last executing test programs: 11.686500683s ago: executing program 1 (id=912): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@resuid}, {@usrquota}, {@prjquota}, {@delalloc}], [{@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffff7}}]}, 0x1, 0xb93, &(0x7f00000017c0)="$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") r0 = syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x20000, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x6, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0xa0, 0xffff}, 0x8) sendmmsg$inet(r5, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}], 0x1, 0x4004000) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x202200, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x9bd0}}, './bus\x00'}) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000380)={0x0, 0x5}, &(0x7f00000003c0)=0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x6, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2000}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) shutdown(r9, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r9, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000300)={r8, 0x7}, 0x8) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x2220c0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@verity_require}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') lseek(r11, 0x1, 0x2) getdents(r11, 0x0, 0x48) 8.8843491s ago: executing program 1 (id=922): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=ANY=[@ANYRESOCT], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x19, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000340)={0x2, 0x4}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x11}, 0x4000000) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x80000003, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="61d0a33e243daf73d0f13fc6d000ffd68854afd92fbc3447eaf554fa967001681ace16357dbf15c4a92057a7f44d2199b52a980abb495dc45770e81ff3142a51f3941f6abba8d7220d9f9194c8bda8bd5eb9b1ce", 0x54}], 0x1, &(0x7f0000000180)=[@ip_retopts={{0xf4, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x6e, 0x1, 0x2, [{@multicast1, 0x3}]}, @timestamp_addr={0x44, 0x2c, 0x5c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x18}, 0xfffffa8b}, {@loopback}, {@private=0xa010101, 0x8}, {@empty, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @end, @cipso={0x86, 0x63, 0x1, [{0x6, 0xc, "5bb643aa70fc54e3eea2"}, {0x1, 0x2}, {0x2, 0x5, "23d75a"}, {0x1, 0x6, "22781743"}, {0x2, 0x10, "38d16afbba9b819cdcc924999c01"}, {0x0, 0x10, "27555bed5d720c61fd51a005bee1"}, {0x6, 0x9, "6461b40713f86a"}, {0x0, 0xf, "195ea003c98f3508c815478dea"}, {0x0, 0xc, "bb29ff760d2d6c2289d7"}]}, @timestamp_addr={0x44, 0x1c, 0xe0, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@empty, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @timestamp_prespec={0x44, 0x2c, 0x40, 0x3, 0xd, [{@rand_addr=0x64010102, 0xe}, {@empty, 0x5}, {@rand_addr=0x64010102, 0xa9}, {@dev={0xac, 0x14, 0x14, 0x26}}, {@multicast1, 0x1d}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x999}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x30, 0x0, 0x7, {[@generic={0x83, 0x12, "a8b3922cbd365fc98b67a8b6b9fca1fb"}, @timestamp={0x44, 0xc, 0xed, 0x0, 0x5, [0x5, 0x2]}, @noop, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @private=0xa010102, @remote}}}], 0x178}, 0x5) 7.96673163s ago: executing program 1 (id=924): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04"], 0x3b) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x10a00, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x5ef, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x7}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x1, 0x2}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0xaa}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.191574674s ago: executing program 3 (id=935): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map, 0x37, 0x0, 0x2, &(0x7f00000003c0)=[0x0], 0x1, 0x0, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) utimes(0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000880), &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000a00), &(0x7f00000006c0), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000880), &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000a00), &(0x7f00000006c0), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@cgroup=r4, 0xffffffffffffffff, 0x2c, 0x28, 0x0, @void, @void, @void, @value=r5, r1}, 0x20) syz_emit_ethernet(0x42, &(0x7f00000008c0)={@random="b0aa601b4690", @broadcast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @random="12a3e3104508", @private2={0xfc, 0x2, '\x00', 0x1}, @multicast, @private2={0xfc, 0x2, '\x00', 0x1}}}}}, &(0x7f0000000640)={0x1, 0x4, [0x30, 0x1e7, 0x47b, 0x4b5]}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0xfffffff9, 0x5, {{0x6, 0x4, 0x1, 0x1, 0x18, 0x68, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @loopback, {[@ra={0x94, 0x4, 0xc00e}]}}}}}) syz_io_uring_setup(0x44cd, &(0x7f0000000280)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100), &(0x7f0000000240)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8082, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x4018aee3, &(0x7f0000000380)={0x0, 0x1, 0xac9, 0xe}) (async) ioctl$FS_IOC_RESVSP(r7, 0x4018aee3, &(0x7f0000000380)={0x0, 0x1, 0xac9, 0xe}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4) bind$inet(r9, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) (async) bind$inet(r9, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) (async) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) 5.369158792s ago: executing program 3 (id=941): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, &(0x7f00000000c0), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="310300000000fbdbdf250b00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0xf8c2392b1b6f138c) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) write(r4, &(0x7f0000000180)="c63c78a00a71e850", 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xff, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 5.095682657s ago: executing program 4 (id=942): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001000000000000dbdf91a4dce23c", @ANYRES32=0x0, @ANYBLOB="15030000212000001c0012800b00010065727370616e00000c0002800800070000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x200648c5}, 0x8000002) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000040)={0x3, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x13}}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = getuid() sendmsg$nl_xfrm(r5, &(0x7f00000008c0)={&(0x7f0000000840), 0xc, &(0x7f0000000880)={&(0x7f00000018c0)=@newpolicy={0x12c, 0x13, 0x406, 0x70bd29, 0x25dfdbfd, {{@in6=@remote, @in=@broadcast, 0x4e21, 0x8001, 0x4e22, 0x6, 0xa, 0x20, 0xa0, 0x0, 0x0, r6}, {0x1, 0x40, 0x14e5, 0x5, 0x1, 0x2000, 0x10, 0x7818}, {0x8, 0x0, 0x7, 0x10001}, 0x7, 0x0, 0x0, 0x0, 0x2}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}, @sec_ctx={0x21, 0x8, {0x1d, 0x8, 0x0, 0x1, 0x15, "f8ca5192388365d84668605719ffe2bada1325a325"}}, @replay_esn_val={0x3c, 0x17, {0x8, 0x70bd26, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x6, [0x0, 0x4, 0xfb, 0x0, 0x5, 0x0, 0x4, 0xf5]}}, @mark={0xc, 0x15, {0x350759, 0x1000}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x24080000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) recvmmsg(r4, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000005040)=""/154, 0x9a}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000002d40)=""/4101, 0x1005}, {&(0x7f0000000640)=""/55, 0x37}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x10}], 0x5, 0x12002, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547e2db80000000000000002", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="0200090003000060009ba53886dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000680)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b2c16bd94d2da66059de81abfa15eeeae3b0ba38d8bb1bf032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f5533d3c58104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7866f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7abc231f8cde79b7a6c5aafe954b8ba37818e40c14b36f2d7c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1df7ffffff735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b82ceaeaae9b1713b5f2ee68e2b53d44bd84bf6960157e96bbb96b5e10d66c87e7a9a7d53c281d88ebb175a4dbb82130e6870980e47913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf355e5b91114052f8a398d8e10c96b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c58965c514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e24d192d67a1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb2200040000fc1e3865d17d128306d1b81884a934cb0000000000d367000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44b615ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f530043a6cd72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a673804220423f52ad8178b9fd04bff816e00000000000000000000000000000000000000000079aaf19bd1e18f582aac5b83d76bd57297512fdcdad18bcf2455bc80394d8f34e2ef84733038f4b6ef516d7baa99f24f2f100fc46aec9dc19b30fe9966b7ae563b6459d86fd3b4c7173f06387517e4189f3fb09c069e20220354b054f2391efe55a0cc7f738b3987ae033ceabddec65ec31f98c7e0858e8d411087889964b8fb3c31f74fa7b2e6e1c1d84a46d8be8afff1ac67eb2da30294d4a0f89978d4e2137319b6448da45bd00eb23aa5be1d566782b5a4aa291a854a4932bcbf472fd1175b521edb1763bb7dae4a124b0006e2ce4799519b3dbd3c0109b17fe2b4b87f6ad4b7176c9c1959669ef42cfce81fbc6dcdc7f9bde1a66c0b3cf9329bfecf0217bda1b72924ee9d90a3bd0be833f206244b5ba0648309018da5442ebd22bca0363183aae9d38f80638f52015cab5a8d772f9b92cb2f286783fa976f7d215136cae0b0b0539dc7dbd56035a69807514c732763f542f10401e65368b821b584fe2f82c94b2f5930246800000000000000000000000000000000000000c8ed77d8ac9f28a2e8f205900241ec8872fe3ecdf73abfc4024298a69649e17f3fe5ebba1e17f2f280e6d3f094cd3448700c5ee102b5d1b04f08ab2e5272990646eca26a62431e8c942ea2c0c621b4821eb5beceee6d53468852159452cf47aead473a8638a4d1ce2d4c6df1074e8cb3ec16149e6b4b7ec1a9aa1b63f41d08afd3d885b98330e25eedaaf5f361b2e81ce0c52ee84a2b340afdc59b177921e2f2a99132b82ed3291196038fe9a4f5a5dc734788c71bf46222d266a48628774c87b88bf3dcbea4574a87726345587e1e233fd4117063d183f477cc53c52a3fafcb998a96cf9f61cdd9ffa82d648880552ac506811accffc85ca34b262ed983d4645f4657522ed32b278891c26d5e70d41f9a5c8df8dc163fd84a81af0020a10fe53ce940d350d62b526f198620abdad179a273682175da1d9d82fde7eb9a45b566e78904238d00908b5876b4ebfca376d631b9b0caf3f1ef32ae87507aace4715efaf840ebda28e741a8b6b29eed5861168b4e1b3842f6db4443974dd0f0d4ceed9ca62fd2a839a8150335dc2b9640825b83c8bf4f931a51b093bf2dc84809af7c14f04b58d64e4f852bc49cf1126567e11f61774559bdbcc500000000000000000000000000eab10c8c592cb6f1ebccd9eb16c155a0666189eb16cea09f164363456645c9b7c168bc214615a7e94ff3d53f85c6396c42050f3205cef3009458f33949efa6a583d87795448b8b21ab6a7ca4bd8b0da30dee0af8b3a0f3cfd0ad9a8e7819b2057e2e5d8b453b6f743f8fc4dee677658958c4d4663ddcdfd0fc44e996665ab5586a4eb40a959fb0dababa05e776c29cf2443ad1d2fa0920288db88e645033ae1a4357078810d20bd93b8194214554c3f8c6efd61bc40000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001000000000000dbdf91a4dce23c", @ANYRES32=0x0, @ANYBLOB="15030000212000001c0012800b00010065727370616e00000c0002800800070000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x200648c5}, 0x8000002) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000040)={0x3, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x13}}) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) getuid() (async) sendmsg$nl_xfrm(r5, &(0x7f00000008c0)={&(0x7f0000000840), 0xc, &(0x7f0000000880)={&(0x7f00000018c0)=@newpolicy={0x12c, 0x13, 0x406, 0x70bd29, 0x25dfdbfd, {{@in6=@remote, @in=@broadcast, 0x4e21, 0x8001, 0x4e22, 0x6, 0xa, 0x20, 0xa0, 0x0, 0x0, r6}, {0x1, 0x40, 0x14e5, 0x5, 0x1, 0x2000, 0x10, 0x7818}, {0x8, 0x0, 0x7, 0x10001}, 0x7, 0x0, 0x0, 0x0, 0x2}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}, @sec_ctx={0x21, 0x8, {0x1d, 0x8, 0x0, 0x1, 0x15, "f8ca5192388365d84668605719ffe2bada1325a325"}}, @replay_esn_val={0x3c, 0x17, {0x8, 0x70bd26, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x6, [0x0, 0x4, 0xfb, 0x0, 0x5, 0x0, 0x4, 0xf5]}}, @mark={0xc, 0x15, {0x350759, 0x1000}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x24080000) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) (async) recvmmsg(r4, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000005040)=""/154, 0x9a}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000002d40)=""/4101, 0x1005}, {&(0x7f0000000640)=""/55, 0x37}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x10}], 0x5, 0x12002, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547e2db80000000000000002", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="0200090003000060009ba53886dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000680)=0x8) (async) 4.88657978s ago: executing program 0 (id=943): fanotify_init(0x200, 0x0) r0 = dup(0xffffffffffffffff) r1 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, 0x0, 0x5c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {}, [{0x2, 0x5}], {0x4, 0x6}, [], {0x20, 0x2}, {0x20, 0x7}}, 0x2c, 0x2) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) r5 = dup(r1) write$binfmt_elf64(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e00cd000000c8030000000000004000000000000000f605430000000000000001000500380046"], 0x78) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c0100001800210800000000000000001d01000008000e00", @ANYRES32=0x0, @ANYBLOB="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"], 0x17c}}, 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = io_uring_setup(0x3538, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1}) close(r7) clock_nanosleep(0x7, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) socket$netlink(0x10, 0x3, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x24840, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x2000000, &(0x7f0000000900)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@cache_fscache}, {@ignoreqv}, {@cache_mmap}, {@access_uid={'access', 0x3d, r9}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@dont_hash}]}}) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r10, 0xaf01, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) ioctl$BTRFS_IOC_RESIZE(r10, 0xc008af12, &(0x7f00000003c0)=ANY=[@ANYRES32=r10, @ANYBLOB="000000006d316341d2b0f9ef5cb637333730390aed8b87c188fdf4869d8fd8ee911f613535313631356d"]) 4.789731635s ago: executing program 1 (id=944): syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRES16=0x0], 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) 4.642764209s ago: executing program 3 (id=945): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000100)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp={0xd, 0x0, 0x0, 0x6, 0xfffc, 0x1000, 0x5, 0x92}}}}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x81, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f041}) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x1) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@ng={0x4, 0x6}, 0x2, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 4.551026639s ago: executing program 0 (id=947): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r3, 0x0, &(0x7f0000000180)="f1", 0x1, 0xfffffffffffffffd}) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getrusage(0xe31d3cf2295af082, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x3, 0x9, 0x7ffa}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a00000004000000cc0000000c00000000000000", @ANYRESOCT=r2, @ANYRES8=r8, @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="007bdeead776070000000000000000"], 0x50) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) syz_emit_ethernet(0x8d, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000573a00fc020000000000000000000000000001ff020000deb34300000000000000000000000101009078000000006000b29500003a00fe80000000000000000000000000001d20010000000000000000000000000001c6a7c1b7f4c336afd7f8125560197b57deb47ca03b382cac0987960076dc5f34ab03943a"], 0x0) recvmmsg(r9, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) r10 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r10, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES32=r0], 0x108}}], 0x2, 0xc040) 4.547420992s ago: executing program 4 (id=948): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=@newlink={0x34, 0x10, 0x603, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x20008040) 4.435832138s ago: executing program 2 (id=949): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001000), 0x581, 0x4000001f, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) write$dsp(r5, &(0x7f0000000200)='m', 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100)) r7 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r7, &(0x7f0000000200), 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40480, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r9, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x2}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r11 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r11, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/51, 0x33}], 0x1, 0x0, 0x0) 4.43530177s ago: executing program 3 (id=950): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x189042, 0x41) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) write$FUSE_CREATE_OPEN(r0, &(0x7f00000001c0)={0xa0, 0x0, 0x0, {{0x4, 0x1, 0x7, 0xfffffffffffffff7, 0x9, 0x8, {0x0, 0x8, 0x7, 0xfffffffffffffffa, 0x80000001, 0x4, 0x7fff, 0x80000001, 0x7, 0x8000, 0x7, 0x0, 0x0, 0x2, 0xfff}}}}, 0xa0) openat$dir(0xffffffffffffff9c, 0x0, 0xe2400, 0xa0) 4.434704668s ago: executing program 4 (id=951): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) (async) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_TIMEOUT(r2, 0x702, 0x7fffffffffffffff) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@local}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@host, 0x2}, @host, 0x0, 0x0, 0x62}) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 4.336629501s ago: executing program 3 (id=952): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0xad, &(0x7f0000000340)={@empty, @random="97c4864ef7a3", @void, {@generic={0x8906, "eb85713021442e1e01b816ed92b8f667fab4d9abce2297a2d8118753d514b78334cf78fc96d23a4cf5cf9fa472f2c8cbff3051793b241a7f89db7eb0fa21ff85ead7e78df12112df0dc6708bbc7bfef746d13d1264b5a62fad0ca6fdb988471874da9482305e521eac633e345471785ac50cd2390da0ffc078621d07304427ca19a57d91ee7ebdf92baae8ee3fdb0a7357a01c565c4a967be411a037c07b8f"}}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRESHEX=r2], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) (async) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000080)="e57bdcfe6f02bd17f694b8030c528070348b46a26fe1", 0x16}, {&(0x7f0000000240)="2b20c4be04742e4e5f9d645070d548550ad019a0e980ed97cc55b9d4472cc4001ca9abde60cff04fa122beab762a8a89eb3db8ed21105ed77a645ecf7076c00bd6818046a58f", 0x46}, {&(0x7f00000000c0)="f8ee08", 0x3}], 0x3) (async) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000080)="e57bdcfe6f02bd17f694b8030c528070348b46a26fe1", 0x16}, {&(0x7f0000000240)="2b20c4be04742e4e5f9d645070d548550ad019a0e980ed97cc55b9d4472cc4001ca9abde60cff04fa122beab762a8a89eb3db8ed21105ed77a645ecf7076c00bd6818046a58f", 0x46}, {&(0x7f00000000c0)="f8ee08", 0x3}], 0x3) syz_io_uring_setup(0x1868, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000003, 0xf, 0x80000002, 0x2}, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, 0x0) close(0x3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) (async) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x802, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x802, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)={0x120, 0x2d, 0xb, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @generic="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"]}, 0x120}}, 0x8000) 4.306580325s ago: executing program 4 (id=953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="bf", 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x63) r4 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r2, 0x1010000000000e1) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r1, 0xffffffff) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f2c0000000b0a01080000000000000000012300000900020073797a32000000080900010073797a300000000014000000020a"], 0xc4}, 0x1, 0x0, 0x0, 0x24008000}, 0x24008004) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r9, 0x40186f40, &(0x7f0000000200)={0xffffffff, 0x0, 0x0, 0x8, 'syz0\x00', 0x10002}) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000340)={0x0, 0x24, 0xfa00, {0x0, &(0x7f0000000580), 0x106, 0x6}}, 0x20) r11 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r11, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 2.683962433s ago: executing program 4 (id=954): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x1, '\x00', 0x0, r0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x8b, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setresuid(0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x6c2c, 0x80, 0x4000001}, &(0x7f0000000240)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x40, 0x1, {0x0, r5}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "cbbf09c473ef3ee5", "d62cb2759e70ad75c3b50ef30b007511", "0894cb4c", "2a6f9fea1f1bb653"}, 0x28) sendmsg$sock(r6, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[@txtime={{0x18, 0x11a, 0x3d, 0x94}}], 0x18}, 0x20008050) io_uring_enter(r2, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 2.643219714s ago: executing program 3 (id=955): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04"], 0x3b) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x10a00, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x5ef, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x7}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x1, 0x2}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0xaa}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.127176805s ago: executing program 2 (id=956): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000280)=@can, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/241}, {&(0x7f0000000100)=""/35}, {&(0x7f0000000480)=""/87}, {&(0x7f0000000500)=""/59}, {&(0x7f0000001a00)=""/4096}, {&(0x7f0000000540)=""/248}, {&(0x7f0000000640)=""/249}, {&(0x7f0000000740)=""/123}], 0x0, &(0x7f0000000840)=""/176}, 0x6037}], 0x5, 0x1822b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) (async) socket$inet6(0xa, 0x2, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x0) (rerun: 64) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="8f", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0xa00965, 0x2}) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r2, r2}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={'sha384\x00'}}) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r4}, 0x10) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000040)={'bridge_slave_1\x00', @ifru_map={0x2, 0x3, 0xfffc, 0x2, 0x9, 0x7}}) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r7 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffdf, 0x0, 0x4, 0xd5}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0xe, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}, 0x20) (async) sched_setscheduler(0x0, 0x2, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000000140)=""/82, &(0x7f0000000000)=0x52) (async, rerun: 32) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, &(0x7f0000000480)={0x80}) (async, rerun: 32) close(r8) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 2.066317352s ago: executing program 0 (id=957): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x10000) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80c000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") mkdir(0x0, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000240)=@v2={0x2, @aes256, 0x10, '\x00', @c}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x400000008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102396, 0x48) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)) mmap$dsp(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0xc, 0x20010, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a46ea826e7a3bb2"], 0x64}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091) 2.051387028s ago: executing program 0 (id=958): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000010000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002300)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000800000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4dd4f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6291965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69c584146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b861cceea3d0ecb22f9e176ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69239500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc06000000721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181070000005e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311669534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487117a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3d99e3568c51cd1eab8a26b232ac46bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d89f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ec1b6d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef0a96e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246bae0b04bec8e30b6772b8950f32e87beda060f9af2a0ccd4a8eab8e395ee3628eb976b7fff835e6c1bdc4a6e00acd0fe63ba84a5b21845db903b38c80148e6aa497dbf0e2baf938d3ecbd433527602d89f10aca419ff54e47354194f75e343d4c75227448530b0d8d59b9f94a3fa0ca9210177926c58ef46dcd09e79c343d35aa954d12f89410c47ac29c881f8a6bda8dd40df0d1e5881338d3f0000000000000069fef18df13c759e767d3442ae6598106496f42b73074bb80455df206e28473ec0dae8763915c3e04400ad44e9f3130e904062d204d385c026722a094251db1572d66e7a4917bba24c8c44e1cb19d94110669d3fbc17767ad564610b7d2c09631d3b32cf90000c521665e74c21633016fc30b9b4f6f70a3cf48aacdd4898e22aec823fe787c00b320e8dfa40875b61acb85c169d97b87213605ea89942564e47e0a8e9aa9bcf33cbcaca6b49d683c53f8638c38db976cf25df8c77dc8d7945c8501aa538558da44b1f876fa2c5df410d99090fe08085980955c043688f3db248502be863ed2a33181b7bd33f0db0e91ae05e91d318245bd15963b75ada40cb83cd1ee16ba0c90c06d69732701df53f6ddefed4755bfe69b811a0e03013ee99a9778acf6d93d23189c4dc4a76bbd401b38893b40dd0490ae0d5783d9e5da868f94eaa5b0c13bd8370265480e363c8ba57588a19fc742cc42779890d9c17b98998873fe0709cf142ab28937522a1cd0c65c8a8debca0afcb7438990cf130a43280f724f958894b70978abd6da3605b41cb45b3731d082771a65ca603ccd7dd3d49de3909e7f3b9a78f9448ab292bc50357f5477f7767"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111}}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003400)={0x2020}, 0x2020) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) socket$inet_tcp(0x2, 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffff7, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) 2.003450054s ago: executing program 2 (id=959): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) syz_emit_ethernet(0xae, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "fee9ff010ef5000000000000"}, {0x1, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r4, 0x7277, 0x0, 0x28, 0x0, 0x0) 1.607837995s ago: executing program 2 (id=960): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18, r4}) fcntl$setown(0xffffffffffffffff, 0x8, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001000370400", @ANYRES32=0x0, @ANYBLOB], 0x64}}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000640)={0x0, 0xfb, 0xee, 0x1, 0x9, "1deadf94d353e6e58e2c7bd39f0934ad", "8416e8f008d00414e8fa1d21a8dfd975c6f722dce0fa093576f56428f50f0b26b57d7d1689505c4e24952424471172f4721042e7fd168f44dd0ade758ce0e17618fb1c66532559422ab0e86f04d938756792747b4355d522d6bf4e3680ffcf29fac82a5157972c38dca2416c6b29993af45442949034a150315a2c18928acb42f94565ee631ca1e15e7959ebaaaafade6ec3ae0bade64c9fac1dbf3c0e7f8f9e6cb70636dbbace5fcdcdf1fcbaedc6b7bd6b11d68e3fe96a4a0ea270a89c0c45f4a39b7ad6ab71e78a404281d7df6cf1d3d0328300b51b84de"}, 0xee, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 1.560874206s ago: executing program 1 (id=961): socket$inet6(0xa, 0x2, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet6(0xa, 0x2, 0x0) read(r1, 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x503, 0x2, 0x0, 0xfbff, 0x42, "00d6e66202590837f1f2ba0c43179a317e6324"}) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) sendmmsg$inet6(r1, &(0x7f0000000f00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x9, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="140000000000000000000000000000000000000700000000"], 0x18}}], 0x1, 0x4) 492.952133ms ago: executing program 0 (id=962): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x189042, 0x41) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) write$FUSE_CREATE_OPEN(r0, &(0x7f00000001c0)={0xa0, 0x0, 0x0, {{0x4, 0x1, 0x7, 0xfffffffffffffff7, 0x9, 0x8, {0x0, 0x8, 0x7, 0xfffffffffffffffa, 0x80000001, 0x4, 0x7fff, 0x80000001, 0x7, 0x8000, 0x7, 0x0, 0x0, 0x2, 0xfff}}}}, 0xa0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0xe2400, 0xa0) 327.423819ms ago: executing program 4 (id=963): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x3, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x800, "81d1bcf45830950b8f865fb54ebab1b6de6b770d9f9cefb91dba2af583ef6220"}) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000080)=0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef437000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1135410}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x48289cbf, 0xfffffe01, 0x9, 0x3}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000810) r4 = io_uring_setup(0x78bc, &(0x7f0000000440)={0x0, 0x4f15, 0x0, 0x0, 0xfffffffe}) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, &(0x7f0000001fc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, {0x0, 0x1, 0x0, 0x0, 0x0}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYBLOB="20002bbd7000ffdbdf255900000008000300", @ANYRES32=r6, @ANYBLOB="396178bb147df8e688e67b80fbd0615e9c70c11314dfeddabbfa98d96372ecf11ef47cebe2b99f4369d47640404f7e1242a5458a02c704ca1459e56275bfcbea6e4c164e0000000004fbffffffffffffff0002c166e310548cb1b222d590694d197641eb08ec8f37d1ca4bb1a578e2410daf32445400a35001ddeb07a88b7d5693aec8aab3a60e13695020e486bc672feb35d1c67fbd64884197ca8e370ab03f28860ba4c1c41b11fed20f6f3d80c17f"], 0x1c}, 0x1, 0x0, 0x0, 0x6404c841}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x8}, 0x8) 327.051419ms ago: executing program 2 (id=964): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) 111.43686ms ago: executing program 1 (id=965): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@loopback, @private, 0x0}, &(0x7f0000000040)=0xc) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = accept4(r1, &(0x7f00000000c0)=@ieee802154={0x24, @short}, &(0x7f0000000140)=0x80, 0x80800) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000180)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000001c0)=0x28) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0x7) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000240)='+!:}\x00', &(0x7f0000000280)='syz0\x00', &(0x7f00000002c0)='syz0\x00', &(0x7f0000000300)='-(+}[%\x00', &(0x7f0000000340)='syz0\x00']}, &(0x7f0000000500)={[&(0x7f00000003c0)='-+\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='syz0\x00', &(0x7f0000000480)='/\x00', &(0x7f00000004c0)='\x00']}) r4 = openat$cgroup_ro(r1, &(0x7f0000000540)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000580)=0xffffffffffffffff) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000005c0)=@mmap={0xa, 0x1, 0x4, 0x800, 0x7, {0x0, 0x2710}, {0x5, 0xc, 0xb, 0xff, 0x83, 0xd, "aa45e344"}, 0x39, 0x1, {}, 0xcac, 0x0, r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x5, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @alu={0x7, 0x1, 0x0, 0x8, 0x2, 0xffffffffffffffff, 0xffffffffffffffff}]}, &(0x7f0000000680)='GPL\x00', 0x9d, 0xa6, &(0x7f00000006c0)=""/166, 0x41100, 0x7a, '\x00', r0, @fallback=0x22, r1, 0x8, &(0x7f0000000780)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0xe, 0x0, 0x7}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f0000000800)=[r1], 0x0, 0x10, 0x3}, 0x94) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000900)={0x0, 0x0, "4ed742ff31809156a97ca33a0d41c2c70e37015b15b965a9cf15b159d9e8cfa1ce689b5ce40812c1332419f3582fa2533958270b9f3ea1398333f80b0399f1c713c61a261fb83c6f693902239abf10ebed1fa4d5f50dde6ab771938f2c4c55fcafb7a34e0a596366b0fcd6e5f22fab44caae92af41a2850c449a97ca688275b5e50fd6cca931e16a29195fb87997bc59776ee19d64c56646bb2dd3e089130d385f48c76e191808ad42ba33c27ae624a6438ac5f5dee892738951e0f3e458666ac907d41d62aa6511a09cfdd424db3aeb16d15cdcd7438937f8e27f9583ba8ae8addf9dee4637def18067308a45b0aafc471028fa19be3aa5ec00edc655d6189e", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000001900)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "fe4da9c9b85871"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002900)={r6, r7, "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", "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"}) recvfrom$inet_nvme(r1, &(0x7f0000003900)=""/238, 0xee, 0x2, &(0x7f0000003a00)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x80) ptrace(0x8, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003ac0)={0x60, 0x1403, 0x100, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$l2tp(&(0x7f0000003bc0), r4) mount$9p_unix(&(0x7f0000003c00)='./file0\x00', &(0x7f0000003c40)='./file0\x00', &(0x7f0000003c80), 0x100082, &(0x7f0000003cc0)={'trans=unix,', {[{@mmap}, {@access_client}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@version_L}], [{@obj_type={'obj_type', 0x3d, 'syz0\x00'}}]}}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000003d40), 0x10400, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000003d80)={0x4, r8, 0x1}) ioctl$SW_SYNC_IOC_INC(r9, 0x40045701, &(0x7f0000003dc0)=0xfff) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003e40), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000003e80)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000003ec0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003f40)={&(0x7f0000003f00)={0x3c, r10, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000003fc0)={0x44, 0x1, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, 'veth1_virt_wifi\x00'}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000004180)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004140)={&(0x7f00000040c0)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x99}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x800) 106.833025ms ago: executing program 2 (id=966): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000140)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xb28a}]}]}, 0x30}}, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724"], 0x0) 0s ago: executing program 0 (id=967): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="003cd6623dbe81898a0000000000000000060000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000180)={0x0, r1}, 0x10) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000340)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="21c4c5"], 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) kernel console output (not intermixed with test programs): ct=023e, bcdDevice=d7.69 [ 168.074356][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.101060][ T7401] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.167027][ T5936] usb 2-1: Product: syz [ 168.203931][ T5936] usb 2-1: Manufacturer: syz [ 168.233511][ T5936] usb 2-1: SerialNumber: syz [ 168.525017][ T5950] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 169.039460][ T6014] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 169.190256][ T5936] usb 2-1: config 0 descriptor?? [ 169.196083][ T5950] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.197108][ T5936] hub 2-1:0.217: bad descriptor, ignoring hub [ 169.213345][ T5936] hub 2-1:0.217: probe with driver hub failed with error -5 [ 169.223166][ T5950] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 169.239711][ T6014] usb 3-1: Using ep0 maxpacket: 16 [ 169.248918][ T6014] usb 3-1: config 0 has an invalid interface number: 180 but max is 0 [ 169.257512][ T6014] usb 3-1: config 0 has no interface number 0 [ 169.272256][ T5950] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.286181][ T6014] usb 3-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 169.299455][ T6014] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.307508][ T6014] usb 3-1: Product: syz [ 169.319674][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.332481][ T7409] input: syz0 as /devices/virtual/input/input13 [ 169.340462][ T6014] usb 3-1: Manufacturer: syz [ 169.345098][ T6014] usb 3-1: SerialNumber: syz [ 169.353373][ T7393] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 169.372580][ T5950] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 169.390380][ T6014] usb 3-1: config 0 descriptor?? [ 169.405976][ T6014] usb 3-1: bad CDC descriptors [ 169.421241][ T5936] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 169.458961][ T5936] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 169.492486][ T5936] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 169.516464][ T5936] usb 2-1: media controller created [ 169.562840][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.586345][ T5950] usb 5-1: USB disconnect, device number 17 [ 169.599567][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 169.639445][ T5880] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 169.660142][ T6014] usb 3-1: USB disconnect, device number 19 [ 169.742924][ T5936] DVB: Unable to find symbol dib7000p_attach() [ 169.771376][ T5936] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 169.795878][ T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 169.815655][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.834170][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.853242][ T24] usb 4-1: config 0 descriptor?? [ 169.860166][ T5880] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 169.879750][ T24] cp210x 4-1:0.0: cp210x converter detected [ 169.896306][ T5880] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 169.915717][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.929447][ T5936] rc_core: IR keymap rc-dib0700-rc5 not found [ 169.939994][ T5936] Registered IR keymap rc-empty [ 169.952081][ T5936] dvb-usb: could not initialize remote control. [ 169.963748][ T5880] usb 1-1: config 0 descriptor?? [ 169.979026][ T5936] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 170.013992][ T5936] usb 2-1: USB disconnect, device number 15 [ 170.091357][ T5936] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 170.187754][ T7417] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 170.200424][ T7417] hfsplus: unable to find HFS+ superblock [ 170.414687][ T5880] hid_parser_main: 139 callbacks suppressed [ 170.414709][ T5880] kovaplus 0003:1E7D:2D50.000C: unknown main item tag 0x0 [ 170.432670][ T5880] kovaplus 0003:1E7D:2D50.000C: unknown main item tag 0x0 [ 170.442778][ T5880] kovaplus 0003:1E7D:2D50.000C: unknown main item tag 0x0 [ 170.522300][ T7420] netlink: 'syz.2.375': attribute type 9 has an invalid length. [ 170.980031][ T5936] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 171.099420][ T5880] kovaplus 0003:1E7D:2D50.000C: unknown main item tag 0x0 [ 171.113403][ T5880] kovaplus 0003:1E7D:2D50.000C: unknown main item tag 0x0 [ 171.129462][ T5936] usb 3-1: device descriptor read/64, error -71 [ 171.157075][ T5880] kovaplus 0003:1E7D:2D50.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 171.379625][ T5936] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 171.445988][ T5880] kovaplus 0003:1E7D:2D50.000C: couldn't init struct kovaplus_device [ 171.469515][ T5880] kovaplus 0003:1E7D:2D50.000C: couldn't install mouse [ 171.509671][ T5880] kovaplus 0003:1E7D:2D50.000C: probe with driver kovaplus failed with error -5 [ 171.512213][ T7428] netlink: 104 bytes leftover after parsing attributes in process `syz.4.378'. [ 171.529464][ T5936] usb 3-1: device descriptor read/64, error -71 [ 171.581582][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.378'. [ 171.669963][ T5936] usb usb3-port1: attempt power cycle [ 171.784751][ T24] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 171.792804][ T24] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 171.803986][ T24] usb 4-1: cp210x converter now attached to ttyUSB0 [ 171.807738][ T7436] netlink: 'syz.3.380': attribute type 1 has an invalid length. [ 171.812540][ T24] usb 4-1: USB disconnect, device number 21 [ 171.829566][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 171.838227][ T24] cp210x 4-1:0.0: device disconnected [ 171.989801][ T6014] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 172.049712][ T5936] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 172.160225][ T6014] usb 5-1: Using ep0 maxpacket: 32 [ 172.213720][ T6014] usb 5-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config [ 172.342272][ T6014] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 172.432346][ T6014] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 172.470386][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.587490][ T6014] usb 5-1: config 0 descriptor?? [ 172.897612][ T30] audit: type=1400 audit(1758484126.277:6): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7451 comm="syz.1.383" [ 172.899840][ T5929] usb 1-1: USB disconnect, device number 21 [ 172.915432][ T5936] usb 3-1: device descriptor read/8, error -71 [ 172.946677][ T6014] usb 5-1: string descriptor 0 read error: -71 [ 172.957617][ T6014] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 172.983733][ T6014] usb 5-1: USB disconnect, device number 18 [ 173.015404][ T7456] cifs: Unknown parameter 'no'‘a£Nð[G¶zob,erèèµ;%j¸¼ [ 173.015404][ T7456] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.W1ȱ¨nNCº"†CÙ×ðÚ<“™+`# ÷Ž¢k²–' [ 173.350189][ T5936] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 173.609436][ T5936] usb 3-1: device not accepting address 23, error -71 [ 173.669287][ T5936] usb usb3-port1: unable to enumerate USB device [ 174.010963][ T7461] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 174.371747][ T7461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.464420][ T7481] random: crng reseeded on system resumption [ 174.491094][ T7481] netlink: 28 bytes leftover after parsing attributes in process `syz.0.390'. [ 174.827352][ T7468] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 174.837323][ T7468] FAT-fs (loop2): unable to read boot sector [ 175.809444][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 175.919476][ T5929] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 175.971108][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 175.987855][ T30] audit: type=1326 audit(1758484129.377:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7503 comm="syz.1.395" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f46a6d8ec29 code=0x0 [ 175.992577][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 176.053499][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 176.087045][ T24] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 176.096363][ T5929] usb 5-1: device descriptor read/64, error -71 [ 176.113665][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.158993][ T24] usb 1-1: config 0 descriptor?? [ 176.339644][ T5929] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 176.519642][ T5929] usb 5-1: device descriptor read/64, error -71 [ 176.688938][ T5929] usb usb5-port1: attempt power cycle [ 176.760338][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 176.870030][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 176.903093][ T24] usb 1-1: USB disconnect, device number 22 [ 177.109537][ T5929] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 177.219136][ T7517] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 177.230308][ T7517] EXT4-fs (loop0): unable to read superblock [ 177.248191][ T7517] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.261745][ T7517] FAT-fs (loop0): unable to read boot sector [ 177.283897][ T5929] usb 5-1: device descriptor read/8, error -71 [ 177.549497][ T5929] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 177.789531][ T5929] usb 5-1: device not accepting address 22, error -71 [ 177.821768][ T7530] netlink: 56 bytes leftover after parsing attributes in process `syz.1.401'. [ 177.822299][ T5929] usb usb5-port1: unable to enumerate USB device [ 177.831053][ T7530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.401'. [ 177.849531][ T7530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.401'. [ 177.939492][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 178.089511][ T9] usb 3-1: device descriptor read/64, error -71 [ 178.150347][ T5929] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 178.206262][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 178.209463][ T5950] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 178.215352][ T7537] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 178.309558][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 178.317298][ T5929] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 178.327890][ T5929] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 178.340468][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 178.341525][ T5929] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 178.360213][ T5929] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.369643][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.377863][ T5929] usb 5-1: Product: syz [ 178.382467][ T5929] usb 5-1: Manufacturer: syz [ 178.387293][ T5929] usb 5-1: SerialNumber: syz [ 178.392778][ T5950] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 178.402912][ T5950] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 178.415664][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 178.427163][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 178.444717][ T5950] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 178.454015][ T5950] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 178.462228][ T5950] usb 2-1: Manufacturer: syz [ 178.469641][ T9] usb 3-1: device descriptor read/64, error -71 [ 178.477971][ T5950] usb 2-1: config 0 descriptor?? [ 178.485613][ T5950] igorplugusb 2-1:0.0: endpoint incorrect [ 178.579862][ T9] usb usb3-port1: attempt power cycle [ 178.778756][ T5929] usb 5-1: USB disconnect, device number 23 [ 178.865772][ T7546] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20000 [ 178.874634][ T7546] netlink: 28 bytes leftover after parsing attributes in process `syz.4.406'. [ 178.883740][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 178.924188][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 179.542988][ T9] usb 3-1: device descriptor read/8, error -71 [ 179.607203][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'. [ 179.799602][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 179.840358][ T9] usb 3-1: device descriptor read/8, error -71 [ 179.949969][ T9] usb usb3-port1: unable to enumerate USB device [ 180.840266][ T5929] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 181.035241][ T5950] usb 2-1: USB disconnect, device number 16 [ 181.210029][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 181.232633][ T5929] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 181.242828][ T5929] usb 4-1: config 0 has no interface number 0 [ 181.262787][ T5929] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 181.273257][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.284987][ T5929] usb 4-1: Product: syz [ 181.289299][ T5929] usb 4-1: Manufacturer: syz [ 181.298231][ T5929] usb 4-1: SerialNumber: syz [ 181.350984][ T5929] usb 4-1: config 0 descriptor?? [ 181.373207][ T5929] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 181.383996][ T7579] syz_tun: entered allmulticast mode [ 181.399901][ T7579] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 181.413988][ T7579] EXT4-fs (loop1): unable to read superblock [ 181.504704][ T7580] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 181.577435][ T5929] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 181.592964][ T5929] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 181.769445][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 181.789655][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 4 [ 181.827354][ T7595] netlink: 'syz.0.420': attribute type 1 has an invalid length. [ 181.836747][ T7595] netlink: 'syz.0.420': attribute type 1 has an invalid length. [ 181.920185][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 181.927370][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 181.936884][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.950718][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.963030][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 181.977721][ T9] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 181.991270][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.002257][ T9] usb 5-1: Product: syz [ 182.003610][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 182.006446][ T9] usb 5-1: Manufacturer: syz [ 182.016973][ T5929] usb 4-1: USB disconnect, device number 22 [ 182.020010][ T9] usb 5-1: SerialNumber: syz [ 182.036151][ T9] usb 5-1: config 0 descriptor?? [ 182.039161][ T5929] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 182.042293][ T7584] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 182.055241][ T5929] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 182.071997][ T5929] quatech2 4-1:0.51: device disconnected [ 182.190811][ T7579] syz_tun: left allmulticast mode [ 182.243830][ T7602] netlink: 32 bytes leftover after parsing attributes in process `syz.1.423'. [ 182.275060][ T9] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 182.287089][ T9] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 182.469465][ T6014] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 182.609552][ T6014] usb 1-1: device descriptor read/64, error -71 [ 182.823214][ T7584] batman_adv: batadv0: Adding interface: ipvlan2 [ 182.829995][ T7584] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.855319][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.900743][ T6014] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 182.907502][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.953721][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.964575][ T7584] batman_adv: batadv0: Interface activated: ipvlan2 [ 183.129855][ C0] powermate: config urb returned -71 [ 183.135458][ C0] powermate: config urb returned -71 [ 183.143104][ C0] powermate: config urb returned -71 [ 183.154724][ T9] usb 5-1: USB disconnect, device number 24 [ 183.158877][ T6014] usb 1-1: device descriptor read/64, error -71 [ 183.160793][ C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 183.325345][ T7628] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.976900][ T6014] usb usb1-port1: attempt power cycle [ 184.035687][ T7632] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 184.068340][ T7634] netlink: 40 bytes leftover after parsing attributes in process `syz.2.431'. [ 184.208164][ T7641] Invalid ELF header magic: != ELF [ 184.329454][ T6014] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 184.356170][ T6014] usb 1-1: device descriptor read/8, error -71 [ 184.519537][ T5929] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 184.604942][ T6014] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 184.660167][ T6014] usb 1-1: device descriptor read/8, error -71 [ 184.669456][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 184.684808][ T5929] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 184.699417][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.718977][ T5929] usb 5-1: Product: syz [ 184.727863][ T5929] usb 5-1: Manufacturer: syz [ 184.737423][ T5929] usb 5-1: SerialNumber: syz [ 184.756200][ T5929] usb 5-1: config 0 descriptor?? [ 184.774307][ T6014] usb usb1-port1: unable to enumerate USB device [ 184.786829][ T5929] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 184.942271][ T7668] [U] „ [ 185.602864][ T7685] random: crng reseeded on system resumption [ 186.034810][ T7684] kthread_run failed with err -4 [ 186.065651][ T5929] gspca_sonixj: reg_w1 err -110 [ 186.090671][ T5929] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 186.683871][ T5929] IPVS: starting estimator thread 0... [ 186.954750][ T7689] netlink: 188 bytes leftover after parsing attributes in process `syz.1.440'. [ 187.099478][ T7697] IPVS: using max 31 ests per chain, 74400 per kthread [ 187.200468][ T7707] syz_tun: entered allmulticast mode [ 187.257339][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 187.289074][ T9] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 187.549443][ T5929] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 187.669489][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 187.679468][ T5936] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 187.719415][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 187.726039][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.737128][ T5929] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 187.746396][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.758850][ T5929] usb 4-1: config 0 descriptor?? [ 187.809468][ T9] usb 1-1: device descriptor read/64, error -71 [ 187.831279][ T5936] usb 3-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.841391][ T5936] usb 3-1: config 0 interface 0 has no altsetting 0 [ 187.848059][ T5936] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 187.858445][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.871181][ T5936] usb 3-1: config 0 descriptor?? [ 187.972434][ T5880] usb 5-1: USB disconnect, device number 25 [ 188.070661][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 188.173408][ T5929] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 188.219713][ T9] usb 1-1: device descriptor read/64, error -71 [ 188.305835][ T7718] vfat: Bad value for 'utf8' [ 188.319100][ T5936] sony 0003:054C:024B.000F: unbalanced delimiter at end of report description [ 188.329088][ T5936] sony 0003:054C:024B.000F: parse failed [ 188.336924][ T9] usb usb1-port1: attempt power cycle [ 188.343215][ T5936] sony 0003:054C:024B.000F: probe with driver sony failed with error -22 [ 188.554560][ T7718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.563508][ T7718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.586002][ T7707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.599989][ T7707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.639651][ T7707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.651631][ T7707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.668566][ T5922] usb 4-1: USB disconnect, device number 23 [ 188.683862][ T7704] syz_tun: left allmulticast mode [ 188.694035][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 188.730662][ T9] usb 1-1: device descriptor read/8, error -71 [ 188.979628][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 189.001174][ T9] usb 1-1: device descriptor read/8, error -71 [ 189.108075][ T5929] usb 3-1: USB disconnect, device number 28 [ 189.119872][ T9] usb usb1-port1: unable to enumerate USB device [ 190.039542][ T5929] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 190.150876][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.461'. [ 190.259907][ T30] audit: type=1326 audit(1758484143.637:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a6d8ec29 code=0x7fc00000 [ 190.260281][ T5929] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 190.281932][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.633722][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.686002][ T5929] usb 3-1: config 0 descriptor?? [ 191.128292][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 191.297715][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 191.311309][ T5872] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 191.313381][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.332494][ T9] usb 2-1: config 0 descriptor?? [ 191.406236][ T5929] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 191.628729][ T5929] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 191.668648][ T5929] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 191.825366][ T5922] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 191.957881][ T9] cp210x 2-1:0.0: cp210x converter detected [ 191.982479][ T5929] asix 3-1:0.0: probe with driver asix failed with error -32 [ 192.057764][ T7768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.180293][ T7768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.205550][ T7783] netlink: 216 bytes leftover after parsing attributes in process `syz.0.471'. [ 192.651048][ T5880] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 192.679298][ T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 192.692618][ T5922] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 192.694708][ T7768] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 192.702102][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.711184][ T7768] hfsplus: unable to find HFS+ superblock [ 192.723704][ T5922] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 192.736352][ T5922] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 192.745246][ T5922] usb 4-1: Manufacturer: syz [ 192.750283][ T9] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 192.759091][ T9] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 192.766539][ T5922] usb 4-1: config 0 descriptor?? [ 192.782073][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 192.793281][ T9] usb 2-1: USB disconnect, device number 17 [ 192.803656][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 192.811983][ T5880] usb 1-1: device descriptor read/64, error -71 [ 192.818783][ T9] cp210x 2-1:0.0: device disconnected [ 192.840748][ T5922] rc_core: IR keymap rc-hauppauge not found [ 192.846800][ T5922] Registered IR keymap rc-empty [ 192.854606][ T5922] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 192.866370][ T5922] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input16 [ 193.108139][ T5922] usb 3-1: USB disconnect, device number 29 [ 193.129896][ T5880] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 193.142225][ T7791] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.183756][ T7791] FAT-fs (loop4): unable to read boot sector [ 193.279509][ T5880] usb 1-1: device descriptor read/64, error -71 [ 193.342225][ T7796] netlink: 'syz.1.474': attribute type 29 has an invalid length. [ 193.720354][ T5880] usb usb1-port1: attempt power cycle [ 193.889042][ T7815] misc userio: No port type given on /dev/userio [ 193.963898][ T7814] misc userio: The device must be registered before sending interrupts [ 194.253849][ T7824] IPv6: addrconf: prefix option has invalid lifetime [ 194.349271][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.355722][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.400276][ T5880] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 194.441037][ T5880] usb 1-1: device descriptor read/8, error -71 [ 194.833965][ T7835] netlink: 'syz.2.482': attribute type 10 has an invalid length. [ 194.896526][ T5922] usb 4-1: USB disconnect, device number 24 [ 194.938645][ T7835] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 194.952337][ T5880] usb 1-1: new full-speed USB device number 34 using dummy_hcd acpid: input device has been disconnected, fd 3 [ 195.000172][ T5880] usb 1-1: device descriptor read/8, error -71 [ 195.119803][ T5880] usb usb1-port1: unable to enumerate USB device [ 195.155562][ T30] audit: type=1326 audit(1758484148.547:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24aad8ec29 code=0x7ffc0000 [ 195.219296][ T30] audit: type=1326 audit(1758484148.547:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24aad8ec29 code=0x7ffc0000 [ 195.277947][ T30] audit: type=1326 audit(1758484148.547:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24aad8ec29 code=0x7ffc0000 [ 195.346609][ T30] audit: type=1326 audit(1758484148.547:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24aad8ec29 code=0x7ffc0000 [ 195.422565][ T7845] Invalid ELF header magic: != ELF [ 195.455707][ T30] audit: type=1326 audit(1758484148.547:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24aad8ec29 code=0x7ffc0000 [ 195.478741][ T30] audit: type=1326 audit(1758484148.547:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f24aad8ec29 code=0x7ffc0000 [ 195.502964][ T30] audit: type=1326 audit(1758484148.547:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24aad8ec29 code=0x7ffc0000 [ 195.527926][ T30] audit: type=1800 audit(1758484148.817:16): pid=7847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.485" name="/newroot/95/bus" dev="tmpfs" ino=555 res=0 errno=0 [ 195.659528][ T5922] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 196.402993][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 196.440881][ T5922] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.485770][ T7878] capability: warning: `syz.4.494' uses 32-bit capabilities (legacy support in use) [ 196.495405][ T5922] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.508941][ T5922] usb 1-1: config 0 interface 0 has no altsetting 0 [ 196.516274][ T5922] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 196.527337][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.540809][ T5922] usb 1-1: config 0 descriptor?? [ 196.589702][ T5872] Bluetooth: hci2: command 0x0406 tx timeout [ 196.595817][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 196.601967][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 196.683275][ T5184] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 196.694764][ T7885] netlink: 'syz.1.496': attribute type 58 has an invalid length. [ 196.702892][ T7885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.496'. [ 197.167486][ T5922] hid (null): invalid report_size 42190 [ 197.174230][ T5880] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 197.182436][ T5922] hid (null): report_id 4263223746 is invalid [ 197.188645][ T5922] hid (null): unknown global tag 0xe [ 197.196495][ T5922] hid (null): global environment stack underflow [ 197.203120][ T5922] hid (null): global environment stack underflow [ 197.218499][ T5922] hid (null): global environment stack underflow [ 197.224926][ T5922] hid (null): report_id 0 is invalid [ 197.231914][ T5922] hid (null): unknown global tag 0xc [ 197.237236][ T5922] hid (null): unknown global tag 0xd [ 197.243530][ T5922] hid (null): unknown global tag 0xc [ 197.248836][ T5922] hid (null): global environment stack underflow [ 197.255249][ T5922] hid (null): bogus close delimiter [ 197.347971][ T5880] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 197.369143][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.382023][ T5880] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 197.403744][ T5880] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 197.408850][ T7889] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 197.419925][ T5880] usb 4-1: Manufacturer: syz [ 197.421875][ T7889] overlayfs: failed to set xattr on upper [ 197.431373][ T7889] overlayfs: ...falling back to redirect_dir=nofollow. [ 197.441139][ T5880] usb 4-1: config 0 descriptor?? [ 197.441982][ T7889] overlayfs: ...falling back to metacopy=off. [ 197.452926][ T7889] overlayfs: ...falling back to uuid=null. [ 197.492251][ T7894] fuse: Unknown parameter '00000000000000000000004' [ 197.530204][ T5880] rc_core: IR keymap rc-hauppauge not found [ 197.545820][ T5880] Registered IR keymap rc-empty [ 197.547380][ T7894] netlink: 'syz.4.497': attribute type 8 has an invalid length. [ 197.564133][ T7894] netlink: 32 bytes leftover after parsing attributes in process `syz.4.497'. [ 197.573849][ T5880] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 197.592057][ T5880] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 198.382658][ T7899] jfs: Unknown parameter 'ÿÿ' [ 198.632722][ T5880] usb 1-1: USB disconnect, device number 35 [ 198.717436][ T7899] mkiss: ax0: crc mode is auto. [ 199.354449][ T5922] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 199.591022][ T5922] usb 5-1: Invalid ep0 maxpacket: 64 [ 199.619384][ T5880] usb 4-1: USB disconnect, device number 25 acpid: input device has been disconnected, fd 3 [ 199.739726][ T5922] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 199.771082][ T7929] sctp: [Deprecated]: syz.1.506 (pid 7929) Use of int in maxseg socket option. [ 199.771082][ T7929] Use struct sctp_assoc_value instead [ 199.795723][ T7932] sctp: [Deprecated]: syz.1.506 (pid 7932) Use of int in maxseg socket option. [ 199.795723][ T7932] Use struct sctp_assoc_value instead [ 199.909958][ T5922] usb 5-1: Invalid ep0 maxpacket: 64 [ 199.925912][ T5922] usb usb5-port1: attempt power cycle [ 200.159740][ T7947] wg2: entered promiscuous mode [ 200.164633][ T7947] wg2: entered allmulticast mode [ 200.269543][ T5922] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 200.520477][ T5922] usb 5-1: Invalid ep0 maxpacket: 64 [ 200.679594][ T5922] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 200.714666][ T7955] fuse: Unknown parameter 'jCÁ<‹Gífp' [ 200.734416][ T5922] usb 5-1: Invalid ep0 maxpacket: 64 [ 200.742503][ T5922] usb usb5-port1: unable to enumerate USB device [ 200.811186][ T7964] mkiss: ax0: crc mode is auto. [ 202.025978][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'. [ 202.037112][ T7979] netlink: 'syz.0.519': attribute type 22 has an invalid length. [ 202.045917][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'. [ 202.083401][ T2999] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.083532][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'. [ 202.135594][ T2999] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.144802][ T7979] netlink: 'syz.0.519': attribute type 22 has an invalid length. [ 202.166600][ T2999] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.175390][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'. [ 202.195098][ T2999] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.382212][ T7993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 202.391854][ T7993] FAT-fs (loop0): unable to read boot sector [ 202.469447][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 202.493329][ T5950] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 202.619457][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 202.626827][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 202.638309][ T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.649513][ T5950] usb 4-1: Using ep0 maxpacket: 32 [ 202.658440][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.668176][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.677478][ T24] usb 2-1: Product: syz [ 202.682714][ T24] usb 2-1: Manufacturer: syz [ 202.687488][ T5950] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 202.696884][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.705610][ T24] usb 2-1: SerialNumber: syz [ 202.713124][ T5950] usb 4-1: Product: syz [ 202.718507][ T5950] usb 4-1: Manufacturer: syz [ 202.723908][ T5950] usb 4-1: SerialNumber: syz [ 202.734917][ T5950] usb 4-1: config 0 descriptor?? [ 202.936189][ T7984] ip6tnl1: entered allmulticast mode [ 202.996632][ T24] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 203.005579][ T24] usb 2-1: unit 6 not found! [ 203.018004][ T8005] syz.4.528: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 203.030368][ T24] usb 2-1: USB disconnect, device number 18 [ 203.041038][ T8005] CPU: 0 UID: 0 PID: 8005 Comm: syz.4.528 Not tainted syzkaller #0 PREEMPT(full) [ 203.041063][ T8005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 203.041073][ T8005] Call Trace: [ 203.041080][ T8005] [ 203.041088][ T8005] dump_stack_lvl+0x189/0x250 [ 203.041123][ T8005] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 203.041145][ T8005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.041164][ T8005] ? __pfx__printk+0x10/0x10 [ 203.041185][ T8005] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 203.041203][ T8005] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 203.041228][ T8005] warn_alloc+0x214/0x310 [ 203.041251][ T8005] ? __pfx_warn_alloc+0x10/0x10 [ 203.041276][ T8005] ? __get_vm_area_node+0x28f/0x300 [ 203.041298][ T8005] ? hash_ipportip_create+0x358/0xfe0 [ 203.041322][ T8005] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 203.041374][ T8005] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 203.041396][ T8005] ? hash_ipportip_create+0x358/0xfe0 [ 203.041419][ T8005] ? rcu_is_watching+0x15/0xb0 [ 203.041441][ T8005] ? hash_ipportip_create+0x358/0xfe0 [ 203.041461][ T8005] __kvmalloc_node_noprof+0x674/0x910 [ 203.041477][ T8005] ? hash_ipportip_create+0x358/0xfe0 [ 203.041495][ T8005] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 203.041517][ T8005] ? hash_ipportip_create+0x2fe/0xfe0 [ 203.041542][ T8005] hash_ipportip_create+0x358/0xfe0 [ 203.041570][ T8005] ? __nla_parse+0x40/0x60 [ 203.041592][ T8005] ? __pfx_hash_ipportip_create+0x10/0x10 [ 203.041613][ T8005] ip_set_create+0xa97/0x1940 [ 203.041636][ T8005] ? ip_set_create+0x4a2/0x1940 [ 203.041669][ T8005] ? __pfx_ip_set_create+0x10/0x10 [ 203.041725][ T8005] nfnetlink_rcv_msg+0xb4d/0x1130 [ 203.041749][ T8005] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 203.041789][ T8005] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 203.041810][ T8005] ? __netlink_deliver_tap+0x5d9/0x8b0 [ 203.041906][ T8005] netlink_rcv_skb+0x208/0x470 [ 203.041924][ T8005] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 203.041948][ T8005] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 203.041976][ T8005] ? bpf_lsm_capable+0x9/0x20 [ 203.041995][ T8005] ? security_capable+0x7e/0x2e0 [ 203.042023][ T8005] nfnetlink_rcv+0x26a/0x2520 [ 203.042048][ T8005] ? __kernel_text_address+0xd/0x40 [ 203.042067][ T8005] ? unwind_get_return_address+0x4d/0x90 [ 203.042082][ T8005] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 203.042099][ T8005] ? arch_stack_walk+0xfc/0x150 [ 203.042127][ T8005] ? stack_trace_save+0x9c/0xe0 [ 203.042143][ T8005] ? __pfx_stack_trace_save+0x10/0x10 [ 203.042164][ T8005] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 203.042184][ T8005] ? save_netdev_trace_buffer+0x14f/0x5e0 [ 203.042210][ T8005] ? save_netdev_trace_buffer+0x4e2/0x5e0 [ 203.042238][ T8005] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 203.042258][ T8005] ? ref_tracker_free+0x63a/0x7d0 [ 203.042276][ T8005] ? __netlink_deliver_tap+0x636/0x8b0 [ 203.042291][ T8005] ? netlink_deliver_tap+0x19c/0x1b0 [ 203.042306][ T8005] ? netlink_unicast+0x7fa/0x9e0 [ 203.042327][ T8005] ? netlink_sendmsg+0x805/0xb30 [ 203.042342][ T8005] ? __sock_sendmsg+0x21c/0x270 [ 203.042361][ T8005] ? ____sys_sendmsg+0x505/0x830 [ 203.042377][ T8005] ? ___sys_sendmsg+0x21f/0x2a0 [ 203.042393][ T8005] ? __x64_sys_sendmsg+0x19b/0x260 [ 203.042410][ T8005] ? do_syscall_64+0xfa/0xfa0 [ 203.042427][ T8005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.042450][ T8005] ? __skb_clone+0x483/0x7a0 [ 203.042476][ T8005] ? skb_clone+0x246/0x3a0 [ 203.042502][ T8005] ? __netlink_deliver_tap+0x866/0x8b0 [ 203.042520][ T8005] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.042543][ T8005] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.042568][ T8005] netlink_unicast+0x82f/0x9e0 [ 203.042599][ T8005] ? __pfx_netlink_unicast+0x10/0x10 [ 203.042624][ T8005] ? netlink_sendmsg+0x642/0xb30 [ 203.042639][ T8005] ? skb_put+0x11b/0x210 [ 203.042660][ T8005] netlink_sendmsg+0x805/0xb30 [ 203.042686][ T8005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.042707][ T8005] ? aa_sock_msg_perm+0xf1/0x1d0 [ 203.042730][ T8005] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 203.042746][ T8005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.042765][ T8005] __sock_sendmsg+0x21c/0x270 [ 203.042790][ T8005] ____sys_sendmsg+0x505/0x830 [ 203.042815][ T8005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.042843][ T8005] ? import_iovec+0x74/0xa0 [ 203.042869][ T8005] ___sys_sendmsg+0x21f/0x2a0 [ 203.042890][ T8005] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.042945][ T8005] ? __fget_files+0x2a/0x420 [ 203.042960][ T8005] ? __fget_files+0x3a0/0x420 [ 203.042987][ T8005] __x64_sys_sendmsg+0x19b/0x260 [ 203.043008][ T8005] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.043044][ T8005] ? do_syscall_64+0xbe/0xfa0 [ 203.043065][ T8005] do_syscall_64+0xfa/0xfa0 [ 203.043083][ T8005] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.043100][ T8005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.043116][ T8005] ? clear_bhb_loop+0x60/0xb0 [ 203.043135][ T8005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.043151][ T8005] RIP: 0033:0x7f4e6818ec29 [ 203.043171][ T8005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.043186][ T8005] RSP: 002b:00007f4e663f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.043204][ T8005] RAX: ffffffffffffffda RBX: 00007f4e683d6090 RCX: 00007f4e6818ec29 [ 203.043216][ T8005] RDX: 0000000000008000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 203.043227][ T8005] RBP: 00007f4e68211e41 R08: 0000000000000000 R09: 0000000000000000 [ 203.043237][ T8005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.043247][ T8005] R13: 00007f4e683d6128 R14: 00007f4e683d6090 R15: 00007ffd832be668 [ 203.043276][ T8005] [ 203.043287][ T8005] Mem-Info: [ 203.180627][ T7988] ip6erspan0: entered promiscuous mode [ 203.189872][ T8005] active_anon:21128 inactive_anon:0 isolated_anon:0 [ 203.189872][ T8005] active_file:14340 inactive_file:40481 isolated_file:0 [ 203.189872][ T8005] unevictable:768 dirty:180 writeback:0 [ 203.189872][ T8005] slab_reclaimable:11331 slab_unreclaimable:94957 [ 203.189872][ T8005] mapped:29318 shmem:17898 pagetables:1102 [ 203.189872][ T8005] sec_pagetables:0 bounce:0 [ 203.189872][ T8005] kernel_misc_reclaimable:0 [ 203.189872][ T8005] free:1294551 free_pcp:17793 free_cma:0 [ 203.200943][ T5950] airspy 4-1:0.0: usb_control_msg() failed -71 request 0a [ 203.204696][ T8005] Node 0 active_anon:84512kB inactive_anon:0kB active_file:57360kB inactive_file:161724kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117272kB dirty:716kB writeback:0kB shmem:70056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12128kB pagetables:4268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 203.210191][ T5950] airspy 4-1:0.0: Could not detect board [ 203.216113][ T8005] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 203.216161][ T8005] Node 0 [ 203.228028][ T5950] airspy 4-1:0.0: probe with driver airspy failed with error -71 [ 203.232661][ T8005] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.242867][ T5950] usb 4-1: USB disconnect, device number 26 [ 203.243606][ T8005] lowmem_reserve[]: 0 2491 2491 2491 2491 [ 203.793978][ T8005] Node 0 DMA32 free:1277532kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:84412kB inactive_anon:0kB active_file:57360kB inactive_file:161724kB unevictable:1536kB writepending:216kB zspages:0kB present:3129332kB managed:2550800kB mlocked:0kB bounce:0kB free_pcp:46140kB local_pcp:23636kB free_cma:0kB [ 203.829851][ T8005] lowmem_reserve[]: 0 0 0 0 0 [ 203.838775][ T8005] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.881669][ T8005] lowmem_reserve[]: 0 0 0 0 0 [ 203.886754][ T8005] Node 1 Normal free:3885312kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24208kB local_pcp:10352kB free_cma:0kB [ 204.055181][ T8005] lowmem_reserve[]: 0 0 0 0 0 [ 204.079836][ T8005] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 204.142462][ T8005] Node 0 DMA32: 1131*4kB (UM) 721*8kB (UM) 162*16kB (UM) 440*32kB (UME) 107*64kB (UM) 40*128kB (UME) 20*256kB (UM) 13*512kB (UME) 5*1024kB (UM) 5*2048kB (UME) 296*4096kB (UM) = 1278484kB [ 204.190029][ T8005] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 204.202779][ T8005] Node 1 Normal: 216*4kB (UME) 66*8kB (UME) 33*16kB (UME) 108*32kB (UME) 30*64kB (UME) 9*128kB (UME) 2*256kB (M) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (M) = 3885312kB [ 204.222684][ T8005] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.233006][ T8005] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.247167][ T8005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.257590][ T8005] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.267873][ T8005] 72717 total pagecache pages [ 204.272905][ T8005] 0 pages in swap cache [ 204.282582][ T8005] Free swap = 124996kB [ 204.287033][ T8005] Total swap = 124996kB [ 204.291564][ T8005] 2097051 pages RAM [ 204.295444][ T8005] 0 pages HighMem/MovableOnly [ 204.300304][ T8005] 427581 pages reserved [ 204.304534][ T8005] 0 pages cma reserved [ 204.899478][ T8001] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 204.899491][ T5184] Bluetooth: hci1: command 0x0406 tx timeout [ 205.860844][ T8001] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 205.873757][ T8001] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 205.882121][ T8001] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 205.888101][ T8001] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 205.894965][ T8001] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 205.901169][ T8001] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 205.907883][ T8001] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 205.913908][ T8001] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 205.927603][ T8001] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 206.062427][ T8035] netlink: 56 bytes leftover after parsing attributes in process `syz.1.537'. [ 206.080369][ T8031] devpts: Unknown parameter '00000000000' [ 206.239466][ T5922] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 206.248359][ T8038] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 206.252084][ T8038] netlink: 'syz.1.539': attribute type 1 has an invalid length. [ 206.426569][ T8038] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.477683][ T8042] netlink: 48 bytes leftover after parsing attributes in process `syz.1.539'. [ 206.709449][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 206.739512][ T5950] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 206.750122][ T5922] usb 3-1: config 9 has an invalid interface number: 55 but max is 0 [ 206.759274][ T5922] usb 3-1: config 9 has no interface number 0 [ 206.769271][ T5922] usb 3-1: config 9 interface 55 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.799518][ T5922] usb 3-1: config 9 interface 55 has no altsetting 0 [ 206.808537][ T5922] usb 3-1: New USB device found, idVendor=04dd, idProduct=0000, bcdDevice= 0.00 [ 206.820702][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.828717][ T5922] usb 3-1: Product: syz [ 206.832952][ T5922] usb 3-1: Manufacturer: syz [ 206.839399][ T5922] usb 3-1: SerialNumber: syz [ 206.871933][ T8072] overlayfs: workdir and upperdir must be separate subtrees [ 206.980748][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 206.988944][ T5950] usb 4-1: unable to get BOS descriptor or descriptor too short [ 206.998519][ T5950] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 207.010745][ T5950] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 207.021388][ T5950] usb 4-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 207.034489][ T5950] usb 4-1: config 1 interface 0 has no altsetting 0 [ 207.052486][ T5950] usb 4-1: string descriptor 0 read error: -22 [ 207.087267][ T5950] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.103785][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.113056][ T6014] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 207.345396][ T8055] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 207.390656][ T8055] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 207.412248][ T8055] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 207.586083][ T5950] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 207.607525][ T8074] bridge0: port 3(netdevsim0) entered blocking state [ 207.614597][ T8074] bridge0: port 3(netdevsim0) entered disabled state [ 207.623142][ T8074] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 207.633864][ T8074] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 207.641987][ T8074] bridge0: port 3(netdevsim0) entered blocking state [ 207.642248][ T5922] cdc_ether 3-1:9.55: skipping garbage [ 207.649023][ T8074] bridge0: port 3(netdevsim0) entered forwarding state [ 207.674323][ T5950] usb 4-1: USB disconnect, device number 27 [ 207.680369][ T6014] usb 1-1: Using ep0 maxpacket: 32 [ 207.687952][ T5922] cdc_ether 3-1:9.55: invalid descriptor buffer length [ 207.695359][ T5922] usb 3-1: bad CDC descriptors [ 207.706153][ T6014] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.718384][ T6014] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.730735][ T6014] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.743753][ T6014] usb 1-1: config 0 interface 0 has no altsetting 0 [ 207.750436][ T6014] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 207.759644][ T6014] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.777234][ T6014] usb 1-1: config 0 descriptor?? [ 207.804088][ T8111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.549'. [ 207.813972][ T5922] usb 3-1: USB disconnect, device number 30 [ 207.940404][ T5872] Bluetooth: hci4: command 0x0c1a tx timeout [ 207.946509][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 207.952900][ T5184] Bluetooth: hci2: command 0x0406 tx timeout [ 207.959207][ T980] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 208.099444][ T980] usb 5-1: device descriptor read/64, error -71 [ 208.345865][ T980] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 208.400631][ T5950] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 208.482164][ T6014] usbhid 1-1:0.0: can't add hid device: -71 [ 208.488433][ T6014] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 208.490359][ T980] usb 5-1: device descriptor read/64, error -71 [ 208.500162][ T6014] usb 1-1: USB disconnect, device number 36 [ 208.571697][ T5950] usb 3-1: Using ep0 maxpacket: 16 [ 208.577689][ T5950] usb 3-1: too many configurations: 97, using maximum allowed: 8 [ 208.590057][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.600934][ T5950] usb 3-1: config 0 has no interfaces? [ 208.607218][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.610198][ T980] usb usb5-port1: attempt power cycle [ 208.617502][ T5950] usb 3-1: config 0 has no interfaces? [ 208.630510][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.643410][ T5950] usb 3-1: config 0 has no interfaces? [ 208.650319][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.660856][ T5950] usb 3-1: config 0 has no interfaces? [ 208.667516][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.678281][ T5950] usb 3-1: config 0 has no interfaces? [ 208.686305][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.700191][ T5950] usb 3-1: config 0 has no interfaces? [ 208.706921][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.717269][ T5950] usb 3-1: config 0 has no interfaces? [ 208.723985][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.734265][ T5950] usb 3-1: config 0 has no interfaces? [ 208.758449][ T5950] usb 3-1: string descriptor 0 read error: -71 [ 208.765031][ T5950] usb 3-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 208.775663][ T5950] usb 3-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 208.791909][ T5950] usb 3-1: config 0 descriptor?? [ 208.797610][ T5950] usb 3-1: can't set config #0, error -71 [ 208.805850][ T5950] usb 3-1: USB disconnect, device number 31 [ 209.061850][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 209.317330][ T980] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 209.340190][ T980] usb 5-1: device descriptor read/8, error -71 [ 210.286113][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 210.322566][ T5865] Bluetooth: hci2: command 0x0406 tx timeout [ 210.328604][ T5865] Bluetooth: hci4: command 0x0c1a tx timeout [ 211.031564][ T8196] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 211.042325][ T8196] SQUASHFS error: Failed to read block 0x0: -5 [ 211.048551][ T8196] unable to read squashfs_super_block [ 211.213236][ T8208] NILFS (loop2): device size too small [ 211.290309][ T8107] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 211.576636][ T8209] vfat: Unknown parameter ' ' [ 211.709481][ T8107] usb 2-1: config 4 has an invalid interface number: 95 but max is 0 [ 211.718767][ T8107] usb 2-1: config 4 has no interface number 0 [ 211.727919][ T8107] usb 2-1: config 4 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 211.743182][ T8208] netlink: 'syz.2.576': attribute type 3 has an invalid length. [ 211.751993][ T8208] netlink: 'syz.2.576': attribute type 1 has an invalid length. [ 211.759675][ T8208] netlink: 216 bytes leftover after parsing attributes in process `syz.2.576'. [ 211.768624][ T8208] NCSI netlink: No device for ifindex 33022 [ 211.831920][ T8107] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 211.841260][ T8107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.881594][ T8107] usb 2-1: Product: syz [ 211.889388][ T8107] usb 2-1: Manufacturer: syz [ 211.894014][ T8107] usb 2-1: SerialNumber: syz [ 211.923319][ T8196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 211.935056][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 212.276060][ T8237] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.287233][ T8237] hfs: can't find a HFS filesystem on dev loop2 [ 212.324820][ T8196] netlink: 1 bytes leftover after parsing attributes in process `syz.1.573'. [ 212.342794][ T5865] Bluetooth: hci4: command 0x0c1a tx timeout [ 212.380390][ T8239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.391068][ T8239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.982015][ T8263] overlayfs: failed to resolve './bus': -2 [ 213.080007][ T8107] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 213.097211][ T8107] usb 2-1: MIDIStreaming interface descriptor not found [ 213.150631][ T8266] sctp: [Deprecated]: syz.4.592 (pid 8266) Use of int in maxseg socket option. [ 213.150631][ T8266] Use struct sctp_assoc_value instead [ 213.187369][ T8107] usb 2-1: USB disconnect, device number 19 [ 214.541672][ T8285] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 214.854738][ T8289] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 214.864208][ T8289] bcachefs (/dev/loop4): error reading default superblock: IO error: -5 [ 214.872606][ T8289] I/O error, dev loop4, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 214.882018][ T8289] bcachefs (/dev/loop4): error reading superblock: IO error: -5 [ 214.890160][ T8289] bcachefs: bch2_fs_get_tree() error: EIO [ 215.777580][ T8315] overlayfs: failed to resolve './bus': -2 [ 216.153720][ T8313] bcachefs: bch2_fs_parse_param() Error parsing option degraded: option_value [ 216.449523][ T5950] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 216.771655][ T5950] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 216.789643][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.797914][ T5950] usb 2-1: Product: syz [ 216.809786][ T5950] usb 2-1: Manufacturer: syz [ 216.814419][ T5950] usb 2-1: SerialNumber: syz [ 216.821558][ T8326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.832212][ T5950] usb 2-1: config 0 descriptor?? [ 216.848710][ T8326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.049073][ T5950] hso 2-1:0.0: Failed to find BULK IN ep [ 217.053132][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 217.059431][ T6014] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 217.196883][ T5950] usb-storage 2-1:0.0: USB Mass Storage device detected [ 217.221453][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'. [ 217.293626][ T5950] usb 2-1: USB disconnect, device number 20 [ 217.360944][ T6014] usb 3-1: Using ep0 maxpacket: 32 [ 217.368908][ T6014] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 217.384050][ T6014] usb 3-1: config 0 has no interface number 0 [ 217.390384][ T6014] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 217.402934][ T6014] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 217.412473][ T6014] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.421091][ T6014] usb 3-1: Product: syz [ 217.425337][ T6014] usb 3-1: Manufacturer: syz [ 217.430574][ T6014] usb 3-1: SerialNumber: syz [ 217.440361][ T6014] usb 3-1: config 0 descriptor?? [ 217.458658][ T6014] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 217.469026][ T6014] em28xx 3-1:0.132: Video interface 132 found: [ 217.569612][ T5922] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 217.729447][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 217.736980][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.750233][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.790525][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 217.810911][ T5922] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 217.829548][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.840255][ T5922] usb 4-1: config 0 descriptor?? [ 217.942924][ T8355] overlayfs: failed to resolve './bus': -2 [ 217.948926][ T6014] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 218.034305][ T6014] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 218.059708][ T6014] em28xx 3-1:0.132: board has no eeprom [ 218.106740][ T30] audit: type=1326 audit(1758484171.497:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a6d8ec29 code=0x7ffc0000 [ 218.107198][ T8362] netlink: 180 bytes leftover after parsing attributes in process `syz.1.618'. [ 218.145265][ T6014] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 218.162274][ T8362] netlink: 180 bytes leftover after parsing attributes in process `syz.1.618'. [ 218.163220][ T6014] em28xx 3-1:0.132: analog set to bulk mode. [ 218.192437][ T5929] em28xx 3-1:0.132: Registering V4L2 extension [ 218.195172][ T8365] netlink: 104 bytes leftover after parsing attributes in process `syz.0.619'. [ 218.204395][ T30] audit: type=1326 audit(1758484171.497:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a6d8ec29 code=0x7ffc0000 [ 218.235027][ T6014] usb 3-1: USB disconnect, device number 32 [ 218.246142][ T6014] em28xx 3-1:0.132: Disconnecting em28xx [ 218.279660][ T30] audit: type=1326 audit(1758484171.497:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46a6d8ec29 code=0x7ffc0000 [ 218.312410][ T8365] netlink: 104 bytes leftover after parsing attributes in process `syz.0.619'. [ 218.324428][ T30] audit: type=1326 audit(1758484171.497:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a6d8ec29 code=0x7ffc0000 [ 218.353802][ T8374] capability: warning: `syz.2.620' uses deprecated v2 capabilities in a way that may be insecure [ 218.366803][ T30] audit: type=1326 audit(1758484171.497:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a6d8ec29 code=0x7ffc0000 [ 218.379707][ T8371] netlink: 180 bytes leftover after parsing attributes in process `syz.1.618'. [ 218.409863][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'. [ 218.426984][ T8369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.451997][ T30] audit: type=1326 audit(1758484171.497:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f46a6d8ec29 code=0x7ffc0000 [ 218.474026][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.533512][ T8369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.536646][ T30] audit: type=1326 audit(1758484171.497:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a6d8ec29 code=0x7ffc0000 [ 218.558501][ T8349] netlink: 'syz.3.614': attribute type 2 has an invalid length. [ 218.571324][ T8349] netlink: 244 bytes leftover after parsing attributes in process `syz.3.614'. [ 218.596145][ T5929] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 218.604156][ T5929] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 218.611601][ T30] audit: type=1326 audit(1758484171.497:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a6d8ec29 code=0x7ffc0000 [ 218.650789][ T5929] em28xx 3-1:0.132: No AC97 audio processor [ 218.671971][ T5922] usbhid 4-1:0.0: can't add hid device: -71 [ 218.680140][ T5922] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 218.690899][ T5922] usb 4-1: USB disconnect, device number 28 [ 218.710310][ T5929] usb 3-1: Decoder not found [ 218.726706][ T5929] em28xx 3-1:0.132: failed to create media graph [ 218.733479][ T30] audit: type=1326 audit(1758484171.497:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46a6d8ec29 code=0x7ffc0000 [ 218.762235][ T5929] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 218.791627][ T5929] em28xx 3-1:0.132: Remote control support is not available for this card. [ 218.800466][ T30] audit: type=1326 audit(1758484171.497:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a6d8ec29 code=0x7ffc0000 [ 218.841294][ T6014] em28xx 3-1:0.132: Closing input extension [ 218.857830][ T6014] em28xx 3-1:0.132: Freeing device [ 218.890553][ T8387] netlink: 44 bytes leftover after parsing attributes in process `syz.2.623'. [ 219.077871][ T8395] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 219.112129][ T8395] team0: Port device wlan1 removed [ 219.145555][ T8395] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 219.489445][ T5929] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 219.781591][ T5929] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 219.790775][ T5929] usb 3-1: config 0 has no interface number 0 [ 219.799426][ T5929] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 219.810235][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.818663][ T5929] usb 3-1: Product: syz [ 219.823042][ T5929] usb 3-1: Manufacturer: syz [ 219.827759][ T5929] usb 3-1: SerialNumber: syz [ 219.835968][ T5929] usb 3-1: config 0 descriptor?? [ 219.843291][ T8423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.853166][ T8423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.864491][ T8423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.874522][ T8423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.080056][ T5922] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 220.249018][ T8400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.259265][ T8400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.278215][ T5922] usb 1-1: config 1 interface 0 altsetting 191 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.305628][ T5922] usb 1-1: config 1 interface 0 has no altsetting 0 [ 220.327439][ T5922] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.336757][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.349167][ T5929] usb 3-1: Firmware version (0.0) predates our first public release. [ 220.356591][ T5922] usb 1-1: Product: syz [ 220.368103][ T5922] usb 1-1: Manufacturer: syz [ 220.378454][ T5922] usb 1-1: SerialNumber: syz [ 220.378642][ T5929] usb 3-1: Please update to version 0.2 or newer [ 220.468977][ T8443] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 220.478712][ T8443] hpfs: hpfs_map_sector(): read error [ 220.613054][ T5922] usb 1-1: bad CDC descriptors [ 220.620385][ T5929] usb 3-1: USB disconnect, device number 33 [ 220.623793][ T5922] usb 1-1: USB disconnect, device number 37 [ 221.784536][ T8455] syzkaller1: entered promiscuous mode [ 221.791541][ T8455] syzkaller1: entered allmulticast mode [ 222.139677][ T6014] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 222.370424][ T6014] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 222.488713][ T6014] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 222.498721][ T6014] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 222.514388][ T6014] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 222.587866][ T6014] usb 1-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 222.612543][ T6014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.643326][ T6014] usb 1-1: Product: syz [ 222.647536][ T6014] usb 1-1: Manufacturer: syz [ 222.650365][ T8467] __nla_validate_parse: 1 callbacks suppressed [ 222.650381][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.644'. [ 222.662681][ T6014] usb 1-1: SerialNumber: syz [ 222.859304][ T6014] usb 1-1: config 0 descriptor?? [ 222.883977][ T6014] ti_usb_3410_5052 1-1:0.0: TI USB 3410 1 port adapter converter detected [ 222.898032][ T6014] usb 1-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 222.970641][ T8482] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 222.981590][ T8482] SQUASHFS error: Failed to read block 0x0: -5 [ 222.987794][ T8482] unable to read squashfs_super_block [ 225.871178][ T980] usb 1-1: USB disconnect, device number 38 [ 225.904844][ T980] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 225.938195][ T8106] kernel write not supported for file /input/mice (pid: 8106 comm: kworker/0:32) [ 225.950755][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 225.950772][ T30] audit: type=1326 audit(1758484179.327:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a6d8ec29 code=0x7ffc0000 [ 225.988131][ T980] ti_usb_3410_5052 1-1:0.0: device disconnected [ 226.012881][ T30] audit: type=1326 audit(1758484179.327:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a6d8ec29 code=0x7ffc0000 [ 226.035323][ T30] audit: type=1326 audit(1758484179.327:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46a6d8ec29 code=0x7ffc0000 [ 226.041346][ T8503] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 226.071161][ T5922] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 226.079677][ T8506] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 226.082712][ T30] audit: type=1326 audit(1758484179.327:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a6d8ec29 code=0x7ffc0000 [ 226.111793][ T8506] hpfs: hpfs_map_sector(): read error [ 226.111969][ T8503] hpfs: hpfs_map_sector(): read error [ 226.122829][ T30] audit: type=1326 audit(1758484179.327:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a6d8ec29 code=0x7ffc0000 [ 226.160380][ T30] audit: type=1326 audit(1758484179.327:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f46a6d8ec29 code=0x7ffc0000 [ 226.191317][ T30] audit: type=1326 audit(1758484179.327:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a6d8ec29 code=0x7ffc0000 [ 226.231076][ T5922] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 226.238801][ T5922] usb 5-1: can't read configurations, error -61 [ 226.293939][ T30] audit: type=1326 audit(1758484179.327:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a6d8ec29 code=0x7ffc0000 [ 226.303515][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 226.401884][ T5922] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 226.562711][ T5922] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 226.570527][ T5922] usb 5-1: can't read configurations, error -61 [ 226.602102][ T5922] usb usb5-port1: attempt power cycle [ 226.979876][ T5922] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 227.085183][ T5922] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 227.101641][ T5922] usb 5-1: can't read configurations, error -61 [ 227.280219][ T5922] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 227.334601][ T5922] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 227.342569][ T5922] usb 5-1: can't read configurations, error -61 [ 227.363287][ T5922] usb usb5-port1: unable to enumerate USB device [ 227.438756][ T8509] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 227.450024][ T8509] XFS (loop3): SB validate failed with error -5. [ 227.615655][ T8509] overlayfs: missing 'lowerdir' [ 227.859564][ T8532] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 227.869560][ T8532] SQUASHFS error: Failed to read block 0x0: -5 [ 227.875973][ T8532] unable to read squashfs_super_block [ 228.989625][ T5922] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 229.369188][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'. [ 229.422799][ T5922] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.473900][ T8552] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 3 [ 229.483863][ T8552] EXT4-fs (loop1): unable to read superblock [ 229.503633][ T5922] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 229.523950][ T5922] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 229.547747][ T5922] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 229.684382][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.746300][ T8541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 230.017671][ T8541] netlink: 64 bytes leftover after parsing attributes in process `syz.3.659'. [ 230.028133][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.659'. [ 230.263979][ T5922] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 230.286387][ T5922] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input18 [ 230.392118][ T5922] usb 4-1: USB disconnect, device number 29 [ 230.392170][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 acpid: input device has been disconnected, fd 3 [ 231.689563][ T5922] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 231.735021][ T8585] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 231.761384][ T8585] hpfs: hpfs_map_sector(): read error [ 231.781114][ T8589] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 231.786522][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'. [ 231.792179][ T8589] EXT4-fs (loop4): unable to read superblock [ 231.882359][ T5922] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 231.882400][ T5922] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.882421][ T5922] usb 3-1: config 0 interface 0 has no altsetting 0 [ 231.882456][ T5922] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 231.882477][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.885098][ T5922] usb 3-1: config 0 descriptor?? [ 232.529600][ T980] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 232.697471][ T980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 232.720499][ T980] usb 5-1: config 1 has an invalid interface number: 255 but max is 1 [ 232.729103][ T980] usb 5-1: config 1 has no interface number 1 [ 232.817320][ T980] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 232.839731][ T980] usb 5-1: too many endpoints for config 1 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 232.851354][ T980] usb 5-1: config 1 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 232.865397][ T980] usb 5-1: config 1 interface 0 has no altsetting 0 [ 232.872258][ T980] usb 5-1: config 1 interface 255 has no altsetting 0 [ 232.883654][ T980] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 232.893739][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.902375][ T980] usb 5-1: Product: syz [ 232.906798][ T980] usb 5-1: Manufacturer: syz [ 232.914213][ T980] usb 5-1: SerialNumber: syz [ 233.131636][ T980] smsusb:smsusb_probe: board id=8, interface number 0 [ 233.154565][ T980] smsusb:smsusb_probe: board id=8, interface number 255 [ 233.178978][ T980] usb 5-1: USB disconnect, device number 39 [ 233.199676][ T8106] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 233.350561][ T8106] usb 2-1: Using ep0 maxpacket: 16 [ 233.367594][ T8106] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.398637][ T8106] usb 2-1: config 0 interface 0 has no altsetting 0 [ 233.414700][ T8106] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 233.437191][ T8106] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.480626][ T8106] usb 2-1: config 0 descriptor?? [ 233.599435][ T5922] usbhid 3-1:0.0: can't add hid device: -71 [ 233.616580][ T5922] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 233.652506][ T5922] usb 3-1: USB disconnect, device number 34 [ 234.202722][ T8620] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 234.207096][ T8106] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 234.237188][ T8620] EXT4-fs (loop4): unable to read superblock [ 234.427637][ T8621] bridge2: entered promiscuous mode [ 234.432607][ T6014] usb 2-1: USB disconnect, device number 21 [ 234.450513][ T8621] bridge3: entered promiscuous mode [ 234.475384][ T8621] bridge4: entered promiscuous mode [ 234.488070][ T8621] bridge5: entered promiscuous mode [ 234.512018][ T8621] bridge6: entered promiscuous mode [ 234.537836][ T8621] bridge7: entered promiscuous mode [ 234.556348][ T8621] bridge8: entered promiscuous mode [ 234.611382][ T8621] bridge9: entered promiscuous mode [ 234.618575][ T8632] hfsplus: unable to load nls mapping "mart=0x000000000txOg6G2…" [ 234.674364][ T8621] bridge10: entered promiscuous mode [ 234.697390][ T8621] bridge11: entered promiscuous mode [ 234.890269][ T8651] batman_adv: batadv0: Adding interface: gretap2 [ 234.899966][ T8651] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.968775][ T8651] batman_adv: batadv0: Interface activated: gretap2 [ 235.129404][ T5922] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 235.390726][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 235.433554][ T5922] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 235.446444][ T5922] usb 3-1: config 0 has no interface number 0 [ 235.469267][ T5922] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 235.485897][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.526479][ T5922] usb 3-1: Product: syz [ 235.536657][ T5922] usb 3-1: Manufacturer: syz [ 235.553173][ T5922] usb 3-1: SerialNumber: syz [ 235.566799][ T5922] usb 3-1: config 0 descriptor?? [ 235.717360][ T8713] netlink: 36 bytes leftover after parsing attributes in process `syz.4.696'. [ 235.785580][ T5922] mdc800 3-1:0.109: probe fails -> wrong Interface [ 235.809080][ T5922] usb 3-1: USB disconnect, device number 35 [ 236.319546][ T5950] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 236.565793][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 236.669566][ T8691] syz.3.690 (8691) used greatest stack depth: 17832 bytes left [ 236.691191][ T5950] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 236.713488][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.754046][ T5950] usb 2-1: config 0 descriptor?? [ 236.768392][ T8732] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 236.896115][ T8749] overlayfs: missing 'lowerdir' [ 237.482666][ T8754] cgroup: fork rejected by pids controller in /syz2 [ 238.119697][ T980] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 242.059570][ T5950] usbhid 2-1:0.0: can't add hid device: -32 [ 242.065612][ T5950] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 243.160463][ T8106] usb 2-1: USB disconnect, device number 22 [ 243.322918][ T980] usb 3-1: device descriptor read/all, error -71 [ 243.418042][ T8815] netlink: 'syz.1.710': attribute type 10 has an invalid length. [ 243.433766][ T8814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.708'. [ 243.884109][ T8815] team0: Port device wlan1 added [ 243.975829][ T8841] netlink: 'syz.2.714': attribute type 1 has an invalid length. [ 243.998449][ T8831] sg_write: process 514 (syz.4.712) changed security contexts after opening file descriptor, this is not allowed. [ 244.056312][ T8841] netlink: 'syz.2.714': attribute type 1 has an invalid length. [ 244.173474][ T8847] overlayfs: missing 'lowerdir' [ 244.409819][ T980] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 244.439672][ T6014] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 244.560152][ T980] usb 3-1: device descriptor read/64, error -71 [ 244.625069][ T6014] usb 2-1: device descriptor read/64, error -71 [ 244.674460][ T8858] netlink: 256 bytes leftover after parsing attributes in process `syz.3.719'. [ 244.716614][ T980] usb usb3-port1: attempt power cycle [ 244.843222][ T8863] netlink: 256 bytes leftover after parsing attributes in process `syz.3.721'. [ 244.858550][ T8863] unsupported nlmsg_type 40 [ 244.879784][ T6014] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 244.929422][ T5950] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 245.039716][ T6014] usb 2-1: device descriptor read/64, error -71 [ 245.089440][ T980] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 245.102496][ T5950] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 245.120107][ T980] usb 3-1: device descriptor read/8, error -71 [ 245.129870][ T5950] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 245.150166][ T6014] usb usb2-port1: attempt power cycle [ 245.164002][ T5950] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 245.210544][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.268003][ T8860] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 245.314476][ T5950] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 245.359499][ T980] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 245.402667][ T980] usb 3-1: device descriptor read/8, error -71 [ 245.525102][ T6014] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 245.540055][ T980] usb usb3-port1: unable to enumerate USB device [ 245.583235][ T6014] usb 2-1: device descriptor read/8, error -71 [ 245.656456][ T8874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.724'. [ 245.661485][ T5950] usb 1-1: USB disconnect, device number 39 [ 245.671398][ T8874] netlink: 'syz.3.724': attribute type 20 has an invalid length. [ 245.733536][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'. [ 245.743069][ T8874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.724'. [ 245.752128][ T8874] netlink: 'syz.3.724': attribute type 20 has an invalid length. [ 245.850148][ T6014] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 245.878318][ T6014] usb 2-1: device descriptor read/8, error -71 [ 245.893346][ T8880] msdos: Unknown parameter 'cÄts' [ 245.899695][ T8880] fuse: Bad value for 'fd' [ 245.989996][ T6014] usb usb2-port1: unable to enumerate USB device [ 245.996512][ T5929] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 246.150622][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 246.156569][ T5929] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 246.166929][ T5929] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 246.174667][ T5929] usb 5-1: can't read configurations, error -61 [ 246.315929][ T8888] overlayfs: missing 'lowerdir' [ 246.329523][ T5929] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 246.479486][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 246.485772][ T5929] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 246.497217][ T5929] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 246.505031][ T5929] usb 5-1: can't read configurations, error -61 [ 246.511656][ T5929] usb usb5-port1: attempt power cycle [ 246.600462][ T8105] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 246.759426][ T8105] usb 1-1: Using ep0 maxpacket: 32 [ 246.765961][ T8105] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 246.823562][ T8105] usb 1-1: config 0 has no interface number 0 [ 247.018041][ T5929] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 247.188001][ T8105] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 247.209459][ T8105] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.211071][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 247.225292][ T5929] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 247.237566][ T5929] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 247.259689][ T5929] usb 5-1: can't read configurations, error -61 [ 247.264101][ T8105] usb 1-1: Product: syz [ 247.273185][ T8105] usb 1-1: Manufacturer: syz [ 247.273205][ T8105] usb 1-1: SerialNumber: syz [ 247.278481][ T8105] usb 1-1: config 0 descriptor?? [ 247.282490][ T8105] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 247.320779][ T8900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.330344][ T8105] usb 1-1: selecting invalid altsetting 1 [ 247.336090][ T8105] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 247.360246][ T8105] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 247.382268][ T8105] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 247.396005][ T8105] usb 1-1: media controller created [ 247.409724][ T5929] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 247.440898][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 247.448731][ T8105] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.453336][ T5929] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 247.503842][ T5929] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 247.520619][ T5929] usb 5-1: can't read configurations, error -61 [ 247.542129][ T5929] usb usb5-port1: unable to enumerate USB device [ 247.636761][ T8904] random: crng reseeded on system resumption [ 247.734114][ T5922] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 247.770926][ T8898] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value [ 247.890582][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 247.898116][ T5922] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 247.906428][ T5922] usb 3-1: config 0 has no interface number 0 [ 247.912593][ T5922] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 247.923558][ T5922] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 247.935247][ T5922] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 247.946433][ T5922] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 247.956817][ T5922] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.973064][ T5922] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 247.982214][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.990265][ T5922] usb 3-1: Product: syz [ 247.990361][ T8898] IPVS: length: 84 != 24 [ 247.994449][ T5922] usb 3-1: Manufacturer: syz [ 247.994467][ T5922] usb 3-1: SerialNumber: syz [ 248.010979][ T5922] usb 3-1: config 0 descriptor?? [ 248.219135][ T5922] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=쇳敺ކ interface=186 now attached to iowarrior0 [ 248.239398][ T5929] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 248.389435][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 248.396429][ T5929] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.406766][ T5929] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 248.415740][ T5929] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.432538][ T5929] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 248.441931][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.449959][ T5929] usb 2-1: Product: syz [ 248.454212][ T5929] usb 2-1: Manufacturer: syz [ 248.458817][ T5929] usb 2-1: SerialNumber: syz [ 248.499796][ T8105] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 248.507458][ T8105] zl10353_read_register: readreg error (reg=127, ret==-110) [ 248.507563][ T8890] usb 1-1: dvb_usb_ce6230: I2C read not implemented [ 248.671144][ T5929] cdc_ncm 2-1:1.0: skipping garbage [ 248.682323][ T5929] cdc_ncm 2-1:1.0: skipping garbage [ 248.687670][ T5929] cdc_ncm 2-1:1.0: skipping garbage [ 248.693383][ T5929] cdc_ncm 2-1:1.0: invalid descriptor buffer length [ 248.700239][ T5929] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 248.707179][ T5929] cdc_ncm 2-1:1.0: bind() failure [ 248.719050][ T5929] usb 2-1: USB disconnect, device number 27 [ 249.048949][ T8105] usb 1-1: USB disconnect, device number 40 [ 249.057383][ T5922] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 249.131622][ T8917] overlayfs: missing 'lowerdir' [ 249.206358][ T8926] overlay: Unknown parameter 'uid<00000000000000016384' [ 249.220591][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 249.234639][ T5922] usb 5-1: config 0 has an invalid interface number: 22 but max is 0 [ 249.245112][ T5922] usb 5-1: config 0 has no interface number 0 [ 249.251680][ T5922] usb 5-1: config 0 interface 22 has no altsetting 0 [ 249.270500][ T5922] usb 5-1: New USB device found, idVendor=0733, idProduct=3261, bcdDevice=f5.e7 [ 249.287401][ T5922] usb 5-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 249.308911][ T5922] usb 5-1: Product: syz [ 249.545383][ T5922] usb 5-1: Manufacturer: syz [ 249.660292][ T5929] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 249.666766][ T5922] usb 5-1: SerialNumber: syz [ 249.746242][ T5922] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 249.755476][ T5922] usb 5-1: no configuration chosen from 1 choice [ 249.809816][ T980] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 249.829414][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 249.836140][ T5929] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 249.844996][ T5929] usb 2-1: config 2 has no interface number 0 [ 249.851476][ T5929] usb 2-1: config 2 interface 31 has no altsetting 0 [ 249.863444][ T5929] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 249.873014][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.881096][ T5929] usb 2-1: Product: syz [ 249.885348][ T5929] usb 2-1: Manufacturer: syz [ 249.890012][ T5929] usb 2-1: SerialNumber: syz [ 249.919628][ T8937] mkiss: ax0: crc mode is auto. [ 249.969596][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 249.978680][ T980] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 249.988401][ T980] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 249.997465][ T980] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 250.006702][ T980] usb 4-1: config 1 has no interface number 0 [ 250.014086][ T980] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.027727][ T980] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 250.043851][ T980] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 250.053555][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.069133][ T980] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 250.467457][ T6014] usb 3-1: USB disconnect, device number 40 [ 250.675405][ T980] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 250.987909][ T5950] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 251.046236][ T8945] ntfs3: Unknown parameter 'ÿÿ' [ 251.156351][ T5950] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 251.165842][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.179271][ T5950] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 251.190795][ T5950] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 251.199287][ T5950] usb 1-1: Manufacturer: syz [ 251.231933][ T5950] usb 1-1: config 0 descriptor?? [ 251.339649][ T5950] rc_core: IR keymap rc-hauppauge not found [ 251.346860][ T5950] Registered IR keymap rc-empty [ 251.357657][ T5950] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 251.374398][ T5950] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 251.606311][ T8957] overlayfs: missing 'lowerdir' [ 251.707299][ T5929] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 251.709374][ T980] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 251.767660][ T980] usb 5-1: USB disconnect, device number 44 [ 252.342096][ T5929] usb 2-1: USB disconnect, device number 28 [ 252.443992][ T8105] usb 4-1: USB disconnect, device number 30 [ 252.488463][ T8105] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 252.536758][ T8970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 252.812579][ T8972] cgroup: fork rejected by pids controller in /syz3 [ 253.554446][ T9064] tipc: Enabled bearer , priority 0 [ 253.571981][ T9064] syzkaller0: entered promiscuous mode [ 253.584271][ T9064] syzkaller0: entered allmulticast mode [ 253.600527][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.758'. [ 253.646753][ T9064] tipc: Resetting bearer [ 253.656160][ T9063] tipc: Resetting bearer [ 253.678853][ T9063] tipc: Disabling bearer [ 253.712477][ T5950] usb 1-1: USB disconnect, device number 41 acpid: input device has been disconnected, fd 3 [ 253.824767][ T9070] binfmt_misc: register: failed to install interpreter file ./file0 [ 254.329688][ T9078] fuse: Unknown parameter '/dev/fuse' [ 254.335360][ T9076] fuse: Unknown parameter '/dev/fuse' [ 254.397832][ T9080] netlink: 'syz.4.761': attribute type 10 has an invalid length. [ 254.415333][ T5950] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 254.445000][ T9078] netlink: 'syz.4.761': attribute type 10 has an invalid length. [ 254.461737][ T9086] overlayfs: missing 'lowerdir' [ 254.569442][ T5950] usb 1-1: Using ep0 maxpacket: 32 [ 254.576924][ T5950] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 254.586145][ T5950] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 254.596844][ T5950] usb 1-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 254.608099][ T5950] usb 1-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 254.621898][ T5950] usb 1-1: too many endpoints for config 1 interface 2 altsetting 1: 48, using maximum allowed: 30 [ 254.644872][ T5950] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 254.675672][ T5950] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 254.812358][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.923994][ T5950] usb 1-1: Product: syz [ 254.929154][ T5950] usb 1-1: Manufacturer: syz [ 254.936260][ T5950] usb 1-1: SerialNumber: syz [ 254.968477][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'. [ 254.978092][ T9093] netlink: 'syz.1.765': attribute type 5 has an invalid length. [ 254.986048][ T9093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.765'. [ 255.078649][ T9097] /dev/nullb0: Can't open blockdev [ 255.523610][ T9093] geneve3: entered promiscuous mode [ 255.530528][ T9093] geneve3: entered allmulticast mode [ 255.549911][ T2982] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 255.567060][ T2982] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 255.602346][ T2982] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 255.611306][ T5950] usb 1-1: USB disconnect, device number 42 [ 255.631496][ T2982] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 255.794481][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.802296][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.365325][ T9117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.407483][ T9117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.609574][ T5950] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 258.050672][ T9133] overlayfs: missing 'workdir' [ 259.339418][ T5950] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 259.511351][ T5950] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.618903][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 259.643510][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 259.654798][ T5950] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 259.676201][ T5950] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.691591][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.861367][ T9170] overlayfs: missing 'workdir' [ 260.327280][ T5950] usb 1-1: config 0 descriptor?? [ 260.420527][ T9180] kernel read not supported for file /  (pid: 9180 comm: syz.1.788) [ 260.442064][ T30] audit: type=1800 audit(1758484213.837:47): pid=9180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.788" name=200120 dev="mqueue" ino=23337 res=0 errno=0 [ 260.503055][ T9184] udf: Unknown parameter '00000000000000000004' [ 260.609809][ T5922] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 260.709491][ T5929] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 260.760490][ T5950] plantronics 0003:047F:FFFF.0012: item fetching failed at offset 3/15 [ 260.771205][ T5922] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 260.784971][ T5922] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 260.786553][ T5950] plantronics 0003:047F:FFFF.0012: parse failed [ 260.806482][ T5950] plantronics 0003:047F:FFFF.0012: probe with driver plantronics failed with error -22 [ 260.831161][ T5922] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 260.840804][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 260.848811][ T5922] usb 4-1: Product: syz [ 260.853579][ T5922] usb 4-1: SerialNumber: syz [ 260.859796][ T5929] usb 2-1: device descriptor read/64, error -71 [ 260.885069][ T5922] usb 4-1: bad CDC descriptors [ 260.894841][ T5922] option 4-1:7.0: GSM modem (1-port) converter detected [ 260.985505][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.996876][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.033507][ T5950] usb 1-1: USB disconnect, device number 44 [ 261.108732][ T5922] usb 4-1: USB disconnect, device number 31 [ 261.120771][ T5922] option 4-1:7.0: device disconnected [ 261.121574][ T5929] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 261.279576][ T5929] usb 2-1: device descriptor read/64, error -71 [ 261.389626][ T5929] usb usb2-port1: attempt power cycle [ 261.559720][ T5922] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 261.710096][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 261.717861][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 261.730356][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.740723][ T5922] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 261.749985][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.759666][ T5929] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 261.770124][ T5922] usb 4-1: config 0 descriptor?? [ 261.780050][ T5929] usb 2-1: device descriptor read/8, error -71 [ 261.859709][ T8105] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 262.009663][ T8105] usb 1-1: Using ep0 maxpacket: 16 [ 262.017422][ T8105] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 262.026885][ T8105] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.038254][ T8105] usb 1-1: config 0 descriptor?? [ 262.040078][ T5929] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 262.055052][ T8105] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 262.080109][ T5929] usb 2-1: device descriptor read/8, error -71 [ 262.189745][ T5929] usb usb2-port1: unable to enumerate USB device [ 262.189912][ T5922] magicmouse 0003:05AC:0265.0013: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 262.267329][ T8105] gspca_sonixj: reg_r err -71 [ 262.272807][ T8105] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 262.284659][ T8105] usb 1-1: USB disconnect, device number 45 [ 262.373204][ T9230] overlayfs: missing 'workdir' [ 262.388583][ T9232] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.398389][ T9232] hpfs: hpfs_map_sector(): read error [ 262.448941][ T2982] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x7d [ 263.788405][ T9253] kvm: pic: single mode not supported [ 263.790192][ T9253] kvm: pic: non byte write [ 263.801358][ T9253] kvm: pic: non byte write [ 263.805994][ T9253] kvm: pic: non byte write [ 263.821101][ T9253] kvm: pic: non byte write [ 263.827008][ T9253] kvm: pic: non byte write [ 264.043818][ T9253] kvm: pic: non byte write [ 264.051617][ T9253] kvm: pic: non byte write [ 264.058393][ T9253] kvm: pic: non byte write [ 264.647651][ T5976] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 264.674593][ T9203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 264.694994][ T9253] kvm: pic: non byte write [ 264.833899][ T5976] usb 2-1: Using ep0 maxpacket: 8 [ 264.867467][ T5976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 264.905254][ T24] usb 4-1: USB disconnect, device number 32 [ 264.920800][ T5976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.960267][ T5976] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 264.981091][ T5976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 265.012897][ T5976] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 265.026935][ T9268] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 265.046400][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.811'. [ 265.065838][ T9268] EXT4-fs (loop0): unable to read superblock [ 265.070145][ T5976] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 265.089983][ T5976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.092653][ T9274] overlayfs: missing 'lowerdir' [ 265.110405][ T5976] usb 2-1: config 0 descriptor?? [ 265.116424][ T9251] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 265.136097][ T9267] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 265.164188][ T9267] EXT4-fs (loop0): unable to read superblock [ 265.207960][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 265.294003][ T9282] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 265.302949][ T8106] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 265.313737][ T9282] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 265.409181][ T9290] netlink: 'syz.3.817': attribute type 3 has an invalid length. [ 265.460291][ T8106] usb 3-1: Using ep0 maxpacket: 32 [ 265.471870][ T8106] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.483509][ T8106] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 265.513044][ T8106] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 265.529419][ T8106] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.543548][ T24] usb 2-1: USB disconnect, device number 33 [ 265.552013][ T5865] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 265.560239][ T8106] usb 3-1: config 0 descriptor?? [ 265.739729][ T5976] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 265.899578][ T5976] usb 4-1: device descriptor read/64, error -71 [ 266.753502][ T5976] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 266.847431][ T9319] overlayfs: missing 'lowerdir' [ 266.931569][ T5976] usb 4-1: device descriptor read/64, error -71 [ 267.016450][ T9327] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 267.039836][ T9327] EXT4-fs (loop1): unable to read superblock [ 267.053760][ T5976] usb usb4-port1: attempt power cycle [ 267.160402][ T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 267.303024][ T9330] EXT4-fs: Ignoring removed orlov option [ 267.313036][ T9330] I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 267.324812][ T9330] EXT4-fs (loop1): unable to read superblock [ 267.399803][ T5976] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 267.465341][ T5976] usb 4-1: device descriptor read/8, error -71 [ 267.535421][ T24] usb 5-1: device descriptor read/64, error -71 [ 267.655443][ T9336] /dev/nullb0: Can't open blockdev [ 267.666468][ T9336] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 267.678602][ T9336] EXT4-fs (loop0): unable to read superblock [ 267.779563][ T5976] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 267.787216][ T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 267.810958][ T5976] usb 4-1: device descriptor read/8, error -71 [ 267.974976][ T5976] usb usb4-port1: unable to enumerate USB device [ 268.026415][ T9343] ubi0: attaching mtd0 [ 268.032539][ T9343] ubi0: scanning is finished [ 268.037437][ T9343] ubi0: empty MTD device detected [ 268.045924][ T24] usb 5-1: device descriptor read/64, error -71 [ 268.268951][ T24] usb usb5-port1: attempt power cycle [ 268.356716][ T9343] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 268.364454][ T9343] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 268.371704][ T9343] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 268.378632][ T9343] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 268.386010][ T9343] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 268.392941][ T9343] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 268.400934][ T9343] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2490280539 [ 268.410914][ T9343] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 268.428066][ T9346] ubi0: background thread "ubi_bgt0d" started, PID 9346 [ 269.099171][ T9348] netlink: 'syz.3.829': attribute type 4 has an invalid length. [ 269.119397][ T24] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 269.120773][ T5922] usb 3-1: USB disconnect, device number 41 [ 269.139907][ T24] usb 5-1: device descriptor read/8, error -71 [ 269.769896][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 269.800208][ T24] usb 5-1: device descriptor read/8, error -71 [ 269.962197][ T24] usb usb5-port1: unable to enumerate USB device [ 270.277267][ T9365] overlayfs: missing 'lowerdir' [ 270.369566][ T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 270.569921][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 270.586730][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.922521][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 270.939910][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 270.949426][ T24] usb 5-1: SerialNumber: syz [ 270.971234][ T24] usb 5-1: config 0 descriptor?? [ 270.984414][ T24] uvcvideo 5-1:0.0: Found UVC 0.00 device (05ac:8501) [ 271.005416][ T24] uvcvideo 5-1:0.0: Failed to create links for entity 255 [ 271.013162][ T24] uvcvideo 5-1:0.0: Failed to register entities (-22). [ 271.191194][ T5976] usb 5-1: USB disconnect, device number 49 [ 271.282693][ T24] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 271.309976][ T5929] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 271.331744][ T9391] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.341612][ T9391] hpfs: hpfs_map_sector(): read error [ 271.419569][ T24] usb 2-1: device descriptor read/64, error -71 [ 271.469480][ T5929] usb 3-1: Using ep0 maxpacket: 32 [ 271.689530][ T24] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 272.010157][ T5929] usb 3-1: unable to get BOS descriptor or descriptor too short [ 272.035810][ T5929] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 272.059427][ T5929] usb 3-1: can't read configurations, error -71 [ 272.159461][ T24] usb 2-1: device descriptor read/64, error -71 [ 272.269565][ T24] usb usb2-port1: attempt power cycle [ 272.369942][ T9403] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 272.378868][ T9403] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 272.609947][ T24] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 272.650789][ T24] usb 2-1: device descriptor read/8, error -71 [ 272.689728][ T9417] ntfs3(loop2): try to read out of volume at offset 0x0 [ 272.874018][ T9418] netlink: 'syz.4.850': attribute type 39 has an invalid length. [ 272.899615][ T24] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 272.930272][ T24] usb 2-1: device descriptor read/8, error -71 [ 273.102041][ T24] usb usb2-port1: unable to enumerate USB device [ 273.163516][ T9433] netlink: 256 bytes leftover after parsing attributes in process `syz.3.854'. [ 273.172645][ T9433] netlink: 72 bytes leftover after parsing attributes in process `syz.3.854'. [ 273.760346][ T9445] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 273.770671][ T9445] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 273.922448][ T9452] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 273.932169][ T9452] EXT4-fs (loop2): unable to read superblock [ 276.198113][ T9435] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.785853][ T9502] @: renamed from vlan0 (while UP) [ 276.838220][ T9503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.848356][ T9503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.897356][ T9511] debugfs: '!' already exists in 'ieee80211' [ 276.969391][ T5922] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 277.089556][ T5929] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 277.229494][ T5929] usb 5-1: device descriptor read/64, error -71 [ 277.312577][ T5922] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 277.332208][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.489712][ T5929] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 277.724727][ T5922] usb 4-1: config 0 descriptor?? [ 277.849487][ T5929] usb 5-1: device descriptor read/64, error -71 [ 277.923669][ T9530] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 277.959749][ T9530] EXT4-fs (loop2): unable to read superblock [ 278.009145][ T9530] netlink: 'syz.2.880': attribute type 22 has an invalid length. [ 278.017321][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.880'. [ 278.047598][ T9530] netlink: 'syz.2.880': attribute type 22 has an invalid length. [ 278.057861][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.880'. [ 278.071726][ T5929] usb usb5-port1: attempt power cycle [ 278.090277][ T9538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.881'. [ 278.368853][ T5922] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 278.380958][ T5922] asix 4-1:0.0: probe with driver asix failed with error -61 [ 278.393172][ T9537] BTRFS error: invalid value 0 for thread_pool [ 278.410844][ T5929] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 278.492944][ T5929] usb 5-1: device descriptor read/8, error -71 [ 278.910616][ T5929] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 279.068267][ T5929] usb 5-1: device descriptor read/8, error -71 [ 279.186324][ T5929] usb usb5-port1: unable to enumerate USB device [ 279.256896][ T9554] pimreg: entered allmulticast mode [ 279.273647][ T9554] pimreg: left allmulticast mode [ 279.699041][ T5922] usb 4-1: USB disconnect, device number 37 [ 280.332750][ T5922] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 280.627155][ T9575] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 280.638198][ T9575] block device autoloading is deprecated and will be removed. [ 281.249230][ T5922] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 281.275294][ T5922] usb 4-1: config 0 has no interface number 0 [ 281.363520][ T5922] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.873518][ T5922] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.920921][ T5922] usb 4-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 281.948228][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.986573][ T5922] usb 4-1: config 0 descriptor?? [ 282.809562][ T5922] usbhid 4-1:0.2: can't add hid device: -71 [ 282.822336][ T5922] usbhid 4-1:0.2: probe with driver usbhid failed with error -71 [ 282.882020][ T5922] usb 4-1: USB disconnect, device number 38 [ 283.125314][ T9624] random: crng reseeded on system resumption [ 284.213515][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 284.297413][ T9626] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 284.363804][ T9633] netlink: 52 bytes leftover after parsing attributes in process `syz.1.903'. [ 284.379393][ T9626] overlayfs: missing 'lowerdir' [ 284.507762][ T9636] netlink: 3 bytes leftover after parsing attributes in process `syz.0.905'. [ 284.517395][ T9636] 0ªX¹¦À: renamed from caif0 [ 284.525994][ T9636] 0ªX¹¦À: entered allmulticast mode [ 284.544346][ T9636] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 285.161340][ T43] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 286.328630][ T9672] tmpfs: Bad value for 'mpol' [ 286.381222][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 286.420588][ T9666] ext4: Unknown parameter 'fsmagic' [ 286.444869][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.471602][ T43] usb 1-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 286.483336][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.521147][ T43] usb 1-1: config 0 descriptor?? [ 286.526709][ T9661] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 286.598080][ T9682] netlink: 'syz.2.916': attribute type 58 has an invalid length. [ 286.606227][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.916'. [ 287.020114][ T9689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.225516][ T9689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.319449][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 287.343345][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 287.374042][ T43] usb 1-1: USB disconnect, device number 46 [ 287.588930][ T9697] binder: 9696:9697 ioctl c0306201 2000000001c0 returned -14 [ 287.719509][ T43] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 288.018914][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 288.090460][ T43] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 288.187199][ T43] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.241242][ T43] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 288.317522][ T43] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 288.434054][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.476362][ T43] usb 1-1: Product: syz [ 288.489748][ T43] usb 1-1: Manufacturer: syz [ 288.494479][ T43] usb 1-1: SerialNumber: syz [ 288.665429][ T5184] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 288.740375][ T43] usb 1-1: unit 4 not found! [ 288.776666][ T43] usb 1-1: USB disconnect, device number 47 [ 288.909494][ T5929] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 289.082395][ T5929] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 289.100140][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.128398][ T9740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.929'. [ 289.168306][ T5929] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 289.199438][ T5929] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 289.219264][ T5929] usb 2-1: Manufacturer: syz [ 289.238876][ T5929] usb 2-1: config 0 descriptor?? [ 289.340419][ T5929] rc_core: IR keymap rc-hauppauge not found [ 289.355444][ T5929] Registered IR keymap rc-empty [ 289.390300][ T5929] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 289.573205][ T5929] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input21 [ 289.577173][ T9716] f2fs: Unknown parameter 'extent_c' [ 290.169559][ T9714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.923'. [ 290.298722][ T9762] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.308452][ T9762] FAT-fs (loop2): unable to read boot sector [ 290.312102][ T9748] ref_ctr increment failed for inode: 0x3e0 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888029bb9580 [ 290.332239][ T9764] netlink: 48 bytes leftover after parsing attributes in process `syz.0.933'. [ 290.708416][ T9775] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 290.751753][ T9775] kvm: pic: level sensitive irq not supported [ 290.752042][ T9775] kvm: pic: non byte read [ 290.790961][ T9775] kvm: pic: level sensitive irq not supported [ 290.791045][ T9775] kvm: pic: non byte read [ 291.156379][ T9789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.940'. [ 291.190060][ T9789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.940'. [ 291.753716][ T5950] usb 2-1: USB disconnect, device number 38 acpid: input device has been disconnected, fd 3 [ 291.893753][ T9799] netlink: 56 bytes leftover after parsing attributes in process `syz.0.943'. [ 292.022923][ T9806] vivid-000: disconnect [ 292.035411][ T9804] vivid-000: reconnect [ 292.169388][ T5950] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 293.160041][ T5950] usb 2-1: device descriptor read/64, error -71 [ 293.352020][ T9835] ubi: mtd0 is already attached to ubi0 [ 293.959766][ T5950] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 294.065054][ T5184] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 294.139572][ T5950] usb 2-1: device descriptor read/64, error -71 [ 294.256210][ T5950] usb usb2-port1: attempt power cycle [ 294.350795][ T5922] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 294.494694][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'. [ 294.544192][ T30] audit: type=1326 audit(1758484247.937:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9849 comm="syz.0.958" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff79b8ec29 code=0x0 [ 294.570771][ T5922] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 294.580150][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.593065][ T5922] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 294.607611][ T5922] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 294.616008][ T5922] usb 4-1: Manufacturer: syz [ 294.624162][ T5922] usb 4-1: config 0 descriptor?? [ 294.689783][ T5950] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 294.704802][ T5922] rc_core: IR keymap rc-hauppauge not found [ 294.712457][ T5922] Registered IR keymap rc-empty [ 294.718553][ T5922] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 294.729933][ T5950] usb 2-1: device descriptor read/8, error -71 [ 294.735064][ T5922] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input23 [ 295.999045][ T5950] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 296.235486][ T5950] usb 2-1: device not accepting address 42, error -71 [ 296.243169][ T5950] usb usb2-port1: unable to enumerate USB device [ 296.327996][ T9872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.964'. [ 296.746172][ T9871] netlink: 'syz.4.963': attribute type 10 has an invalid length. [ 296.754275][ T9871] netlink: 55 bytes leftover after parsing attributes in process `syz.4.963'. [ 401.619263][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 401.626302][ C0] rcu: 1-...!: (1 GPs behind) idle=9594/1/0x4000000000000000 softirq=35732/35733 fqs=3 [ 401.637349][ C0] rcu: (detected by 0, t=10505 jiffies, g=31173, q=376 ncpus=2) [ 401.645108][ C0] Sending NMI from CPU 0 to CPUs 1: [ 401.645143][ C1] NMI backtrace for cpu 1 [ 401.645168][ C1] CPU: 1 UID: 0 PID: 9876 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 401.645201][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 401.645217][ C1] RIP: 0010:taprio_set_budgets+0x1f6/0x3b0 [ 401.645250][ C1] Code: 00 e8 03 00 00 4c 8b 74 24 18 4c 89 f7 be 08 00 00 00 e8 3d 32 81 f8 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 10 80 3c 01 00 <74> 08 4c 89 f7 e8 b0 2f 81 f8 49 8b 0e 4c 89 e8 48 09 c8 48 c1 e8 [ 401.645265][ C1] RSP: 0018:ffffc90000a08c00 EFLAGS: 00000046 [ 401.645280][ C1] RAX: dffffc0000000000 RBX: 0000000000000004 RCX: 1ffff11006245e5c [ 401.645292][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88803122f2e0 [ 401.645302][ C1] RBP: 0000000000000000 R08: ffff88803122f2e7 R09: 1ffff11006245e5c [ 401.645313][ C1] R10: dffffc0000000000 R11: ffffed1006245e5d R12: 0000000000000001 [ 401.645325][ C1] R13: 0000000000000000 R14: ffff88803122f2e0 R15: ffff8880569f9000 [ 401.645336][ C1] FS: 0000000000000000(0000) GS:ffff888125ae7000(0000) knlGS:0000000000000000 [ 401.645349][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.645360][ C1] CR2: 00007f86c16a7fe8 CR3: 0000000031240000 CR4: 00000000003526f0 [ 401.645374][ C1] Call Trace: [ 401.645384][ C1] [ 401.645396][ C1] advance_sched+0x963/0xc90 [ 401.645422][ C1] ? __pfx_advance_sched+0x10/0x10 [ 401.645439][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 401.645471][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 401.645492][ C1] ? read_tsc+0x9/0x20 [ 401.645515][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 401.645550][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 401.645574][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 401.645593][ C1] [ 401.645598][ C1] [ 401.645605][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 401.645622][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0xba/0x130 [ 401.645641][ C1] Code: 44 8b 1d f9 b0 03 11 41 81 e3 00 01 ff 00 74 13 41 81 fb 00 01 00 00 75 d9 41 83 b8 7c 16 00 00 00 74 cf 45 8b 98 58 16 00 00 <41> 83 fb 03 75 c2 4d 8b 98 60 16 00 00 45 8b b8 5c 16 00 00 49 c1 [ 401.645655][ C1] RSP: 0018:ffffc9001caff058 EFLAGS: 00000246 [ 401.645669][ C1] RAX: 0000000000000004 RBX: ffffffff8cd99201 RCX: 0000000000000005 [ 401.645679][ C1] RDX: ffffffff8b7d9df0 RSI: ffffffff8faa6460 RDI: 0000000000000001 [ 401.645691][ C1] RBP: ffffc9001caff270 R08: ffff8880298fbc80 R09: 0000000000000000 [ 401.645702][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888032b7f400 [ 401.645712][ C1] R13: 0000000000000000 R14: 00007f86c194cfff R15: 0000000000000001 [ 401.645727][ C1] ? mt_validate+0x23e0/0x4390 [ 401.645749][ C1] mt_validate+0x23e0/0x4390 [ 401.645773][ C1] ? __pfx_mt_validate+0x10/0x10 [ 401.645800][ C1] ? uprobe_mmap+0x177/0x1020 [ 401.645821][ C1] validate_mm+0xae/0x4a0 [ 401.645841][ C1] ? __pfx_validate_mm+0x10/0x10 [ 401.645861][ C1] ? vma_complete+0x9e7/0xae0 [ 401.645878][ C1] ? vma_prepare+0x485/0x4b0 [ 401.645893][ C1] ? vma_adjust_trans_huge+0x286/0x370 [ 401.645912][ C1] __split_vma+0x8bd/0xa00 [ 401.645936][ C1] ? __pfx___split_vma+0x10/0x10 [ 401.645963][ C1] vms_gather_munmap_vmas+0x2e2/0x12e0 [ 401.645994][ C1] ? mtree_range_walk+0x6a7/0x840 [ 401.646013][ C1] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 401.646036][ C1] ? mas_find+0xa7d/0xd30 [ 401.646054][ C1] mmap_region+0x724/0x1c70 [ 401.646079][ C1] ? rcu_is_watching+0x15/0xb0 [ 401.646101][ C1] ? trace_contention_end+0x39/0x120 [ 401.646116][ C1] ? __pfx_mmap_region+0x10/0x10 [ 401.646170][ C1] ? mm_get_unmapped_area_vmflags+0xb3/0xe0 [ 401.646194][ C1] ? thp_get_unmapped_area_vmflags+0x161/0x310 [ 401.646211][ C1] ? cap_mmap_addr+0xb0/0x100 [ 401.646227][ C1] ? bpf_lsm_mmap_addr+0x9/0x20 [ 401.646244][ C1] ? security_mmap_addr+0x71/0x270 [ 401.646260][ C1] ? shmem_mapping+0xd/0x50 [ 401.646277][ C1] ? memfd_check_seals_mmap+0xc5/0x200 [ 401.646297][ C1] do_mmap+0xc45/0x10d0 [ 401.646321][ C1] ? __pfx_do_mmap+0x10/0x10 [ 401.646340][ C1] ? down_write_killable+0x178/0x230 [ 401.646362][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 401.646381][ C1] ? common_file_perm+0x1b5/0x230 [ 401.646405][ C1] vm_mmap_pgoff+0x2a6/0x4d0 [ 401.646427][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 401.646446][ C1] ? __fget_files+0x2a/0x420 [ 401.646463][ C1] ? __fget_files+0x2a/0x420 [ 401.646478][ C1] ? __fget_files+0x2a/0x420 [ 401.646495][ C1] ksys_mmap_pgoff+0x51f/0x760 [ 401.646518][ C1] do_syscall_64+0xfa/0xfa0 [ 401.646536][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.646553][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.646568][ C1] ? clear_bhb_loop+0x60/0xb0 [ 401.646585][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.646600][ C1] RIP: 0033:0x7f86c1979242 [ 401.646614][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 401.646628][ C1] RSP: 002b:00007ffd335b4fa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 401.646643][ C1] RAX: ffffffffffffffda RBX: 00007f86c1695000 RCX: 00007f86c1979242 [ 401.646655][ C1] RDX: 0000000000000005 RSI: 0000000000002000 RDI: 00007f86c1695000 [ 401.646665][ C1] RBP: 0000000000000812 R08: 0000000000000000 R09: 0000000000002000 [ 401.646675][ C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffd335b4ff8 [ 401.646686][ C1] R13: 00007f86c194e050 R14: 00007ffd335b53e0 R15: 00000fffa66b69f8 [ 401.646706][ C1] [ 401.647138][ C0] rcu: rcu_preempt kthread starved for 10490 jiffies! g31173 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 402.196391][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 402.206369][ C0] rcu: RCU grace-period kthread stack dump: [ 402.212267][ C0] task:rcu_preempt state:R running task stack:27224 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 402.225782][ C0] Call Trace: [ 402.229068][ C0] [ 402.232003][ C0] __schedule+0x1798/0x4cc0 [ 402.236534][ C0] ? __lock_acquire+0xab9/0xd20 [ 402.241387][ C0] ? __pfx___schedule+0x10/0x10 [ 402.246250][ C0] ? schedule+0x91/0x360 [ 402.250494][ C0] schedule+0x165/0x360 [ 402.254673][ C0] schedule_timeout+0x12b/0x270 [ 402.259545][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 402.264925][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 402.270843][ C0] ? __pfx_process_timeout+0x10/0x10 [ 402.276158][ C0] ? prepare_to_swait_event+0x341/0x380 [ 402.281742][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 402.286628][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 402.292881][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 402.298197][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 402.303449][ C0] ? finish_swait+0xcd/0x1f0 [ 402.308060][ C0] rcu_gp_kthread+0x99/0x390 [ 402.312659][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 402.317860][ C0] ? __kthread_parkme+0x7b/0x200 [ 402.322798][ C0] ? __kthread_parkme+0x1a1/0x200 [ 402.327826][ C0] kthread+0x711/0x8a0 [ 402.331904][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 402.337122][ C0] ? __pfx_kthread+0x10/0x10 [ 402.341738][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 402.346972][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.352275][ C0] ? __pfx_kthread+0x10/0x10 [ 402.356874][ C0] ret_from_fork+0x4bc/0x870 [ 402.361597][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 402.366724][ C0] ? __switch_to_asm+0x39/0x70 [ 402.371489][ C0] ? __switch_to_asm+0x33/0x70 [ 402.376259][ C0] ? __pfx_kthread+0x10/0x10 [ 402.380853][ C0] ret_from_fork_asm+0x1a/0x30 [ 402.385641][ C0] [ 402.388652][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 402.395049][ C0] CPU: 0 UID: 0 PID: 9871 Comm: syz.4.963 Not tainted syzkaller #0 PREEMPT(full) [ 402.404267][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 402.414354][ C0] RIP: 0010:smp_call_function_many_cond+0xd38/0x12d0 [ 402.421095][ C0] Code: 89 ee 83 e6 01 31 ff e8 36 79 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 e1 74 0b 00 eb 38 f3 90 42 0f b6 04 2b <84> c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 c5 74 0b 00 eb e4 44 [ 402.440723][ C0] RSP: 0018:ffffc9001caefa20 EFLAGS: 00000246 [ 402.446802][ C0] RAX: 0000000000000000 RBX: 1ffff110170e7ffd RCX: 0000000000080000 [ 402.454779][ C0] RDX: ffffc9000cc8a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 402.462835][ C0] RBP: ffffc9001caefba0 R08: ffffffff8fc39677 R09: 1ffffffff1f872ce [ 402.470894][ C0] R10: dffffc0000000000 R11: fffffbfff1f872cf R12: ffff8880b873ffe8 [ 402.478895][ C0] R13: dffffc0000000000 R14: ffff8880b863b200 R15: 0000000000000001 [ 402.486906][ C0] FS: 00007f4e68f366c0(0000) GS:ffff8881259e7000(0000) knlGS:0000000000000000 [ 402.495854][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 402.502437][ C0] CR2: 0000200000001840 CR3: 000000007db60000 CR4: 00000000003526f0 [ 402.510407][ C0] Call Trace: [ 402.513774][ C0] [ 402.516708][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 402.521768][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 402.528133][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 402.533536][ C0] ? io_submit_sqes+0x38b/0x1e60 [ 402.538579][ C0] ? __pfx___text_poke+0x10/0x10 [ 402.543536][ C0] ? rcu_is_watching+0x15/0xb0 [ 402.548326][ C0] ? trace_contention_end+0x39/0x120 [ 402.553625][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 402.558661][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 402.563788][ C0] smp_text_poke_batch_finish+0x5f9/0x1130 [ 402.569594][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 402.575929][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 402.580967][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 402.587207][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 402.593469][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 402.599470][ C0] static_key_slow_inc_cpuslocked+0x86/0x120 [ 402.605468][ C0] static_key_slow_inc+0x1a/0x30 [ 402.610424][ C0] io_uring_create+0x205/0xba0 [ 402.615212][ C0] __se_sys_io_uring_setup+0x264/0x270 [ 402.620685][ C0] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 402.626685][ C0] ? arch_syscall_is_vdso_sigreturn+0x120/0x1a0 [ 402.633033][ C0] ? syscall_user_dispatch+0x4f/0x90 [ 402.638359][ C0] do_syscall_64+0xfa/0xfa0 [ 402.642896][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.648140][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.654350][ C0] ? clear_bhb_loop+0x60/0xb0 [ 402.659392][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.665383][ C0] RIP: 0033:0x7f4e6818ec29 [ 402.669816][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.689556][ C0] RSP: 002b:00007f4e68f36038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 402.697984][ C0] RAX: ffffffffffffffda RBX: 00007f4e683d5fa0 RCX: 00007f4e6818ec29 [ 402.705955][ C0] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 00000000000078bc [ 402.713934][ C0] RBP: 00007f4e68211e41 R08: 0000000000000000 R09: 0000000000000000 [ 402.721944][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.729962][ C0] R13: 00007f4e683d6038 R14: 00007f4e683d5fa0 R15: 00007ffd832be668 [ 402.737994][ C0]