720997][T14363] ? __pfx____ratelimit+0x10/0x10 [ 899.721015][T14363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 899.721027][T14363] ? __pfx__printk+0x10/0x10 [ 899.721040][T14363] ? __might_fault+0xb0/0x130 [ 899.721056][T14363] should_fail_ex+0x414/0x560 [ 899.721070][T14363] _copy_from_user+0x2d/0xb0 [ 899.721085][T14363] ___sys_sendmsg+0x158/0x2a0 [ 899.721103][T14363] ? __pfx____sys_sendmsg+0x10/0x10 [ 899.721141][T14363] ? __x64_sys_sendmsg+0x180/0x260 [ 899.721160][T14363] __x64_sys_sendmsg+0x19b/0x260 [ 899.721177][T14363] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 899.721198][T14363] ? rcu_is_watching+0x15/0xb0 [ 899.721213][T14363] ? do_syscall_64+0xbe/0x3b0 [ 899.721226][T14363] do_syscall_64+0xfa/0x3b0 [ 899.721238][T14363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.721247][T14363] ? asm_sysvec_call_function_single+0x1a/0x20 [ 899.721257][T14363] ? clear_bhb_loop+0x60/0xb0 [ 899.721269][T14363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.721279][T14363] RIP: 0033:0x7f5a15d8ebe9 [ 899.721289][T14363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 899.721298][T14363] RSP: 002b:00007f5a16c50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 899.721309][T14363] RAX: ffffffffffffffda RBX: 00007f5a15fb6090 RCX: 00007f5a15d8ebe9 [ 899.721317][T14363] RDX: 0000000000048005 RSI: 0000200000000080 RDI: 0000000000000004 [ 899.721324][T14363] RBP: 00007f5a16c50090 R08: 0000000000000000 R09: 0000000000000000 [ 899.721330][T14363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.721336][T14363] R13: 00007f5a15fb6128 R14: 00007f5a15fb6090 R15: 00007fffb15e92b8 [ 899.721353][T14363] [ 900.845794][T14369] netlink: 'syz.3.2308': attribute type 20 has an invalid length. [ 900.980924][T14372] netlink: 'syz.2.2310': attribute type 20 has an invalid length. [ 901.040221][T14376] netlink: 'syz.4.2312': attribute type 1 has an invalid length. [ 901.088253][T14376] 8021q: adding VLAN 0 to HW filter on device bond6 [ 901.157030][T14380] bond6: (slave veth11): Enslaving as an active interface with a down link [ 901.193862][T14376] bond5: (slave dummy0): Releasing active interface [ 901.225144][T14376] dummy0: left promiscuous mode [ 901.309497][T14376] bond6: (slave dummy0): making interface the new active one [ 901.321033][T14376] dummy0: entered promiscuous mode [ 901.329288][T14376] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 901.426895][T14385] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 902.231236][ T5895] hid-generic 0000:FFFFFFFF:0000.0019: unknown main item tag 0x0 [ 902.240362][ T5895] hid-generic 0000:FFFFFFFF:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 904.260338][ T5895] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 905.331678][ T5895] hid-generic 0000:0000:0000.001A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 906.119129][ T36] dummy0: left promiscuous mode [ 906.856326][ T5895] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 907.087253][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 907.101673][ T5895] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 907.127427][ T5895] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 907.168788][ T5895] usb 2-1: config 166 has no interface number 0 [ 907.175625][ T5895] usb 2-1: config 166 has no interface number 1 [ 907.193801][ T5895] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 907.204507][T14429] bridge4: entered promiscuous mode [ 907.212218][ T5895] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 907.215143][T14429] bridge4: entered allmulticast mode [ 907.224083][ T5895] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 907.234631][T14429] team0: Port device bridge4 added [ 907.240600][ T5895] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 907.260347][ T5895] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 907.459058][ T5895] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 907.483132][ T5895] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 907.496085][ T5895] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 907.510541][ T5895] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 907.523857][ T5848] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 907.534549][ T5895] usb 2-1: config 166 interface 177 has no altsetting 0 [ 907.541989][ T5895] usb 2-1: config 166 interface 34 has no altsetting 0 [ 907.786112][ T5895] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 907.796491][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.811618][ T5895] usb 2-1: Product: syz [ 907.822239][ T5895] usb 2-1: Manufacturer: syz [ 907.827755][ T5895] usb 2-1: SerialNumber: syz [ 907.857463][ T5848] usb 5-1: Using ep0 maxpacket: 16 [ 907.867801][ T5848] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 907.888998][ T5848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.904014][ T5848] usb 5-1: config 0 has no interface number 0 [ 907.913644][ T5848] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 907.924029][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.932117][ T5848] usb 5-1: Product: syz [ 907.937696][ T5848] usb 5-1: Manufacturer: syz [ 907.942297][ T5848] usb 5-1: SerialNumber: syz [ 907.954574][ T5848] usb 5-1: config 0 descriptor?? [ 907.967040][ T5848] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 907.978325][ T5848] usb 5-1: No valid video chain found. [ 908.064412][ T5895] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 908.174027][ T5895] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 908.186376][ T5848] usb 5-1: USB disconnect, device number 20 [ 908.264635][ T5895] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 908.278459][ T5895] usb 2-1: Found UVC 0.00 device syz (0bda:0138) [ 908.285829][ T5895] usb 2-1: No valid video chain found. [ 908.302395][ T5895] usb 2-1: USB disconnect, device number 21 [ 908.318948][T14440] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 908.679793][T14449] netlink: 'syz.2.2330': attribute type 4 has an invalid length. [ 909.131405][T14452] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 909.218186][T14457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2332'. [ 909.229030][T14457] netlink: 'syz.1.2332': attribute type 2 has an invalid length. [ 909.238722][T14457] netlink: 'syz.1.2332': attribute type 1 has an invalid length. [ 909.261261][T14457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2332'. [ 909.459432][T14455] netlink: 'syz.4.2333': attribute type 1 has an invalid length. [ 909.467247][T14455] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2333'. [ 910.107449][ T5895] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 910.121153][ T5895] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 910.356582][T14471] xt_CT: You must specify a L4 protocol and not use inversions on it [ 910.963651][T14479] netlink: 'syz.4.2339': attribute type 20 has an invalid length. [ 911.150763][ T5931] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 911.321743][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 911.331763][ T5895] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 911.351642][ T5931] usb 3-1: too many configurations: 149, using maximum allowed: 8 [ 911.390669][ T5931] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 911.413463][ T5931] usb 3-1: can't read configurations, error -61 [ 911.476039][T14488] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2342'. [ 911.485408][T14488] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2342'. [ 911.651375][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 911.866511][ T5931] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 912.038043][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 912.055807][ T5931] usb 3-1: too many configurations: 149, using maximum allowed: 8 [ 912.139590][ T5931] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 912.184882][ T5931] usb 3-1: can't read configurations, error -61 [ 912.249984][ T5931] usb usb3-port1: attempt power cycle [ 913.310045][ T5931] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 913.371192][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 913.398834][ T5931] usb 3-1: too many configurations: 149, using maximum allowed: 8 [ 913.458298][ T5931] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 913.517547][ T5931] usb 3-1: can't read configurations, error -61 [ 913.707054][ T5931] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 913.889521][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 914.022963][ T5895] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 914.032306][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.046256][ T5895] usb 2-1: config 0 descriptor?? [ 914.109876][ T5931] usb 3-1: device descriptor read/8, error -71 [ 914.263796][ T5931] usb usb3-port1: unable to enumerate USB device [ 914.452540][ T5895] usbhid 2-1:0.0: can't add hid device: -71 [ 914.461153][ T5895] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 915.290136][ T5895] usb 2-1: USB disconnect, device number 22 [ 917.614326][ T5931] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 917.737758][ T5931] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 919.120662][T14537] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 919.423953][T14543] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 919.611803][T14537] syz.2.2357: attempt to access beyond end of device [ 919.611803][T14537] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 919.706029][T14537] exFAT-fs (nbd2): unable to read boot sector [ 919.735583][T14537] exFAT-fs (nbd2): failed to read boot sector [ 919.800582][T14537] exFAT-fs (nbd2): failed to recognize exfat type [ 920.699433][ T2985] dummy0: left promiscuous mode [ 920.976414][T14557] netlink: 'syz.2.2360': attribute type 29 has an invalid length. [ 921.015759][T14557] netlink: 'syz.2.2360': attribute type 29 has an invalid length. [ 922.599045][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 924.579173][T14584] xt_TCPMSS: Only works on TCP SYN packets [ 927.623903][T14608] can0: slcan on ttyS3. [ 928.326395][T14608] can0 (unregistered): slcan off ttyS3. [ 928.394910][T14614] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2378'. [ 929.564881][ T5931] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 930.030453][ T5931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 930.259476][ T5931] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 930.283526][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.365835][ T5931] usb 3-1: Product: syz [ 930.403596][ T5931] usb 3-1: Manufacturer: syz [ 930.427289][ T5931] usb 3-1: SerialNumber: syz [ 930.769585][ T5931] usb 3-1: config 0 descriptor?? [ 930.793482][T14635] netlink: 'syz.4.2384': attribute type 20 has an invalid length. [ 930.854689][T14637] 8021q: adding VLAN 0 to HW filter on device bond4 [ 931.620323][T14651] bridge5: entered promiscuous mode [ 931.626634][T14651] bridge5: entered allmulticast mode [ 931.641914][T14651] team0: Port device bridge5 added [ 932.699018][ T5926] usb 3-1: USB disconnect, device number 36 [ 938.607165][T14713] trusted_key: encrypted_key: insufficient parameters specified [ 938.689587][T14702] could not allocate digest TFM handle blake2s-128-generic [ 938.845646][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2404'. [ 939.206362][ T5931] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 939.475650][ T5931] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 939.497608][ T5931] usb 1-1: config 0 has no interface number 0 [ 939.524165][ T5895] hid-generic 0000:FFFFFFFF:0000.001D: unknown main item tag 0x0 [ 939.540227][ T5931] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 37351, setting to 8 [ 939.577016][ T5931] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 939.605445][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.617669][ T5895] hid-generic 0000:FFFFFFFF:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 939.678830][ T5931] usb 1-1: config 0 descriptor?? [ 939.695998][T14721] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 939.737623][ T5931] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 939.888561][T14742] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2411'. [ 939.945854][T14742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 940.022116][ T5895] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 940.023531][ T5931] usb 1-1: USB disconnect, device number 59 [ 940.423045][ T5895] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 940.466200][ T5895] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 940.505075][ T5895] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 940.516748][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 940.536824][ T5895] usb 3-1: SerialNumber: syz [ 940.585815][ T5895] cdc_ether 3-1:1.0: invalid descriptor buffer length [ 940.602864][ T5895] usb 3-1: bad CDC descriptors [ 941.077607][ T5931] usb 3-1: USB disconnect, device number 37 [ 943.572602][ T5895] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 943.991704][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 943.998481][ T5895] usb 1-1: unable to get BOS descriptor or descriptor too short [ 944.010663][ T5895] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 944.024310][ T5895] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 944.041808][ T5895] usb 1-1: config 1 interface 0 has no altsetting 0 [ 944.059620][ T5895] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 944.081908][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.109261][ T5895] usb 1-1: Product: syz [ 944.119097][ T5895] usb 1-1: Manufacturer: syz [ 944.129398][ T5895] usb 1-1: SerialNumber: syz [ 944.138815][T14774] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 944.294546][T14790] kvm: user requested TSC rate below hardware speed [ 944.304832][T14790] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3304665512 (6609331024 ns) > initial count (5832947598 ns). Using initial count to start timer. [ 944.323793][ T5931] hid-generic 0000:FFFFFFFF:0000.001E: unknown main item tag 0x0 [ 944.385100][ T5931] hid-generic 0000:FFFFFFFF:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 944.801644][T14802] tipc: Enabled bearer , priority 0 [ 944.811951][T14802] syzkaller0: entered promiscuous mode [ 944.820151][T14802] syzkaller0: entered allmulticast mode [ 944.917308][T14802] tipc: Resetting bearer [ 944.973247][T14802] tipc: Disabling bearer [ 946.153995][ T5931] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 946.186714][T14820] netlink: 'syz.3.2437': attribute type 13 has an invalid length. [ 946.219070][T14820] gretap0: refused to change device tx_queue_len [ 946.226596][T14820] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 946.257777][ T5895] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input56 [ 946.296785][ T5895] usb 1-1: USB disconnect, device number 60 [ 946.312776][ T5191] bcm5974 1-1:1.0: could not read from device [ 946.461477][T12259] udevd[12259]: Unable to EVIOCGABS device "/dev/input/event4" [ 946.486867][T12259] udevd[12259]: Unable to EVIOCGABS device "/dev/input/event4" [ 946.489293][T14831] bond6: option mode: unable to set because the bond device has slaves [ 947.186864][T12259] udevd[12259]: Unable to EVIOCGABS device "/dev/input/event4" [ 947.194605][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 947.200318][T12259] udevd[12259]: Unable to EVIOCGABS device "/dev/input/event4" [ 947.201798][T14832] netlink: 'syz.3.2442': attribute type 1 has an invalid length. [ 947.209206][ T5931] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.286778][ T5931] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 947.403246][ T5931] usb 3-1: config 0 interface 0 has no altsetting 0 [ 947.434007][ T5931] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 947.443765][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.513679][ T5931] usb 3-1: config 0 descriptor?? [ 947.840571][T14832] 8021q: adding VLAN 0 to HW filter on device bond5 [ 947.932679][T14835] bond5: (slave veth7): Enslaving as an active interface with a down link [ 948.093550][ T5931] hid (null): report_id 2838798905 is invalid [ 948.126231][ T5931] hid (null): unknown global tag 0xc [ 948.137079][ T5931] hid (null): unknown global tag 0xa5 [ 948.142841][ T5931] hid (null): unknown global tag 0xd [ 948.149441][ T5931] hid (null): unknown global tag 0xc [ 948.161504][ T5931] hid (null): global environment stack underflow [ 948.183224][ T5926] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 948.206566][ T5931] cougar 0003:060B:500A.001F: unexpected long global item [ 948.222223][ T5931] cougar 0003:060B:500A.001F: parse failed [ 948.232859][ T5931] cougar 0003:060B:500A.001F: probe with driver cougar failed with error -22 [ 948.345024][ T5931] usb 3-1: USB disconnect, device number 38 [ 948.374880][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 948.386593][ T5926] usb 1-1: config 1 has an invalid interface number: 242 but max is 0 [ 948.614735][ T5926] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 948.673328][ T5926] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 948.734853][ T5926] usb 1-1: config 1 has no interface number 1 [ 948.777135][ T5926] usb 1-1: config 1 interface 242 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 948.808081][ T5926] usb 1-1: config 1 interface 242 has no altsetting 0 [ 948.822981][ T5926] usb 1-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 948.843292][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.867193][ T5926] usb 1-1: Product: syz [ 948.871412][ T5926] usb 1-1: Manufacturer: syz [ 948.893055][ T5926] usb 1-1: SerialNumber: syz [ 949.207885][T14869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2453'. [ 949.463990][ T5926] aqc111 1-1:1.242: probe with driver aqc111 failed with error -22 [ 950.385511][T14889] netlink: 'syz.1.2458': attribute type 32 has an invalid length. [ 950.408816][T14889] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 951.493036][ T5926] usb 1-1: USB disconnect, device number 61 [ 953.420206][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 955.643765][T11918] Bluetooth: hci5: command 0x1003 tx timeout [ 955.651498][ T5849] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 956.773946][T14950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2479'. [ 956.783324][T14950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2479'. [ 956.833450][T14436] hid-generic 0000:FFFFFFFF:0000.0020: unknown main item tag 0x0 [ 957.056525][T14436] hid-generic 0000:FFFFFFFF:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 959.881028][T14961] netlink: 'syz.1.2483': attribute type 29 has an invalid length. [ 959.900366][T14961] netlink: 'syz.1.2483': attribute type 29 has an invalid length. [ 959.910328][T14961] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2483'. [ 960.021797][T14968] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 960.063054][ T5926] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 961.160366][ T5926] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 963.621326][T14436] hid-generic 0000:FFFFFFFF:0000.0021: unknown main item tag 0x0 [ 963.652610][T14436] hid-generic 0000:FFFFFFFF:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 963.724136][T15015] netlink: 'syz.4.2500': attribute type 1 has an invalid length. [ 963.933485][T15017] x_tables: duplicate underflow at hook 2 [ 964.244951][T15015] 8021q: adding VLAN 0 to HW filter on device bond7 [ 965.063650][T15020] bond7: (slave veth13): Enslaving as an active interface with a down link [ 965.096174][T15023] bond6: (slave dummy0): Releasing active interface [ 965.124215][T15023] bond7: (slave dummy0): making interface the new active one [ 965.322787][T15023] dummy0: entered promiscuous mode [ 965.328314][T15023] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 965.504950][T15033] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2504'. [ 966.910095][T15053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2511'. [ 966.932475][T15053] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2511'. [ 967.088268][T15057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2513'. [ 967.128472][T15057] bridge0: entered promiscuous mode [ 967.153653][T15057] bridge0: port 2(macvlan4) entered blocking state [ 967.179611][T15057] bridge0: port 2(macvlan4) entered disabled state [ 967.206773][T15057] macvlan4: entered allmulticast mode [ 967.213030][T15057] bridge0: entered allmulticast mode [ 967.276940][T15057] macvlan4: left allmulticast mode [ 967.282422][T15057] bridge0: left allmulticast mode [ 967.314275][T15057] bridge0: left promiscuous mode [ 970.206808][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2518'. [ 970.661192][T15079] ip6gretap0: entered promiscuous mode [ 970.917509][T15079] ip6gretap0: left promiscuous mode [ 971.019866][T15088] netlink: 360 bytes leftover after parsing attributes in process `syz.2.2521'. [ 971.591201][T15092] ieee802154 phy1 wpan1: encryption failed: -22 [ 971.779101][T15099] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2523'. [ 972.349662][T14436] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 973.711478][T14436] usb 5-1: Using ep0 maxpacket: 8 [ 973.725506][T14436] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 973.737990][T14436] usb 5-1: config 2 has no interface number 0 [ 973.766733][T14436] usb 5-1: config 2 interface 31 has no altsetting 0 [ 973.817478][T14436] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 973.836516][T14436] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.854879][T14436] usb 5-1: Product: syz [ 973.868412][T14436] usb 5-1: Manufacturer: syz [ 973.877996][T14436] usb 5-1: SerialNumber: syz [ 973.974190][T15125] binder: 15116:15125 ioctl 400c620e 0 returned -14 [ 975.161804][T15134] veth0_to_team: entered promiscuous mode [ 975.191638][T15134] veth0_to_team: entered allmulticast mode [ 975.228376][T14436] ch9200 5-1:2.31: probe with driver ch9200 failed with error -71 [ 975.312699][T14436] usb 5-1: USB disconnect, device number 21 [ 977.332518][T14436] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 977.755145][T14436] usb 2-1: unable to get BOS descriptor or descriptor too short [ 977.765393][T14436] usb 2-1: config 1 interface 0 has no altsetting 0 [ 977.776102][T14436] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 977.795438][T14436] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.834204][T14436] usb 2-1: Product: syz [ 977.848819][T14436] usb 2-1: Manufacturer: syz [ 977.896325][T14436] usb 2-1: SerialNumber: syz [ 978.869254][T14436] usbhid 2-1:1.0: can't add hid device: -71 [ 978.878488][T14436] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 978.896011][T15157] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.910212][T14436] usb 2-1: USB disconnect, device number 23 [ 978.940945][T15157] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.957696][T15157] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.967066][T15157] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.326408][T15178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2544'. [ 980.336535][T15178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2544'. [ 983.036022][T15182] xt_TCPMSS: Only works on TCP SYN packets [ 984.895682][T15199] can: request_module (can-proto-0) failed. [ 985.699950][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2555'. [ 985.844933][T15210] bridge5: entered promiscuous mode [ 985.852471][T15210] bridge5: entered allmulticast mode [ 985.922299][T15210] team0: Port device bridge5 added [ 987.786708][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 988.088490][T15233] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 988.577167][T15232] --map-set only usable from mangle table [ 988.625188][ T5895] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 989.215127][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 989.237284][ T5895] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 989.252488][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.281610][ T5895] usb 3-1: Product: syz [ 989.294372][ T5895] usb 3-1: Manufacturer: syz [ 989.339764][ T5895] usb 3-1: SerialNumber: syz [ 989.558353][ T5895] usb 3-1: config 0 descriptor?? [ 989.965208][ T5895] powermate: unknown product id 0240 [ 989.973690][ T5895] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input59 [ 989.987568][ C0] powermate: config urb returned -71 [ 989.993142][ C0] powermate: config urb returned -71 [ 989.999125][ C0] powermate: config urb returned -71 [ 990.004809][ C0] powermate: config urb returned -71 [ 990.045017][ T5895] usb 3-1: USB disconnect, device number 39 [ 990.051144][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 990.095767][T15253] tipc: Enabled bearer , priority 0 [ 990.593942][ T12] dummy0: left promiscuous mode [ 990.611646][T15258] netlink: 'syz.1.2569': attribute type 1 has an invalid length. [ 990.657622][T15258] 8021q: adding VLAN 0 to HW filter on device bond11 [ 990.778687][T15262] bond10: (slave dummy0): Releasing active interface [ 990.793933][T15262] bond11: (slave dummy0): making interface the new active one [ 990.820954][T15262] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 991.569957][T14436] tipc: Node number set to 4095130007 [ 991.693434][T15267] xt_TPROXY: Can be used only with -p tcp or -p udp [ 993.822777][T15283] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 994.273469][T15284] netlink: 'syz.1.2576': attribute type 10 has an invalid length. [ 994.395438][T15284] team0: Port device wlan1 added [ 997.101784][T15314] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 997.479211][T15319] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 998.078732][T15328] syz_tun: entered allmulticast mode [ 998.089648][T15328] dvmrp8: entered allmulticast mode [ 998.199452][T15331] FAULT_INJECTION: forcing a failure. [ 998.199452][T15331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.212685][T15331] CPU: 0 UID: 0 PID: 15331 Comm: syz.0.2588 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 998.212708][T15331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 998.212721][T15331] Call Trace: [ 998.212732][T15331] [ 998.212741][T15331] dump_stack_lvl+0x189/0x250 [ 998.212760][T15331] ? lockdep_hardirqs_on+0x9c/0x150 [ 998.212772][T15331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 998.212784][T15331] ? __pfx__printk+0x10/0x10 [ 998.212798][T15331] ? __might_fault+0xb0/0x130 [ 998.212812][T15331] should_fail_ex+0x414/0x560 [ 998.212827][T15331] _copy_to_user+0x31/0xb0 [ 998.212849][T15331] simple_read_from_buffer+0xe1/0x170 [ 998.212863][T15331] proc_fail_nth_read+0x1df/0x250 [ 998.212879][T15331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 998.212893][T15331] ? rw_verify_area+0x258/0x650 [ 998.212909][T15331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 998.212922][T15331] vfs_read+0x200/0x980 [ 998.212941][T15331] ? __pfx___mutex_lock+0x10/0x10 [ 998.212953][T15331] ? __pfx_vfs_read+0x10/0x10 [ 998.212969][T15331] ? __fget_files+0x2a/0x420 [ 998.212983][T15331] ? __fget_files+0x3a0/0x420 [ 998.212993][T15331] ? __fget_files+0x2a/0x420 [ 998.213009][T15331] ksys_read+0x145/0x250 [ 998.213020][T15331] ? __pfx_ksys_read+0x10/0x10 [ 998.213032][T15331] ? do_syscall_64+0xbe/0x3b0 [ 998.213045][T15331] do_syscall_64+0xfa/0x3b0 [ 998.213058][T15331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.213067][T15331] ? asm_sysvec_call_function_single+0x1a/0x20 [ 998.213077][T15331] ? clear_bhb_loop+0x60/0xb0 [ 998.213089][T15331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.213099][T15331] RIP: 0033:0x7f874b18d5fc [ 998.213110][T15331] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 998.213119][T15331] RSP: 002b:00007f87493f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 998.213131][T15331] RAX: ffffffffffffffda RBX: 00007f874b3b6090 RCX: 00007f874b18d5fc [ 998.213139][T15331] RDX: 000000000000000f RSI: 00007f87493f60a0 RDI: 0000000000000006 [ 998.213145][T15331] RBP: 00007f87493f6090 R08: 0000000000000000 R09: 0000000000000000 [ 998.213151][T15331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.213157][T15331] R13: 00007f874b3b6128 R14: 00007f874b3b6090 R15: 00007ffe74a82598 [ 998.213174][T15331] [ 998.443639][ C0] vkms_vblank_simulate: vblank timer overrun [ 998.671104][T15323] syz_tun: left allmulticast mode [ 1000.327045][T15362] veth0_to_bridge: entered promiscuous mode [ 1000.368919][T15362] geneve3: entered promiscuous mode [ 1000.379682][T15362] geneve3: entered allmulticast mode [ 1001.342524][T15360] veth0_to_bridge: left promiscuous mode [ 1002.380206][T15382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2604'. [ 1002.405347][T15386] macvlan4: entered allmulticast mode [ 1002.411215][T15386] bond0: entered allmulticast mode [ 1002.416664][T15386] bond_slave_0: entered allmulticast mode [ 1002.422495][T15386] bond_slave_1: entered allmulticast mode [ 1002.428635][T15386] macvlan3: entered allmulticast mode [ 1002.434146][T15386] team0: entered allmulticast mode [ 1002.439618][T15386] team_slave_0: entered allmulticast mode [ 1002.446783][T15386] team_slave_1: entered allmulticast mode [ 1002.453202][T15386] bridge_slave_1: entered allmulticast mode [ 1002.460594][T15386] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1002.468413][T15386] bridge0: port 2(macvlan4) entered blocking state [ 1002.475345][T15386] bridge0: port 2(macvlan4) entered disabled state [ 1002.490094][T15386] macvlan4: entered promiscuous mode [ 1002.498085][T15382] 8021q: VLANs not supported on caif0 [ 1003.318463][T15402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2609'. [ 1003.329196][T15402] bridge_slave_1: left allmulticast mode [ 1003.334977][T15402] bridge_slave_1: left promiscuous mode [ 1003.344212][T15402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.430378][T15402] bridge_slave_0: left allmulticast mode [ 1003.439746][T15402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.129152][T15412] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1005.279248][T15417] 9pnet_fd: Insufficient options for proto=fd [ 1005.297000][T15417] netlink: 292 bytes leftover after parsing attributes in process `syz.3.2617'. [ 1005.377220][ T5931] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1005.934889][T14436] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1005.956233][ T5931] usb 3-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 1005.978045][ T5931] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 223, using maximum allowed: 30 [ 1005.990277][ T5931] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 223 [ 1006.019872][ T5931] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1006.039131][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.054432][ T5931] usb 3-1: config 0 descriptor?? [ 1006.104772][T14436] usb 4-1: Using ep0 maxpacket: 16 [ 1006.156127][T14436] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1006.184203][T14436] usb 4-1: config 0 has no interface number 0 [ 1006.324473][T14436] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1006.357704][T14436] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1006.368367][T14436] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1006.418140][T14436] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1006.436861][T14436] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.447351][T14436] usb 4-1: Product: syz [ 1006.456792][T14436] usb 4-1: Manufacturer: syz [ 1006.461678][T14436] usb 4-1: SerialNumber: syz [ 1006.582515][T14436] usb 4-1: config 0 descriptor?? [ 1006.587211][T15415] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1006.671914][T15417] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1006.784288][T15417] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1006.847640][ T5931] usb 3-1: string descriptor 0 read error: -71 [ 1006.887706][ T5931] ath6kl: Failed to submit usb control message: -71 [ 1006.894400][ T5931] ath6kl: unable to send the bmi data to the device: -71 [ 1006.929491][ T5931] ath6kl: Unable to send get target info: -71 [ 1006.949678][ T5931] ath6kl: Failed to init ath6kl core: -71 [ 1006.962938][ T5931] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1006.965103][T15445] netlink: 'syz.0.2621': attribute type 10 has an invalid length. [ 1006.975021][ T5931] usb 3-1: USB disconnect, device number 40 [ 1007.455202][T15417] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1007.465072][T15417] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1007.848123][T15455] --map-set only usable from mangle table [ 1007.861172][T15455] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 1007.925108][T14436] Error reading MAC address [ 1007.964684][ T5895] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1008.043566][T14436] sr9700 4-1:0.41: probe with driver sr9700 failed with error -71 [ 1008.210591][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 1008.458674][T14436] usb 4-1: USB disconnect, device number 17 [ 1008.478056][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1008.518329][ T5895] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1008.629712][T15456] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1008.792949][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.892166][ T5895] usb 2-1: Product: syz [ 1008.896591][ T5895] usb 2-1: Manufacturer: syz [ 1008.901211][ T5895] usb 2-1: SerialNumber: syz [ 1009.073033][ T5895] usb 2-1: config 0 descriptor?? [ 1009.106250][ T5895] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1009.127284][T15460] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1009.149213][ T5895] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1009.762246][T15476] syz.4.2629: attempt to access beyond end of device [ 1009.762246][T15476] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1009.782596][T15476] syz.4.2629: attempt to access beyond end of device [ 1009.782596][T15476] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1009.797661][T15476] Mount JFS Failure: -5 [ 1011.481044][ T5895] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1012.603977][ T5895] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1012.613163][ T5895] em28xx 2-1:0.0: board has no eeprom [ 1012.967543][T15493] overlayfs: failed to decode file handle (len=24, type=251, flags=0, err=-22) [ 1012.991634][T15493] No source specified [ 1013.066065][T14436] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1013.598865][T14436] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1013.619629][T14436] usb 5-1: config 0 has no interface number 0 [ 1013.637964][T14436] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1013.658823][T14436] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.695635][T14436] usb 5-1: Product: syz [ 1013.706100][ T5895] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1013.721411][T14436] usb 5-1: Manufacturer: syz [ 1013.729910][ T5895] em28xx 2-1:0.0: dvb set to bulk mode. [ 1013.743388][T14436] usb 5-1: SerialNumber: syz [ 1013.753620][ T5848] em28xx 2-1:0.0: Binding DVB extension [ 1013.773569][ T5895] usb 2-1: USB disconnect, device number 24 [ 1013.780799][T14436] usb 5-1: config 0 descriptor?? [ 1013.787328][ T5895] em28xx 2-1:0.0: Disconnecting em28xx [ 1014.077444][T14436] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1015.181866][T14436] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1015.219194][ T5848] em28xx 2-1:0.0: Registering input extension [ 1015.226620][T14436] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1015.265753][ T5895] em28xx 2-1:0.0: Closing input extension [ 1015.286865][T14436] usb 5-1: media controller created [ 1015.617541][T14436] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1015.634913][ T5895] em28xx 2-1:0.0: Freeing device [ 1015.714795][T15515] netlink: 'syz.0.2641': attribute type 4 has an invalid length. [ 1015.803566][T14436] i2c i2c-3: ec100: i2c rd failed=-71 reg=33 [ 1016.471125][T14436] usb 5-1: USB disconnect, device number 22 [ 1016.796768][ T5931] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 1017.317322][ T5931] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1017.337944][ T5931] usb 2-1: config 0 has no interface number 0 [ 1017.346581][ T5931] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1017.359875][ T5931] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1017.371097][ T5931] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1017.384185][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.422543][ T5931] usb 2-1: config 0 descriptor?? [ 1017.501269][T15530] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1017.909502][ T5931] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1018.482050][T15549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2650'. [ 1018.491135][T14436] usb 2-1: USB disconnect, device number 25 [ 1018.557966][T15553] loop2: detected capacity change from 0 to 7 [ 1018.574214][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1018.583459][ C1] buffer_io_error: 9 callbacks suppressed [ 1018.583475][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1018.603122][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1018.612353][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1018.620714][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1018.629955][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1018.642579][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1018.651867][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1018.663419][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1018.672679][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1018.684485][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1018.693740][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1018.697823][ T5931] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1018.710640][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1018.719927][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1018.730272][T15553] ldm_validate_partition_table(): Disk read failed. [ 1018.730335][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1018.746144][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1018.757508][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1018.766771][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1018.775905][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1018.785199][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1018.801450][T15553] Dev loop2: unable to read RDB block 0 [ 1018.809150][T15553] loop2: unable to read partition table [ 1018.818902][T15553] loop2: partition table beyond EOD, truncated [ 1018.829158][T15553] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1018.896151][ T5931] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1018.928675][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.976669][ T5931] usb 4-1: config 0 descriptor?? [ 1018.995826][ T5931] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1019.220661][T15560] pim6reg: entered allmulticast mode [ 1019.233413][ T30] audit: type=1326 audit(1755689596.503:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15556 comm="syz.2.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a15d8ebe9 code=0x7ffc0000 [ 1019.261781][ T5931] gp8psk: usb in 128 operation failed. [ 1019.327217][ T30] audit: type=1326 audit(1755689596.503:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15556 comm="syz.2.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a15d8ebe9 code=0x7ffc0000 [ 1019.391032][ T30] audit: type=1326 audit(1755689596.503:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15556 comm="syz.2.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a15d8ebe9 code=0x7ffc0000 [ 1019.460883][ T30] audit: type=1326 audit(1755689596.503:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15556 comm="syz.2.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a15d8ebe9 code=0x7ffc0000 [ 1019.573231][ T30] audit: type=1326 audit(1755689596.503:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15556 comm="syz.2.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a15d8ebe9 code=0x7ffc0000 [ 1019.624847][ T30] audit: type=1326 audit(1755689596.503:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15556 comm="syz.2.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a15d90b07 code=0x7ffc0000 [ 1019.667795][ T30] audit: type=1326 audit(1755689596.503:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15556 comm="syz.2.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5a15d90a7c code=0x7ffc0000 [ 1019.723129][ T30] audit: type=1326 audit(1755689596.503:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15556 comm="syz.2.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5a15d909b4 code=0x7ffc0000 [ 1019.965911][ T30] audit: type=1326 audit(1755689596.503:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15556 comm="syz.2.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5a15d909b4 code=0x7ffc0000 [ 1020.495908][ T30] audit: type=1326 audit(1755689596.503:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15556 comm="syz.2.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5a15d8d84a code=0x7ffc0000 [ 1021.058497][T15574] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1021.257836][ T5931] gp8psk: usb in 146 operation failed. [ 1021.266876][ T5931] gp8psk: failed to get FW version [ 1021.290016][ T5931] gp8psk: usb in 149 operation failed. [ 1021.296344][ T5931] gp8psk: failed to get FPGA version [ 1021.302195][ T5931] gp8psk: usb in 138 operation failed. [ 1021.308870][ T5931] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1021.320729][ T5931] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1021.340197][ T5931] usb 4-1: USB disconnect, device number 18 [ 1021.595483][T15579] netlink: 'syz.0.2661': attribute type 3 has an invalid length. [ 1021.671300][T15579] netlink: 'syz.0.2661': attribute type 3 has an invalid length. [ 1021.900466][T15583] can0: slcan on ttyS3. [ 1021.959455][T15584] can0 (unregistered): slcan off ttyS3. [ 1025.485421][ T5931] hid-generic 0000:FFFFFFFF:0000.0022: unknown main item tag 0x0 [ 1025.526789][ T5931] hid-generic 0000:FFFFFFFF:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1026.569004][T15627] bond4: option mode: unable to set because the bond device is up [ 1027.661228][T15639] gretap0: entered allmulticast mode [ 1027.849089][T15644] netlink: 'syz.0.2679': attribute type 10 has an invalid length. [ 1027.926322][T15644] bond5: (slave dummy0): Releasing active interface [ 1027.987904][ T5931] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1028.015376][T15644] team0: Port device dummy0 added [ 1028.058390][T15648] tipc: Enabled bearer , priority 0 [ 1028.075792][T15648] syzkaller0: entered promiscuous mode [ 1028.081314][T15648] syzkaller0: entered allmulticast mode [ 1028.160859][ T5931] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1028.190581][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.205484][T15647] tipc: Resetting bearer [ 1028.237665][ T5931] usb 4-1: config 0 descriptor?? [ 1028.280260][ T5931] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1028.291921][T15647] tipc: Disabling bearer [ 1028.476442][T15643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2681'. [ 1028.826089][T14436] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1029.142405][T14436] usb 2-1: Using ep0 maxpacket: 8 [ 1029.157148][T14436] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1029.195314][T14436] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1029.266448][T14436] usb 2-1: string descriptor 0 read error: -22 [ 1029.295991][T14436] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1029.326641][T14436] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.364377][T14436] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1029.449804][T14436] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1029.472817][T14436] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1029.503640][T14436] usb 2-1: media controller created [ 1029.634820][ T5926] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1029.860318][ T5926] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1029.861545][T15666] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2688'. [ 1029.883097][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.009767][ T5926] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1030.031668][T14436] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1030.040584][ T5926] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1030.051763][ T5926] usb 5-1: Manufacturer: syz [ 1030.091243][ T5926] usb 5-1: config 0 descriptor?? [ 1030.164216][T14436] zl10353_read_register: readreg error (reg=127, ret==0) [ 1030.201083][ T5931] gspca_stv06xx: HDCS-1020 sensor detected [ 1030.318333][ T5926] rc_core: IR keymap rc-hauppauge not found [ 1030.410806][ T5926] Registered IR keymap rc-empty [ 1030.505063][ T5931] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 1030.534203][ T5926] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1030.655095][ T5931] usb 4-1: USB disconnect, device number 19 [ 1030.803682][ T5926] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input62 [ 1030.818716][T14436] usb 2-1: USB disconnect, device number 26 [ 1030.854158][T15663] evm: overlay not supported [ 1030.899334][ T5848] hid-generic 0000:FFFFFFFF:0000.0023: unknown main item tag 0x0 [ 1030.907834][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 1030.924427][ T5895] usb 5-1: USB disconnect, device number 23 [ 1030.967432][ T5848] hid-generic 0000:FFFFFFFF:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1032.489534][T15699] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 1033.210807][T15707] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2699'. [ 1034.649892][T15720] netlink: 'syz.1.2703': attribute type 4 has an invalid length. [ 1034.803940][T15720] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2703'. [ 1034.948007][ T5931] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1035.175902][ T5931] usb 5-1: device descriptor read/64, error -71 [ 1035.400412][T15724] bond0: Unable to set up delay as MII monitoring is disabled [ 1037.917014][ T5931] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1040.602142][ T5931] hid-generic 0000:FFFFFFFF:0000.0024: unknown main item tag 0x0 [ 1040.618823][ T5931] hid-generic 0000:FFFFFFFF:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1040.691987][T15748] netlink: 'syz.2.2712': attribute type 9 has an invalid length. [ 1040.779270][T15759] xt_HMARK: spi-set and port-set can't be combined [ 1040.874671][T15759] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1040.908280][T15764] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2718'. [ 1041.719851][ T5895] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1042.167134][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 1042.187937][ T5895] usb 2-1: config index 0 descriptor too short (expected 168, got 18) [ 1042.196747][ T5895] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.220660][ T5895] usb 2-1: config 0 has no interfaces? [ 1042.282463][ T5895] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1042.296035][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.305466][ T5895] usb 2-1: Product: syz [ 1042.310200][ T5895] usb 2-1: Manufacturer: syz [ 1042.315984][ T5895] usb 2-1: SerialNumber: syz [ 1042.328629][ T5895] usb 2-1: config 0 descriptor?? [ 1042.799339][ T5931] usb 2-1: USB disconnect, device number 27 [ 1045.820125][T15810] NILFS (nbd2): device size too small [ 1046.452681][T15815] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2731'. [ 1046.541856][ T5931] hid-generic 0000:FFFFFFFF:0000.0025: unknown main item tag 0x0 [ 1046.572264][ T5931] hid-generic 0000:FFFFFFFF:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1048.891459][ T5895] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1048.962929][ T5848] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1049.144800][ T5848] usb 3-1: Using ep0 maxpacket: 16 [ 1049.177233][ T5895] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1049.200636][ T5848] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.222673][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.253100][ T5848] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.283470][ T5895] usb 1-1: config 0 has no interface number 0 [ 1049.425446][ T5848] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1049.440977][ T5895] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1049.492711][ T5895] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1049.542654][T15862] FAULT_INJECTION: forcing a failure. [ 1049.542654][T15862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1049.556539][T15862] CPU: 0 UID: 0 PID: 15862 Comm: syz.3.2745 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1049.556565][T15862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1049.556576][T15862] Call Trace: [ 1049.556583][T15862] [ 1049.556590][T15862] dump_stack_lvl+0x189/0x250 [ 1049.556616][T15862] ? __pfx____ratelimit+0x10/0x10 [ 1049.556635][T15862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1049.556655][T15862] ? __pfx__printk+0x10/0x10 [ 1049.556677][T15862] ? __might_fault+0xb0/0x130 [ 1049.556704][T15862] should_fail_ex+0x414/0x560 [ 1049.556728][T15862] _copy_from_user+0x2d/0xb0 [ 1049.556753][T15862] ___sys_sendmsg+0x158/0x2a0 [ 1049.556783][T15862] ? __pfx____sys_sendmsg+0x10/0x10 [ 1049.556846][T15862] ? __fget_files+0x2a/0x420 [ 1049.556865][T15862] ? __fget_files+0x3a0/0x420 [ 1049.556895][T15862] __x64_sys_sendmsg+0x19b/0x260 [ 1049.556924][T15862] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1049.556963][T15862] ? __pfx_ksys_write+0x10/0x10 [ 1049.556987][T15862] ? do_syscall_64+0xbe/0x3b0 [ 1049.557010][T15862] do_syscall_64+0xfa/0x3b0 [ 1049.557039][T15862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.557057][T15862] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1049.557077][T15862] ? clear_bhb_loop+0x60/0xb0 [ 1049.557100][T15862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.557119][T15862] RIP: 0033:0x7f4cb898ebe9 [ 1049.557136][T15862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1049.557153][T15862] RSP: 002b:00007f4cb9866038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1049.557174][T15862] RAX: ffffffffffffffda RBX: 00007f4cb8bb6090 RCX: 00007f4cb898ebe9 [ 1049.557190][T15862] RDX: 0000000000040080 RSI: 0000200000000040 RDI: 0000000000000006 [ 1049.557203][T15862] RBP: 00007f4cb9866090 R08: 0000000000000000 R09: 0000000000000000 [ 1049.557215][T15862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1049.557227][T15862] R13: 00007f4cb8bb6128 R14: 00007f4cb8bb6090 R15: 00007ffecfb58db8 [ 1049.557259][T15862] [ 1049.839856][ T5848] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1049.849480][ T5848] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1049.858652][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.894569][ T5848] usb 3-1: config 0 descriptor?? [ 1050.348382][ T5931] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1050.374706][ T5895] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1050.384141][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.394300][ T5895] usb 1-1: Product: syz [ 1050.399327][ T5895] usb 1-1: Manufacturer: syz [ 1050.404599][ T5895] usb 1-1: SerialNumber: syz [ 1050.417945][ T5895] usb 1-1: config 0 descriptor?? [ 1050.558104][ T5931] usb 5-1: config 0 has no interfaces? [ 1050.601481][ T5931] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 1050.612214][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=234, SerialNumber=2 [ 1050.620656][ T5931] usb 5-1: Product: syz [ 1050.625020][ T5931] usb 5-1: Manufacturer: syz [ 1050.629628][ T5931] usb 5-1: SerialNumber: syz [ 1050.703854][ T5931] usb 5-1: config 0 descriptor?? [ 1050.806642][ T5931] usb 3-1: USB disconnect, device number 41 [ 1050.861416][T15841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.872744][T15841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.459175][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.505456][ T5895] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1053.724687][ T5895] usb 1-1: USB disconnect, device number 62 [ 1053.771427][ T5931] usb 5-1: USB disconnect, device number 26 [ 1056.172473][ T5895] hid-generic 0000:FFFFFFFF:0000.0027: unknown main item tag 0x0 [ 1056.808857][ T5895] hid-generic 0000:FFFFFFFF:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1058.596774][T15915] Unsupported ieee802154 address type: 0 [ 1061.107371][ T5909] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1061.283954][ T5909] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1061.299740][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.318571][ T5909] usb 4-1: Product: syz [ 1061.332682][ T5909] usb 4-1: Manufacturer: syz [ 1061.353343][ T5909] usb 4-1: SerialNumber: syz [ 1061.360876][ T5909] usb 4-1: config 0 descriptor?? [ 1061.584548][T15928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2764'. [ 1061.607409][ T5909] hso 4-1:0.0: Failed to find BULK IN ep [ 1061.637046][ T5909] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1061.833668][ T5909] usb 4-1: USB disconnect, device number 20 [ 1063.602236][T15997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1063.793381][T16048] syzkaller0: entered promiscuous mode [ 1063.798896][T16048] syzkaller0: entered allmulticast mode [ 1064.121787][ T3467] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1064.393141][T16067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2815'. [ 1065.011296][T16076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2817'. [ 1066.018527][T16078] team0: No ports can be present during mode change [ 1070.572036][T16169] veth0_virt_wifi: renamed from vlan0 [ 1071.168896][T16182] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1073.894090][T16189] comedi comedi2: pcmmio: I/O port conflict (0x4f27,32) [ 1074.354338][T16209] bond7: entered promiscuous mode [ 1074.718663][T16209] bond7: entered allmulticast mode [ 1074.892863][T16209] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1076.531611][T16236] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1077.977068][ T5848] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1078.126893][ T5848] usb 2-1: device descriptor read/64, error -71 [ 1078.588020][ T5848] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1078.821793][ T5848] usb 2-1: device descriptor read/64, error -71 [ 1079.433125][ T5848] usb usb2-port1: attempt power cycle [ 1079.916308][T16246] lec:lec_atm_close: lec0: Shut down! [ 1080.239770][ T5848] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1080.396428][ T5848] usb 2-1: device descriptor read/8, error -71 [ 1081.122325][ T5848] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1081.523958][ T5848] usb 2-1: device descriptor read/8, error -71 [ 1081.686400][ T5848] usb usb2-port1: unable to enumerate USB device [ 1082.658604][T16279] delete_channel: no stack [ 1083.643244][T16305] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1084.831217][T16316] netlink: 'syz.0.2901': attribute type 1 has an invalid length. [ 1085.263626][T16316] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1086.090700][T16325] bond6: (slave veth7): Enslaving as an active interface with a down link [ 1086.114641][T16328] [ 1086.116999][T16328] ====================================================== [ 1086.124021][T16328] WARNING: possible circular locking dependency detected [ 1086.131050][T16328] 6.16.0-syzkaller #0 Not tainted [ 1086.136074][T16328] ------------------------------------------------------ [ 1086.143093][T16328] syz.0.2901/16328 is trying to acquire lock: [ 1086.149153][T16328] ffff888073398e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_device_event+0x182/0xa20 [ 1086.159058][T16328] [ 1086.159058][T16328] but task is already holding lock: [ 1086.166399][T16328] ffff888073318d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 1086.176046][T16328] [ 1086.176046][T16328] which lock already depends on the new lock. [ 1086.176046][T16328] [ 1086.186439][T16328] [ 1086.186439][T16328] the existing dependency chain (in reverse order) is: [ 1086.195458][T16328] [ 1086.195458][T16328] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 1086.203917][T16328] lock_acquire+0x120/0x360 [ 1086.208954][T16328] __mutex_lock+0x182/0xe80 [ 1086.213998][T16328] dev_set_mtu+0x10e/0x260 [ 1086.218954][T16328] team_add_slave+0x8b8/0x2840 [ 1086.224244][T16328] do_set_master+0x530/0x6d0 [ 1086.229353][T16328] do_setlink+0xcf0/0x41c0 [ 1086.234295][T16328] rtnl_newlink+0x160b/0x1c70 [ 1086.239491][T16328] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1086.244947][T16328] netlink_rcv_skb+0x205/0x470 [ 1086.250229][T16328] netlink_unicast+0x75c/0x8e0 [ 1086.255515][T16328] netlink_sendmsg+0x805/0xb30 [ 1086.260805][T16328] __sock_sendmsg+0x21c/0x270 [ 1086.265996][T16328] ____sys_sendmsg+0x505/0x830 [ 1086.271278][T16328] ___sys_sendmsg+0x21f/0x2a0 [ 1086.276474][T16328] __x64_sys_sendmsg+0x19b/0x260 [ 1086.281932][T16328] do_syscall_64+0xfa/0x3b0 [ 1086.286952][T16328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.293359][T16328] [ 1086.293359][T16328] -> #0 (team->team_lock_key#3){+.+.}-{4:4}: [ 1086.301626][T16328] validate_chain+0xb9b/0x2140 [ 1086.306903][T16328] __lock_acquire+0xab9/0xd20 [ 1086.312089][T16328] lock_acquire+0x120/0x360 [ 1086.317105][T16328] __mutex_lock+0x182/0xe80 [ 1086.322126][T16328] team_device_event+0x182/0xa20 [ 1086.327582][T16328] notifier_call_chain+0x1b3/0x3e0 [ 1086.333208][T16328] __dev_notify_flags+0x18d/0x2e0 [ 1086.338751][T16328] netif_change_flags+0xe8/0x1a0 [ 1086.344208][T16328] do_setlink+0xc55/0x41c0 [ 1086.349144][T16328] rtnl_newlink+0x160b/0x1c70 [ 1086.354335][T16328] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1086.359791][T16328] netlink_rcv_skb+0x205/0x470 [ 1086.365073][T16328] netlink_unicast+0x75c/0x8e0 [ 1086.370355][T16328] netlink_sendmsg+0x805/0xb30 [ 1086.375634][T16328] __sock_sendmsg+0x21c/0x270 [ 1086.380823][T16328] ____sys_sendmsg+0x505/0x830 [ 1086.386106][T16328] ___sys_sendmsg+0x21f/0x2a0 [ 1086.391302][T16328] __x64_sys_sendmsg+0x19b/0x260 [ 1086.396761][T16328] do_syscall_64+0xfa/0x3b0 [ 1086.401777][T16328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.408183][T16328] [ 1086.408183][T16328] other info that might help us debug this: [ 1086.408183][T16328] [ 1086.418398][T16328] Possible unsafe locking scenario: [ 1086.418398][T16328] [ 1086.425836][T16328] CPU0 CPU1 [ 1086.431187][T16328] ---- ---- [ 1086.436538][T16328] lock(&dev_instance_lock_key#3); [ 1086.441740][T16328] lock(team->team_lock_key#3); [ 1086.449289][T16328] lock(&dev_instance_lock_key#3); [ 1086.457009][T16328] lock(team->team_lock_key#3); [ 1086.461950][T16328] [ 1086.461950][T16328] *** DEADLOCK *** [ 1086.461950][T16328] [ 1086.470077][T16328] 2 locks held by syz.0.2901/16328: [ 1086.475261][T16328] #0: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1086.484321][T16328] #1: ffff888073318d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 1086.494426][T16328] [ 1086.494426][T16328] stack backtrace: [ 1086.500308][T16328] CPU: 1 UID: 0 PID: 16328 Comm: syz.0.2901 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1086.500328][T16328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1086.500338][T16328] Call Trace: [ 1086.500345][T16328] [ 1086.500351][T16328] dump_stack_lvl+0x189/0x250 [ 1086.500373][T16328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1086.500391][T16328] ? __pfx__printk+0x10/0x10 [ 1086.500412][T16328] ? print_lock_name+0xde/0x100 [ 1086.500433][T16328] print_circular_bug+0x2ee/0x310 [ 1086.500454][T16328] check_noncircular+0x134/0x160 [ 1086.500476][T16328] validate_chain+0xb9b/0x2140 [ 1086.500498][T16328] ? __lock_acquire+0xab9/0xd20 [ 1086.500517][T16328] __lock_acquire+0xab9/0xd20 [ 1086.500533][T16328] ? team_device_event+0x182/0xa20 [ 1086.500548][T16328] lock_acquire+0x120/0x360 [ 1086.500562][T16328] ? team_device_event+0x182/0xa20 [ 1086.500579][T16328] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1086.500608][T16328] __mutex_lock+0x182/0xe80 [ 1086.500625][T16328] ? team_device_event+0x182/0xa20 [ 1086.500643][T16328] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 1086.500665][T16328] ? team_device_event+0x182/0xa20 [ 1086.500681][T16328] ? __pfx___mutex_lock+0x10/0x10 [ 1086.500697][T16328] ? __timer_delete_sync+0x218/0x2d0 [ 1086.500733][T16328] team_device_event+0x182/0xa20 [ 1086.500749][T16328] notifier_call_chain+0x1b3/0x3e0 [ 1086.500771][T16328] __dev_notify_flags+0x18d/0x2e0 [ 1086.500796][T16328] ? __pfx___dev_notify_flags+0x10/0x10 [ 1086.500818][T16328] ? __dev_change_flags+0x4cc/0x6d0 [ 1086.500843][T16328] ? __pfx___dev_change_flags+0x10/0x10 [ 1086.500871][T16328] netif_change_flags+0xe8/0x1a0 [ 1086.500897][T16328] do_setlink+0xc55/0x41c0 [ 1086.500922][T16328] ? trace_sched_exit_tp+0x38/0x120 [ 1086.500949][T16328] ? __pfx_do_setlink+0x10/0x10 [ 1086.500972][T16328] ? __lock_acquire+0xab9/0xd20 [ 1086.500989][T16328] ? do_raw_spin_lock+0x121/0x290 [ 1086.501014][T16328] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1086.501040][T16328] ? lockdep_hardirqs_on+0x9c/0x150 [ 1086.501056][T16328] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1086.501082][T16328] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1086.501110][T16328] ? rcu_is_watching+0x15/0xb0 [ 1086.501128][T16328] ? __mutex_lock+0xa6d/0xe80 [ 1086.501145][T16328] ? __mutex_lock+0x51b/0xe80 [ 1086.501164][T16328] ? rtnl_newlink+0x8db/0x1c70 [ 1086.501185][T16328] ? __pfx___mutex_lock+0x10/0x10 [ 1086.501205][T16328] ? full_name_hash+0x92/0xe0 [ 1086.501227][T16328] ? netdev_name_node_lookup+0xdf/0x120 [ 1086.501246][T16328] rtnl_newlink+0x160b/0x1c70 [ 1086.501267][T16328] ? netlink_sendmsg+0x805/0xb30 [ 1086.501294][T16328] ? __pfx_rtnl_newlink+0x10/0x10 [ 1086.501323][T16328] ? kasan_quarantine_put+0xdd/0x220 [ 1086.501347][T16328] ? lockdep_hardirqs_on+0x9c/0x150 [ 1086.501365][T16328] ? nlmon_xmit+0xb0/0x100 [ 1086.501384][T16328] ? kmem_cache_free+0x18f/0x400 [ 1086.501403][T16328] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1086.501420][T16328] ? lockdep_hardirqs_on+0x9c/0x150 [ 1086.501437][T16328] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1086.501453][T16328] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1086.501472][T16328] ? __dev_queue_xmit+0x27e/0x3a70 [ 1086.501488][T16328] ? __dev_queue_xmit+0x27e/0x3a70 [ 1086.501504][T16328] ? __dev_queue_xmit+0x27e/0x3a70 [ 1086.501520][T16328] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 1086.501538][T16328] ? __lock_acquire+0xab9/0xd20 [ 1086.501561][T16328] ? __pfx_rtnl_newlink+0x10/0x10 [ 1086.501581][T16328] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1086.501604][T16328] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1086.501623][T16328] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1086.501643][T16328] ? ref_tracker_free+0x63a/0x7d0 [ 1086.501661][T16328] ? __copy_skb_header+0xa7/0x550 [ 1086.501676][T16328] ? __pfx_ref_tracker_free+0x10/0x10 [ 1086.501693][T16328] ? __skb_clone+0x63/0x7a0 [ 1086.501717][T16328] netlink_rcv_skb+0x205/0x470 [ 1086.501738][T16328] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1086.501760][T16328] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1086.501786][T16328] ? netlink_deliver_tap+0x2e/0x1b0 [ 1086.501808][T16328] ? netlink_deliver_tap+0x2e/0x1b0 [ 1086.501832][T16328] netlink_unicast+0x75c/0x8e0 [ 1086.501856][T16328] netlink_sendmsg+0x805/0xb30 [ 1086.501882][T16328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1086.501907][T16328] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1086.501923][T16328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1086.501946][T16328] __sock_sendmsg+0x21c/0x270 [ 1086.501966][T16328] ____sys_sendmsg+0x505/0x830 [ 1086.501992][T16328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1086.502019][T16328] ? import_iovec+0x74/0xa0 [ 1086.502043][T16328] ___sys_sendmsg+0x21f/0x2a0 [ 1086.502068][T16328] ? __pfx____sys_sendmsg+0x10/0x10 [ 1086.502104][T16328] ? __fget_files+0x2a/0x420 [ 1086.502122][T16328] ? __fget_files+0x3a0/0x420 [ 1086.502143][T16328] __x64_sys_sendmsg+0x19b/0x260 [ 1086.502169][T16328] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1086.502197][T16328] ? rcu_is_watching+0x15/0xb0 [ 1086.502216][T16328] ? do_syscall_64+0xbe/0x3b0 [ 1086.502236][T16328] do_syscall_64+0xfa/0x3b0 [ 1086.502252][T16328] ? lockdep_hardirqs_on+0x9c/0x150 [ 1086.502269][T16328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.502285][T16328] ? clear_bhb_loop+0x60/0xb0 [ 1086.502303][T16328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.502319][T16328] RIP: 0033:0x7f874b18ebe9 [ 1086.502335][T16328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1086.502350][T16328] RSP: 002b:00007f87493d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1086.502367][T16328] RAX: ffffffffffffffda RBX: 00007f874b3b6180 RCX: 00007f874b18ebe9 [ 1086.502380][T16328] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000005 [ 1086.502392][T16328] RBP: 00007f874b211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1086.502402][T16328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1086.502427][T16328] R13: 00007f874b3b6218 R14: 00007f874b3b6180 R15: 00007ffe74a82598 [ 1086.502445][T16328] [ 1087.115643][T16328] team0: Port device dummy0 removed [ 1087.131157][T16328] bond6: (slave dummy0): making interface the new active one [ 1087.150394][T16328] dummy0: entered promiscuous mode [ 1087.156502][T16328] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 1087.166772][T16334] fuse: Bad value for 'fd'