last executing test programs: 6.316916365s ago: executing program 1 (id=264): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) 6.178767431s ago: executing program 1 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.745285129s ago: executing program 1 (id=272): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) 4.46819565s ago: executing program 1 (id=274): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.090134995s ago: executing program 1 (id=276): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 3.520188138s ago: executing program 1 (id=278): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 2.439129162s ago: executing program 0 (id=281): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x6, 0x7fff}, 0x0) fchdir(r1) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) 1.75743752s ago: executing program 0 (id=282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) gettid() 1.578766067s ago: executing program 0 (id=283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x14, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x7d}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.395529494s ago: executing program 0 (id=284): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xdab878853e6b31b2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r2}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x39) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) 441.371012ms ago: executing program 0 (id=285): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000004000000140005000303000a000a000a005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000) 0s ago: executing program 0 (id=286): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x1, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000200)={0x24, &(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES8=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000240)={0x40, 0x1, 0x4, "b1e87c39"}, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:5125' (ED25519) to the list of known hosts. syzkaller login: [ 122.209799][ T3303] cgroup: Unknown subsys name 'net' [ 122.417162][ T3303] cgroup: Unknown subsys name 'cpuset' [ 122.456346][ T3303] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 123.197516][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 138.114625][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.143875][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.471039][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.491230][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.951749][ T3310] hsr_slave_0: entered promiscuous mode [ 139.965725][ T3310] hsr_slave_1: entered promiscuous mode [ 140.281467][ T3311] hsr_slave_0: entered promiscuous mode [ 140.292532][ T3311] hsr_slave_1: entered promiscuous mode [ 140.307068][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 140.310303][ T3311] Cannot create hsr debugfs directory [ 141.775778][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 141.839244][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 141.901558][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 141.972374][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 142.257063][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 142.294181][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 142.330211][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 142.397743][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 143.810475][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.277046][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.799480][ T3310] veth0_vlan: entered promiscuous mode [ 149.975808][ T3311] veth0_vlan: entered promiscuous mode [ 149.983687][ T3310] veth1_vlan: entered promiscuous mode [ 150.087747][ T3311] veth1_vlan: entered promiscuous mode [ 150.312650][ T3310] veth0_macvtap: entered promiscuous mode [ 150.350423][ T3310] veth1_macvtap: entered promiscuous mode [ 150.535766][ T3311] veth0_macvtap: entered promiscuous mode [ 150.600171][ T3311] veth1_macvtap: entered promiscuous mode [ 150.905492][ T109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.906492][ T109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.906896][ T109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.907281][ T109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.062629][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.064198][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.064562][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.064916][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.778398][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 153.065701][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 153.225877][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 153.254271][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 153.255147][ T9] usb 1-1: config 0 has no interface number 0 [ 153.256718][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 153.316074][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 153.316819][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.319848][ T9] usb 1-1: Product: syz [ 153.320094][ T9] usb 1-1: Manufacturer: syz [ 153.320331][ T9] usb 1-1: SerialNumber: syz [ 153.365577][ T9] usb 1-1: config 0 descriptor?? [ 153.429836][ T9] smsc75xx v1.0.0 [ 154.169206][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 154.169954][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 155.704460][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 155.705175][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 155.705784][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 155.711951][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 155.821873][ T9] usb 1-1: USB disconnect, device number 2 [ 158.482569][ T3474] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 158.994124][ T39] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 159.266889][ T39] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.269114][ T39] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 159.272415][ T39] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 159.275590][ T39] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 159.277659][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.307563][ T3474] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 162.064030][ T3476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.080853][ T3476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.462785][ T3478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.466607][ T3478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.811810][ T3480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.821333][ T3480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.365703][ T3483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.368221][ T3483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.640278][ T3485] process 'syz.1.9' launched './file2' with NULL argv: empty string added [ 165.886023][ T3489] syz.1.10 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 169.978026][ T3494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.980336][ T3494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.411114][ T3497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.422015][ T3497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.496838][ T3505] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 171.823582][ T3456] usb 1-1: USB disconnect, device number 3 [ 172.484221][ T3456] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 172.676271][ T3456] usb 1-1: Using ep0 maxpacket: 32 [ 172.733557][ T3456] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 172.735436][ T3456] usb 1-1: config 0 has no interface number 0 [ 172.740603][ T3456] usb 1-1: config 0 interface 184 has no altsetting 0 [ 172.850220][ T3456] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 172.852310][ T3456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.857254][ T3456] usb 1-1: Product: syz [ 172.866414][ T3456] usb 1-1: Manufacturer: syz [ 172.866920][ T3456] usb 1-1: SerialNumber: syz [ 172.892739][ T3456] usb 1-1: config 0 descriptor?? [ 172.942776][ T3456] smsc75xx v1.0.0 [ 173.768909][ T3456] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 173.772081][ T3456] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 175.190794][ T3456] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 175.197301][ T3456] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 175.209762][ T3456] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 175.211500][ T3456] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 175.278665][ T3456] usb 1-1: USB disconnect, device number 4 [ 187.455252][ T3551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.457145][ T3551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.574960][ T3456] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 188.744037][ T3456] usb 1-1: Using ep0 maxpacket: 32 [ 188.774758][ T3456] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 188.775357][ T3456] usb 1-1: config 0 has no interface number 0 [ 188.776069][ T3456] usb 1-1: config 0 interface 184 has no altsetting 0 [ 188.808276][ T3456] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 188.808809][ T3456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.809325][ T3456] usb 1-1: Product: syz [ 188.809496][ T3456] usb 1-1: Manufacturer: syz [ 188.809724][ T3456] usb 1-1: SerialNumber: syz [ 188.848530][ T3456] usb 1-1: config 0 descriptor?? [ 188.942143][ T3456] smsc75xx v1.0.0 [ 189.704491][ T3456] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 189.705195][ T3456] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 190.800850][ T3456] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 190.801546][ T3456] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 190.809311][ T3456] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 190.810969][ T3456] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 190.895449][ T3456] usb 1-1: USB disconnect, device number 5 [ 195.945259][ T3592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.956943][ T3592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.461757][ T3604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.481744][ T3604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.559050][ T3616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.568165][ T3616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.994674][ T3571] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 201.367334][ T3571] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 201.368410][ T3571] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 201.368705][ T3571] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.369096][ T3571] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 201.369364][ T3571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.522386][ T3571] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 201.545843][ T3571] usb 1-1: invalid MIDI out EP 0 [ 202.142597][ T3571] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 202.224475][ T3571] usb 1-1: USB disconnect, device number 6 [ 202.652339][ T3593] udevd[3593]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.754456][ T3571] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 202.927457][ T3571] usb 1-1: Using ep0 maxpacket: 16 [ 202.940925][ T3571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.946724][ T3571] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 202.951467][ T3571] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 202.959404][ T3571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.978668][ T3571] usb 1-1: config 0 descriptor?? [ 208.244041][ T3571] usbhid 1-1:0.0: can't add hid device: -32 [ 208.246076][ T3571] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 217.237164][ T3516] usb 1-1: USB disconnect, device number 7 [ 227.387713][ T3676] netlink: 52 bytes leftover after parsing attributes in process `syz.0.75'. [ 233.060330][ T3689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.075749][ T3689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.019394][ T3456] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 237.225822][ T3456] usb 1-1: Using ep0 maxpacket: 32 [ 237.383861][ T3456] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 237.388236][ T3456] usb 1-1: config 0 has no interface number 0 [ 237.409948][ T3456] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 237.508007][ T3456] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 237.511208][ T3456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.527466][ T3456] usb 1-1: Product: syz [ 237.529750][ T3456] usb 1-1: Manufacturer: syz [ 237.545667][ T3456] usb 1-1: SerialNumber: syz [ 237.606463][ T3456] usb 1-1: config 0 descriptor?? [ 240.910483][ T3716] Zero length message leads to an empty skb [ 247.945010][ T3456] usb 1-1: USB disconnect, device number 8 [ 255.767637][ T3891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.158'. [ 257.564729][ T3516] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 257.761540][ T3516] usb 1-1: Using ep0 maxpacket: 32 [ 257.849162][ T3516] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 257.850029][ T3516] usb 1-1: config 0 has no interface number 0 [ 257.850440][ T3516] usb 1-1: config 0 interface 184 has no altsetting 0 [ 258.036974][ T3516] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 258.037660][ T3516] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.037850][ T3516] usb 1-1: Product: syz [ 258.038055][ T3516] usb 1-1: Manufacturer: syz [ 258.038298][ T3516] usb 1-1: SerialNumber: syz [ 258.065255][ T3516] usb 1-1: config 0 descriptor?? [ 258.114344][ T3516] smsc75xx v1.0.0 [ 258.650926][ T3516] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 258.651579][ T3516] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 258.651821][ T3516] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 258.652918][ T3516] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 268.737832][ T933] usb 1-1: USB disconnect, device number 9 [ 272.154422][ T3456] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 272.315990][ T3456] usb 1-1: Using ep0 maxpacket: 32 [ 272.404002][ T3456] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 272.404730][ T3456] usb 1-1: config 0 has no interface number 0 [ 272.405536][ T3456] usb 1-1: config 0 interface 184 has no altsetting 0 [ 272.564182][ T3456] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 272.564799][ T3456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.565016][ T3456] usb 1-1: Product: syz [ 272.565208][ T3456] usb 1-1: Manufacturer: syz [ 272.565389][ T3456] usb 1-1: SerialNumber: syz [ 272.613974][ T3456] usb 1-1: config 0 descriptor?? [ 272.670515][ T3456] smsc75xx v1.0.0 [ 273.101080][ T3456] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 273.101701][ T3456] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 273.101930][ T3456] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 273.109021][ T3456] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 274.799210][ T3962] netlink: 40 bytes leftover after parsing attributes in process `syz.1.180'. [ 274.807427][ T3962] netlink: 40 bytes leftover after parsing attributes in process `syz.1.180'. [ 276.664381][ T3980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.750683][ T3980] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 276.775026][ T40] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 276.894725][ T109] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 277.145265][ T3988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.147914][ T3988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.170610][ T39] usb 1-1: USB disconnect, device number 10 [ 283.628582][ T4053] pim6reg1: entered promiscuous mode [ 283.632013][ T4053] pim6reg1: entered allmulticast mode [ 283.997387][ T4055] batadv0: tun_chr_ioctl cmd 1074025692 [ 284.299983][ T4061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.302651][ T4061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.784249][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 285.974815][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 286.037260][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 286.037893][ T9] usb 1-1: config 0 has no interface number 0 [ 286.038802][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 286.120023][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 286.120607][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.121190][ T9] usb 1-1: Product: syz [ 286.121391][ T9] usb 1-1: Manufacturer: syz [ 286.121587][ T9] usb 1-1: SerialNumber: syz [ 286.148166][ T9] usb 1-1: config 0 descriptor?? [ 286.198613][ T9] smsc75xx v1.0.0 [ 286.624191][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 286.624752][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 286.625242][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 286.626557][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 289.340670][ T4094] wg2: entered promiscuous mode [ 289.341043][ T4094] wg2: entered allmulticast mode [ 292.245122][ T4102] pim6reg1: entered promiscuous mode [ 292.245723][ T4102] pim6reg1: entered allmulticast mode [ 295.740101][ T4116] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 296.721116][ T39] usb 1-1: USB disconnect, device number 11 [ 302.047980][ T4183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.101518][ T4183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.435087][ T4187] cgroup: fork rejected by pids controller in /syz1 [ 302.941563][ T4193] pim6reg1: entered promiscuous mode [ 302.941911][ T4193] pim6reg1: entered allmulticast mode [ 303.250861][ T109] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.372414][ T109] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.505145][ T109] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.646122][ T109] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.168230][ T109] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 305.176486][ T109] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 305.781041][ T109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.816126][ T109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.854639][ T109] bond0 (unregistering): Released all slaves [ 305.897280][ T109] bond1 (unregistering): Released all slaves [ 306.281523][ T109] hsr_slave_0: left promiscuous mode [ 306.314814][ T109] hsr_slave_1: left promiscuous mode [ 306.421395][ T109] veth1_macvtap: left promiscuous mode [ 306.422325][ T109] veth0_macvtap: left promiscuous mode [ 306.446701][ T109] veth1_vlan: left promiscuous mode [ 306.447494][ T109] veth0_vlan: left promiscuous mode [ 307.035702][ T933] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 307.224550][ T933] usb 1-1: Using ep0 maxpacket: 32 [ 307.299414][ T933] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 307.304698][ T933] usb 1-1: config 0 has no interface number 0 [ 307.309951][ T933] usb 1-1: config 0 interface 184 has no altsetting 0 [ 307.369742][ T933] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 307.376545][ T933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.382665][ T933] usb 1-1: Product: syz [ 307.387258][ T933] usb 1-1: Manufacturer: syz [ 307.390953][ T933] usb 1-1: SerialNumber: syz [ 307.430191][ T933] usb 1-1: config 0 descriptor?? [ 307.487669][ T933] smsc75xx v1.0.0 [ 307.494093][ T933] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 307.500880][ T933] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 309.095445][ T109] ------------[ cut here ]------------ [ 309.098742][ T109] WARNING: CPU: 1 PID: 109 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0xc0/0x164 [ 309.106563][ T109] Modules linked in: [ 309.109812][ T109] CPU: 1 UID: 0 PID: 109 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT [ 309.111706][ T109] Hardware name: linux,dummy-virt (DT) [ 309.112746][ T109] Workqueue: netns cleanup_net [ 309.114984][ T109] pstate: 81402009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 309.116926][ T109] pc : xfrm_state_fini+0xc0/0x164 [ 309.118327][ T109] lr : xfrm_state_fini+0x3c/0x164 [ 309.119680][ T109] sp : ffff800083213c50 [ 309.120515][ T109] x29: ffff800083213c50 x28: 0000000000000000 x27: 0000000000000000 [ 309.123718][ T109] x26: ffff800082b74940 x25: 0000000000000001 x24: 0000000000000001 [ 309.126795][ T109] x23: ffff800082b81e00 x22: ffff800082b749b8 x21: ffff800082b749b8 [ 309.128773][ T109] x20: fbf000000a5a0000 x19: fbf000000a5a0000 x18: 0000000000000000 [ 309.130010][ T109] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000002 [ 309.131193][ T109] x14: fbf000000453a580 x13: 00000000000003f9 x12: 0000000065e0fc20 [ 309.132246][ T109] x11: 0000000000000040 x10: ffff800082939d50 x9 : ffff800082939d48 [ 309.133373][ T109] x8 : f1f0000003400028 x7 : 0000000000000000 x6 : 0000000000000000 [ 309.134606][ T109] x5 : f1f0000003400000 x4 : f1f0000003400058 x3 : 0000000000000000 [ 309.135594][ T109] x2 : 0000000000000000 x1 : f3f00000049e0418 x0 : fbf000000a5a0c80 [ 309.136872][ T109] Call trace: [ 309.137696][ T109] xfrm_state_fini+0xc0/0x164 (P) [ 309.138963][ T109] xfrm_net_exit+0x30/0x50 SYZFAIL: failed to recv rpc [ 309.139831][ T109] ops_undo_list+0xec/0x23c [ 309.140497][ T109] cleanup_net+0x1f4/0x3cc [ 309.141312][ T109] process_one_work+0x178/0x2cc [ 309.142051][ T109] worker_thread+0x250/0x358 [ 309.142791][ T109] kthread+0x130/0x1fc [ 309.143640][ T109] ret_from_fork+0x10/0x20 [ 309.144484][ T109] ---[ end trace 0000000000000000 ]--- fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 309.928270][ T9] usb 1-1: USB disconnect, device number 12 VM DIAGNOSIS: 14:42:40 Registers: info registers vcpu 0 CPU#0 PC=ffff800080737e34 X00=ffff800082cf1000 X01=ffff800080737df8 X02=000000480a6e933e X03=ffff800080003200 X04=0000000000800000 X05=faf0000006098000 X06=f5f0000004afb800 X07=0000000000000000 X08=00000047f8506148 X09=fff07ffffcfe1000 X10=0000000000000000 X11=fff000007f8d4a00 X12=0000000000000001 X13=0000000000000000 X14=00000000000003a9 X15=ffff800081b63cd0 X16=ffff800080000000 X17=fff07ffffcfe1000 X18=0000000000000014 X19=faf000000303f630 X20=000000000000001a X21=f7f000000300a580 X22=000000000000000d X23=ffff8000828f0f00 X24=ffff800082c8bd80 X25=0000000000000040 X26=0000000000000000 X27=f6f0000004b3886c X28=f5f0000004afb780 X29=ffff8000800032b0 X30=57ff800080140c48 SP=ffff8000800032b0 PSTATE=204020c9 --C- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2525252525252525:2525252525252525 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000756c6c2570:6f6f6c2f7665642f Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000f0000000f0 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff000000ff00:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:fff000f000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bb448243222c92da:e3914ed4e87380b0 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffd4f77420:0000ffffd4f77420 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffd4f773f0 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800081b081f4 X00=ffff800082671ff5 X01=0000000000000405 X02=ffff8000832135b0 X03=0000000000000000 X04=0000000000000000 X05=ffff800082091578 X06=ffff8000832136d8 X07=00000000ffffffff X08=ffff800083213870 X09=000000000000006d X10=0000000000000001 X11=0000000000000001 X12=ffff8000829ef238 X13=ffff8000832136e3 X14=ffff8000832136d8 X15=ffff800083213510 X16=0000000000000000 X17=0000000000000000 X18=00000000ffffffff X19=0000000000000005 X20=0000000000000405 X21=ffff800082671ff5 X22=ffff8000832136d8 X23=0000000000000004 X24=ffff800083213870 X25=0000000000000000 X26=0000000000000008 X27=ffff800083213706 X28=ffff800082671ff3 X29=ffff800083213530 X30=ffff800081b08118 SP=ffff800083213530 PSTATE=624023c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffaad77960 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffaad77368:0000ffffaad4d000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffaad6f094:0000ffffaad76d10 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffaad46ad0:0000ffffaad465a0 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffaaa8f6e0:0000ffffaaa8f0d0 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000