last executing test programs: 19m46.857051034s ago: executing program 1 (id=1834): syz_open_procfs$namespace(0x0, &(0x7f0000008880)='ns/mnt\x00') r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000200)=@assoc_value, &(0x7f0000000180)=0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x20) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$kcm(0x2d, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L \x00\x00', @ANYRES16=r5, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e00000000000000000008000500e1020000"], 0x4c}, 0x1, 0x0, 0x0, 0x44040000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x480, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r8) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x4) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x100a, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r9, 0x100000000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10) 19m45.531921556s ago: executing program 1 (id=1840): socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x36) r1 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x10, 0x0, 0x0, 0x5f, 0xff, 0x0, 0xa6, 0x2, 0x5}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x4, 0xfe, 0x5, 0x0, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8304050000000000800012800e00010069703665727370616e0000006c000280140006002001000000000000000000000000000214000600fc020000000000000000000000000001060002000030000014000700fc02000000000004000000000000000004001200050008004b00000008000100", @ANYRES32=0x0, @ANYBLOB="080004"], 0xa0}}, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r7 = syz_io_uring_setup(0x9e, 0x0, 0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)="d04cd774e1d51602", &(0x7f0000000000), 0x8a, r9}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r9, &(0x7f0000000580), &(0x7f0000000540)=""/96}, 0x20) mq_timedreceive(r1, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 19m44.318413659s ago: executing program 1 (id=1843): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) lsm_set_self_attr(0x67, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) socket(0x400000000010, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x101, 0xd, 0x81, 0x9, 0x54, 0x55, 0x80, 0x0, 0x3, 0x4, 0x10, 0x0, 0x6}, {0x17, 0x7fff, 0x3, 0x5, 0x9, 0x0, 0x0, 0x3, 0x7, 0x80, 0x10, 0x9, 0xffffffffffffffff}, {0x5, 0x4, 0xb, 0x3, 0xe4, 0x8, 0x8, 0xed, 0xf2, 0x0, 0xb8, 0x2, 0x1}], 0x7}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x2}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044810}, 0x0) r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="92010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589", @ANYRES8], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000380), 0x100) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x8000000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xdddd0000, 0x10000}) 19m40.211130808s ago: executing program 1 (id=1859): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) inotify_init1(0x180000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) shutdown(r2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82403) ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000080)=0xd0) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r7, 0x4, 0x0, 0x0, 0x8, 0x3a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) 19m38.000345553s ago: executing program 1 (id=1862): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000111801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 19m37.767517645s ago: executing program 1 (id=1866): r0 = socket(0x2a, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f00, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x304) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$COMEDI_CANCEL(r8, 0x6407) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xf}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3623}, @TCA_RATE={0x6, 0x5, {0xb9, 0x20}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r10, 0x0, 0x0) sendfile(r10, r10, 0x0, 0x9) 19m20.653807354s ago: executing program 32 (id=1866): r0 = socket(0x2a, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f00, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x304) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$COMEDI_CANCEL(r8, 0x6407) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xf}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3623}, @TCA_RATE={0x6, 0x5, {0xb9, 0x20}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r10, 0x0, 0x0) sendfile(r10, r10, 0x0, 0x9) 16.912297435s ago: executing program 0 (id=5244): r0 = open$dir(0x0, 0x400, 0x148) openat(r0, 0x0, 0x1bc001, 0xfc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0xb95}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x2, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="85000000ae000000620a00ff000000002e0000000000000095000000000000001810000075ad", @ANYRES32, @ANYBLOB="1020000000000025050000000000000000000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa5, &(0x7f0000000240)=""/165, 0x0, 0x8f, '\x00', 0x0, @fallback=0x2}, 0x1c) 16.095535568s ago: executing program 0 (id=5245): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x0, "b8a3e100908f6164000000020000000000000000002500ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 15.296066505s ago: executing program 0 (id=5248): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029300030100000009040000000101"], 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00030400000000000f04"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00032c0000002c0394c8cc6b83dc77f7c23df60e5cff48615909a594237c06da16f38e0c6c8b00056552fe518b9e00c89ae9c89097b7adc91394384d05f370c74fb9bba21bf114701fe97c742a16d3cdf18f1a9d838974d0b102c8a6754556d8e7487fdc38949721a8e2c7a0344bcdba8cb48842a18a6ac8af7c5f2db8df6aa0ff32f8575c4a4c8c7964c60a94495355ca0a8f1ae3c04fa74b9ffe4cbd9ca00d50709e7841d00aad1fd4d52ecd5b4e71e57c44d10b93e6f1075e1b701b9ba4c7"]}, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socket$igmp(0x2, 0x3, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x64, &(0x7f00000009c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52, 0x1, 0x1, 0x2, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0xb5, {{0x8, 0x24, 0x6, 0x0, 0x0, "99e598"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x1, 0x100, 0x5}, [@country_functional={0x8, 0x24, 0x7, 0x2, 0x3, [0xff]}, @mbim={0xc, 0x24, 0x1b, 0x0, 0xffff, 0x9, 0xc, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x2, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xfc, 0x29, 0x2}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x310, 0x2, 0x6, 0x7, 0x8, 0xe}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x412}}, {0xab, &(0x7f0000000a40)=ANY=[@ANYBLOB="ab037da21c14e4cc6a8c91ca2e4e218709cc927d661a257ab7461f10c464ed18608193e0ffd5e7f60a1b45323753ca1abac1a65947220012b8ec4322dc47f9a05364966ec89bdcf640430b8779244f329e65b8330170da36e43d82696a5facb35aa00d068a7d0e5e0cd08aba046d7cf01ae1db2af19b2f1eb8c9145e428b84df3b32f7025dd6f9e9a1e9b89182bb5496fc81cadccb7ece20c65e6e5db1d1ed58b4df9396975bb12d25d0a41f25a989890c"]}, {0xe6, &(0x7f00000006c0)=ANY=[@ANYBLOB="e603ca92d00d50a624129a8a7d4b6779493f9fdfa1d714929ecf56b807c71c049aca5b0d06ce14d0af2d0b7bfc4d3b550c0edc1321ab36982fe4379cc0a3e75f4889e6794b4789a4af5a2978a96d511eb94b280e5ed7d2c0a403182c1710478f7995231c9dcbe1827f32d3f116253bba9c4767182ea59edb3d7ac4741b132d90769fcbac4b44b31b03c1f7504e6d7795884226ce16a8c9deaf64b0c9e1826a949e396f5bcb0de8939db3a54463a10f76a40f5c2e12fd29cb62b8b081faccbebaf17fe5088535a682430e0d263dd212934b557ef3cc6939aa"]}, {0xf7, &(0x7f0000000b00)=ANY=[@ANYBLOB="f703a93bd4bc0f9a1b53ee936a0c5fb7159989f94bfc479a431ece82713c540440bddaf2f1060be81d04b02b89572c4f4980a0e351c8da8b5a4888ce18ab276d4c870d4b91bd7f7c510c055d1650bf1ffaa9a83d32038044131d3ae224ea1701f06b3fd5c5b173c691af5dc92981b9345d8b5929c140fea601f6909d9dece925365afe33740f751822e4936f664d03b222baf7eab94cedb32cc9a37f1c8fcb0a905da4cf820e1ceeb356c30d550c3c6fe2b9f34754435b2b9042da4e1a594390edfee821cd5f0740360e92f031fdaedceeab78184f451affcf92bf30acd3510178e8850a05784e29d3587525dcb300"/248]}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x3c05}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x422}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000380)={0x0, 0x3}, &(0x7f0000000400)=0x8) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x2, 0x8, 0xdfe, 0xa4, 0x100, 0xebf, 0x2b1}}}}]}, 0x58}}, 0x4044880) 8.273613925s ago: executing program 5 (id=5268): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@grpquota}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 6.951723164s ago: executing program 5 (id=5271): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 6.636261535s ago: executing program 5 (id=5273): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x9}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, 0xb}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0x9, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0xa}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x9, 0xd}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 6.474752792s ago: executing program 0 (id=5274): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x458) 6.298744904s ago: executing program 5 (id=5275): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004200ff9d7275c600fedbdf250500000008000200050000f3"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x101, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r1, {0xfffffffffffffff7}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) write$cgroup_devices(r3, &(0x7f0000000040)={'a', ' *:* ', 'rwm\x00'}, 0xa) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/consoles\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4080, 0xff0}], 0x1, 0x2b, 0x0) getdents64(r4, &(0x7f0000000140)=""/98, 0x62) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x1c, 0x1, 0x1, [r5, r5, 0xffffffffffffffff]}}], 0x20}}], 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r7) r8 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x82102) setuid(0xee01) ioctl$BLKPG(r8, 0x1269, &(0x7f0000000540)={0x3, 0x0, 0x0, 0x0}) 5.39972683s ago: executing program 0 (id=5277): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000052910000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0xf, 0x55, &(0x7f0000000280)=""/85, 0x41100, 0x40, '\x00', r2, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x7, 0x1, 0xc}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f00000004c0)=[r0, r0], 0x0, 0x10, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x0, 0x0, 0x0}, 0x0) 5.398048346s ago: executing program 3 (id=5279): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x801, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=0x1000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001280)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x7, 0x10, 0x8, 0xc, 0x7ff, 0x7]}]}, 0x24}, 0x1, 0x0, 0x0, 0x88c3}, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000001340)={0x1, 0x4, 0x6, 0x18, 'syz1\x00', 0xc}) write$UHID_CREATE2(r1, &(0x7f0000001380)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x7, 0x778, 0xde, 0x8, 0xfffffffa, 0x7fffffff, "4cedf336333786"}}, 0x11f) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f00000014c0)=""/142) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000001580)={0x5, 0x3, 0x2, 0xfffffffe, 'syz0\x00', 0x7}) syz_open_dev$vbi(&(0x7f00000015c0), 0x2, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001600)=[@in={0x2, 0x4e22, @multicast2}], 0x10) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000001640)={0x2, 0x1, @start={0x5}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000016c0)={{0x0, 0x9, 0x8, 0x5d56210c, 0xffffffffa79100ef, 0x100, 0x4, 0x2, 0x3, 0x7, 0x4, 0xffffffff, 0xd7, 0x27, 0x7}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001780)={r4, 0x3}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000002780)='dvmrp1\x00', 0x10) write$UHID_CREATE2(r1, &(0x7f00000027c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x98, 0x1800, 0x9, 0x7ff, 0x6, 0x3, "0b9d4d5a3c334b4d2309e8dee3d8c7b63e87089d7b74f82ef6ad09fab2ae1a1158ca58d24c99890b5ffba27322a5e18cd8bb68ca6acf6e6d933dd0e7d797a53da0acd1dd4ee7fa0d06669306371dce451bc4150d2e82a55add932d4ccb1d31689004f1d4124013d8c65b965c9e5fe79f914c369f86c2a61805d2a4567190dfb7cd0682398eb5cc74aebfd4ab2b04abb81e6d407fd1a9a829"}}, 0x1b0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000029c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000002ac0)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x48, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x37}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3d54, 0x18}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffffffab}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040841}, 0x40804) pipe2$9p(&(0x7f0000002b80)={0xffffffffffffffff}, 0x0) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002d00)={0x0, &(0x7f0000002bc0)=[@uexit={0x0, 0x18, 0x4}, @code={0x1, 0x57, {"2ed96507b9800000c00f3235010000000f300f01c30f218af30fae3266b84a000f00d866ba4100ed65410f0966baf80cb89c185b8cef66bafc0ced0f20c035200000000f22c0"}}, @cpuid={0x2, 0x18, {0x1, 0x6}}, @cpuid={0x2, 0x18, {0x92d1, 0x9}}, @code={0x1, 0x63, {"66440fc736360f01ca8f4978dbcdf3650f01991054b213c443b97e45c4a1c744240065000000c744240245000000c7442406000000000f0114246464450f01c9b98e0b00000f322e0f009d5675686e470f07"}}], 0x102}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002d40)={0x1, 0x6, {}, {0x0}, 0x2}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002d80)={0x0, 0x0}, &(0x7f0000002dc0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002e00)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@remote}}, &(0x7f0000002f00)=0xe8) mount$9p_fd(0x0, &(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40), 0x3008400, &(0x7f0000002f40)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@access_uid={'access', 0x3d, r8}}, {@access_any}, {@cache_none}, {@ignoreqv}, {@afid={'afid', 0x3d, 0x100}}, {@cachetag={'cachetag', 0x3d, 'nl80211\x00'}}, {@msize={'msize', 0x3d, 0x4}}, {@cache_readahead}, {@ignoreqv}], [{@smackfshat={'smackfshat', 0x3d, '+-'}}, {@uid_eq={'uid', 0x3d, r9}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@uid_eq={'uid', 0x3d, r10}}, {@audit}, {@subj_type={'subj_type', 0x3d, 'syz1\x00'}}, {@appraise_type}, {@dont_measure}]}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f00000031c0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x5}, 0xc, &(0x7f0000003180)={&(0x7f0000003100)={0x7c, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7e}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x100, 0x36}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_batadv\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000004) 5.297441149s ago: executing program 5 (id=5280): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, 0x0, 0x0) poll(0x0, 0x0, 0x1) r1 = dup(0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r2 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x101}}) unshare(0x28000600) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}, &(0x7f0000000400)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4a, 0x4, 0x8, 0x2, "91954faa", "e5db8056"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x80, 0x7, 0x4, 0x72, 0x295b}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000940)={0x20, 0x13, 0x17, "5101008137d3c1628ac2334b2edb9ea16f0389ab8f48bf"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0xf7}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x120, 0x39, [0xf000]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000740)={0x40, 0xb, 0x2, "a7a8"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f0000000800)={0x40, 0x13, 0x6}, &(0x7f0000000840)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000880)={0x40, 0x19, 0x2, "fdd9"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0xe}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x8}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r3, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r3, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r4 = userfaultfd(0x80801) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16], 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) 5.25376276s ago: executing program 3 (id=5281): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xff, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000000000000000000000000000086267b", @ANYRES32=0x0, @ANYBLOB="00000000000000003000128008000100677265002400028006000f005608000006000e0003000000060011004e220000050009000f000000"], 0x50}}, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e0000006400818a04fb7fec598f866b29924a6f130000005e14060800000000000000000f0000000280a71802dd", 0x2e}], 0x1}, 0x800) syz_clone3(&(0x7f0000000400)={0x3a6280480, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) open_tree(r2, &(0x7f0000000180)='./file0\x00', 0x100800) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1d) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x47524247}}) 5.111504265s ago: executing program 3 (id=5283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)={0x18, r3, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x1, 0x9cbf, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x300}}) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) openat$random(0xffffffffffffff9c, 0x0, 0x400, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) setsockopt$ax25_int(r6, 0x101, 0x9, &(0x7f0000000700)=0x9, 0x4) r7 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0xcb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) (async) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0xcb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) 4.96740292s ago: executing program 2 (id=5284): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = msgget$private(0x0, 0x10) msgrcv(r4, &(0x7f0000000300)={0x0, ""/237}, 0xf5, 0x1, 0x3800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$isdn(0x22, 0x2, 0x25) dup3(r5, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180), 0x80) 3.979919471s ago: executing program 0 (id=5285): r0 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000d80)={{0x12, 0x1, 0x0, 0x52, 0x28, 0x91, 0x20, 0x1bcf, 0xb40, 0x4227, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x24, 0x0, 0x0, [{{0x9, 0x4, 0x2a, 0x0, 0x0, 0xe, 0x1}}]}}]}}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x100000001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20048000) socket$inet(0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010800000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_REGISTER(r6, &(0x7f0000000100), 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture\' 8'], 0x86) pipe2$watch_queue(&(0x7f00000006c0), 0x80) 3.824363586s ago: executing program 2 (id=5286): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) getcwd(0x0, 0xfffffffffffffe7d) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702002114000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.765058704s ago: executing program 4 (id=5287): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x2, 0x300) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x6, 0x0, &(0x7f0000000000)) (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') (async) unshare(0x20000400) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fe0800000000000000000000850000002c00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000740)={r3, r4}) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002500010324bd7002fddbdf2301000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x20, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x100, 0xf4, 0xe3}}}}]}, 0x48}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64, 0x0, 0xffffffffffffffff, 0x39}, 0x48) 3.751969855s ago: executing program 3 (id=5288): keyctl$join(0x1, 0xfffffffffffffffd) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [], [0xd]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30ffef00003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000440)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a682174f000000000000000010e200"}}) 3.548415942s ago: executing program 2 (id=5289): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100001200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}}) 3.444898684s ago: executing program 4 (id=5290): syz_open_dev$dri(0x0, 0x1ff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x181040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 3.303859408s ago: executing program 4 (id=5291): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004200ff9d7275c600fedbdf250500000008000200050000f3"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x101, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r1, {0xfffffffffffffff7}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) write$cgroup_devices(r3, &(0x7f0000000040)={'a', ' *:* ', 'rwm\x00'}, 0xa) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/consoles\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4080, 0xff0}], 0x1, 0x2b, 0x0) getdents64(r4, &(0x7f0000000140)=""/98, 0x62) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x1c, 0x1, 0x1, [r5, r5, 0xffffffffffffffff]}}], 0x20}}], 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000040000000000001000000080008000a010100080007000a01010105000100000800000800020005000000"], 0x34}}, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x82102) setuid(0xee01) ioctl$BLKPG(r8, 0x1269, &(0x7f0000000540)={0x3, 0x0, 0x0, 0x0}) 2.65999523s ago: executing program 2 (id=5292): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x801, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=0x1000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001280)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x7, 0x10, 0x8, 0xc, 0x7ff, 0x7]}]}, 0x24}, 0x1, 0x0, 0x0, 0x88c3}, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000001340)={0x1, 0x4, 0x6, 0x18, 'syz1\x00', 0xc}) write$UHID_CREATE2(r1, &(0x7f0000001380)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x7, 0x778, 0xde, 0x8, 0xfffffffa, 0x7fffffff, "4cedf336333786"}}, 0x11f) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f00000014c0)=""/142) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000001580)={0x5, 0x3, 0x2, 0xfffffffe, 'syz0\x00', 0x7}) syz_open_dev$vbi(&(0x7f00000015c0), 0x2, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001600)=[@in={0x2, 0x4e22, @multicast2}], 0x10) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000001640)={0x2, 0x1, @start={0x5}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000016c0)={{0x0, 0x9, 0x8, 0x5d56210c, 0xffffffffa79100ef, 0x100, 0x4, 0x2, 0x3, 0x7, 0x4, 0xffffffff, 0xd7, 0x27, 0x7}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001780)={r4, 0x3}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000002780)='dvmrp1\x00', 0x10) write$UHID_CREATE2(r1, &(0x7f00000027c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x98, 0x1800, 0x9, 0x7ff, 0x6, 0x3, "0b9d4d5a3c334b4d2309e8dee3d8c7b63e87089d7b74f82ef6ad09fab2ae1a1158ca58d24c99890b5ffba27322a5e18cd8bb68ca6acf6e6d933dd0e7d797a53da0acd1dd4ee7fa0d06669306371dce451bc4150d2e82a55add932d4ccb1d31689004f1d4124013d8c65b965c9e5fe79f914c369f86c2a61805d2a4567190dfb7cd0682398eb5cc74aebfd4ab2b04abb81e6d407fd1a9a829"}}, 0x1b0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000029c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000002ac0)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x48, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x37}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3d54, 0x18}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffffffab}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040841}, 0x40804) pipe2$9p(&(0x7f0000002b80)={0xffffffffffffffff}, 0x0) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002d00)={0x0, &(0x7f0000002bc0)=[@uexit={0x0, 0x18, 0x4}, @code={0x1, 0x57, {"2ed96507b9800000c00f3235010000000f300f01c30f218af30fae3266b84a000f00d866ba4100ed65410f0966baf80cb89c185b8cef66bafc0ced0f20c035200000000f22c0"}}, @cpuid={0x2, 0x18, {0x1, 0x6}}, @cpuid={0x2, 0x18, {0x92d1, 0x9}}, @code={0x1, 0x63, {"66440fc736360f01ca8f4978dbcdf3650f01991054b213c443b97e45c4a1c744240065000000c744240245000000c7442406000000000f0114246464450f01c9b98e0b00000f322e0f009d5675686e470f07"}}], 0x102}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002d40)={0x1, 0x6, {}, {0x0}, 0x2}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002d80)={0x0, 0x0}, &(0x7f0000002dc0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002e00)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@remote}}, &(0x7f0000002f00)=0xe8) mount$9p_fd(0x0, &(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40), 0x3008400, &(0x7f0000002f40)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@access_uid={'access', 0x3d, r8}}, {@access_any}, {@cache_none}, {@ignoreqv}, {@afid={'afid', 0x3d, 0x100}}, {@cachetag={'cachetag', 0x3d, 'nl80211\x00'}}, {@msize={'msize', 0x3d, 0x4}}, {@cache_readahead}, {@ignoreqv}], [{@smackfshat={'smackfshat', 0x3d, '+-'}}, {@uid_eq={'uid', 0x3d, r9}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@uid_eq={'uid', 0x3d, r10}}, {@audit}, {@subj_type={'subj_type', 0x3d, 'syz1\x00'}}, {@appraise_type}, {@dont_measure}]}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f00000031c0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x5}, 0xc, &(0x7f0000003180)={&(0x7f0000003100)={0x7c, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7e}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x100, 0x36}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_batadv\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000004) 2.596505792s ago: executing program 3 (id=5293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) read$FUSE(r0, &(0x7f0000003000)={0x2020}, 0x2020) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = dup(r3) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000021c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000002200)={0x18, r5, 0xc8da923139bed765, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40810}, 0x200080c0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000e982000000000000"], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0xb00}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.544723667s ago: executing program 2 (id=5294): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000080000000850000006c00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x338, 0x1b8, 0x428, 0x338, 0x0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ip={@empty, @local, 0xff, 0xff000000, 'dummy0\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x33, 0x1, 0xc}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x1, 0x4, 0x1, 0x4, 0x0, 0x5], 0x1}, {0xffffffffffffffff, [0x2, 0x7, 0x2, 0x1, 0x4, 0x3], 0x4, 0x1}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff, 0xff, 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x80, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0x2f, 0x4}}}, {{@ip={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0xff, 'veth1_to_batadv\x00', 'ipvlan1\x00', {0xff}, {}, 0x89, 0x0, 0x8}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x2, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r2 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10, 0x110, 0xa}], 0x30}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0xe91a56946cc5a4bf, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xfd, 0x9, 0xa9, 0x4, 0x0, 0x2, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x4, 0x0, 0x5e, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 2.49246004s ago: executing program 5 (id=5295): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0x1, 0x26, 0x6}) 2.42846696s ago: executing program 4 (id=5296): r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x1a, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x19}}) 941.624889ms ago: executing program 2 (id=5297): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xb, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12014000f273a440cd060a01c3d90102030109021b040000dd00200904000c01950d18000905", @ANYBLOB="87e295"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10, r0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) 372.47493ms ago: executing program 4 (id=5298): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001340)={0xffffffffffffffff, &(0x7f00000002c0)="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", 0x0}, 0x20) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fe8000000000000000000000000000bb0200010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000030000000000000000000000000000000000000000000000dd020000400000000400000000000000000001000000000084010500ac141439000000000000000000000000000000002b0000000000"], 0x23c}}, 0x0) 202.403403ms ago: executing program 3 (id=5299): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000003f00)=[{{&(0x7f0000001140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f00000011c0)="062d7680809062e8f4520addb1c247459b21b3e80a11a9ceaf568cf273a9dd7f5e86235af84157619d27f8593905b4558f6adb78c299ed284c1c3462c1a9554b034b8429721e13bb90e7e1f01ce4cc961c0eb8a42ae0648d93664460a8e6073d0368a1cf48cd25d39021272255abb7289008e88474e491f7cc1acf7c9770f31c8bd6bad19b2bff4f8b60", 0x8a}, {&(0x7f0000001280)="fb568842cd3f2a515b29f7c34173acb5bd8ac42f97e7209ef47c4572ccfc8ce7a044fe6ad6cadd732dcb871ae1c692a373fbdb1fdff7fb6063d001623b755a1bd0b5dced2fb3e568062145a6e6603eec3d9972683b30571c6ae19aa1ccf54838", 0x60}, {&(0x7f0000001300)="5f0273118b569e34bb8db37e069839db65d7f19f50e029b468954a3736fa0b98821c260561c93a5db161d9ce218822c0135a220f6758f09f846a707f7f4cc785bc461db6d4d23841b14972bef959a1677ea48fc8f97e1db705c5f33f67ab0e0b", 0x60}, {&(0x7f0000002a80)="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", 0x1000}, {&(0x7f0000001380)="f1047f50dc90491c9156fe8ef7b184ac54d8643913d77d52ad2d4d4121f34891e77635981fec449c249842e4b327d7f95ea2ea4f4375b31b5651571e3467896ad1a78a0dd19fb4987b4497e56d862ba144df9e4bb1cacb7837c8727293b7d2b296747f5338ab3ef578e84a06c72191ea310d29663642dd4acedf23a13981af88d67e9315bec2eb4d0acf4951a988cd009eeaffcf50b0b0d73ac5f4378c2a2d68dce2434fd2b3544741022ac6c7", 0xad}, {&(0x7f0000001440)="b840b88d12ae3c59e97965c67882d0449b28f91ca13e3229c240ae78999ff7a6b797c50fa3c9d8c093292156c263b2bc0b740cac77519d58cc7b1b28a6946a4b52a26c7e04f512c2ca8eb25cbfe8e0f8e09b2aba1ec2ca8228cc864b947a0dd7a0575ca9669d1aa54c9062fadcb19102ca09d508a43b9a1b6e85d54dae7eb34c697ae64e80042573605c", 0x8a}, {&(0x7f0000001500)}, {&(0x7f0000001540)="5d5e04cbb6ca85475eb02fbb5eec0887cafbb6805cb8e1c2a151ee142106fba5880140faf46b5af88085b6d72c75ced9982640292cc8f501954d6a25fa57467e19d800949ba747f1cf3ce8c344a70b2567492dd7ceadc6527a7f", 0x5a}], 0x8, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000000001000000", @ANYRES32, @ANYRES32=r3], 0x18, 0x1}}, {{&(0x7f00000016c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001740)="db3795890355163e0386930f85fcdf0ba3d7c07ee7d53e5d594fb7f97e6e1e1c81bd5a51f634e35bef41b061580e54d0a88bf3d161ad88e93fe47feee221208aa565c1b435b88cd0f758ffc2497e55aced69fe140dc19def83a3246e2d785530b0dd71722c62930e15edb116d289cdaf4a", 0x71}], 0x1, &(0x7f0000001b80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000100000001000000ac5a6a7908493d056c5d6fbc285614094fe9165f3542496199bacd0dc7509572fe83d41f3863da48b61e7d2fa761158ce3952f5bab640c9cffaf13723689770f3a95dec15290b4d9f011fb37335b011fbabef4c9ce", @ANYRES32, @ANYRES32=r8, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x50}}, {{&(0x7f0000001940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f00000019c0)="a4eb264e1078293e7ec95d28650dac615e6cf42c35b107827fbb50e3bd1997364a45a475fa5e1598764e012376a4d7218508a1b63855d4de3b7296003def4baa6f4243c9d3eba7aad82588623115cd10dc12500df8976579277d3849b0fe8f68bc8bfdd14290e00a62c836ab5b7bd142559bbfd711f89349df7575ad17a24904bfaba006984fa5c161e7d53200002cf7110dc009b18777fd9f18679de1", 0x9d}, {&(0x7f0000001a80)="d09da42b32c7a8498f59e0e4f4c6df9cc24e91794be18c25ae203b33d3815c917875709899c688b847bc69425dbdaffbb0ca8472104f0894e2862180d58b1266d48a", 0x42}, {&(0x7f0000001b00)="3204424498a5c4d411e9a2231b33240c991037541da5b368499e0eb590d13874e08b34c0b86d69678360b9fe510b87dcb4275848a34e94417132c7f9c5ef7bd035efd6687d4994266cbe469ffa9c16c4412c7ee8e175e2191585e995cad8953c", 0x60}], 0x3, &(0x7f0000003bc0)=[@cred={{0x1c}}], 0x20, 0x8800}}, {{&(0x7f0000003c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003d00)=[{&(0x7f0000003c80)="0d57f362b5666e9732bf5bed63486579d24c19a13392e1828a890b074b7d21d72187099ceb96dbd636dc0d9a894f5525d001a5b93091bcb71a350927eb2c368a5b3b1c3d65c3dba5a7026fec326833dca3d1a3ceab0325ff1bca07a3394ba0e22b6ae338fc31846888d68f538e32759ecfe1032ac40a4a7c25215d27270e30", 0x7f}], 0x1, &(0x7f0000003e00)=[@rights={{0x30, 0x1, 0x1, [r8, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r4, r5, r5]}}, @rights={{0x1c, 0x1, 0x1, [r8, 0xffffffffffffffff, r5]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, r1, r8]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0, 0x4000}}], 0x4, 0x20044081) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r9 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[], 0xfffffe2b}}, 0x2200c840) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x5, &(0x7f0000001040)=ANY=[@ANYRESOCT=r3], &(0x7f00000002c0)='syzkaller\x00', 0x82, 0x12, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) process_mrelease(0xffffffffffffffff, 0x0) (async) r12 = dup(r11) write$UHID_INPUT(r12, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r10}, 0x10) 0s ago: executing program 4 (id=5300): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf9}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000000002", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) kernel console output (not intermixed with test programs): 75][T11785] usb 4-1: USB disconnect, device number 108 [ 1654.786203][T10062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.803209][T10062] usb 1-1: Product: syz [ 1654.807647][T10062] usb 1-1: Manufacturer: syz [ 1654.814545][T11785] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1654.841482][T10062] usb 1-1: SerialNumber: syz [ 1654.935469][T11785] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1654.939791][T23037] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4449'. [ 1655.000721][T11785] quatech2 4-1:0.51: device disconnected [ 1656.300342][T10062] usb 1-1: 0:2 : does not exist [ 1656.319087][T10062] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1656.405239][T10062] usb 1-1: USB disconnect, device number 104 [ 1656.559933][T20483] udevd[20483]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1656.658016][T23060] loop2: detected capacity change from 0 to 1 [ 1656.732185][T20483] ldm_validate_privheads(): Disk read failed. [ 1656.746440][T11787] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1656.786048][T20483] Dev loop2: unable to read RDB block 1 [ 1656.814245][T20483] loop2: AHDI p2 p3 [ 1656.825359][T20483] loop2: partition table partially beyond EOD, truncated [ 1656.851270][T20483] loop2: p3 start 335544320 is beyond EOD, truncated [ 1656.877597][T23060] ldm_validate_privheads(): Disk read failed. [ 1656.908975][T23060] Dev loop2: unable to read RDB block 1 [ 1656.914853][T23060] loop2: AHDI p2 p3 [ 1656.920327][T23060] loop2: partition table partially beyond EOD, truncated [ 1656.929339][T23060] loop2: p3 start 335544320 is beyond EOD, truncated [ 1656.957949][T11787] usb 3-1: Using ep0 maxpacket: 32 [ 1656.978230][T11787] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1657.002409][T11787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 16384, setting to 64 [ 1657.045267][T11787] usb 3-1: config 0 interface 0 has no altsetting 1 [ 1657.073327][T11787] usb 3-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c [ 1657.104101][T11787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.134478][T11787] usb 3-1: Product: syz [ 1657.143411][T11787] usb 3-1: Manufacturer: syz [ 1657.155670][T11787] usb 3-1: SerialNumber: syz [ 1657.174238][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1657.191006][T11787] usb 3-1: config 0 descriptor?? [ 1657.224777][T11787] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1657.349844][ C1] sd 0:0:1:0: [sda] tag#7894 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1657.360383][ C1] sd 0:0:1:0: [sda] tag#7894 CDB: Read(6) 08 1e df d0 ec f7 [ 1658.221356][T10062] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1662.978642][T19332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1663.000393][T11786] usb 3-1: USB disconnect, device number 120 [ 1663.061547][T19321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1663.272626][T23088] loop6: detected capacity change from 0 to 7 [ 1663.312663][T20483] Dev loop6: unable to read RDB block 7 [ 1663.319625][T20483] loop6: AHDI p1 p2 p3 p4 [ 1663.326055][T20483] loop6: partition table partially beyond EOD, truncated [ 1663.337706][T20483] loop6: p1 start 926365495 is beyond EOD, truncated [ 1663.344676][T20483] loop6: p2 size 47 extends beyond EOD, truncated [ 1663.376919][T20483] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1663.393691][T23088] Dev loop6: unable to read RDB block 7 [ 1663.401753][T23088] loop6: AHDI p1 p2 p3 p4 [ 1663.406611][T23088] loop6: partition table partially beyond EOD, truncated [ 1663.414816][T23088] loop6: p1 start 926365495 is beyond EOD, truncated [ 1663.421774][T23088] loop6: p2 size 47 extends beyond EOD, truncated [ 1663.481235][T23088] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1663.502020][ T5824] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1664.032060][T23095] Invalid ELF header magic: != ELF [ 1664.113224][ T5824] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.127824][ T5824] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1664.139493][ T5824] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1664.160240][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.171629][ T5824] usb 6-1: Product: syz [ 1664.175936][ T5824] usb 6-1: Manufacturer: syz [ 1664.180578][ T5824] usb 6-1: SerialNumber: syz [ 1664.317071][T23095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4468'. [ 1664.326816][T23095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1664.385479][T20483] udevd[20483]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1664.506016][T20483] udevd[20483]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1665.231138][ T5824] usb 6-1: 0:2 : does not exist [ 1666.097510][ T5824] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1666.576347][ T5824] usb 6-1: USB disconnect, device number 34 [ 1666.806763][T20483] udevd[20483]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1668.371903][T23135] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4483'. [ 1668.558696][T13238] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1668.804511][T11409] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1671.803310][T23167] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4493'. [ 1672.445828][T23179] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1673.567505][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1673.567526][ T30] audit: type=1326 audit(1752434542.410:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23185 comm="syz.0.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51318e929 code=0x7ffc0000 [ 1673.850839][ T30] audit: type=1326 audit(1752434542.456:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23185 comm="syz.0.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51318e929 code=0x7ffc0000 [ 1673.932301][ T30] audit: type=1326 audit(1752434542.456:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23185 comm="syz.0.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd51318e929 code=0x7ffc0000 [ 1673.963607][ T30] audit: type=1326 audit(1752434542.456:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23185 comm="syz.0.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51318e929 code=0x7ffc0000 [ 1673.994200][ T30] audit: type=1326 audit(1752434542.456:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23185 comm="syz.0.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51318e929 code=0x7ffc0000 [ 1674.053747][ T30] audit: type=1326 audit(1752434542.466:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23185 comm="syz.0.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd51318d290 code=0x7ffc0000 [ 1674.114325][ T30] audit: type=1326 audit(1752434542.475:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23185 comm="syz.0.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51318e929 code=0x7ffc0000 [ 1674.159528][ T10] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1674.286942][ T6840] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1674.309127][ T30] audit: type=1326 audit(1752434542.485:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23185 comm="syz.0.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51318e929 code=0x7ffc0000 [ 1674.355651][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1674.376862][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1674.408916][ T30] audit: type=1326 audit(1752434542.485:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23185 comm="syz.0.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd51318e929 code=0x7ffc0000 [ 1674.443804][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1674.457716][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1674.488509][ T10] usb 3-1: SerialNumber: syz [ 1674.493718][ T30] audit: type=1326 audit(1752434542.494:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23185 comm="syz.0.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51318e929 code=0x7ffc0000 [ 1674.580357][T23199] loop2: detected capacity change from 0 to 7 [ 1674.614511][T20485] Dev loop2: unable to read RDB block 7 [ 1674.627959][T20485] loop2: unable to read partition table [ 1674.657651][T20485] loop2: partition table beyond EOD, truncated [ 1674.697278][T23199] Dev loop2: unable to read RDB block 7 [ 1674.713779][T23199] loop2: unable to read partition table [ 1674.740073][T23199] loop2: partition table beyond EOD, truncated [ 1674.768768][T23199] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1674.979632][T13238] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1676.893154][T23226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4510'. [ 1676.913552][T23224] tipc: Started in network mode [ 1676.931228][T23224] tipc: Node identity , cluster identity 4711 [ 1676.937525][T23224] tipc: Failed to set node id, please configure manually [ 1676.947293][T23224] tipc: Enabling of bearer rejected, failed to enable media [ 1676.973208][T23227] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 1677.025439][T23227] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 1677.564894][ T10] usb 3-1: 0:2 : does not exist [ 1678.324384][ T10] usb 3-1: USB disconnect, device number 121 [ 1678.823991][T20483] udevd[20483]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1679.131200][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1679.298076][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1680.239422][T10042] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 1680.492824][T19332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1680.777852][T10042] usb 6-1: device descriptor read/64, error -71 [ 1681.047994][T23283] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 1681.064903][T10042] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 1681.108104][T23288] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 1681.166467][T19332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1681.214718][T10042] usb 6-1: device descriptor read/64, error -71 [ 1681.294953][T23293] loop2: detected capacity change from 0 to 7 [ 1681.308954][T23293] Dev loop2: unable to read RDB block 7 [ 1681.317094][T23293] loop2: unable to read partition table [ 1681.326599][T23293] loop2: partition table beyond EOD, truncated [ 1681.332519][T11786] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1681.337394][T10042] usb usb6-port1: attempt power cycle [ 1681.349633][T23293] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1681.632859][T11786] usb 4-1: Using ep0 maxpacket: 8 [ 1681.649385][T11786] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1681.658602][T11786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.673751][T11786] usb 4-1: Product: syz [ 1681.683101][T11786] usb 4-1: Manufacturer: syz [ 1681.693565][T11786] usb 4-1: SerialNumber: syz [ 1681.727667][T10042] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 1681.865721][T23301] loop9: detected capacity change from 0 to 7 [ 1681.888173][T10042] usb 6-1: device descriptor read/8, error -71 [ 1681.890723][T11786] usb 4-1: config 0 descriptor?? [ 1681.941736][T23301] Dev loop9: unable to read RDB block 7 [ 1681.947458][T23301] loop9: unable to read partition table [ 1681.955856][T23301] loop9: partition table beyond EOD, truncated [ 1681.963551][T23301] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1682.156039][T11786] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1686.593615][T19324] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1686.598131][T11786] usb write operation failed. (-71) [ 1686.656598][T11786] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1686.737674][T11786] dvbdev: DVB: registering new adapter (Terratec H7) [ 1686.748754][T23323] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 1686.763471][T11786] usb 4-1: media controller created [ 1686.792566][T11786] usb read operation failed. (-71) [ 1686.802617][T23323] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 1686.812812][T11786] usb write operation failed. (-71) [ 1686.850542][T11786] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1686.929561][T11786] usb 4-1: USB disconnect, device number 109 [ 1686.967826][T23327] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4546'. [ 1687.012902][T23329] loop6: detected capacity change from 0 to 7 [ 1687.036703][T23329] Dev loop6: unable to read RDB block 7 [ 1687.045363][T23329] loop6: AHDI p1 p2 p3 p4 [ 1687.056199][T23329] loop6: partition table partially beyond EOD, truncated [ 1687.083633][T23329] loop6: p1 start 926365495 is beyond EOD, truncated [ 1687.122139][T23329] loop6: p2 size 47 extends beyond EOD, truncated [ 1687.140901][T23334] FAULT_INJECTION: forcing a failure. [ 1687.140901][T23334] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.156385][T23334] CPU: 0 UID: 0 PID: 23334 Comm: syz.5.4548 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1687.156419][T23334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1687.156432][T23334] Call Trace: [ 1687.156442][T23334] [ 1687.156452][T23334] dump_stack_lvl+0x189/0x250 [ 1687.156483][T23334] ? __pfx____ratelimit+0x10/0x10 [ 1687.156516][T23334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1687.156540][T23334] ? __pfx__printk+0x10/0x10 [ 1687.156571][T23334] ? __pfx___might_resched+0x10/0x10 [ 1687.156596][T23334] ? fs_reclaim_acquire+0x7d/0x100 [ 1687.156623][T23334] should_fail_ex+0x414/0x560 [ 1687.156660][T23334] should_failslab+0xa8/0x100 [ 1687.156692][T23334] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1687.156722][T23334] ? dup_task_struct+0x52/0x860 [ 1687.156751][T23334] dup_task_struct+0x52/0x860 [ 1687.156776][T23334] ? lockdep_hardirqs_on+0x9c/0x150 [ 1687.156810][T23334] copy_process+0x544/0x3b80 [ 1687.156875][T23334] ? __pfx_copy_process+0x10/0x10 [ 1687.156913][T23334] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1687.156946][T23334] vhost_task_create+0x1c4/0x290 [ 1687.156975][T23334] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1687.157009][T23334] ? __pfx_vhost_task_create+0x10/0x10 [ 1687.157046][T23334] ? __pfx_vhost_task_fn+0x10/0x10 [ 1687.157086][T23334] ? kasan_save_track+0x4f/0x80 [ 1687.157111][T23334] ? kasan_save_track+0x3e/0x80 [ 1687.157144][T23334] kvm_mmu_post_init_vm+0x147/0x2b0 [ 1687.157172][T23334] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 1687.157210][T23334] ? __mutex_trylock_common+0x153/0x260 [ 1687.157240][T23334] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1687.157273][T23334] ? rcu_is_watching+0x15/0xb0 [ 1687.157296][T23334] ? look_up_lock_class+0x74/0x170 [ 1687.157331][T23334] ? register_lock_class+0x51/0x320 [ 1687.157358][T23334] ? __lock_acquire+0xab9/0xd20 [ 1687.157413][T23334] kvm_vcpu_ioctl+0x95c/0xe90 [ 1687.157447][T23334] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1687.157471][T23334] ? __lock_acquire+0xab9/0xd20 [ 1687.157495][T23334] ? __asan_memset+0x22/0x50 [ 1687.157520][T23334] ? smack_file_ioctl+0x302/0x340 [ 1687.157552][T23334] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1687.157593][T23334] ? __fget_files+0x2a/0x420 [ 1687.157612][T23334] ? __fget_files+0x3a0/0x420 [ 1687.157630][T23334] ? __fget_files+0x2a/0x420 [ 1687.157654][T23334] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1687.157675][T23334] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1687.157702][T23334] __se_sys_ioctl+0xf9/0x170 [ 1687.157731][T23334] do_syscall_64+0xfa/0x3b0 [ 1687.157750][T23334] ? lockdep_hardirqs_on+0x9c/0x150 [ 1687.157779][T23334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.157801][T23334] ? clear_bhb_loop+0x60/0xb0 [ 1687.157834][T23334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.157854][T23334] RIP: 0033:0x7fdcabb8e929 [ 1687.157872][T23334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1687.157890][T23334] RSP: 002b:00007fdcac9c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1687.157912][T23334] RAX: ffffffffffffffda RBX: 00007fdcabdb5fa0 RCX: 00007fdcabb8e929 [ 1687.157927][T23334] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1687.157940][T23334] RBP: 00007fdcac9c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1687.157954][T23334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1687.157967][T23334] R13: 0000000000000000 R14: 00007fdcabdb5fa0 R15: 00007ffd0069e558 [ 1687.158000][T23334] [ 1687.527445][T13243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1687.542265][T23329] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1688.588970][T20483] udevd[20483]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1691.590218][T23372] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 1691.619236][T23372] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 1692.167808][T23380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4561'. [ 1692.784113][T13238] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1693.130408][T23393] lo speed is unknown, defaulting to 1000 [ 1693.136467][T23393] lo speed is unknown, defaulting to 1000 [ 1693.143219][T23393] lo speed is unknown, defaulting to 1000 [ 1693.172004][T23393] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1693.332363][T23395] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4565'. [ 1693.332568][T23393] lo speed is unknown, defaulting to 1000 [ 1693.546961][T23398] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1693.986641][T13248] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1694.056390][T23393] lo speed is unknown, defaulting to 1000 [ 1694.079402][T23393] lo speed is unknown, defaulting to 1000 [ 1694.081298][T23393] lo speed is unknown, defaulting to 1000 [ 1694.084055][T23393] lo speed is unknown, defaulting to 1000 [ 1694.595239][T23409] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1694.606893][T23409] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1695.656094][T10062] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1695.869886][T10062] usb 1-1: Using ep0 maxpacket: 16 [ 1695.877356][T10062] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1695.889988][T23427] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 1695.900844][T10062] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1695.936169][T23427] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 1696.118648][T10062] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1696.132627][T10062] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1696.143087][T10062] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.154207][T10062] usb 1-1: config 0 descriptor?? [ 1697.058363][T10062] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 1697.099243][T10062] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 1697.106280][T10062] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 1697.145891][T10062] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 1697.159789][T10062] shield 0003:0955:7214.001E: unknown main item tag 0x0 [ 1697.195687][T10062] input: HID 0955:7214 Haptics as /devices/virtual/input/input97 [ 1697.254917][T23439] netlink: 300 bytes leftover after parsing attributes in process `syz.2.4576'. [ 1697.799651][T11785] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1697.857659][T10062] shield 0003:0955:7214.001E: Registered Thunderstrike controller [ 1697.872501][T10062] shield 0003:0955:7214.001E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 1697.978472][T22642] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1698.000126][T10062] usb 1-1: USB disconnect, device number 106 [ 1698.007378][T22642] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1698.018751][T11785] usb 4-1: Using ep0 maxpacket: 8 [ 1698.035066][T11785] usb 4-1: config 51 has an invalid interface number: 123 but max is 0 [ 1698.064025][T22642] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1698.087338][T11785] usb 4-1: config 51 has no interface number 0 [ 1698.098172][T11785] usb 4-1: config 51 interface 123 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1698.116291][T22642] shield 0003:0955:7214.001E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1698.152173][T11785] usb 4-1: config 51 interface 123 has no altsetting 0 [ 1698.178328][T11785] usb 4-1: string descriptor 0 read error: -22 [ 1698.190826][T11785] usb 4-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=64.81 [ 1698.210706][T11785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.278961][T11785] usb 4-1: unsupported MDLM descriptors [ 1698.307554][T11409] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1698.330320][T23454] FAULT_INJECTION: forcing a failure. [ 1698.330320][T23454] name failslab, interval 1, probability 0, space 0, times 0 [ 1698.408515][T23454] CPU: 0 UID: 0 PID: 23454 Comm: syz.0.4582 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1698.408546][T23454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1698.408560][T23454] Call Trace: [ 1698.408569][T23454] [ 1698.408579][T23454] dump_stack_lvl+0x189/0x250 [ 1698.408607][T23454] ? __pfx____ratelimit+0x10/0x10 [ 1698.408639][T23454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1698.408663][T23454] ? __pfx__printk+0x10/0x10 [ 1698.408693][T23454] ? __pfx___might_resched+0x10/0x10 [ 1698.408716][T23454] ? fs_reclaim_acquire+0x7d/0x100 [ 1698.408742][T23454] should_fail_ex+0x414/0x560 [ 1698.408778][T23454] should_failslab+0xa8/0x100 [ 1698.408811][T23454] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1698.408840][T23454] ? getname_flags+0xb8/0x540 [ 1698.408865][T23454] getname_flags+0xb8/0x540 [ 1698.408890][T23454] __x64_sys_link+0x5d/0x90 [ 1698.408920][T23454] do_syscall_64+0xfa/0x3b0 [ 1698.408939][T23454] ? lockdep_hardirqs_on+0x9c/0x150 [ 1698.408969][T23454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.408990][T23454] ? clear_bhb_loop+0x60/0xb0 [ 1698.409015][T23454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.409036][T23454] RIP: 0033:0x7fd51318e929 [ 1698.409060][T23454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1698.409079][T23454] RSP: 002b:00007fd513fac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 1698.409101][T23454] RAX: ffffffffffffffda RBX: 00007fd5133b5fa0 RCX: 00007fd51318e929 [ 1698.409116][T23454] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000200 [ 1698.409129][T23454] RBP: 00007fd513fac090 R08: 0000000000000000 R09: 0000000000000000 [ 1698.409142][T23454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1698.409155][T23454] R13: 0000000000000000 R14: 00007fd5133b5fa0 R15: 00007ffe757893b8 [ 1698.409188][T23454] [ 1698.654305][T23459] overlayfs: failed to clone upperpath [ 1698.765030][T23462] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4578'. [ 1699.598714][T11409] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1700.353991][T23473] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 1700.365224][T23473] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 1701.306315][T10042] usb 4-1: USB disconnect, device number 110 [ 1701.525496][T23481] FAULT_INJECTION: forcing a failure. [ 1701.525496][T23481] name failslab, interval 1, probability 0, space 0, times 0 [ 1701.627901][T23481] CPU: 1 UID: 0 PID: 23481 Comm: syz.3.4591 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1701.627933][T23481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1701.627946][T23481] Call Trace: [ 1701.627956][T23481] [ 1701.627966][T23481] dump_stack_lvl+0x189/0x250 [ 1701.628003][T23481] ? __pfx____ratelimit+0x10/0x10 [ 1701.628036][T23481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1701.628061][T23481] ? __pfx__printk+0x10/0x10 [ 1701.628095][T23481] ? __pfx___might_resched+0x10/0x10 [ 1701.628125][T23481] should_fail_ex+0x414/0x560 [ 1701.628161][T23481] should_failslab+0xa8/0x100 [ 1701.628197][T23481] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 1701.628230][T23481] ? __get_vm_area_node+0x13f/0x300 [ 1701.628265][T23481] __get_vm_area_node+0x13f/0x300 [ 1701.628303][T23481] __vmalloc_node_range_noprof+0x301/0x12f0 [ 1701.628337][T23481] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1701.628360][T23481] ? is_bpf_text_address+0x26/0x2b0 [ 1701.628409][T23481] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1701.628440][T23481] ? __might_fault+0xb0/0x130 [ 1701.628472][T23481] ? _parse_integer_limit+0x1ae/0x1f0 [ 1701.628509][T23481] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1701.628527][T23481] __vmalloc_noprof+0xb1/0xf0 [ 1701.628559][T23481] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1701.628583][T23481] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1701.628608][T23481] bpf_prog_alloc+0x3c/0x1a0 [ 1701.628631][T23481] bpf_prog_load+0x735/0x1930 [ 1701.628677][T23481] ? __pfx_bpf_prog_load+0x10/0x10 [ 1701.628735][T23481] ? bpf_lsm_bpf+0x9/0x20 [ 1701.628755][T23481] ? security_bpf+0x7e/0x300 [ 1701.628779][T23481] __sys_bpf+0x5f1/0x860 [ 1701.628811][T23481] ? __pfx___sys_bpf+0x10/0x10 [ 1701.628857][T23481] ? ksys_write+0x22a/0x250 [ 1701.628889][T23481] ? __pfx_ksys_write+0x10/0x10 [ 1701.628926][T23481] __x64_sys_bpf+0x7c/0x90 [ 1701.628956][T23481] do_syscall_64+0xfa/0x3b0 [ 1701.628976][T23481] ? lockdep_hardirqs_on+0x9c/0x150 [ 1701.629015][T23481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.629036][T23481] ? clear_bhb_loop+0x60/0xb0 [ 1701.629067][T23481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.629088][T23481] RIP: 0033:0x7f0aba98e929 [ 1701.629107][T23481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1701.629126][T23481] RSP: 002b:00007f0abb89c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1701.629148][T23481] RAX: ffffffffffffffda RBX: 00007f0ababb5fa0 RCX: 00007f0aba98e929 [ 1701.629165][T23481] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 1701.629179][T23481] RBP: 00007f0abb89c090 R08: 0000000000000000 R09: 0000000000000000 [ 1701.629193][T23481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1701.629206][T23481] R13: 0000000000000001 R14: 00007f0ababb5fa0 R15: 00007ffdfa0937b8 [ 1701.629239][T23481] [ 1701.629251][T23481] syz.3.4591: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1701.945358][T23481] CPU: 1 UID: 0 PID: 23481 Comm: syz.3.4591 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1701.945387][T23481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1701.945401][T23481] Call Trace: [ 1701.945410][T23481] [ 1701.945420][T23481] dump_stack_lvl+0x189/0x250 [ 1701.945453][T23481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1701.945477][T23481] ? __pfx__printk+0x10/0x10 [ 1701.945504][T23481] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1701.945530][T23481] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1701.945558][T23481] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1701.945587][T23481] warn_alloc+0x214/0x310 [ 1701.945615][T23481] ? __pfx_warn_alloc+0x10/0x10 [ 1701.945638][T23481] ? __get_vm_area_node+0x13f/0x300 [ 1701.945672][T23481] ? __get_vm_area_node+0x2b5/0x300 [ 1701.945710][T23481] __vmalloc_node_range_noprof+0x326/0x12f0 [ 1701.945745][T23481] ? is_bpf_text_address+0x26/0x2b0 [ 1701.945794][T23481] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1701.945825][T23481] ? __might_fault+0xb0/0x130 [ 1701.945856][T23481] ? _parse_integer_limit+0x1ae/0x1f0 [ 1701.945894][T23481] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1701.945913][T23481] __vmalloc_noprof+0xb1/0xf0 [ 1701.945943][T23481] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1701.945966][T23481] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1701.945992][T23481] bpf_prog_alloc+0x3c/0x1a0 [ 1701.946022][T23481] bpf_prog_load+0x735/0x1930 [ 1701.946067][T23481] ? __pfx_bpf_prog_load+0x10/0x10 [ 1701.946124][T23481] ? bpf_lsm_bpf+0x9/0x20 [ 1701.946143][T23481] ? security_bpf+0x7e/0x300 [ 1701.946168][T23481] __sys_bpf+0x5f1/0x860 [ 1701.946202][T23481] ? __pfx___sys_bpf+0x10/0x10 [ 1701.946247][T23481] ? ksys_write+0x22a/0x250 [ 1701.946279][T23481] ? __pfx_ksys_write+0x10/0x10 [ 1701.946315][T23481] __x64_sys_bpf+0x7c/0x90 [ 1701.946344][T23481] do_syscall_64+0xfa/0x3b0 [ 1701.946363][T23481] ? lockdep_hardirqs_on+0x9c/0x150 [ 1701.946395][T23481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.946416][T23481] ? clear_bhb_loop+0x60/0xb0 [ 1701.946454][T23481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.946475][T23481] RIP: 0033:0x7f0aba98e929 [ 1701.946493][T23481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1701.946511][T23481] RSP: 002b:00007f0abb89c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1701.946532][T23481] RAX: ffffffffffffffda RBX: 00007f0ababb5fa0 RCX: 00007f0aba98e929 [ 1701.946547][T23481] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 1701.946561][T23481] RBP: 00007f0abb89c090 R08: 0000000000000000 R09: 0000000000000000 [ 1701.946574][T23481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1701.946586][T23481] R13: 0000000000000001 R14: 00007f0ababb5fa0 R15: 00007ffdfa0937b8 [ 1701.946618][T23481] [ 1701.946626][T23481] Mem-Info: [ 1702.346488][T23481] active_anon:30202 inactive_anon:15552 isolated_anon:0 [ 1702.346488][T23481] active_file:19071 inactive_file:35377 isolated_file:0 [ 1702.346488][T23481] unevictable:768 dirty:154 writeback:0 [ 1702.346488][T23481] slab_reclaimable:7773 slab_unreclaimable:103994 [ 1702.346488][T23481] mapped:41803 shmem:39876 pagetables:1848 [ 1702.346488][T23481] sec_pagetables:3 bounce:0 [ 1702.346488][T23481] kernel_misc_reclaimable:0 [ 1702.346488][T23481] free:1269819 free_pcp:5961 free_cma:0 [ 1702.392353][ C1] vkms_vblank_simulate: vblank timer overrun [ 1702.483753][T23481] Node 0 active_anon:120808kB inactive_anon:62308kB active_file:76008kB inactive_file:141508kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:167136kB dirty:612kB writeback:0kB shmem:157968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12636kB pagetables:7264kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB [ 1702.517895][ C1] vkms_vblank_simulate: vblank timer overrun [ 1702.741910][T23481] Node 1 active_anon:0kB inactive_anon:0kB active_file:276kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1703.169015][T23481] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1703.252767][T23481] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 1703.258989][T23481] Node 0 DMA32 free:1158860kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:120804kB inactive_anon:39884kB active_file:74248kB inactive_file:141448kB unevictable:1536kB writepending:600kB present:3129332kB managed:2560896kB mlocked:0kB bounce:0kB free_pcp:37284kB local_pcp:22028kB free_cma:0kB [ 1703.449612][T23481] lowmem_reserve[]: 0 0 1 1 1 [ 1703.456458][T23481] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1760kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1703.485799][ C1] vkms_vblank_simulate: vblank timer overrun [ 1703.577112][T19041] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1703.757980][T19041] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.073147][T23481] lowmem_reserve[]: 0 0 0 0 0 [ 1704.077963][T23481] Node 1 Normal free:3913100kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:276kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:7680kB local_pcp:0kB free_cma:0kB [ 1704.108871][ C1] vkms_vblank_simulate: vblank timer overrun [ 1704.115507][T19041] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1704.126277][T19041] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.138501][T19041] usb 1-1: config 0 descriptor?? [ 1704.144104][T23481] lowmem_reserve[]: 0 0 0 0 0 [ 1704.148994][T23481] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1704.247378][T23481] Node 0 DMA32: 16*4kB (ME) 76*8kB (UME) 99*16kB (UE) 802*32kB (UE) 136*64kB (UME) 119*128kB (UME) 85*256kB (UME) 71*512kB (UME) 30*1024kB (UME) 5*2048kB (UME) 243*4096kB (UM) = 1146256kB [ 1704.272339][T23481] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1704.284951][T23481] Node 1 Normal: 209*4kB (UME) 49*8kB (UME) 42*16kB (UME) 223*32kB (UME) 107*64kB (UME) 41*128kB (UME) 15*256kB (UM) 8*512kB (UM) 3*1024kB (ME) 5*2048kB (UME) 945*4096kB (M) = 3913100kB [ 1704.315119][T23481] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1704.324937][T23481] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1704.356143][T23481] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1704.369100][T23481] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1704.380284][T13243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1704.408823][T23481] 88620 total pagecache pages [ 1704.421428][T23481] 0 pages in swap cache [ 1704.425669][T23481] Free swap = 124996kB [ 1704.458211][T23481] Total swap = 124996kB [ 1704.469049][T23481] 2097051 pages RAM [ 1704.472912][T23481] 0 pages HighMem/MovableOnly [ 1704.492579][T23481] 424720 pages reserved [ 1704.497114][T23481] 0 pages cma reserved [ 1704.569692][T10042] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1704.616762][T23509] 8021q: VLANs not supported on wg0 [ 1704.997953][T23498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1705.105367][T19041] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 1705.115760][T23498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1705.159234][T19041] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.001F/input/input98 [ 1705.214498][T23511] loop2: detected capacity change from 0 to 1 [ 1705.223499][T20483] ldm_validate_privheads(): Disk read failed. [ 1705.229854][T20483] Dev loop2: unable to read RDB block 1 [ 1705.238287][T20483] loop2: AHDI p2 p3 [ 1705.242385][T20483] loop2: partition table partially beyond EOD, truncated [ 1705.251608][T20483] loop2: p3 start 335544320 is beyond EOD, truncated [ 1705.260336][T10042] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.282159][T23511] ldm_validate_privheads(): Disk read failed. [ 1705.292966][T23511] Dev loop2: unable to read RDB block 1 [ 1705.311315][T10042] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1705.321799][T23511] loop2: AHDI p2 p3 [ 1705.341216][T23511] loop2: partition table partially beyond EOD, truncated [ 1705.372596][T10042] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1705.405379][T23511] loop2: p3 start 335544320 is beyond EOD, truncated [ 1705.439966][T10042] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.518930][T10042] usb 6-1: Product: syz [ 1705.524875][T19041] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1705.554516][T10042] usb 6-1: Manufacturer: syz [ 1705.575954][T10042] usb 6-1: SerialNumber: syz [ 1705.747445][T13248] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1705.775291][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1705.775311][ T30] audit: type=1326 audit(1752434572.542:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23515 comm="syz.2.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9d18e929 code=0x7ffc0000 [ 1705.877672][ T30] audit: type=1326 audit(1752434572.542:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23515 comm="syz.2.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9d18e929 code=0x7ffc0000 [ 1705.918414][ T30] audit: type=1326 audit(1752434572.542:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23515 comm="syz.2.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f5c9d18e929 code=0x7ffc0000 [ 1706.007992][ T30] audit: type=1326 audit(1752434572.542:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23515 comm="syz.2.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9d18e929 code=0x7ffc0000 [ 1706.035632][ T30] audit: type=1326 audit(1752434572.542:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23515 comm="syz.2.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9d18e929 code=0x7ffc0000 [ 1706.065280][ T30] audit: type=1326 audit(1752434572.542:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23515 comm="syz.2.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f5c9d18e929 code=0x7ffc0000 [ 1706.098544][ T30] audit: type=1326 audit(1752434572.542:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23515 comm="syz.2.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9d18e929 code=0x7ffc0000 [ 1706.138013][ T30] audit: type=1326 audit(1752434572.542:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23515 comm="syz.2.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9d18e929 code=0x7ffc0000 [ 1706.181057][ T30] audit: type=1326 audit(1752434572.542:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23515 comm="syz.2.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5c9d18e929 code=0x7ffc0000 [ 1706.248420][ T30] audit: type=1326 audit(1752434572.542:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23515 comm="syz.2.4599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c9d18e929 code=0x7ffc0000 [ 1706.326120][T23504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1706.335098][T23504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1706.677518][T23529] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1706.689565][T23529] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1708.021458][T19041] usb 1-1: USB disconnect, device number 107 [ 1708.839748][T10042] usb 6-1: cannot find UAC_HEADER [ 1710.387290][T10042] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1710.405452][T10042] usb 6-1: USB disconnect, device number 39 [ 1710.536328][T13238] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1710.556048][T20483] udevd[20483]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1710.803118][T19041] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1710.990246][T19041] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1711.014791][T19041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.041511][T19041] usb 3-1: Product: syz [ 1711.804081][T23569] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 23569 comm: syz.3.4616) [ 1711.849242][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1711.849274][ T30] audit: type=1800 audit(1752434578.202:2228): pid=23569 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.4616" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=88109 res=0 errno=0 [ 1712.295561][T19041] usb 3-1: Manufacturer: syz [ 1713.091236][T19041] usb 3-1: SerialNumber: syz [ 1715.406616][T19041] usb 3-1: can't set config #1, error -71 [ 1715.742387][T19041] usb 3-1: USB disconnect, device number 122 [ 1716.062388][T22642] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 1716.224439][T22642] usb 4-1: device descriptor read/64, error -71 [ 1716.324511][T23594] batadv_slave_1: entered promiscuous mode [ 1716.650532][T23604] 8021q: VLANs not supported on wg0 [ 1717.135800][T19041] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1717.145828][T19321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1717.313388][T19041] usb 1-1: Using ep0 maxpacket: 32 [ 1717.328013][T19041] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 147 [ 1717.398657][T19041] usb 1-1: can't read configurations, error -22 [ 1717.548998][T19041] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1717.783367][T19041] usb 1-1: Using ep0 maxpacket: 32 [ 1717.792992][T19041] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 147 [ 1717.815216][T19041] usb 1-1: can't read configurations, error -22 [ 1717.822308][T19041] usb usb1-port1: attempt power cycle [ 1717.865780][T23616] macsec1: entered allmulticast mode [ 1717.871580][T23616] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1717.885093][T23616] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1718.606470][T19041] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1718.759360][T19041] usb 1-1: Using ep0 maxpacket: 32 [ 1718.775801][T19041] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 147 [ 1719.618121][T19041] usb 1-1: can't read configurations, error -22 [ 1719.863262][T23594] batadv_slave_1: left promiscuous mode [ 1722.144722][ T5824] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1722.307177][ T5824] usb 6-1: config index 0 descriptor too short (expected 156, got 72) [ 1722.329049][ T5824] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1722.360969][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.396948][ T5824] usb 6-1: Product: syz [ 1722.422716][ T5824] usb 6-1: Manufacturer: syz [ 1722.430279][ T5824] usb 6-1: SerialNumber: syz [ 1722.464126][ T5824] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1722.520820][T19041] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1722.851826][ T6840] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1722.887282][T23672] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1723.361541][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a2c3c00: rx timeout, send abort [ 1723.775336][T19041] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1723.785259][ T10] usb 6-1: USB disconnect, device number 40 [ 1723.896250][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a2c1c00: rx timeout, send abort [ 1723.906413][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a2c3c00: abort rx timeout. Force session deactivation [ 1723.983994][T19041] ath9k_htc: Failed to initialize the device [ 1724.439011][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a2c1c00: abort rx timeout. Force session deactivation [ 1724.475368][ T10] usb 6-1: ath9k_htc: USB layer deinitialized [ 1725.555070][T23707] macsec1: entered allmulticast mode [ 1725.560581][T23707] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1725.582762][T23707] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1726.700002][ T6840] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1729.147520][T13243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1730.539888][T23765] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1730.588779][T23765] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1731.402211][T23778] loop2: detected capacity change from 0 to 7 [ 1731.429653][T23778] Dev loop2: unable to read RDB block 7 [ 1731.449419][T23778] loop2: unable to read partition table [ 1731.544865][T23778] loop2: partition table beyond EOD, truncated [ 1731.555300][T23778] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1733.225245][T11409] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1733.737014][T23794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4687'. [ 1733.746125][T23794] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1734.892473][T23810] FAULT_INJECTION: forcing a failure. [ 1734.892473][T23810] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.978478][T23810] CPU: 1 UID: 0 PID: 23810 Comm: syz.0.4691 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1734.978501][T23810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1734.978512][T23810] Call Trace: [ 1734.978519][T23810] [ 1734.978527][T23810] dump_stack_lvl+0x189/0x250 [ 1734.978549][T23810] ? __pfx____ratelimit+0x10/0x10 [ 1734.978573][T23810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1734.978590][T23810] ? __pfx__printk+0x10/0x10 [ 1734.978614][T23810] ? __pfx___might_resched+0x10/0x10 [ 1734.978631][T23810] ? fs_reclaim_acquire+0x7d/0x100 [ 1734.978650][T23810] should_fail_ex+0x414/0x560 [ 1734.978676][T23810] should_failslab+0xa8/0x100 [ 1734.978700][T23810] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 1734.978721][T23810] ? __d_alloc+0x31/0x6f0 [ 1734.978736][T23810] ? __lock_acquire+0xab9/0xd20 [ 1734.978753][T23810] __d_alloc+0x31/0x6f0 [ 1734.978774][T23810] d_alloc_parallel+0xe0/0x14e0 [ 1734.978792][T23810] ? smack_log+0xef/0x3f0 [ 1734.978811][T23810] ? __pfx_smack_log+0x10/0x10 [ 1734.978829][T23810] ? smk_access+0x14c/0x4e0 [ 1734.978849][T23810] ? __lock_acquire+0xab9/0xd20 [ 1734.978863][T23810] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1734.978879][T23810] ? look_up_lock_class+0x74/0x170 [ 1734.978912][T23810] ? __raw_spin_lock_init+0x45/0x100 [ 1734.978940][T23810] ? __init_waitqueue_head+0xa9/0x150 [ 1734.978965][T23810] __lookup_slow+0x116/0x3d0 [ 1734.978985][T23810] ? __pfx___lookup_slow+0x10/0x10 [ 1734.979008][T23810] ? bpf_lsm_inode_permission+0x9/0x20 [ 1734.979030][T23810] ? security_inode_permission+0xb7/0x310 [ 1734.979056][T23810] ? down_read+0x1ad/0x2e0 [ 1734.979077][T23810] lookup_slow+0x53/0x70 [ 1734.979095][T23810] walk_component+0x2d2/0x400 [ 1734.979110][T23810] ? path_lookupat+0x156/0x430 [ 1734.979128][T23810] path_lookupat+0x163/0x430 [ 1734.979150][T23810] filename_lookup+0x212/0x570 [ 1734.979165][T23810] ? kasan_save_track+0x4f/0x80 [ 1734.979188][T23810] ? __pfx_filename_lookup+0x10/0x10 [ 1734.979228][T23810] ? __might_fault+0xb0/0x130 [ 1734.979259][T23810] do_linkat+0x120/0x560 [ 1734.979289][T23810] ? __pfx_do_linkat+0x10/0x10 [ 1734.979308][T23810] ? strncpy_from_user+0x150/0x290 [ 1734.979332][T23810] ? getname_flags+0x1e5/0x540 [ 1734.979356][T23810] __x64_sys_link+0x82/0x90 [ 1734.979388][T23810] do_syscall_64+0xfa/0x3b0 [ 1734.979407][T23810] ? lockdep_hardirqs_on+0x9c/0x150 [ 1734.979440][T23810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.979461][T23810] ? clear_bhb_loop+0x60/0xb0 [ 1734.979487][T23810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.979508][T23810] RIP: 0033:0x7fd51318e929 [ 1734.979528][T23810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1734.979546][T23810] RSP: 002b:00007fd513fac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 1734.979569][T23810] RAX: ffffffffffffffda RBX: 00007fd5133b5fa0 RCX: 00007fd51318e929 [ 1734.979586][T23810] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000200 [ 1734.979601][T23810] RBP: 00007fd513fac090 R08: 0000000000000000 R09: 0000000000000000 [ 1734.979615][T23810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1734.979628][T23810] R13: 0000000000000000 R14: 00007fd5133b5fa0 R15: 00007ffe757893b8 [ 1734.979662][T23810] [ 1735.308945][ T79] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1736.034078][T23818] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 23818 comm: syz.5.4696) [ 1736.137493][ T30] audit: type=1800 audit(1752434600.859:2229): pid=23818 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.4696" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=88459 res=0 errno=0 [ 1737.465425][T23828] ptrace attach of "./syz-executor exec"[18604] was attempted by "\x09   0 \x07   memory.current    /dev/cpu/#/msr attr/exec  $ $ \x0d  `   [ 1738.729808][T23836] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4700'. [ 1739.283015][ T79] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1741.328638][ T79] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1741.422526][T23875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4708'. [ 1742.686260][T23880] netlink: 268 bytes leftover after parsing attributes in process `syz.4.4711'. [ 1742.709483][T23880] unsupported nla_type 65024 [ 1744.041238][T23906] loop9: detected capacity change from 0 to 7 [ 1744.072437][T23912] binder: BINDER_SET_CONTEXT_MGR already set [ 1744.089944][T23906] Dev loop9: unable to read RDB block 7 [ 1744.096512][T23910] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4723'. [ 1744.100698][T23912] binder: 23911:23912 ioctl 4018620d 200000000040 returned -16 [ 1744.111981][T23913] binder: 23911:23913 ioctl c0306201 2000000003c0 returned -14 [ 1744.122754][T23906] loop9: unable to read partition table [ 1744.128707][T23906] loop9: partition table beyond EOD, truncated [ 1744.166141][T23906] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1744.760892][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1744.773262][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1745.887753][ T6840] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1747.488387][T13243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1750.107218][T23958] loop2: detected capacity change from 0 to 7 [ 1750.327106][T23958] loop2: [ 1750.410395][T23958] loop2: partition table partially beyond EOD, truncated [ 1750.502878][T23679] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1750.667333][T23963] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4736'. [ 1750.703650][T23963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4736'. [ 1750.815957][T23679] usb 4-1: Using ep0 maxpacket: 32 [ 1750.832911][T23679] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.c0 [ 1750.845286][T23679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.933674][T23679] usb 4-1: config 0 descriptor?? [ 1751.232673][T23679] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1751.671019][T23679] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1751.720375][T23679] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1751.906266][T23991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4744'. [ 1752.961532][ T79] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1754.224325][ T6840] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1754.392798][T24000] loop6: detected capacity change from 0 to 7 [ 1754.409301][T24000] Dev loop6: unable to read RDB block 7 [ 1754.415002][T24000] loop6: AHDI p1 p2 p3 p4 [ 1754.437057][T24000] loop6: partition table partially beyond EOD, truncated [ 1754.469518][T24000] loop6: p1 start 926365495 is beyond EOD, truncated [ 1754.481576][T24000] loop6: p2 size 47 extends beyond EOD, truncated [ 1754.523961][T24000] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1754.583622][T24005] 8021q: VLANs not supported on wg0 [ 1754.682439][T20483] udevd[20483]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1755.724520][T24021] sctp: [Deprecated]: syz.5.4752 (pid 24021) Use of int in maxseg socket option. [ 1755.724520][T24021] Use struct sctp_assoc_value instead [ 1755.758939][T24026] Invalid ELF header len 4 [ 1756.319606][T24043] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4758'. [ 1757.428205][T24053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1759.179549][T24073] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4765'. [ 1759.185160][ T30] audit: type=1800 audit(1752434622.507:2230): pid=24070 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.4764" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 1759.590871][T24086] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1759.600360][T24086] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1759.647125][T24092] loop2: detected capacity change from 0 to 1 [ 1759.724067][T24094] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1760.362597][T24092] ldm_validate_privheads(): Disk read failed. [ 1760.379873][T24092] Dev loop2: unable to read RDB block 1 [ 1760.415913][T24092] loop2: AHDI p2 p3 [ 1760.419987][T24092] loop2: partition table partially beyond EOD, truncated [ 1760.432571][T24092] loop2: p3 start 335544320 is beyond EOD, truncated [ 1760.478494][T13243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1760.481714][T11409] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1761.434251][T24105] tipc: Started in network mode [ 1761.439189][T24105] tipc: Node identity 00000000000000000012ffffffffffff, cluster identity 4711 [ 1761.448266][T24105] tipc: Enabling of bearer rejected, failed to enable media [ 1762.415970][T24123] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4779'. [ 1762.447184][T24120] loop2: detected capacity change from 0 to 7 [ 1762.476503][T24120] Dev loop2: unable to read RDB block 7 [ 1762.482189][T24120] loop2: unable to read partition table [ 1762.508858][T24120] loop2: partition table beyond EOD, truncated [ 1762.531500][T24126] netlink: 'syz.5.4779': attribute type 21 has an invalid length. [ 1762.539525][T24120] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1763.094485][T24132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4785'. [ 1763.420857][T24140] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.4786'. [ 1763.706184][T11786] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1764.020353][T11786] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1764.037569][T11786] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1764.052553][T11786] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1764.065646][T11786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.074224][T11786] usb 6-1: Product: syz [ 1764.084354][T11786] usb 6-1: Manufacturer: syz [ 1764.089136][T11786] usb 6-1: SerialNumber: syz [ 1765.027089][T24170] loop6: detected capacity change from 0 to 7 [ 1765.068134][T24170] Dev loop6: unable to read RDB block 7 [ 1765.115064][T24170] loop6: AHDI p1 [ 1765.130164][T24170] loop6: partition table partially beyond EOD, truncated [ 1765.674779][T24186] netlink: 'syz.4.4801': attribute type 32 has an invalid length. [ 1765.716122][T24188] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1765.723204][T24188] overlayfs: failed to set xattr on upper [ 1765.729205][T24188] overlayfs: ...falling back to redirect_dir=nofollow. [ 1765.736107][T24188] overlayfs: ...falling back to index=off. [ 1765.742019][T24188] overlayfs: ...falling back to uuid=null. [ 1766.152082][T24193] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1766.637663][ T6840] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1766.650952][ T79] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1766.741537][T22642] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 1766.920393][T22642] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1766.930762][T22642] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1766.942528][T22642] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1766.955246][T22642] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.987548][T22642] usb 1-1: Product: syz [ 1766.991812][T22642] usb 1-1: Manufacturer: syz [ 1766.996463][T22642] usb 1-1: SerialNumber: syz [ 1767.457345][T24206] netlink: 'syz.5.4807': attribute type 3 has an invalid length. [ 1767.474363][T24206] netlink: 'syz.5.4807': attribute type 1 has an invalid length. [ 1767.483421][T24206] netlink: 216 bytes leftover after parsing attributes in process `syz.5.4807'. [ 1767.622810][T24211] loop2: detected capacity change from 0 to 1 [ 1767.633524][T24211] ldm_validate_privheads(): Disk read failed. [ 1767.644175][T24211] Dev loop2: unable to read RDB block 1 [ 1767.649856][T24211] loop2: AHDI p2 p3 [ 1767.655696][T24211] loop2: partition table partially beyond EOD, truncated [ 1767.665931][T24184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1767.675198][T24184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1767.856460][T24211] loop2: p3 start 335544320 is beyond EOD, truncated [ 1768.510733][T24217] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1768.522835][T24217] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1769.404832][T24223] sp0: Synchronizing with TNC [ 1770.654247][T22642] usb 1-1: cannot find UAC_HEADER [ 1770.723664][T22642] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1770.736266][T11786] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1770.760938][T22642] usb 1-1: USB disconnect, device number 112 [ 1770.843010][T20483] udevd[20483]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1770.868774][T11786] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1770.907416][T11786] usb 6-1: USB disconnect, device number 41 [ 1770.941706][T24256] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4820'. [ 1771.026764][T20677] udevd[20677]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1772.497847][ T6840] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1772.806193][ T79] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1774.638855][T24280] FAULT_INJECTION: forcing a failure. [ 1774.638855][T24280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1774.652163][T24280] CPU: 1 UID: 0 PID: 24280 Comm: syz.5.4826 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1774.652192][T24280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1774.652206][T24280] Call Trace: [ 1774.652215][T24280] [ 1774.652224][T24280] dump_stack_lvl+0x189/0x250 [ 1774.652254][T24280] ? __pfx____ratelimit+0x10/0x10 [ 1774.652287][T24280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1774.652311][T24280] ? __pfx__printk+0x10/0x10 [ 1774.652338][T24280] ? __might_fault+0xb0/0x130 [ 1774.652389][T24280] should_fail_ex+0x414/0x560 [ 1774.652424][T24280] _copy_from_iter+0x1db/0x16f0 [ 1774.652455][T24280] ? __lock_acquire+0xab9/0xd20 [ 1774.652477][T24280] ? __pfx__copy_from_iter+0x10/0x10 [ 1774.652509][T24280] ? page_copy_sane+0x4e/0x280 [ 1774.652532][T24280] copy_page_from_iter+0xdd/0x170 [ 1774.652558][T24280] tun_get_user+0x1c4d/0x3ce0 [ 1774.652584][T24280] ? tun_get_user+0x693/0x3ce0 [ 1774.652624][T24280] ? __pfx_tun_get_user+0x10/0x10 [ 1774.652654][T24280] ? __lock_acquire+0xab9/0xd20 [ 1774.652680][T24280] ? ref_tracker_alloc+0x318/0x460 [ 1774.652709][T24280] ? __lock_acquire+0xab9/0xd20 [ 1774.652731][T24280] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1774.652768][T24280] ? tun_get+0x1c/0x2f0 [ 1774.652796][T24280] ? tun_get+0x1c/0x2f0 [ 1774.652815][T24280] ? tun_get+0x1c/0x2f0 [ 1774.652841][T24280] tun_chr_write_iter+0x113/0x200 [ 1774.652866][T24280] vfs_write+0x548/0xa90 [ 1774.652901][T24280] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1774.652923][T24280] ? __pfx_vfs_write+0x10/0x10 [ 1774.652962][T24280] ? __fget_files+0x2a/0x420 [ 1774.652992][T24280] ksys_write+0x145/0x250 [ 1774.653023][T24280] ? __pfx_ksys_write+0x10/0x10 [ 1774.653049][T24280] ? rcu_is_watching+0x15/0xb0 [ 1774.653078][T24280] ? do_syscall_64+0xbe/0x3b0 [ 1774.653104][T24280] do_syscall_64+0xfa/0x3b0 [ 1774.653122][T24280] ? lockdep_hardirqs_on+0x9c/0x150 [ 1774.653153][T24280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.653175][T24280] ? clear_bhb_loop+0x60/0xb0 [ 1774.653205][T24280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.653226][T24280] RIP: 0033:0x7fdcabb8d3df [ 1774.653245][T24280] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1774.653264][T24280] RSP: 002b:00007fdcac9c1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1774.653287][T24280] RAX: ffffffffffffffda RBX: 00007fdcabdb5fa0 RCX: 00007fdcabb8d3df [ 1774.653303][T24280] RDX: 000000000000002a RSI: 0000200000000140 RDI: 00000000000000c8 [ 1774.653317][T24280] RBP: 00007fdcac9c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1774.653330][T24280] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 1774.653343][T24280] R13: 0000000000000000 R14: 00007fdcabdb5fa0 R15: 00007ffd0069e558 [ 1774.653383][T24280] [ 1775.094534][T19041] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1775.616317][T19041] usb 1-1: config index 0 descriptor too short (expected 65069, got 45) [ 1775.633760][T19041] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1775.652294][T19041] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1775.730726][T24296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4832'. [ 1775.833048][T19041] usb 1-1: config 0 has an invalid descriptor of length 177, skipping remainder of the config [ 1775.976140][T19041] usb 1-1: config 0 has no interfaces? [ 1776.081484][T19041] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1776.254171][T19041] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.289063][T19041] usb 1-1: config 0 descriptor?? [ 1776.451759][T19041] usb 1-1: can't set config #0, error -71 [ 1776.517009][T19041] usb 1-1: USB disconnect, device number 113 [ 1777.249959][T24308] lo speed is unknown, defaulting to 1000 [ 1777.495669][T10020] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1777.644909][T10020] usb 3-1: device descriptor read/64, error -71 [ 1777.944200][T10020] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1778.099536][T10020] usb 3-1: device descriptor read/64, error -71 [ 1778.222643][T10020] usb usb3-port1: attempt power cycle [ 1779.484112][T19334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1779.865938][T10020] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1780.330417][T11409] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1781.664206][T24367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.674038][T24367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.816846][T10020] usb 3-1: device not accepting address 125, error -71 [ 1781.858058][T24373] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4855'. [ 1781.920867][T19041] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1782.034548][T24381] loop2: detected capacity change from 0 to 7 [ 1782.047153][T24381] Dev loop2: unable to read RDB block 7 [ 1782.056225][T24381] loop2: unable to read partition table [ 1782.059408][T24377] lo speed is unknown, defaulting to 1000 [ 1782.078153][T24381] loop2: partition table beyond EOD, truncated [ 1782.088951][T24381] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1782.117772][T19041] usb 6-1: Using ep0 maxpacket: 16 [ 1782.138921][T19041] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1782.175845][T19041] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1782.211802][T19041] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1782.231881][T19041] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1782.274730][T19041] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1782.302990][T19041] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1782.314746][T19041] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1782.478592][T19041] usb 6-1: Manufacturer: syz [ 1782.504935][T19041] usb 6-1: config 0 descriptor?? [ 1783.000843][T19041] rc_core: IR keymap rc-hauppauge not found [ 1783.007751][T19041] Registered IR keymap rc-empty [ 1783.020432][T19041] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1783.048643][T19041] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1783.141476][T19041] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1783.165571][T19041] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input103 [ 1783.208574][T19041] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1783.246547][T19041] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1783.267742][T19041] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1783.294428][T19041] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1783.324234][T19041] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1783.353391][T19041] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1783.374482][T19041] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1783.406358][T19041] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1783.444779][T19041] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1783.546297][T19041] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1783.578401][T24403] loop6: detected capacity change from 0 to 7 [ 1783.590653][T24403] Dev loop6: unable to read RDB block 7 [ 1783.600657][T24403] loop6: AHDI p1 p2 p3 p4 [ 1783.626726][T19041] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1783.652970][T24403] loop6: partition table partially beyond EOD, truncated [ 1783.655576][T19041] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1783.687808][T19041] usb 6-1: USB disconnect, device number 42 [ 1783.706309][T24403] loop6: p1 start 926365495 is beyond EOD, truncated [ 1783.713909][T24403] loop6: p2 size 47 extends beyond EOD, truncated [ 1783.733700][T24403] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1783.935327][T20485] udevd[20485]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1784.068096][T24416] loop6: detected capacity change from 0 to 7 [ 1784.680905][T20485] Dev loop6: unable to read RDB block 7 [ 1784.937202][T20485] loop6: AHDI p1 [ 1784.940948][T20485] loop6: partition table partially beyond EOD, truncated [ 1785.110538][T19334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1785.281603][T17966] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 1785.548974][T24438] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4874'. [ 1785.683868][T19041] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 1786.128843][T19041] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1786.149015][T19041] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1786.161337][T19041] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1786.175944][T19041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.184285][T19041] usb 3-1: Product: syz [ 1786.191806][T19041] usb 3-1: Manufacturer: syz [ 1786.199827][T19041] usb 3-1: SerialNumber: syz [ 1787.005008][T19041] usb 3-1: 0:2 : does not exist [ 1787.042991][T19041] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1787.201997][T19041] usb 3-1: USB disconnect, device number 127 [ 1787.939264][T20483] udevd[20483]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1788.017234][T24474] overlayfs: failed to clone upperpath [ 1788.185382][ T5824] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1789.044106][T24481] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1789.051222][T24481] overlayfs: failed to set xattr on upper [ 1789.056982][T24481] overlayfs: ...falling back to redirect_dir=nofollow. [ 1789.063928][T24481] overlayfs: ...falling back to index=off. [ 1789.069760][T24481] overlayfs: ...falling back to uuid=null. [ 1789.132616][ T5824] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 1789.161258][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.302206][ T5824] usb 1-1: config 0 descriptor?? [ 1789.327388][ T5824] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1789.373348][ T5824] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 1789.541978][ T5824] usb 1-1: USB disconnect, device number 114 [ 1789.596386][ T5824] ftdi_sio 1-1:0.0: device disconnected [ 1790.015207][T24504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4897'. [ 1790.123223][T24506] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4898'. [ 1790.152731][T24508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4899'. [ 1790.293361][T24511] overlayfs: failed to clone upperpath [ 1790.317101][T24512] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4900'. [ 1790.626784][ T79] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1790.667308][T19324] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1791.941861][T24539] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1792.017027][T24536] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4907'. [ 1792.632733][T24532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1793.447587][T24551] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4914'. [ 1794.776462][T24579] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4925'. [ 1795.894878][T24591] syz.3.4928: attempt to access beyond end of device [ 1795.894878][T24591] md0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1795.913295][T24591] syz.3.4928: attempt to access beyond end of device [ 1795.913295][T24591] md0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1795.931876][T24591] Mount JFS Failure: -5 [ 1796.784166][T19334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1796.801519][T11409] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1797.093059][T24608] overlayfs: failed to clone lowerpath [ 1797.194023][T24609] overlayfs: failed to clone upperpath [ 1800.305131][T24635] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4941'. [ 1800.722178][T24641] openvswitch: netlink: Tunnel attr 4 has unexpected len 3 expected 1 [ 1802.267662][T24669] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1802.274803][T24669] overlayfs: failed to set xattr on upper [ 1802.280612][T24669] overlayfs: ...falling back to redirect_dir=nofollow. [ 1802.287605][T24669] overlayfs: ...falling back to index=off. [ 1802.293415][T24669] overlayfs: ...falling back to uuid=null. [ 1802.907643][T11409] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1802.909590][ T79] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1804.735672][T24716] loop2: detected capacity change from 0 to 7 [ 1804.760837][T24716] loop2: [ 1804.763968][T24716] loop2: partition table partially beyond EOD, truncated [ 1804.784771][T24718] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4963'. [ 1805.589319][ T5824] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1806.126143][ T5824] usb 1-1: Using ep0 maxpacket: 32 [ 1806.138642][ T5824] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1806.147981][ T5824] usb 1-1: config 0 has no interface number 0 [ 1806.154188][ T30] audit: type=1326 audit(1752434666.447:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24731 comm="syz.3.4968" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0aba98e929 code=0x0 [ 1806.178091][ T5824] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1806.193258][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.203416][ T5824] usb 1-1: Product: syz [ 1806.212158][ T5824] usb 1-1: Manufacturer: syz [ 1806.217068][ T5824] usb 1-1: SerialNumber: syz [ 1806.234996][ T5824] usb 1-1: config 0 descriptor?? [ 1806.255982][ T5824] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1806.335887][T19041] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1806.351699][T24736] 8021q: VLANs not supported on wg0 [ 1806.517437][T19041] usb 6-1: Using ep0 maxpacket: 16 [ 1806.533332][T24737] netlink: 'syz.0.4964': attribute type 6 has an invalid length. [ 1806.547895][T19041] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1806.574903][ T5824] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1806.585804][T19041] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1806.602300][ T5824] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1806.614493][T19041] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1806.627402][T19041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.649045][T19041] usb 6-1: Product: syz [ 1806.653718][T19041] usb 6-1: Manufacturer: syz [ 1806.659985][T19041] usb 6-1: SerialNumber: syz [ 1807.294498][T19041] usb 6-1: cannot find UAC_HEADER [ 1807.359099][T19041] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1807.376210][T19041] usb 6-1: USB disconnect, device number 43 [ 1807.417521][T20483] udevd[20483]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1807.451330][T24749] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4972'. [ 1807.652273][T24753] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1807.659365][T24753] overlayfs: failed to set xattr on upper [ 1807.665575][T24753] overlayfs: ...falling back to redirect_dir=nofollow. [ 1807.672524][T24753] overlayfs: ...falling back to index=off. [ 1807.678457][T24753] overlayfs: ...falling back to uuid=null. [ 1807.719377][T24755] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1808.003472][T24765] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1808.010599][T24765] overlayfs: failed to set xattr on upper [ 1808.016482][T24765] overlayfs: ...falling back to redirect_dir=nofollow. [ 1808.023404][T24765] overlayfs: ...falling back to index=off. [ 1808.029351][T24765] overlayfs: ...falling back to uuid=null. [ 1808.246968][T24768] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4981'. [ 1808.604849][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1808.613283][T19041] usb 1-1: USB disconnect, device number 115 [ 1809.106975][T13243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1809.119737][T19334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1809.560915][T19041] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1809.579488][T19041] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1809.592319][T19041] quatech2 1-1:0.51: device disconnected [ 1810.419242][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1810.457187][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1810.492962][T24791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4990'. [ 1813.313666][T24789] lo speed is unknown, defaulting to 1000 [ 1813.517095][T24804] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1813.524172][T24804] overlayfs: failed to set xattr on upper [ 1813.529989][T24804] overlayfs: ...falling back to redirect_dir=nofollow. [ 1813.537047][T24804] overlayfs: ...falling back to index=off. [ 1813.543001][T24804] overlayfs: ...falling back to uuid=null. [ 1813.629109][T24811] loop6: detected capacity change from 0 to 524287999 [ 1814.109939][T10020] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1814.278676][T10020] usb 3-1: device descriptor read/64, error -71 [ 1814.554876][T10020] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1814.716922][T10020] usb 3-1: device descriptor read/64, error -71 [ 1814.871175][T10020] usb usb3-port1: attempt power cycle [ 1815.212796][T24702] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1815.231050][T24698] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1815.314954][T10020] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1815.433236][T10020] usb 3-1: device descriptor read/8, error -71 [ 1815.806879][T10020] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1815.870350][T10020] usb 3-1: device descriptor read/8, error -71 [ 1816.039560][T10020] usb usb3-port1: unable to enumerate USB device [ 1820.358945][T24871] netlink: 'syz.0.5015': attribute type 3 has an invalid length. [ 1820.388118][T24877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5014'. [ 1820.526904][T24877] bridge4: entered promiscuous mode [ 1820.660570][T24887] 9pnet_fd: Insufficient options for proto=fd [ 1820.693043][T19332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1821.077879][T24906] fuse: Bad value for 'fd' [ 1821.383960][ T79] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1821.712947][T23679] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1821.815675][T23679] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1821.832715][T23679] usb 4-1: USB disconnect, device number 113 [ 1822.760790][T24923] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5029'. [ 1822.905109][T11787] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 1823.139087][T11787] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1823.160483][T11787] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1823.180139][T11787] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1823.193554][T11787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.203565][T24938] 9pnet_fd: Insufficient options for proto=fd [ 1823.210716][T11787] usb 1-1: Product: syz [ 1823.443077][T11787] usb 1-1: Manufacturer: syz [ 1823.447838][T11787] usb 1-1: SerialNumber: syz [ 1824.577159][T24946] netlink: 596 bytes leftover after parsing attributes in process `syz.5.5037'. [ 1824.825178][T24954] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5041'. [ 1826.194800][T11787] usb 1-1: 0:2 : does not exist [ 1826.305321][T11787] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1826.402848][T11787] usb 1-1: USB disconnect, device number 116 [ 1826.847515][T24698] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1826.926097][T19332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1827.001173][T20483] udevd[20483]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1827.047629][T23679] Process accounting resumed [ 1827.122775][T11787] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 1827.533077][T11787] usb 1-1: device descriptor read/64, error -71 [ 1828.345380][T11787] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 1828.603067][T11787] usb 1-1: device descriptor read/64, error -71 [ 1829.306914][T11787] usb usb1-port1: attempt power cycle [ 1829.884757][T11787] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 1829.953174][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1829.960531][T11787] usb 1-1: device descriptor read/8, error -32 [ 1830.657484][T25029] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5059'. [ 1832.161039][T22642] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1832.999406][ T6840] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1833.029404][T25064] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1833.037110][ T6840] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1833.085782][T22642] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1833.114189][T22642] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.132022][T25066] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5070'. [ 1833.168208][T22642] usb 4-1: Product: syz [ 1833.172452][T22642] usb 4-1: Manufacturer: syz [ 1833.201294][T22642] usb 4-1: SerialNumber: syz [ 1833.226968][T22642] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1833.269506][T10020] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1833.582169][T25078] 8021q: VLANs not supported on wg0 [ 1833.779426][ T5824] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 1833.856023][T25083] dummy0: entered promiscuous mode [ 1833.884044][T22642] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1833.885111][T25085] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5067'. [ 1833.924792][T25083] dummy0: left promiscuous mode [ 1834.351491][ T5824] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1834.383484][ T5824] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1834.416171][ T5824] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1834.427201][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.449278][T10020] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1834.460610][ T5824] usb 3-1: Product: syz [ 1834.470926][ T5824] usb 3-1: Manufacturer: syz [ 1834.475591][ T5824] usb 3-1: SerialNumber: syz [ 1834.482055][T10020] ath9k_htc: Failed to initialize the device [ 1834.492237][T22642] usb 1-1: Using ep0 maxpacket: 8 [ 1834.503907][T22642] usb 1-1: config 51 has an invalid interface number: 123 but max is 0 [ 1834.513671][T22642] usb 1-1: config 51 has no interface number 0 [ 1834.529804][T22642] usb 1-1: config 51 interface 123 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1834.553003][T22642] usb 1-1: config 51 interface 123 has no altsetting 0 [ 1834.567378][T22642] usb 1-1: string descriptor 0 read error: -22 [ 1834.574290][T22642] usb 1-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=64.81 [ 1834.584315][T22642] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.600881][T10020] usb 4-1: ath9k_htc: USB layer deinitialized [ 1834.657373][T22642] usb 1-1: unsupported MDLM descriptors [ 1834.728583][T10020] usb 4-1: USB disconnect, device number 114 [ 1835.875111][T25096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5076'. [ 1837.153801][ T5824] usb 3-1: 0:2 : does not exist [ 1837.209421][ T5824] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1837.272341][T22642] usb 1-1: USB disconnect, device number 121 [ 1837.274256][ T5824] usb 3-1: USB disconnect, device number 6 [ 1837.357098][T20483] udevd[20483]: setting mode of /dev/bus/usb/003/006 to 020664 failed: No such file or directory [ 1837.366271][T25109] xt_hashlimit: invalid rate [ 1837.399584][T20483] udevd[20483]: setting owner of /dev/bus/usb/003/006 to uid=0, gid=0 failed: No such file or directory [ 1838.109073][T20483] udevd[20483]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1838.179825][ T5824] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1838.738112][ T5824] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1839.152904][T19334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1839.167798][T19332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1839.515999][ T5824] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1839.800555][ T5824] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1839.922234][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.930385][ T5824] usb 3-1: Product: syz [ 1839.951707][ T5824] usb 3-1: Manufacturer: syz [ 1839.960454][ T5824] usb 3-1: SerialNumber: syz [ 1840.058115][T25151] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5095'. [ 1841.284591][T25105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1841.295199][T25105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1841.624208][T25162] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1841.635897][T25162] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1841.932042][T10020] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1842.491592][T10020] usb 6-1: Using ep0 maxpacket: 8 [ 1842.526463][T10020] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1842.561417][T10020] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1842.602372][T10020] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1842.633290][T10020] usb 6-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 1842.710744][ T5824] usb 3-1: cannot find UAC_HEADER [ 1842.770731][T10020] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.784008][T10020] usb 6-1: Product: syz [ 1842.793143][T10020] usb 6-1: Manufacturer: syz [ 1842.798338][T10020] usb 6-1: SerialNumber: syz [ 1843.116391][T10020] ti_usb_3410_5052 6-1:1.0: TI USB 3410 1 port adapter converter detected [ 1843.383748][ T5824] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1843.465109][ T5824] usb 3-1: USB disconnect, device number 7 [ 1843.558344][T20483] udevd[20483]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1843.614619][T25177] loop2: detected capacity change from 0 to 1 [ 1843.635626][T25177] ldm_validate_privheads(): Disk read failed. [ 1843.652158][T25177] Dev loop2: unable to read RDB block 1 [ 1843.659077][T25177] loop2: AHDI p2 p3 [ 1843.663149][T25177] loop2: partition table partially beyond EOD, truncated [ 1843.676009][T25177] loop2: p3 start 335544320 is beyond EOD, truncated [ 1843.843976][T25185] loop6: detected capacity change from 0 to 7 [ 1843.853586][T20483] Dev loop6: unable to read RDB block 7 [ 1843.862890][T20483] loop6: AHDI p1 p2 p3 p4 [ 1843.868376][T20483] loop6: partition table partially beyond EOD, truncated [ 1843.876368][T20483] loop6: p1 start 926365495 is beyond EOD, truncated [ 1843.886728][T20483] loop6: p2 size 47 extends beyond EOD, truncated [ 1843.920880][T25187] netlink: 'syz.4.5107': attribute type 2 has an invalid length. [ 1843.931907][T20483] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1844.038311][T25185] Dev loop6: unable to read RDB block 7 [ 1844.918366][T25185] loop6: AHDI p1 p2 p3 p4 [ 1844.922905][T25185] loop6: partition table partially beyond EOD, truncated [ 1844.933192][T23679] usb 6-1: USB disconnect, device number 44 [ 1844.943241][T25187] ave_0: entered promiscuous mode [ 1844.949376][T25185] loop6: p1 start 926365495 is beyond EOD, truncated [ 1844.956201][T25185] loop6: p2 size 47 extends beyond EOD, truncated [ 1845.037501][T25185] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1845.171322][T20483] udevd[20483]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1845.245254][T20483] udevd[20483]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1845.258937][T25202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5113'. [ 1845.280107][T25205] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5115'. [ 1845.310646][T19334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1845.315310][T25207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5113'. [ 1845.331521][T19332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1845.449433][T23679] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1845.522339][T25216] overlayfs: failed to resolve './file1': -2 [ 1845.630421][T23679] usb 3-1: Using ep0 maxpacket: 8 [ 1846.513513][T23679] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 1846.521726][T23679] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1846.532766][T23679] usb 3-1: config 6 has no interface number 0 [ 1846.539484][T23679] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1846.551162][T23679] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1846.562146][T23679] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1846.573402][T23679] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1846.589580][T23679] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1846.599202][T23679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.607318][T23679] usb 3-1: Product: syz [ 1846.614281][T23679] usb 3-1: Manufacturer: syz [ 1846.618932][T23679] usb 3-1: SerialNumber: syz [ 1846.636436][T25199] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1847.076762][T23679] hso 3-1:6.2: Failed to find BULK IN ep [ 1847.159661][T23679] usb 3-1: USB disconnect, device number 8 [ 1847.232310][T25235] FAULT_INJECTION: forcing a failure. [ 1847.232310][T25235] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.247059][T25235] CPU: 1 UID: 0 PID: 25235 Comm: syz.5.5125 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1847.247087][T25235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1847.247101][T25235] Call Trace: [ 1847.247109][T25235] [ 1847.247119][T25235] dump_stack_lvl+0x189/0x250 [ 1847.247147][T25235] ? __pfx____ratelimit+0x10/0x10 [ 1847.247180][T25235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1847.247204][T25235] ? __pfx__printk+0x10/0x10 [ 1847.247234][T25235] ? __pfx___might_resched+0x10/0x10 [ 1847.247258][T25235] ? fs_reclaim_acquire+0x7d/0x100 [ 1847.247283][T25235] should_fail_ex+0x414/0x560 [ 1847.247317][T25235] should_failslab+0xa8/0x100 [ 1847.247352][T25235] __kmalloc_noprof+0xcb/0x4f0 [ 1847.247380][T25235] ? tomoyo_encode+0x28b/0x550 [ 1847.247408][T25235] tomoyo_encode+0x28b/0x550 [ 1847.247443][T25235] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1847.247479][T25235] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1847.247510][T25235] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1847.247545][T25235] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1847.247594][T25235] ? __lock_acquire+0xab9/0xd20 [ 1847.247637][T25235] ? __fget_files+0x2a/0x420 [ 1847.247661][T25235] ? __fget_files+0x2a/0x420 [ 1847.247678][T25235] ? __fget_files+0x3a0/0x420 [ 1847.247696][T25235] ? __fget_files+0x2a/0x420 [ 1847.247720][T25235] security_file_ioctl+0xcb/0x2d0 [ 1847.247755][T25235] __se_sys_ioctl+0x47/0x170 [ 1847.247784][T25235] do_syscall_64+0xfa/0x3b0 [ 1847.247803][T25235] ? lockdep_hardirqs_on+0x9c/0x150 [ 1847.247834][T25235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.247855][T25235] ? clear_bhb_loop+0x60/0xb0 [ 1847.247880][T25235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.247909][T25235] RIP: 0033:0x7fdcabb8e929 [ 1847.247928][T25235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1847.247946][T25235] RSP: 002b:00007fdcac9c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1847.247969][T25235] RAX: ffffffffffffffda RBX: 00007fdcabdb5fa0 RCX: 00007fdcabb8e929 [ 1847.247984][T25235] RDX: 00002000000001c0 RSI: 00000000c0cc5616 RDI: 0000000000000003 [ 1847.247998][T25235] RBP: 00007fdcac9c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1847.248010][T25235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1847.248023][T25235] R13: 0000000000000000 R14: 00007fdcabdb5fa0 R15: 00007ffd0069e558 [ 1847.248056][T25235] [ 1847.248077][T25235] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1848.549550][T11785] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1848.761569][T25250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5129'. [ 1848.783790][T11785] usb 1-1: Using ep0 maxpacket: 32 [ 1848.791713][T11785] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1848.816007][T11785] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1848.824688][T11785] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1848.859013][T11785] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1848.868029][T11785] usb 1-1: config 1 has no interface number 0 [ 1848.908257][T11785] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1848.942606][T11785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.964238][T25253] loop9: detected capacity change from 0 to 7 [ 1848.971172][T25253] buffer_io_error: 9 callbacks suppressed [ 1848.971190][T25253] Buffer I/O error on dev loop9, logical block 0, async page read [ 1848.985409][T25253] Buffer I/O error on dev loop9, logical block 0, async page read [ 1848.998275][T25253] Buffer I/O error on dev loop9, logical block 0, async page read [ 1849.042735][T11785] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1849.050694][T25253] Buffer I/O error on dev loop9, logical block 0, async page read [ 1849.684018][T25253] Buffer I/O error on dev loop9, logical block 0, async page read [ 1849.703475][T11785] snd_usb_pod 1-1:1.1: set_interface failed [ 1849.718358][T25253] Buffer I/O error on dev loop9, logical block 0, async page read [ 1849.728672][T11785] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1849.745488][T25253] Buffer I/O error on dev loop9, logical block 0, async page read [ 1849.746956][T11785] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1849.763938][T25253] ldm_validate_partition_table(): Disk read failed. [ 1849.776147][T25253] Buffer I/O error on dev loop9, logical block 0, async page read [ 1849.787803][T11785] usb 1-1: USB disconnect, device number 122 [ 1849.808315][T25253] Buffer I/O error on dev loop9, logical block 0, async page read [ 1849.835773][T25253] Buffer I/O error on dev loop9, logical block 0, async page read [ 1849.862805][T25253] Dev loop9: unable to read RDB block 0 [ 1849.881455][T25253] loop9: unable to read partition table [ 1849.897716][T25253] loop9: partition table beyond EOD, truncated [ 1849.904011][T25253] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1849.904011][T25253] ) failed (rc=-5) [ 1850.309486][T25269] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1851.478217][T19334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1851.778900][T25297] overlay: Unknown parameter '/dev/cpu/#/msr' [ 1852.297348][T25307] netlink: 596 bytes leftover after parsing attributes in process `syz.3.5146'. [ 1853.464014][T25319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5151'. [ 1853.624197][T25322] overlayfs: failed to clone upperpath [ 1856.989113][T19334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1859.625417][T25350] netlink: 'syz.4.5159': attribute type 10 has an invalid length. [ 1860.355042][T25350] team0: Cannot enslave team device to itself [ 1862.957107][T25379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5166'. [ 1863.127786][T13243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1863.165953][T25378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5167'. [ 1863.305810][T25381] input: syz0 as /devices/virtual/input/input108 [ 1863.449127][T25381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1865.065090][T25382] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1865.150843][ T6840] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1867.437413][T25422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5180'. [ 1868.647334][T24698] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1868.814301][T25433] xt_ecn: cannot match TCP bits for non-tcp packets [ 1870.231661][T25445] FAULT_INJECTION: forcing a failure. [ 1870.231661][T25445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1870.251521][T25445] CPU: 1 UID: 0 PID: 25445 Comm: syz.5.5185 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1870.251551][T25445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1870.251565][T25445] Call Trace: [ 1870.251574][T25445] [ 1870.251584][T25445] dump_stack_lvl+0x189/0x250 [ 1870.251615][T25445] ? __pfx____ratelimit+0x10/0x10 [ 1870.251648][T25445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1870.251673][T25445] ? __pfx__printk+0x10/0x10 [ 1870.251715][T25445] should_fail_ex+0x414/0x560 [ 1870.251751][T25445] _copy_to_user+0x31/0xb0 [ 1870.251778][T25445] simple_read_from_buffer+0xe1/0x170 [ 1870.251815][T25445] proc_fail_nth_read+0x1df/0x250 [ 1870.251842][T25445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1870.251868][T25445] ? rw_verify_area+0x258/0x650 [ 1870.251895][T25445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1870.251918][T25445] vfs_read+0x200/0x980 [ 1870.251952][T25445] ? __pfx___mutex_lock+0x10/0x10 [ 1870.251974][T25445] ? __pfx_vfs_read+0x10/0x10 [ 1870.252004][T25445] ? __fget_files+0x2a/0x420 [ 1870.252029][T25445] ? __fget_files+0x3a0/0x420 [ 1870.252047][T25445] ? __fget_files+0x2a/0x420 [ 1870.252077][T25445] ksys_read+0x145/0x250 [ 1870.252104][T25445] ? __fget_files+0x3a0/0x420 [ 1870.252124][T25445] ? __pfx_ksys_read+0x10/0x10 [ 1870.252158][T25445] ? do_syscall_64+0xbe/0x3b0 [ 1870.252184][T25445] do_syscall_64+0xfa/0x3b0 [ 1870.252203][T25445] ? lockdep_hardirqs_on+0x9c/0x150 [ 1870.252234][T25445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1870.252255][T25445] ? clear_bhb_loop+0x60/0xb0 [ 1870.252281][T25445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1870.252302][T25445] RIP: 0033:0x7fdcabb8d33c [ 1870.252321][T25445] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1870.252340][T25445] RSP: 002b:00007fdcac9c1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1870.252363][T25445] RAX: ffffffffffffffda RBX: 00007fdcabdb5fa0 RCX: 00007fdcabb8d33c [ 1870.252380][T25445] RDX: 000000000000000f RSI: 00007fdcac9c10a0 RDI: 0000000000000004 [ 1870.252393][T25445] RBP: 00007fdcac9c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1870.252407][T25445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1870.252420][T25445] R13: 0000000000000000 R14: 00007fdcabdb5fa0 R15: 00007ffd0069e558 [ 1870.252462][T25445] [ 1871.501644][T24698] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1872.132192][T10020] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1872.343694][T10020] usb 4-1: Using ep0 maxpacket: 16 [ 1872.381120][T10020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1872.392290][T10020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1872.435266][T10020] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1872.446421][T25475] loop8: detected capacity change from 0 to 16384 [ 1872.450785][T10020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.479174][T10020] usb 4-1: config 0 descriptor?? [ 1872.526096][T25475] loop8: detected capacity change from 16384 to 16383 [ 1873.157832][T25465] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5189'. [ 1873.650608][T10020] usbhid 4-1:0.0: can't add hid device: -71 [ 1873.673310][T10020] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1873.727955][T10020] usb 4-1: USB disconnect, device number 115 [ 1873.893670][T25490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1874.811854][T24698] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1876.099733][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1877.056274][T25503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5200'. [ 1877.482240][ T79] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1877.563229][T25508] loop2: detected capacity change from 0 to 7 [ 1877.608444][T25508] loop2: [POWERTEC] p1 p2 p3 [ 1877.637348][T25508] loop2: p1 start 1768123251 is beyond EOD, truncated [ 1877.644153][T25508] loop2: p2 start 1700867426 is beyond EOD, truncated [ 1877.699585][T25508] loop2: p3 start 2735865856 is beyond EOD, truncated [ 1877.735403][T25513] netlink: 596 bytes leftover after parsing attributes in process `syz.3.5205'. [ 1877.853526][T25520] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5208'. [ 1877.968219][T23679] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1877.987861][T19041] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1879.067341][T19041] usb 1-1: Using ep0 maxpacket: 16 [ 1880.218611][T19041] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1880.232662][T19041] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1880.246797][T19041] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1880.267889][T19041] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1880.283540][T19041] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1880.297156][ T30] audit: type=1326 audit(1752434735.795:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25535 comm="syz.4.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3282b8e929 code=0x7ffc0000 [ 1880.319805][T23679] usb 3-1: Using ep0 maxpacket: 32 [ 1880.326290][T23679] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1880.337488][T23679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1880.381337][T19041] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1880.392331][ T30] audit: type=1326 audit(1752434735.813:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25535 comm="syz.4.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3282b8e929 code=0x7ffc0000 [ 1880.417672][T23679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1880.428177][T19041] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1880.469394][ T79] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1880.480529][T19041] usb 1-1: Manufacturer: syz [ 1880.495121][T23679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1880.524062][ T30] audit: type=1326 audit(1752434735.832:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25535 comm="syz.4.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f3282b8e929 code=0x7ffc0000 [ 1880.563132][T23679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1880.579849][T19041] usb 1-1: config 0 descriptor?? [ 1880.622160][T23679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1880.644296][T19041] usb 1-1: can't set config #0, error -71 [ 1880.675685][ T30] audit: type=1326 audit(1752434735.832:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25535 comm="syz.4.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3282b8e929 code=0x7ffc0000 [ 1880.754774][T23679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1880.851890][T19041] usb 1-1: USB disconnect, device number 123 [ 1880.892763][T23679] usb 3-1: unable to read config index 3 descriptor/start: -71 [ 1880.913861][ T30] audit: type=1326 audit(1752434735.832:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25535 comm="syz.4.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3282b8e929 code=0x7ffc0000 [ 1880.976836][T23679] usb 3-1: can't read configurations, error -71 [ 1881.128660][ T30] audit: type=1326 audit(1752434735.832:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25535 comm="syz.4.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3282b8e929 code=0x7ffc0000 [ 1881.329821][ T30] audit: type=1326 audit(1752434735.832:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25535 comm="syz.4.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3282b8e929 code=0x7ffc0000 [ 1881.434670][T25552] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5220'. [ 1883.838879][T24698] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1883.881867][ T30] audit: type=1326 audit(1752434735.832:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25535 comm="syz.4.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3282b8e929 code=0x7ffc0000 [ 1883.890542][T25561] netlink: 596 bytes leftover after parsing attributes in process `syz.0.5223'. [ 1883.949219][ T30] audit: type=1326 audit(1752434735.851:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25535 comm="syz.4.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f3282b8e929 code=0x7ffc0000 [ 1883.974463][ T30] audit: type=1326 audit(1752434735.851:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25535 comm="syz.4.5214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3282b8e929 code=0x7ffc0000 [ 1884.226669][T25571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5226'. [ 1884.283352][T25572] loop9: detected capacity change from 0 to 7 [ 1884.322820][T25572] buffer_io_error: 9 callbacks suppressed [ 1884.322839][T25572] Buffer I/O error on dev loop9, logical block 0, async page read [ 1884.370553][T25572] Buffer I/O error on dev loop9, logical block 0, async page read [ 1884.405869][T25572] Buffer I/O error on dev loop9, logical block 0, async page read [ 1884.465284][T25576] netlink: 'syz.0.5227': attribute type 16 has an invalid length. [ 1884.479090][T25572] Buffer I/O error on dev loop9, logical block 0, async page read [ 1884.492660][T25572] Buffer I/O error on dev loop9, logical block 0, async page read [ 1884.507223][T25576] netlink: 'syz.0.5227': attribute type 17 has an invalid length. [ 1884.556149][T25572] Buffer I/O error on dev loop9, logical block 0, async page read [ 1884.576695][T25580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5227'. [ 1884.604741][T25572] Buffer I/O error on dev loop9, logical block 0, async page read [ 1884.613555][T25572] ldm_validate_partition_table(): Disk read failed. [ 1884.641191][T25572] Buffer I/O error on dev loop9, logical block 0, async page read [ 1884.664840][T25572] Buffer I/O error on dev loop9, logical block 0, async page read [ 1884.706536][T25572] Buffer I/O error on dev loop9, logical block 0, async page read [ 1884.736900][T25572] Dev loop9: unable to read RDB block 0 [ 1884.754049][T25572] loop9: unable to read partition table [ 1884.868954][T25572] loop9: partition table beyond EOD, truncated [ 1884.879612][T25572] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1884.879612][T25572] ) failed (rc=-5) [ 1886.284185][T23679] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1886.358275][T13243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1886.473136][T23679] usb 6-1: Using ep0 maxpacket: 32 [ 1886.600844][T25605] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5238'. [ 1886.967367][T23679] usb 6-1: config 2 has an invalid interface number: 226 but max is 3 [ 1886.976716][T23679] usb 6-1: config 2 has an invalid interface number: 249 but max is 3 [ 1887.012417][T23679] usb 6-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 1887.065886][T23679] usb 6-1: config 2 has an invalid interface number: 9 but max is 3 [ 1887.089417][T23679] usb 6-1: config 2 has an invalid interface number: 35 but max is 3 [ 1887.100524][T23679] usb 6-1: config 2 has an invalid interface number: 33 but max is 3 [ 1887.113738][T23679] usb 6-1: config 2 has 5 interfaces, different from the descriptor's value: 4 [ 1887.129649][T23679] usb 6-1: config 2 has no interface number 0 [ 1887.135901][T23679] usb 6-1: config 2 has no interface number 1 [ 1887.152898][T23679] usb 6-1: config 2 has no interface number 2 [ 1887.173300][T23679] usb 6-1: config 2 has no interface number 3 [ 1887.186209][T23679] usb 6-1: config 2 has no interface number 4 [ 1887.202271][T23679] usb 6-1: config 2 interface 226 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 1887.224699][T23679] usb 6-1: too many endpoints for config 2 interface 249 altsetting 0: 208, using maximum allowed: 30 [ 1887.236257][T23679] usb 6-1: config 2 interface 249 altsetting 0 has an endpoint descriptor with address 0x4D, changing to 0xD [ 1887.248275][T23679] usb 6-1: config 2 interface 249 altsetting 0 endpoint 0xD has an invalid bInterval 204, changing to 7 [ 1887.259766][T23679] usb 6-1: config 2 interface 249 altsetting 0 endpoint 0xD has invalid maxpacket 17548, setting to 1024 [ 1887.384013][T23679] usb 6-1: config 2 interface 249 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1887.420491][T23679] usb 6-1: config 2 interface 249 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1887.446335][T23679] usb 6-1: config 2 interface 249 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1887.487381][T23679] usb 6-1: config 2 interface 249 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1887.505143][T23679] usb 6-1: config 2 interface 249 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1887.533243][T23679] usb 6-1: config 2 interface 249 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1887.559366][T23679] usb 6-1: config 2 interface 249 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1887.580111][T23679] usb 6-1: config 2 interface 249 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 1887.633306][T23679] usb 6-1: config 2 interface 249 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1887.660020][T23679] usb 6-1: config 2 interface 249 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 1887.908946][T23679] usb 6-1: config 2 interface 249 altsetting 0 has 16 endpoint descriptors, different from the interface descriptor's value: 208 [ 1888.186873][T23679] usb 6-1: config 2 interface 9 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1888.292495][T23679] usb 6-1: config 2 interface 9 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 1888.313896][T23679] usb 6-1: config 2 interface 35 altsetting 36 has a duplicate endpoint with address 0x4, skipping [ 1888.367537][T23679] usb 6-1: config 2 interface 35 altsetting 36 has an invalid descriptor for endpoint zero, skipping [ 1888.407698][T23679] usb 6-1: config 2 interface 35 altsetting 36 has a duplicate endpoint with address 0x1, skipping [ 1888.442203][T23679] usb 6-1: config 2 interface 35 altsetting 36 has a duplicate endpoint with address 0xE, skipping [ 1888.487836][T23679] usb 6-1: config 2 interface 35 altsetting 36 has a duplicate endpoint with address 0x6, skipping [ 1888.528494][T23679] usb 6-1: config 2 interface 33 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1888.579908][T23679] usb 6-1: config 2 interface 33 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 1888.630407][T23679] usb 6-1: config 2 interface 226 has no altsetting 0 [ 1888.666038][T23679] usb 6-1: config 2 interface 9 has no altsetting 0 [ 1888.708478][T23679] usb 6-1: config 2 interface 35 has no altsetting 0 [ 1888.778558][T23679] usb 6-1: string descriptor 0 read error: -71 [ 1888.816355][T23679] usb 6-1: Dual-Role OTG device on HNP port [ 1888.822778][T23679] usb 6-1: can't set HNP mode: -71 [ 1889.244076][T23679] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 1889.481226][T23679] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1889.575587][T19041] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 1889.813229][T13243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1889.867816][T23679] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1889.911280][T23679] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1889.935086][T23679] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.967183][T23679] usb 6-1: Product: syz [ 1890.095623][T23679] usb 6-1: Manufacturer: syz [ 1890.096842][T19041] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1890.115079][T23679] usb 6-1: SerialNumber: syz [ 1890.121575][T19041] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1890.133687][T19041] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1890.143805][T19041] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.151909][T19041] usb 1-1: Product: syz [ 1890.156722][T19041] usb 1-1: Manufacturer: syz [ 1890.161876][T19041] usb 1-1: SerialNumber: syz [ 1890.260943][T11785] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1890.301139][T11785] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1890.624714][T11785] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 1890.664835][T25654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5253'. [ 1890.794059][T11785] usb 4-1: device descriptor read/64, error -71 [ 1890.987481][T23679] usb 6-1: 0:2 : does not exist [ 1891.027854][T23679] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1891.052313][T11785] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 1891.138426][T23679] usb 6-1: USB disconnect, device number 46 [ 1891.262239][T25672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1891.300849][T25672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1892.004996][T25671] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1892.016560][T25671] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1892.241540][T11785] usb 4-1: device descriptor read/64, error -71 [ 1892.431652][T11785] usb usb4-port1: attempt power cycle [ 1892.520784][T19332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1893.751704][T11785] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 1894.764546][T11785] usb 4-1: device descriptor read/8, error -71 [ 1896.046598][T13248] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1897.252534][T19041] usb 1-1: cannot find UAC_HEADER [ 1897.340293][T19041] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1897.397561][T25688] IPv6: addrconf: prefix option has invalid lifetime [ 1897.442955][T25469] udevd[25469]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1897.482676][T25699] lo speed is unknown, defaulting to 1000 [ 1897.505404][T25443] udevd[25443]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1897.678761][T19041] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1897.767372][T23679] lo speed is unknown, defaulting to 1000 [ 1897.823988][T23679] usb 1-1: USB disconnect, device number 124 [ 1898.080568][T25711] netlink: 140 bytes leftover after parsing attributes in process `syz.5.5273'. [ 1898.135673][T25711] netlink: 140 bytes leftover after parsing attributes in process `syz.5.5273'. [ 1898.697183][ T6840] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1898.774570][ T10] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1899.162020][T25729] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5278'. [ 1899.275984][T25735] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5281'. [ 1899.548712][ T10] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 1899.997387][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1900.019716][T25746] delete_channel: no stack [ 1900.142557][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1900.440240][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1900.466543][T25740] vivid-000: disconnect [ 1900.479050][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.487625][ T10] usb 6-1: Product: syz [ 1900.590860][T25738] vivid-000: reconnect [ 1900.630735][ T10] usb 6-1: Manufacturer: syz [ 1900.664003][ T10] usb 6-1: SerialNumber: syz [ 1901.012233][T25758] loop9: detected capacity change from 0 to 7 [ 1901.022317][T25469] Dev loop9: unable to read RDB block 7 [ 1901.034897][T19041] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1901.060691][T25469] loop9: unable to read partition table [ 1901.070553][T25469] loop9: partition table beyond EOD, truncated [ 1901.126482][T25758] Dev loop9: unable to read RDB block 7 [ 1901.137682][T25758] loop9: unable to read partition table [ 1901.143969][T25758] loop9: partition table beyond EOD, truncated [ 1901.153771][T25758] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1901.227580][T19041] usb 1-1: Using ep0 maxpacket: 32 [ 1901.878948][T19041] usb 1-1: config 0 has an invalid interface number: 42 but max is 0 [ 1901.887138][T19041] usb 1-1: config 0 has no interface number 0 [ 1901.913697][T19041] usb 1-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=42.27 [ 1901.932463][T19041] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.940844][T19041] usb 1-1: Product: syz [ 1901.945813][ T10] usb 6-1: 0:2 : does not exist [ 1901.951423][T19041] usb 1-1: Manufacturer: syz [ 1901.959531][T19041] usb 1-1: SerialNumber: syz [ 1901.967737][ T10] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1902.002888][T19041] usb 1-1: config 0 descriptor?? [ 1902.036674][ T10] usb 6-1: USB disconnect, device number 47 [ 1902.093255][T13243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1902.403119][T25780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5285'. [ 1903.578934][T25783] misc userio: No port type given on /dev/userio [ 1904.036124][T25443] udevd[25443]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1904.071386][ T10] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1904.415086][ T10] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1904.436905][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1904.456450][ T10] usb 6-1: config 0 descriptor?? [ 1904.734719][T25796] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1904.754131][T25796] [ 1904.756516][T25796] ============================================ [ 1904.762685][T25796] WARNING: possible recursive locking detected [ 1904.768863][T25796] 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 Not tainted [ 1904.775994][T25796] -------------------------------------------- [ 1904.782254][T25796] syz.3.5299/25796 is trying to acquire lock: [ 1904.788342][T25796] ffff888054ab4d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1a20 [ 1904.799372][T25796] [ 1904.799372][T25796] but task is already holding lock: [ 1904.806755][T25796] ffff888054ab4d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x1990 [ 1904.816643][T25796] and the lock comparison function returns 0: [ 1904.822733][T25796] [ 1904.822733][T25796] other info that might help us debug this: [ 1904.830805][T25796] Possible unsafe locking scenario: [ 1904.830805][T25796] [ 1904.838294][T25796] CPU0 [ 1904.841689][T25796] ---- [ 1904.844991][T25796] lock(&dev_instance_lock_key#20); [ 1904.850314][T25796] lock(&dev_instance_lock_key#20); [ 1904.855628][T25796] [ 1904.855628][T25796] *** DEADLOCK *** [ 1904.855628][T25796] [ 1904.863882][T25796] May be due to missing lock nesting notation [ 1904.863882][T25796] [ 1904.872218][T25796] 2 locks held by syz.3.5299/25796: [ 1904.877427][T25796] #0: ffffffff8f50b708 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x1990 [ 1904.886438][T25796] #1: ffff888054ab4d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x1990 [ 1904.896745][T25796] [ 1904.896745][T25796] stack backtrace: [ 1904.902667][T25796] CPU: 1 UID: 0 PID: 25796 Comm: syz.3.5299 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1904.902698][T25796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1904.902709][T25796] Call Trace: [ 1904.902717][T25796] [ 1904.902726][T25796] dump_stack_lvl+0x189/0x250 [ 1904.902750][T25796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1904.902774][T25796] ? __pfx__printk+0x10/0x10 [ 1904.902801][T25796] ? print_lock_name+0xde/0x100 [ 1904.902827][T25796] print_deadlock_bug+0x28b/0x2a0 [ 1904.902851][T25796] validate_chain+0x1a3f/0x2140 [ 1904.902884][T25796] ? is_bpf_text_address+0x292/0x2b0 [ 1904.902903][T25796] ? is_bpf_text_address+0x26/0x2b0 [ 1904.902930][T25796] __lock_acquire+0xab9/0xd20 [ 1904.902952][T25796] ? __netdev_update_features+0xcb1/0x1a20 [ 1904.902977][T25796] lock_acquire+0x120/0x360 [ 1904.902995][T25796] ? __netdev_update_features+0xcb1/0x1a20 [ 1904.903020][T25796] __mutex_lock+0x182/0xe80 [ 1904.903033][T25796] ? __netdev_update_features+0xcb1/0x1a20 [ 1904.903058][T25796] ? kasan_save_track+0x4f/0x80 [ 1904.903084][T25796] ? kasan_save_free_info+0x46/0x50 [ 1904.903104][T25796] ? __kasan_slab_free+0x62/0x70 [ 1904.903128][T25796] ? kmem_cache_free+0x18f/0x400 [ 1904.903152][T25796] ? netlink_broadcast_filtered+0x103e/0x1140 [ 1904.903167][T25796] ? ethnl_multicast+0xb6/0x100 [ 1904.903183][T25796] ? ethnl_default_notify+0x7c0/0x990 [ 1904.903204][T25796] ? ethnl_netdev_event+0xe2/0x160 [ 1904.903229][T25796] ? notifier_call_chain+0x1b6/0x3e0 [ 1904.903249][T25796] ? netdev_features_change+0x85/0xc0 [ 1904.903267][T25796] ? dev_ethtool+0x1520/0x1990 [ 1904.903291][T25796] ? sock_do_ioctl+0x22c/0x300 [ 1904.903311][T25796] ? __netdev_update_features+0xcb1/0x1a20 [ 1904.903330][T25796] ? __se_sys_ioctl+0xf9/0x170 [ 1904.903350][T25796] ? do_syscall_64+0xfa/0x3b0 [ 1904.903370][T25796] ? __pfx___mutex_lock+0x10/0x10 [ 1904.903399][T25796] __netdev_update_features+0xcb1/0x1a20 [ 1904.903432][T25796] ? __pfx___netdev_update_features+0x10/0x10 [ 1904.903454][T25796] ? netlink_broadcast_filtered+0x103e/0x1140 [ 1904.903469][T25796] ? kmem_cache_free+0x18f/0x400 [ 1904.903489][T25796] ? cfg80211_netdev_notifier_call+0x1ea/0x13c0 [ 1904.903516][T25796] ? consume_skb+0xce/0xf0 [ 1904.903539][T25796] ? netlink_broadcast_filtered+0x10c8/0x1140 [ 1904.903560][T25796] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 1904.903588][T25796] ? __lock_acquire+0xab9/0xd20 [ 1904.903604][T25796] ? do_raw_spin_lock+0x121/0x290 [ 1904.903624][T25796] netdev_update_features+0x6d/0xe0 [ 1904.903639][T25796] ? __pfx_netdev_update_features+0x10/0x10 [ 1904.903667][T25796] macsec_notify+0x2f5/0x660 [ 1904.903700][T25796] ? __pfx_macsec_notify+0x10/0x10 [ 1904.903726][T25796] notifier_call_chain+0x1b6/0x3e0 [ 1904.903749][T25796] netdev_features_change+0x85/0xc0 [ 1904.903763][T25796] ? __pfx_netdev_features_change+0x10/0x10 [ 1904.903777][T25796] ? security_capable+0x7e/0x2e0 [ 1904.903799][T25796] dev_ethtool+0x1520/0x1990 [ 1904.903832][T25796] ? __pfx_dev_ethtool+0x10/0x10 [ 1904.903865][T25796] ? dev_load+0x21/0x1f0 [ 1904.903886][T25796] dev_ioctl+0x392/0x1150 [ 1904.903902][T25796] sock_do_ioctl+0x22c/0x300 [ 1904.903924][T25796] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1904.903949][T25796] ? __lock_acquire+0xab9/0xd20 [ 1904.903970][T25796] ? __asan_memset+0x22/0x50 [ 1904.903992][T25796] ? smack_file_ioctl+0x24a/0x340 [ 1904.904021][T25796] sock_ioctl+0x576/0x790 [ 1904.904049][T25796] ? __pfx_sock_ioctl+0x10/0x10 [ 1904.904096][T25796] ? __fget_files+0x2a/0x420 [ 1904.904116][T25796] ? __fget_files+0x3a0/0x420 [ 1904.904135][T25796] ? __fget_files+0x2a/0x420 [ 1904.904154][T25796] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1904.904173][T25796] ? __pfx_sock_ioctl+0x10/0x10 [ 1904.904201][T25796] __se_sys_ioctl+0xf9/0x170 [ 1904.904220][T25796] do_syscall_64+0xfa/0x3b0 [ 1904.904233][T25796] ? lockdep_hardirqs_on+0x9c/0x150 [ 1904.904259][T25796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.904281][T25796] ? clear_bhb_loop+0x60/0xb0 [ 1904.904303][T25796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.904323][T25796] RIP: 0033:0x7f0aba98e929 [ 1904.904344][T25796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1904.904357][T25796] RSP: 002b:00007f0abb85a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1904.904372][T25796] RAX: ffffffffffffffda RBX: 00007f0ababb6160 RCX: 00007f0aba98e929 [ 1904.904384][T25796] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005 [ 1904.904394][T25796] RBP: 00007f0abaa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1904.904407][T25796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1904.904420][T25796] R13: 0000000000000000 R14: 00007f0ababb6160 R15: 00007ffdfa0937b8 [ 1904.904445][T25796] [ 1905.370594][ T79] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1905.434813][ T10] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1905.492744][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 1905.547355][T10020] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1905.552183][T19041] usb 1-1: Found UVC 0.00 device syz (1bcf:0b40) [ 1905.568883][ T10] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1905.583505][ T10] [drm] Initialized udl on minor 2 [ 1905.589539][T19041] usb 1-1: Forcing UVC version to 1.0a [ 1905.595084][T19041] usb 1-1: No valid video chain found. [ 1905.604255][ T10] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1905.614945][T19041] usb 1-1: USB disconnect, device number 125 [ 1905.626296][ T10] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1905.637578][T23679] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1905.649221][ T10] usb 6-1: USB disconnect, device number 48 [ 1905.655419][T23679] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1905.718303][T10020] usb 3-1: config index 0 descriptor too short (expected 1051, got 27) [ 1905.726611][T10020] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1905.734902][T10020] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1905.743956][T10020] usb 3-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 1905.754171][T10020] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1905.763111][T10020] usb 3-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 1905.772204][T10020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.780234][T10020] usb 3-1: Product: syz [ 1905.784497][T10020] usb 3-1: Manufacturer: syz [ 1905.789109][T10020] usb 3-1: SerialNumber: syz [ 1905.795196][T10020] usb 3-1: config 0 descriptor?? [ 1905.800820][T25792] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1907.704499][T10020] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 1907.720797][T10020] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 1907.734345][T10020] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 1907.742488][T10020] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 1907.752941][T10020] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1907.763503][T10020] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82 [ 1907.771547][T10020] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 1907.780666][T10020] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1907.790578][T10020] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 1907.798285][T10020] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 1907.807241][T10020] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1907.816644][T10020] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84 [ 1907.824793][T10020] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 1907.833924][T10020] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1907.845307][T10020] usb 3-1: USB disconnect, device number 11 [ 1907.859068][T10020] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1907.888541][T10020] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1907.902066][T10020] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1907.914719][T10020] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1907.924876][T10020] keyspan 3-1:0.0: device disconnected [ 1908.250391][T19332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1910.991708][T19332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1914.407797][T19332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration