last executing test programs: 7m55.824271623s ago: executing program 4 (id=137): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="03011403"], 0xdd12}], 0x1}, 0x0) 7m55.41137245s ago: executing program 4 (id=140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b9a0000000000000090012f7bc37da665000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000340)={0x9, 0x4}, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000540)='wake_reaper\x00', r3, 0x0, 0x8}, 0x18) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r5, r4, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf2517000000140001800800030001000000080003ce00000000008b658817cb07a6aa2e9ea6598f1e72f49083c7e581c7abf808cec0d9551c9c0a9d806d0fa069befa13613731bae45db025d0f0450012e2465bb8ba304196bf569b276d44d56d3f309776e660751560d195f3c3ee25ac1472ea0e39372c2e877c4ea9a8f49bd3d8b9eafa96458b7765b7"], 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) 7m54.275086262s ago: executing program 4 (id=143): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./file0\x00') 7m53.994919476s ago: executing program 4 (id=144): socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x5000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c030000000061138c8800000000bf30000000000000150000000009240b2d03010000000000950000a7000000006916700000000000bf67000000000000b5070000fcff0304670600001f000000370300000ef90060bf050000000000007e650000000000006507f9ff01000000470700004c0000005f75000000000000bf54000000000000070400000400f9fead4301000000000095000000000000000500000000000000950000000000000032ed3c5be9529914953170d2d7ffffff8ecf264e9981db7d04df3244c7bd7e7e7f2f1754558f2278af6d71c19a5e12814cb1d8a5d4601d15871637b65f8903dc8700a0b9bdb7dd399700d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fc9de56c9d8a814261bd81762bab839dfa66810b5b40d893ea8fe0185473d51b546c087431d770000000767c955cfa1f6ab689fde4de5f832c8b664e73b99b6c2e0ab330e1c7feada70600000000000000b7010001000000009af619e3cca4d19e0dee5eb106774a8f3e6916df85aaf34c4756ad3a6d9fee0000000000000000c8fb735fd552bdc206004aeb0743eb3dc819b6cf5c8a0700000000000000a13d0045fb3cdaffa673a6bb55d8c85f21dce44aba5387e35350481aedac065b5031e56723888fb126a163f16fb2ad9bc1172bec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f11294b4800a045ea11b3566bf3a649878e582f2af97787f696649a462e7ee4bcf89cbf2f0800000000000000b2c4acb07a10d6732f54beb40000040000000000000000000000000200f674629709e7e78f4ddc211bc304f0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46e4e827f3477523dcfa17690884f8d2001e03a651bb96589a7eab010e861bbd0000000000000000c5904c647802cf86f1b4c3005f33d83f84e98a72fbbecd106425563d80bd0d0d703f37ca153f601ae899a53f6715a0080034b0c94cce69945205480a55c22fe394ac000000000000000000040000000000437d57defb79ea6a58b83eeed729a2f95e6a1fc3857fb51b324be00000000000000090867f7a3b9bc43717188cb8426286fc55fc57cc3c6de4aa67babf350709e282a4f2bf59f46e20465eae865dbfd533b1cb2d540d0490cd5248715c74b6bd0248a9a0b413bbdfb5351defc6e34a961f3593920411e112c9df23a29c072d3460eb37beb5bbc04600c64acad9a04ffe62875177b51d2f0c6d7194c26789d2bec2d0846831455b8fcd03beaeca2c1335d8a49a92f9d2bef5f485c4fff4cf710b7d00000000000000009d47d564a838bdf8901a719431a9b0ef918ec0ec79037cb61df16379e3bf2a8100000007e8512e21080315e62559e8dd67dae85177d899d9e078f80585837f0e943b8820b19c75d243a78d8c2093c59cbc4c55f1578cff737502ea2d8d0b9dc946dcb38692dcc8db84834cc7726429cb20603b5338184f9856eeaec437fc3446b6c5ffe5db28aa802e37d3c4f259d616307d8aa46ca094049c0ddc1caaed5485b4ff030000182620bcba2316f9e6df0c8647f6ff0000000000000000386096e4a4ff86042f0b42027ff933d2dfe2d5baffacc9dc2411302a185ea454af5839be28b7d040c1fe1ce0fd63fa7f32b8ab6cd6a8b8bf1b693e4ffeca635d84c376b03a58677dd9f8c2a6fa126c7dad3f9e939c92d63ab1cf2fbea26a60b951914aba5c0696cc64e66b9b0f2c4444f8c391c0d9b647a3be4885a055ce3879a91fb62ca97e6526286c14c80b6dc981c5ae6ebf0778ea01a3a44e01ab79bcddbb83266a1ce1a1dea83ebb89d07b4d05aa09ad2904040e7784e96cd66b04204d47b1c66d5a84e7c3de1d1062fd8a23d1b402003c177e76dbca599691164ade323ad4a17abe99975cba748bc2379eed5a83dc94947eb18976db6ca6d35bfb65a3d8b5129d5263b66dbae6c2baa9bbec017646569fa99537aa453f3e6b2acebeddb6c32a87455f351efcd8385100f33d6b0c3195e229bd30260941825ba884d7db07e1212033409e62d7154cc68a7ee910e393470cdb781817f85373a647fd1b626035b666f224a66c0e47e15c6b836b324318507501a0f4b2cc9153167fd839a483615cbc2ad1a7d1528f01bf91b950a9bcd7d06491e1a355e476365f653d2d94ba898ab8d64d70bdb364ef3adb5ba1e4d9d5002da76ccec5d5184e912aaf5a945ae062e670fafb8cf0afee51c851546bb38c5ef303000000000000002ecdc2b82059750f019a418e3e8d20b6bf768a7db1f8472713452553149a4634418de7eda7b2e682271c6e62f5dfaabba46560dfa410e1f334a5f60791b275368469ddc42f7712bff1689f2ffbf5268cc0572e23afd4c402b154ae94c1f65d7d4a79272945287c79b4b70183d2cde66c7225106a064a1800d777372b2b43326821d5c1c78fda699c7484f3e5fc8bbce6fb3039569646b0de22c431d90c12d48e314d8a5ef4db14a110da070000002c4f7bd7f36f814ed92197fe3eb0843c2681c609231825b8a27ba301142cec8a6fd85965f83ff4dd40296e5fb5678d93d0daee45c43bdb9bde9c1d1c988b909fdf78cfda5da3dc28792b10fb8f3f22ece745c074f86f471489337a9a8d9ad7f310aa50c983b490f561bc420289b6aa0fc3f43f8a4548aa9c723ce466287760f919afbb94b0410ff06071de3aa1c199f407347af666713096a422fbc70671ac08f9256ab0079c101a724136352af2895899effda7bcd127ba98521eb4b04b2a821935ee3b216190e21fb059f9519c4804283d2ce09977842ff7309ad2c4d8f0420dfc8cdb1b37ad52985a88ca4cdc1e37715362a59f7c9c7df793d69f974399859e622ec3a1bab735a1aa489fe50619fe399eddaf92f67755cb54824685444a58731ee166ae65412709b853a5df7ce44220fc188c00291843d66e69da3744f39f5f6113fbe390b22cdbefb90ca2a51b1ff21f384e7bf076825aadaf02da77eeefb8875d630b7575e661b90eb6cd98674c92f179b2675b1f6c86712846ddae87bb3a3887b56292356270e85888c25a1c8ae958906ef6b71e1b800107da1c5608fe05d2f4265a5300000000000000007c737c911c049ae7dc9d77edecaf9685c53ac264e9f02ffcf0318af80c99ea2020b1e1f47cfdd6097c49b5f4bb92bb9133df719f35d4bf730784f1caa8e4e16f4eeb535c059a700d57e4d6c83c4a35a6ef44f135657d3d41856235253326d937125b6f23af7eb95bac231b84c6935a3a6d24d18f7e379db2fd5e76d5ad0d5b4a6c155e8759eb0e7b39ef433861158bd496ecafb3d1c50294e43d5895df1a2de536f5d85e0a000049277bc09533ceead6812fdfb5ef59b15069ea0df6a3eee0484c848fe4e6e7461ffc3917e4e07d250d9459ebea5fd4e26fc04eb38e70597fcb693cb2f7506f5f50b9f73a25bb83b6c71240e5d725ff567d9745a3ba5462524648a93360fb2b9feb1401e30996e1e7d14bb8db59880cde130af0a6a0e6152a6e3a8a684cabf379d4aa33c896bca694ce0180000000000000041caca10fe3ce74f1b8156d8155a4e11d2f35674dff1aa5e749deffffffffb946192820d223f4f0a1a7a2be83872662477884d65af42bcac801d0c667fba32e16ead8f076eed944d5998bca285c25349c6f26485902316c156eee9dcaa64f8a889abb1a890b23c7de6b2b0a6128545efc3ee8e60ea8eafa617ec3f0bfb1e23c4f75bc2a649a886bf4d5378c58259fddea066f1d70df9633af91752bf41a0d4d0929c34472a6f7110de1420800000000000000ca07ba65ce67dd46909ed693d71a5de47fe26a4eb2f4d514029b11f3f0c3ccb2403db497a55d23c25003ba864cdaf6e732f74e11d1a58e89f60267e60d79f467b181d636c9300420b30760bf861195eeb74275e9c4ed71f0e9fda02bdbf8aaa3e23a6d22dd423541b6acdd386a686bc8b128f724567d4c4908391b979a1c7102f5be7ed9db7a36ecfc3b9e0ab0eedde34700000000bec5fbefb008005888ce01eb816f2873e4c59facc7be45b2ab04b1456da413e3f7cf345d6fed0bff0800f8c3018bd0ea78ed54c8b684c797390bf5cad492bff0d97e553e42aba229446354cb4f5825915eccc911e7deee66873c20ffd06e63c27b8a12d757210a43870a0ef4ba3bad01c492d792c1535aeff946f3415912b5ab"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r6, &(0x7f0000000040)=@target={'target ', {'PCI:', '0', ':', '0', ':', '2', '.', '0'}}, 0x13) 7m52.794417874s ago: executing program 4 (id=148): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) 7m52.543037476s ago: executing program 4 (id=150): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x92, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60000000005c0600fe880000000000000000000000000001fe8000", @ANYRES32=0x41424344], 0x0) 7m46.706941549s ago: executing program 1 (id=162): io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r0, 0x1, &(0x7f0000000780)=[&(0x7f0000000480)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=' ', 0x1}]) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x13, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @map_idx_val={0x18, 0x2237ac725d5cf3c8, 0x6, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xc, 0x9, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000008c0)=[{0x3, 0x1, 0xb, 0x6}, {0x2, 0x5, 0xe, 0x6}], 0x10, 0x8, @void, @value}, 0x94) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xb, 0x1}, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='rpc_buf_alloc\x00'}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180), 0x0) 7m44.418985613s ago: executing program 1 (id=167): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x1170, 0x1170, 0x150, 0x1170, 0x378, 0x1398, 0x1398, 0x378, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @remote, [], [0x0, 0xff], 'veth0_vlan\x00', 'macvlan0\x00', {}, {}, 0x88, 0x0, 0x0, 0x48}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0xfffd, 0x2}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x88, 0x0, 0x2, [@empty, @local, @remote, @remote, @private2, @empty, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, @loopback, @private1, @mcast2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @remote], 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 7m40.531062342s ago: executing program 1 (id=172): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000c00)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r1, r2, 0x0, 0x1000000201005) 7m40.083258202s ago: executing program 1 (id=177): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}], 0x1}, 0x0) 7m39.013844368s ago: executing program 1 (id=180): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x43, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x2, 0x0) 7m37.706361095s ago: executing program 1 (id=182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x92, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000", @ANYRES32=0x41424344], 0x0) 7m35.811749134s ago: executing program 32 (id=150): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x92, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60000000005c0600fe880000000000000000000000000001fe8000", @ANYRES32=0x41424344], 0x0) 7m22.370631988s ago: executing program 33 (id=182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x92, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000", @ANYRES32=0x41424344], 0x0) 8.295478299s ago: executing program 5 (id=2117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = add_key$keyring(&(0x7f0000001240), &(0x7f0000001280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0xffa5, 0x3, r6}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x5c}}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000040)='asymmetric\x00', &(0x7f00000101c0)=@chain) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0xbc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0xa0, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @val, @void, [{0xdd, 0x66, "d8a062cc132f8c370fffcfbf6c255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc09946ff1a847d43452a17ee7a"}, {0xdd, 0x12, "95e79490e4be3bd5f39a64947fd4f137cfd9"}]}}]}, 0xbc}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 7.461725923s ago: executing program 5 (id=2121): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000d80)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0xfffffffffffffef9, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x57, @lang_id={0x0, 0x3, 0x43e}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x4, @string={0x4, 0x3, "5414"}}, 0x0, 0x0, 0x0}, 0x0) 4.275455447s ago: executing program 5 (id=2141): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x62642, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0xfa}, 0x2) 3.954772156s ago: executing program 3 (id=2146): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)='m ', 0x2}], 0x1}, 0x4000005) getgid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg$unix(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40012003) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="0c2749f4da24994d890900aeb2d15bcc7ecca3f80f24ecc93e4582aff843087bad1485bc84556bb0b6d5a4235dcfd6846c4360112050ea1b6f5e6bfdeaefcd101ca631100b96da76f60393f47c018fb585fa33920f65615b9257070da6fa720b5da0e06bcf9e16637ff66b44e0d0cbb9291861f7a9d51d48dd310b94aeeaa246ec5e6b409465b7c6179080d6f75d42181ee3a0c3641357c30acec51cd05a133319bb0d76cc"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x11, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x60000002, 0xffffffffffffff06, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf}, 0xfffffffffffffda8) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000140)={0x4e000}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r11}, 0x10) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000001400000018040180140002006e65746465767369000000000000000005000c000100000008000400060000000800050008000000080007000000000008000600000100004b0e7391274decfba28c"], 0x54}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @local}) 3.68903653s ago: executing program 0 (id=2149): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @empty, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 3.590071079s ago: executing program 0 (id=2150): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="74b61d", @ANYRES16=0x0, @ANYRES64, @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000041c0), 0x0, 0x4000000) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r1, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548", 0x36, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0xd8}}, 0x8000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x2c}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 3.426961764s ago: executing program 0 (id=2151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x4, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000440)=0x4, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ff", 0x66}], 0x1}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 3.402002046s ago: executing program 2 (id=2152): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f0000000600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9b443000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x44) 3.103008992s ago: executing program 5 (id=2154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 3.030167869s ago: executing program 6 (id=2155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) 3.02203445s ago: executing program 3 (id=2156): ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) 2.34310832s ago: executing program 3 (id=2157): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}]}, 0x54}}, 0x0) 2.320009352s ago: executing program 0 (id=2158): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x9}, &(0x7f0000000300)=0x8) 2.282058356s ago: executing program 2 (id=2159): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}, {0x10, 0x110, 0xe}], 0x20}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}]}]}, 0x28}}, 0x0) 2.138845109s ago: executing program 0 (id=2160): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @empty, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 2.138700219s ago: executing program 6 (id=2161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000f5"], 0x73) 2.077071214s ago: executing program 3 (id=2162): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r1], 0xc) 2.00582872s ago: executing program 0 (id=2163): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl802154(0x0, r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000800000000000001d"], 0x28}}, 0x0) 1.943035166s ago: executing program 2 (id=2164): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x62642, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0xfa}, 0x2) 1.919988998s ago: executing program 5 (id=2165): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x6c06, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) fallocate(r2, 0x0, 0x0, 0x3) close(r0) 1.78323421s ago: executing program 5 (id=2166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={'wlan0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, r6, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x2c}}, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r1}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x180, 0xffffff80, 0x178, 0x0, 0x178, 0x2a0, 0x230, 0x258, 0x2a0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0xf0, 0x138, 0x12, {0x959f1400}, [@common=@unspec=@limit={{0x48}, {0x0, 0x412}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'geneve1\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x2}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) 1.67442308s ago: executing program 6 (id=2167): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 1.470986698s ago: executing program 6 (id=2168): socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005f4ffff0bb906d5a9bed4000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, 0x0, 0x20008044) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$rds(0x15, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3], 0x20) 1.348267309s ago: executing program 6 (id=2169): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f0000000600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9b443000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x44) 1.165381275s ago: executing program 3 (id=2170): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @local, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070000000000000000000200000114000180060001000200000008000300ac"], 0x28}}, 0x0) 914.972618ms ago: executing program 2 (id=2171): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008", @ANYRES32=r5], 0xac}}, 0x0) 298.271673ms ago: executing program 2 (id=2172): connect$unix(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) connect$inet6(r0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r2, 0x0, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010003704000000ff0f00000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000240012800e00010069703665727370616e0000001000028008000c0000050000040012"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbff}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 199.087802ms ago: executing program 6 (id=2173): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @empty, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 150.950766ms ago: executing program 3 (id=2174): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYBLOB="110372902df68762a15ae536adfbd413bd4f5a9cbacb5fd5318a7374bd7ca3406c348a3f3c33a89b6898a0b0aa113a082b3e51ffcf809c40a727a1b37cd78ea059dc8e9b9b207de076062e2bb5534e95a2d349b5beda67017e6c55dd71aec7d50a4fe629f3cefb1e15bfc1ecb29dd92d07000000000000000ec01dc624951775170b90917893663a894ed873c55a544de3dfc200c8559f2db10c4d62a084c7a8d9a7d8ab89a25371843ac19da3e13c38c14a41"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x200248, &(0x7f0000000040), 0xfd, 0x467, &(0x7f0000001f80)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x8a, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x0, 0x200, 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {}, [], {}, [{0x8, 0x6}]}, 0x2c, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) 0s ago: executing program 2 (id=2175): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000040108000200e00000010c00028005000100000000000800074000000000100006800c00038006"], 0x74}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): 0, changing to 7 [ 277.685428][ T4956] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.895637][ T4956] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 278.142761][ T4956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.222282][ T4956] usb 7-1: config 0 descriptor?? [ 278.842923][ T4213] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 278.851706][ T4956] hid-multitouch 0003:1FD2:6007.0008: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.6-1/input0 [ 279.064120][ T4956] usb 7-1: USB disconnect, device number 6 [ 279.112536][ T4213] usb 3-1: Using ep0 maxpacket: 16 [ 279.248683][ T4213] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.264407][ T4213] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.058867][ T6833] [U] [ 280.062011][ T6833] [U] [ 280.064728][ T6833] [U] [ 280.067443][ T6833] [U] [ 280.150003][ T6833] [U] [ 280.152776][ T6833] [U] [ 280.155510][ T6833] [U] [ 280.158222][ T6833] [U] [ 280.170277][ T6833] [U] [ 280.173025][ T6833] [U] [ 280.175930][ T6833] [U] [ 280.180771][ T6832] [U] [ 280.798085][ T4213] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 281.063298][ T4213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.071468][ T4213] usb 3-1: Product: syz [ 281.075813][ T4213] usb 3-1: Manufacturer: syz [ 281.080425][ T4213] usb 3-1: SerialNumber: syz [ 281.123710][ T4213] usb 3-1: config 0 descriptor?? [ 281.168723][ T6845] loop5: detected capacity change from 0 to 512 [ 281.225447][ T4213] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 281.245694][ T4213] gspca_stv06xx: st6422 sensor detected [ 281.260379][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 281.260397][ T26] audit: type=1326 audit(1731072103.311:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.6.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d55e9719 code=0x7ffc0000 [ 281.342468][ T26] audit: type=1326 audit(1731072103.351:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.6.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11d55e9719 code=0x7ffc0000 [ 281.349237][ T6845] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #3: comm syz.5.552: corrupted inode contents [ 281.393240][ T26] audit: type=1326 audit(1731072103.351:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.6.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d55e9719 code=0x7ffc0000 [ 281.448984][ T6845] EXT4-fs error (device loop5): ext4_dirty_inode:6010: inode #3: comm syz.5.552: mark_inode_dirty error [ 281.512760][ T6845] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #3: comm syz.5.552: corrupted inode contents [ 281.562517][ T26] audit: type=1326 audit(1731072103.351:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.6.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d55e9719 code=0x7ffc0000 [ 281.593107][ T6845] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #3: comm syz.5.552: mark_inode_dirty error [ 281.614263][ T6845] Quota error (device loop5): write_blk: dquota write failed [ 281.621791][ T6845] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 281.642595][ T6845] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.552: Failed to acquire dquot type 0 [ 281.651052][ T26] audit: type=1326 audit(1731072103.351:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.6.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11d55e9719 code=0x7ffc0000 [ 281.685678][ T6845] EXT4-fs (loop5): 1 orphan inode deleted [ 281.691453][ T6845] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 281.710819][ T26] audit: type=1326 audit(1731072103.351:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.6.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d55e9719 code=0x7ffc0000 [ 281.732564][ T6845] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.761016][ T26] audit: type=1326 audit(1731072103.361:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.6.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11d55e9719 code=0x7ffc0000 [ 281.854416][ T26] audit: type=1326 audit(1731072103.361:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.6.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d55e9719 code=0x7ffc0000 [ 282.697927][ T4213] STV06xx: probe of 3-1:0.0 failed with error -71 [ 282.709320][ T4213] usb 3-1: USB disconnect, device number 4 [ 282.760692][ T6839] loop0: detected capacity change from 0 to 40427 [ 282.870699][ T6839] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 282.888158][ T6839] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 282.925329][ T6839] F2FS-fs (loop0): invalid crc value [ 282.930544][ T6862] loop5: detected capacity change from 0 to 512 [ 282.978617][ T6839] F2FS-fs (loop0): Found nat_bits in checkpoint [ 283.015920][ T6862] EXT4-fs (loop5): 1 truncate cleaned up [ 283.021616][ T6862] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 283.125341][ T6839] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 283.143170][ T6839] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 289.037550][ T6915] loop3: detected capacity change from 0 to 512 [ 289.265657][ T6926] loop5: detected capacity change from 0 to 512 [ 289.322595][ T6915] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #3: comm syz.3.567: corrupted inode contents [ 289.329320][ T6926] EXT4-fs (loop5): 1 truncate cleaned up [ 289.339763][ T6915] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #3: comm syz.3.567: mark_inode_dirty error [ 289.362485][ T6926] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 289.460895][ T6915] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #3: comm syz.3.567: corrupted inode contents [ 289.529536][ T6915] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.567: mark_inode_dirty error [ 289.899517][ T6915] __quota_error: 2 callbacks suppressed [ 289.899614][ T6915] Quota error (device loop3): write_blk: dquota write failed [ 290.532918][ T6915] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 290.662070][ T6915] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.567: Failed to acquire dquot type 0 [ 290.725067][ T6915] EXT4-fs (loop3): 1 orphan inode deleted [ 290.730848][ T6915] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 290.762543][ T6915] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.082773][ T4211] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 294.286468][ T26] audit: type=1326 audit(1731072116.341:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.5.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621cc6f719 code=0x7ffc0000 [ 294.358985][ T26] audit: type=1326 audit(1731072116.371:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.5.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f621cc6f719 code=0x7ffc0000 [ 294.406456][ T26] audit: type=1326 audit(1731072116.371:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.5.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621cc6f719 code=0x7ffc0000 [ 294.430732][ T7] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 294.498364][ T4211] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.518858][ T4211] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 294.619134][ T4211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.631055][ T4211] usb 4-1: config 0 descriptor?? [ 294.820836][ T7] usb 7-1: Using ep0 maxpacket: 16 [ 295.665388][ T4211] pwc: Askey VC010 type 2 USB webcam detected. [ 295.702990][ T4211] pwc: send_video_command error -71 [ 295.703055][ T4211] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 295.704495][ T4211] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 295.776865][ T4211] usb 4-1: USB disconnect, device number 3 [ 296.097011][ T7] usb 7-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 296.097049][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.097074][ T7] usb 7-1: Product: syz [ 296.097091][ T7] usb 7-1: Manufacturer: syz [ 296.097108][ T7] usb 7-1: SerialNumber: syz [ 296.106490][ T7] usb 7-1: config 0 descriptor?? [ 296.154848][ T7] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 296.242672][ T6990] loop0: detected capacity change from 0 to 512 [ 296.254282][ T6990] EXT4-fs (loop0): Test dummy encryption mode enabled [ 296.266922][ T6990] EXT4-fs error (device loop0): __ext4_iget:4872: inode #11: block 1: comm syz.0.591: invalid block [ 296.279081][ T6990] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.591: couldn't read orphan inode 11 (err -117) [ 296.291395][ T6990] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 296.372854][ T7] gp8psk: usb in 128 operation failed. [ 296.412570][ T7] gp8psk: usb in 137 operation failed. [ 296.418115][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 296.428161][ T4211] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 296.458596][ T7] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 296.469687][ T4244] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 296.477887][ T7] usb 7-1: media controller created [ 296.497263][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.520604][ T7] gp8psk_fe: Frontend revision 1 attached [ 296.527134][ T7] usb 7-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 296.536548][ T7] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 296.639222][ T6994] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.591: Directory hole found for htree leaf block 0 [ 296.752584][ T4244] usb 6-1: Using ep0 maxpacket: 8 [ 296.842688][ T4211] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.856301][ T4211] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 296.869910][ T4211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.896234][ T7] gp8psk: usb in 137 operation failed. [ 296.901727][ T7] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 296.930276][ T4211] usb 4-1: config 0 descriptor?? [ 296.936814][ T7] gp8psk: found Genpix USB device pID = 201 (hex) [ 296.970119][ T7] usb 7-1: USB disconnect, device number 7 [ 296.983694][ T4211] pwc: Askey VC010 type 2 USB webcam detected. [ 297.082384][ T4211] pwc: send_video_command error -71 [ 297.087637][ T4211] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 297.095424][ T4244] usb 6-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 297.113236][ T4244] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.121265][ T4244] usb 6-1: Product: syz [ 297.125608][ T4211] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 297.136706][ T4244] usb 6-1: Manufacturer: syz [ 297.144869][ T7] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 297.163967][ T4244] usb 6-1: SerialNumber: syz [ 297.172990][ T4211] usb 4-1: USB disconnect, device number 4 [ 297.183570][ T4244] usb 6-1: config 0 descriptor?? [ 297.218840][ T6997] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 297.229214][ T4244] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 297.288507][ T6997] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 297.368340][ T7003] loop3: detected capacity change from 0 to 16 [ 297.422675][ T7003] erofs: (device loop3): mounted with root inode @ nid 36. [ 297.679329][ T7011] loop0: detected capacity change from 0 to 512 [ 297.804263][ T7011] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #3: comm syz.0.596: corrupted inode contents [ 297.826896][ T7011] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #3: comm syz.0.596: mark_inode_dirty error [ 297.850408][ T7011] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #3: comm syz.0.596: corrupted inode contents [ 297.865460][ T7011] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.596: mark_inode_dirty error [ 297.886106][ T7011] Quota error (device loop0): write_blk: dquota write failed [ 297.887683][ T7015] attempt to access beyond end of device [ 297.887683][ T7015] loop3: rw=0, want=24, limit=16 [ 297.897825][ T7011] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 297.920603][ T7011] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.596: Failed to acquire dquot type 0 [ 297.937049][ T7011] EXT4-fs (loop0): 1 orphan inode deleted [ 297.949726][ T7011] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 297.961530][ T7011] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.740610][ T4244] gspca_vc032x: reg_w err -71 [ 300.745443][ T4244] vc032x: probe of 6-1:0.0 failed with error -71 [ 300.764056][ T4244] usb 6-1: USB disconnect, device number 3 [ 300.906256][ T7035] loop6: detected capacity change from 0 to 512 [ 301.083139][ T7037] netlink: 'syz.5.603': attribute type 1 has an invalid length. [ 301.313133][ T7035] EXT4-fs (loop6): 1 truncate cleaned up [ 301.405842][ T7035] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 302.909392][ T7067] loop3: detected capacity change from 0 to 512 [ 302.918793][ T7069] loop2: detected capacity change from 0 to 16 [ 303.049273][ T7069] erofs: (device loop2): mounted with root inode @ nid 36. [ 305.183997][ T7082] attempt to access beyond end of device [ 305.183997][ T7082] loop2: rw=0, want=24, limit=16 [ 306.283709][ T7067] EXT4-fs: error -4 creating inode table initialization thread [ 306.340783][ T7067] EXT4-fs (loop3): mount failed [ 306.451621][ T7091] netlink: 'syz.0.617': attribute type 1 has an invalid length. [ 307.931705][ T7110] loop2: detected capacity change from 0 to 512 [ 308.101113][ T7116] loop5: detected capacity change from 0 to 16 [ 308.140605][ T7110] EXT4-fs (loop2): 1 truncate cleaned up [ 308.152518][ T7110] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 308.215798][ T7116] erofs: (device loop5): mounted with root inode @ nid 36. [ 309.662817][ T7128] attempt to access beyond end of device [ 309.662817][ T7128] loop5: rw=0, want=24, limit=16 [ 310.150175][ T7126] loop6: detected capacity change from 0 to 512 [ 310.425146][ T7126] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #3: comm syz.6.628: corrupted inode contents [ 310.444641][ T7135] netlink: 20 bytes leftover after parsing attributes in process `syz.5.631'. [ 310.474939][ T7126] EXT4-fs error (device loop6): ext4_dirty_inode:6010: inode #3: comm syz.6.628: mark_inode_dirty error [ 310.497075][ T7141] netlink: 'syz.2.630': attribute type 1 has an invalid length. [ 310.506095][ T7126] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #3: comm syz.6.628: corrupted inode contents [ 310.652550][ T7126] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #3: comm syz.6.628: mark_inode_dirty error [ 310.711441][ T7126] Quota error (device loop6): write_blk: dquota write failed [ 310.770121][ T7126] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 310.784283][ T7126] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.628: Failed to acquire dquot type 0 [ 310.978600][ T7126] EXT4-fs (loop6): 1 orphan inode deleted [ 310.998564][ T7146] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 311.023932][ T7126] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 311.061726][ T7126] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.562593][ T7176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.639'. [ 316.706759][ T7201] netlink: 20 bytes leftover after parsing attributes in process `syz.6.646'. [ 317.075573][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.932181][ T7207] netlink: 'syz.5.648': attribute type 1 has an invalid length. [ 317.962142][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 317.971209][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 317.980241][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 317.989253][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 317.998262][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 318.007265][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 318.016279][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 318.025505][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 318.671273][ T7217] loop6: detected capacity change from 0 to 16 [ 318.840595][ T7217] erofs: (device loop6): mounted with root inode @ nid 36. [ 319.801245][ T7229] attempt to access beyond end of device [ 319.801245][ T7229] loop6: rw=0, want=24, limit=16 [ 321.210764][ T7235] loop6: detected capacity change from 0 to 512 [ 321.296822][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 321.322323][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 322.137230][ T7235] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #3: comm syz.6.655: corrupted inode contents [ 322.174669][ T7235] EXT4-fs error (device loop6): ext4_dirty_inode:6010: inode #3: comm syz.6.655: mark_inode_dirty error [ 322.239952][ T7235] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #3: comm syz.6.655: corrupted inode contents [ 322.253261][ T7241] netlink: 20 bytes leftover after parsing attributes in process `syz.5.657'. [ 322.340556][ T7235] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #3: comm syz.6.655: mark_inode_dirty error [ 322.657317][ T7235] Quota error (device loop6): write_blk: dquota write failed [ 323.103354][ T7235] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 323.458123][ T7235] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.655: Failed to acquire dquot type 0 [ 323.571921][ T7235] EXT4-fs (loop6): 1 orphan inode deleted [ 323.583225][ T7235] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 323.646222][ T7235] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.689003][ T7258] netlink: 'syz.5.662': attribute type 1 has an invalid length. [ 324.337825][ T7270] loop0: detected capacity change from 0 to 16 [ 324.341584][ T7268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.663'. [ 324.396385][ T7270] erofs: (device loop0): mounted with root inode @ nid 36. [ 325.335939][ T7275] attempt to access beyond end of device [ 325.335939][ T7275] loop0: rw=0, want=24, limit=16 [ 326.700395][ T7284] netlink: 20 bytes leftover after parsing attributes in process `syz.5.669'. [ 329.187914][ T7306] netlink: 'syz.6.674': attribute type 1 has an invalid length. [ 330.366420][ T7310] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 330.437773][ T7321] loop0: detected capacity change from 0 to 16 [ 330.537739][ T7321] erofs: (device loop0): mounted with root inode @ nid 36. [ 332.304833][ T7330] attempt to access beyond end of device [ 332.304833][ T7330] loop0: rw=0, want=24, limit=16 [ 332.884864][ T7332] loop2: detected capacity change from 0 to 512 [ 333.630003][ T7332] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.680: corrupted inode contents [ 333.853882][ T7332] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #3: comm syz.2.680: mark_inode_dirty error [ 333.964723][ T7332] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.680: corrupted inode contents [ 334.011269][ T7332] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.680: mark_inode_dirty error [ 334.065204][ T7332] Quota error (device loop2): write_blk: dquota write failed [ 334.098923][ T7332] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 334.223440][ T7332] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.680: Failed to acquire dquot type 0 [ 334.836992][ T7332] EXT4-fs (loop2): 1 orphan inode deleted [ 335.032247][ T7332] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 335.062831][ T7332] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.344073][ T7367] netlink: 'syz.0.689': attribute type 1 has an invalid length. [ 337.889937][ T7382] loop5: detected capacity change from 0 to 16 [ 337.966730][ T7384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.693'. [ 338.011839][ T7382] erofs: (device loop5): mounted with root inode @ nid 36. [ 338.421057][ T7389] attempt to access beyond end of device [ 338.421057][ T7389] loop5: rw=0, want=24, limit=16 [ 341.839323][ T7405] netlink: 20 bytes leftover after parsing attributes in process `syz.5.697'. [ 343.053122][ T7424] loop2: detected capacity change from 0 to 512 [ 343.773784][ T7424] EXT4-fs (loop2): 1 truncate cleaned up [ 343.787088][ T7424] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 343.839224][ T7429] netlink: 'syz.6.704': attribute type 1 has an invalid length. [ 344.043113][ T7434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.705'. [ 345.694309][ T7448] loop2: detected capacity change from 0 to 16 [ 345.907998][ T7448] erofs: (device loop2): mounted with root inode @ nid 36. [ 346.228594][ T7455] attempt to access beyond end of device [ 346.228594][ T7455] loop2: rw=0, want=24, limit=16 [ 348.894412][ T7474] netlink: 'syz.0.716': attribute type 1 has an invalid length. [ 349.465377][ T7478] netlink: 20 bytes leftover after parsing attributes in process `syz.5.717'. [ 350.842973][ T7494] loop5: detected capacity change from 0 to 16 [ 350.949717][ T7494] erofs: (device loop5): mounted with root inode @ nid 36. [ 352.772117][ T7516] netlink: 20 bytes leftover after parsing attributes in process `syz.3.724'. [ 354.580191][ T7530] netlink: 'syz.0.730': attribute type 1 has an invalid length. [ 354.592583][ T7526] loop6: detected capacity change from 0 to 512 [ 354.760439][ T7539] netlink: 20 bytes leftover after parsing attributes in process `syz.5.732'. [ 354.820614][ T7526] EXT4-fs (loop6): 1 truncate cleaned up [ 354.827922][ T7526] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 356.684011][ T7554] loop0: detected capacity change from 0 to 16 [ 356.790214][ T7554] erofs: (device loop0): mounted with root inode @ nid 36. [ 357.399955][ T7561] attempt to access beyond end of device [ 357.399955][ T7561] loop0: rw=0, want=24, limit=16 [ 359.643548][ T7580] netlink: 'syz.5.743': attribute type 1 has an invalid length. [ 359.950173][ T7585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.744'. [ 363.437046][ T7628] netlink: 'syz.5.754': attribute type 1 has an invalid length. [ 364.999945][ T7649] netlink: 24 bytes leftover after parsing attributes in process `syz.5.757'. [ 365.546533][ T7654] loop5: detected capacity change from 0 to 16 [ 365.625859][ T7654] erofs: (device loop5): mounted with root inode @ nid 36. [ 365.692532][ T7659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.759'. [ 366.047277][ T7664] attempt to access beyond end of device [ 366.047277][ T7664] loop5: rw=0, want=24, limit=16 [ 368.101478][ T7678] netlink: 'syz.0.768': attribute type 1 has an invalid length. [ 369.420269][ T7695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.772'. [ 369.664114][ T7701] loop3: detected capacity change from 0 to 16 [ 369.763247][ T7701] erofs: (device loop3): mounted with root inode @ nid 36. [ 370.290752][ T7708] attempt to access beyond end of device [ 370.290752][ T7708] loop3: rw=0, want=24, limit=16 [ 371.256451][ T7720] netlink: 'syz.5.782': attribute type 1 has an invalid length. [ 373.973416][ T4818] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 374.302388][ T4818] usb 7-1: Using ep0 maxpacket: 8 [ 374.323400][ T7753] loop3: detected capacity change from 0 to 16 [ 374.370398][ T7753] erofs: (device loop3): mounted with root inode @ nid 36. [ 374.583250][ T4818] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 374.599105][ T4818] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 374.613318][ T4818] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 374.992418][ T7758] attempt to access beyond end of device [ 374.992418][ T7758] loop3: rw=0, want=24, limit=16 [ 375.909652][ T4818] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 376.185754][ T4818] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 376.332511][ T4818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.692729][ T4818] usb 7-1: can't set config #16, error -71 [ 376.718355][ T4818] usb 7-1: USB disconnect, device number 8 [ 376.901340][ T7770] netlink: 'syz.6.794': attribute type 1 has an invalid length. [ 378.515012][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.365829][ T7811] netlink: 'syz.3.808': attribute type 1 has an invalid length. [ 382.094633][ T4211] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 382.242807][ T21] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 382.643081][ T21] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.700772][ T21] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 382.953668][ T21] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 382.965829][ T21] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.976900][ T21] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 382.989286][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.073884][ T21] hub 7-1:1.0: bad descriptor, ignoring hub [ 383.080445][ T21] hub: probe of 7-1:1.0 failed with error -5 [ 383.095352][ T21] cdc_wdm 7-1:1.0: skipping garbage [ 383.100679][ T21] cdc_wdm 7-1:1.0: skipping garbage [ 383.132994][ T4211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.136359][ T21] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 383.150698][ T21] cdc_wdm 7-1:1.0: Unknown control protocol [ 383.188638][ T4211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.296593][ T4211] usb 3-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00 [ 383.378245][ T4211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.447237][ T4211] usb 3-1: config 0 descriptor?? [ 384.828572][ T4211] wacom 0003:17EF:6004.0009: hidraw0: USB HID v7f.fc Device [HID 17ef:6004] on usb-dummy_hcd.2-1/input0 [ 384.963588][ T4211] usb 3-1: USB disconnect, device number 5 [ 384.985062][ T7839] usb 7-1: reset low-speed USB device number 9 using dummy_hcd [ 385.069145][ T7869] netlink: 20 bytes leftover after parsing attributes in process `syz.5.824'. [ 385.944309][ T7875] capability: warning: `syz.2.828' uses 32-bit capabilities (legacy support in use) [ 386.192779][ T4214] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 387.240957][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.5.832'. [ 387.403578][ T4214] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 387.450541][ T4214] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 387.464767][ T4214] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 387.480003][ T4214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.676728][ T4214] usb 4-1: config 0 descriptor?? [ 387.742719][ T7873] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 387.764680][ T4214] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 387.803748][ T7901] netlink: 'syz.2.838': attribute type 1 has an invalid length. [ 387.812018][ T7901] netlink: 76 bytes leftover after parsing attributes in process `syz.2.838'. [ 389.451744][ T7910] loop5: detected capacity change from 0 to 16 [ 389.462484][ T4214] usb 4-1: USB disconnect, device number 5 [ 389.827729][ T7910] erofs: (device loop5): mounted with root inode @ nid 36. [ 389.875465][ T7920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.843'. [ 390.342411][ T7839] usb 7-1: device descriptor read/64, error -110 [ 390.802739][ T7839] usb 7-1: reset low-speed USB device number 9 using dummy_hcd [ 391.182412][ T7839] usb 7-1: device descriptor read/64, error -32 [ 391.412955][ T7944] attempt to access beyond end of device [ 391.412955][ T7944] loop5: rw=0, want=24, limit=16 [ 391.602465][ T7839] usb 7-1: reset low-speed USB device number 9 using dummy_hcd [ 391.802982][ T7839] usb 7-1: device descriptor read/8, error -32 [ 392.274141][ T7839] usb 7-1: reset low-speed USB device number 9 using dummy_hcd [ 392.372461][ T7839] usb 7-1: device descriptor read/8, error -32 [ 392.504887][ T7839] cdc_wdm 7-1:1.0: Error autopm - -16 [ 392.510892][ T21] usb 7-1: USB disconnect, device number 9 [ 392.551508][ T7954] netlink: 32 bytes leftover after parsing attributes in process `syz.3.857'. [ 392.652473][ T4215] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 393.048293][ T4215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.084859][ T4215] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 393.122319][ T4215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.143518][ T4215] usb 1-1: config 0 descriptor?? [ 394.297248][ T4215] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 394.313094][ T4215] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000A/input/input9 [ 394.553943][ T4215] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 395.377300][ T4215] usb 1-1: USB disconnect, device number 3 [ 395.468621][ T7988] netlink: 32 bytes leftover after parsing attributes in process `syz.5.869'. [ 395.761297][ T7999] loop2: detected capacity change from 0 to 512 [ 396.119159][ T8009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.873'. [ 396.218497][ T7999] EXT4-fs (loop2): 1 truncate cleaned up [ 396.224790][ T7999] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 398.257011][ T8024] loop0: detected capacity change from 0 to 16 [ 399.232306][ T8024] erofs: (device loop0): mounted with root inode @ nid 36. [ 399.369605][ T8035] netlink: 32 bytes leftover after parsing attributes in process `syz.2.885'. [ 399.434845][ T8039] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 399.506425][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 399.636199][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.6.891'. [ 399.822679][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.6.891'. [ 401.052154][ T8059] 9pnet: Insufficient options for proto=fd [ 401.502766][ T4215] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 402.006287][ T4215] usb 3-1: config 160 has an invalid interface number: 200 but max is 0 [ 402.046717][ T4215] usb 3-1: config 160 has no interface number 0 [ 402.082444][ T4215] usb 3-1: config 160 interface 200 has no altsetting 0 [ 402.130541][ T8073] netlink: 32 bytes leftover after parsing attributes in process `syz.5.898'. [ 402.262932][ T4215] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 402.280621][ T4215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.305494][ T4215] usb 3-1: Product: syz [ 402.327663][ T4215] usb 3-1: Manufacturer: syz [ 402.335859][ T4215] usb 3-1: SerialNumber: syz [ 402.413146][ T8083] netlink: 32 bytes leftover after parsing attributes in process `syz.6.902'. [ 403.036422][ T4215] usb 3-1: MIDIStreaming interface descriptor not found [ 403.540375][ T8096] 9pnet: Insufficient options for proto=fd [ 403.744625][ T4215] usb 3-1: USB disconnect, device number 6 [ 403.821584][ T8100] netlink: 'syz.6.909': attribute type 16 has an invalid length. [ 404.190843][ T8100] netlink: 'syz.6.909': attribute type 17 has an invalid length. [ 404.424132][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 404.431548][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 404.484479][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 404.522736][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 404.613756][ T4156] udevd[4156]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 404.716546][ T8108] netlink: 32 bytes leftover after parsing attributes in process `syz.5.911'. [ 404.918270][ T26] audit: type=1326 audit(1731072226.971:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.5.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621cc6f719 code=0x7ffc0000 [ 405.085777][ T26] audit: type=1326 audit(1731072226.971:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.5.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f621cc6f719 code=0x7ffc0000 [ 405.248399][ T26] audit: type=1326 audit(1731072226.971:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.5.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621cc6f719 code=0x7ffc0000 [ 407.664237][ T8139] 9pnet: Insufficient options for proto=fd [ 407.741929][ T26] audit: type=1326 audit(1731072226.971:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.5.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f621cc6f719 code=0x7ffc0000 [ 407.767577][ T26] audit: type=1326 audit(1731072226.971:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.5.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621cc6f719 code=0x7ffc0000 [ 407.824822][ T26] audit: type=1326 audit(1731072226.971:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.5.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f621cc6f719 code=0x7ffc0000 [ 408.144703][ T26] audit: type=1326 audit(1731072226.971:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.5.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 408.596422][ T8150] netlink: 'syz.5.924': attribute type 10 has an invalid length. [ 408.607526][ T26] audit: type=1326 audit(1731072226.971:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.5.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621cc6f719 code=0x7ffc0000 [ 408.636945][ T8151] loop6: detected capacity change from 0 to 16 [ 408.707726][ T8150] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 408.736158][ T8151] erofs: (device loop6): mounted with root inode @ nid 36. [ 408.750215][ T8153] netlink: 32 bytes leftover after parsing attributes in process `syz.0.927'. [ 411.094626][ T8183] attempt to access beyond end of device [ 411.094626][ T8183] loop6: rw=0, want=24, limit=16 [ 411.242474][ T21] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 411.508173][ T21] usb 6-1: Using ep0 maxpacket: 16 [ 411.662892][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.686420][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.705558][ T21] usb 6-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 411.716688][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.750462][ T21] usb 6-1: config 0 descriptor?? [ 411.776314][ T8192] netlink: 32 bytes leftover after parsing attributes in process `syz.3.939'. [ 412.260407][ T8203] loop3: detected capacity change from 0 to 512 [ 412.570561][ T8203] EXT4-fs (loop3): 1 truncate cleaned up [ 412.579095][ T8203] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 412.681309][ T21] hid (null): unknown global tag 0xe [ 412.697159][ T21] macally 0003:060B:0001.000B: unknown global tag 0xe [ 412.704102][ T21] macally 0003:060B:0001.000B: item 0 0 1 14 parsing failed [ 412.878043][ T21] macally: probe of 0003:060B:0001.000B failed with error -22 [ 412.890674][ T21] usb 6-1: USB disconnect, device number 4 [ 412.952534][ T4215] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 413.339535][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.947'. [ 413.386105][ T8217] netlink: 'syz.2.947': attribute type 10 has an invalid length. [ 413.454708][ T8217] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 413.498595][ T8223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.946'. [ 413.678268][ T8227] netlink: 32 bytes leftover after parsing attributes in process `syz.2.950'. [ 413.692662][ T4215] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 413.708487][ T4215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.744223][ T4215] usb 1-1: Product: syz [ 413.758843][ T4215] usb 1-1: Manufacturer: syz [ 413.774426][ T4215] usb 1-1: SerialNumber: syz [ 413.853680][ T4215] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 414.187278][ T8245] netlink: 'syz.5.957': attribute type 6 has an invalid length. [ 414.191267][ T8243] netlink: 'syz.6.958': attribute type 1 has an invalid length. [ 414.737458][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.962'. [ 414.838771][ T8265] netlink: 32 bytes leftover after parsing attributes in process `syz.5.963'. [ 415.042577][ T4818] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 415.097210][ T1107] usb 1-1: USB disconnect, device number 4 [ 415.210190][ T8280] syz.0.971 uses obsolete (PF_INET,SOCK_PACKET) [ 415.226133][ T21] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 415.288249][ T8285] netlink: 'syz.3.972': attribute type 1 has an invalid length. [ 415.374828][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 415.451845][ T8292] netlink: 32 bytes leftover after parsing attributes in process `syz.0.975'. [ 415.703560][ T21] usb 6-1: Using ep0 maxpacket: 16 [ 415.902499][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 415.959518][ T8304] netlink: 20 bytes leftover after parsing attributes in process `syz.6.977'. [ 416.105679][ T8313] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 416.127362][ T4818] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 416.146040][ T4818] ath9k_htc: Failed to initialize the device [ 416.153941][ T21] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 416.203966][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.228016][ T21] usb 6-1: Product: syz [ 416.228655][ T1107] usb 1-1: ath9k_htc: USB layer deinitialized [ 416.235729][ T21] usb 6-1: Manufacturer: syz [ 416.253344][ T21] usb 6-1: SerialNumber: syz [ 416.258562][ T8318] netlink: 'syz.0.984': attribute type 1 has an invalid length. [ 416.288246][ T21] usb 6-1: config 0 descriptor?? [ 416.350138][ T21] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 416.359752][ T21] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 416.815382][ T8331] netlink: 32 bytes leftover after parsing attributes in process `syz.0.988'. [ 416.986733][ T21] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 417.033741][ T8337] user requested TSC rate below hardware speed [ 417.913943][ T8350] tipc: Started in network mode [ 417.929797][ T8350] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 417.950083][ T8350] tipc: Enabled bearer , priority 0 [ 417.972553][ T8354] netlink: 'syz.3.995': attribute type 1 has an invalid length. [ 418.036722][ T8358] Failed to get privilege flags for destination (handle=0x2:0xffffffff) [ 418.072457][ T21] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 418.089837][ T21] em28xx 6-1:0.0: board has no eeprom [ 418.189270][ T8365] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1000'. [ 418.212704][ T21] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 418.230815][ T21] em28xx 6-1:0.0: dvb set to bulk mode. [ 418.247324][ T21] usb 6-1: USB disconnect, device number 5 [ 418.256897][ T21] em28xx 6-1:0.0: Disconnecting em28xx [ 418.263939][ T4818] em28xx 6-1:0.0: Binding DVB extension [ 418.341578][ T4818] em28xx 6-1:0.0: Registering input extension [ 418.372899][ T21] em28xx 6-1:0.0: Closing input extension [ 418.409310][ T21] em28xx 6-1:0.0: Freeing device [ 418.483795][ T4215] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 418.954722][ T4818] tipc: Node number set to 11578026 [ 419.137125][ T8391] netlink: 'syz.2.1009': attribute type 1 has an invalid length. [ 419.182707][ T4215] usb 1-1: config 0 has an invalid interface number: 140 but max is 0 [ 419.193295][ T4215] usb 1-1: config 0 has no interface number 0 [ 419.382561][ T4215] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=71.01 [ 419.395897][ T4215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.412707][ T4215] usb 1-1: Product: syz [ 419.420744][ T4215] usb 1-1: Manufacturer: syz [ 419.430876][ T4215] usb 1-1: SerialNumber: syz [ 419.443422][ T4215] usb 1-1: config 0 descriptor?? [ 419.758929][ T4215] as10x_usb: device has been detected [ 419.781195][ T4215] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 419.872482][ T4215] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 419.996343][ T4215] as10x_usb: error during firmware upload part1 [ 420.031991][ T4215] Registered device Elgato EyeTV DTT Deluxe [ 420.044079][ T4215] usb 1-1: USB disconnect, device number 5 [ 420.155553][ T4215] Unregistered device Elgato EyeTV DTT Deluxe [ 420.159102][ T4215] as10x_usb: device has been disconnected [ 420.221249][ T8422] netlink: 'syz.2.1020': attribute type 1 has an invalid length. [ 421.198125][ T21] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 421.282529][ T4818] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 421.446637][ T8456] xt_l2tp: unknown flags: 10 [ 421.492512][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 421.563145][ T4818] usb 1-1: Using ep0 maxpacket: 8 [ 421.622697][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 421.768754][ T8461] netlink: 'syz.3.1033': attribute type 1 has an invalid length. [ 421.789040][ T4818] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.842710][ T21] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice=74.98 [ 421.851917][ T4818] usb 1-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 421.880467][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.911569][ T21] usb 6-1: Product: syz [ 421.921820][ T4818] usb 1-1: config 1 interface 0 has no altsetting 0 [ 421.939657][ T21] usb 6-1: Manufacturer: syz [ 421.969025][ T21] usb 6-1: SerialNumber: syz [ 422.000242][ T21] usb 6-1: config 0 descriptor?? [ 422.074906][ T21] pxrc 6-1:0.0: Could not find endpoint [ 422.142589][ T4818] usb 1-1: New USB device found, idVendor=045e, idProduct=0730, bcdDevice= 0.40 [ 422.151678][ T4818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.178862][ T4818] usb 1-1: Product: syz [ 422.185060][ T4818] usb 1-1: Manufacturer: syz [ 422.190751][ T4818] usb 1-1: SerialNumber: syz [ 422.702450][ T4818] usbhid 1-1:1.0: can't add hid device: -71 [ 422.708651][ T4818] usbhid: probe of 1-1:1.0 failed with error -71 [ 422.745412][ T4818] usb 1-1: USB disconnect, device number 6 [ 422.957109][ T8493] netlink: 'syz.3.1044': attribute type 1 has an invalid length. [ 423.322457][ T1107] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 423.582402][ T1107] usb 1-1: Using ep0 maxpacket: 8 [ 423.702541][ T1107] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 423.752688][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.885627][ T1107] usb 1-1: config 0 descriptor?? [ 423.908415][ T4244] usb 6-1: USB disconnect, device number 6 [ 425.247907][ T8528] netlink: 'syz.2.1056': attribute type 1 has an invalid length. [ 427.302589][ T1107] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 427.349812][ T1107] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 427.418681][ T8567] netlink: 'syz.3.1067': attribute type 1 has an invalid length. [ 427.434211][ T1107] asix: probe of 1-1:0.0 failed with error -71 [ 427.488564][ T1107] usb 1-1: USB disconnect, device number 7 [ 428.932563][ T6961] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 429.192665][ T6961] usb 4-1: Using ep0 maxpacket: 16 [ 429.323394][ T6961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.445647][ T6961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.588022][ T6961] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 429.628571][ T6961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.673270][ T6961] usb 4-1: config 0 descriptor?? [ 430.416382][ T6961] appleir 0003:05AC:8241.000C: unknown main item tag 0x0 [ 430.475577][ T6961] appleir 0003:05AC:8241.000C: unknown main item tag 0x0 [ 430.533544][ T6961] appleir 0003:05AC:8241.000C: unknown main item tag 0x0 [ 430.623703][ T6961] appleir 0003:05AC:8241.000C: unknown main item tag 0x0 [ 430.686077][ T6961] appleir 0003:05AC:8241.000C: unknown main item tag 0x0 [ 430.942515][ T6961] appleir 0003:05AC:8241.000C: No inputs registered, leaving [ 430.959795][ T6961] appleir 0003:05AC:8241.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 430.975305][ T6961] usb 4-1: USB disconnect, device number 6 [ 431.393278][ T4210] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 431.956747][ T4210] usb 6-1: device descriptor read/64, error -71 [ 432.518157][ T4210] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 432.730900][ T4210] usb 6-1: device descriptor read/64, error -71 [ 432.922567][ T4210] usb usb6-port1: attempt power cycle [ 433.220841][ T8673] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1101'. [ 433.332368][ T4210] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 433.422551][ T4210] usb 6-1: device descriptor read/8, error -71 [ 433.542361][ T4211] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 433.692474][ T4210] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 433.782485][ T4211] usb 1-1: Using ep0 maxpacket: 8 [ 433.787714][ T4210] usb 6-1: device descriptor read/8, error -71 [ 433.902554][ T4211] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 433.912560][ T4210] usb usb6-port1: unable to enumerate USB device [ 433.924584][ T4211] usb 1-1: config 179 has no interface number 0 [ 433.951123][ T4211] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 433.978180][ T4211] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 433.996981][ T4211] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 434.010373][ T4211] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 434.029695][ T4211] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 434.051734][ T4211] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 434.061564][ T4211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.132758][ T8677] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 434.408437][ T8677] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 434.415608][ T8677] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 434.471666][ T8677] vhci_hcd vhci_hcd.0: Device attached [ 434.632617][ T21] vhci_hcd: vhci_device speed not set [ 434.761192][ T8687] vhci_hcd: connection closed [ 434.768281][ T9] vhci_hcd: stop threads [ 434.778215][ T21] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 434.906283][ T6961] usb 1-1: USB disconnect, device number 8 [ 434.912330][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 434.912504][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 434.927482][ T9] vhci_hcd: release socket [ 435.189950][ T9] vhci_hcd: disconnect device [ 435.384466][ T8705] 9pnet: Insufficient options for proto=fd [ 435.444415][ T8698] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 435.544290][ T8698] kvm: pic: non byte read [ 435.575570][ T8698] kvm: pic: level sensitive irq not supported [ 435.575768][ T8698] kvm: pic: non byte read [ 435.588091][ T8698] kvm: pic: level sensitive irq not supported [ 435.588164][ T8698] kvm: pic: non byte read [ 435.599355][ T8698] kvm: pic: level sensitive irq not supported [ 435.599469][ T8698] kvm: pic: non byte read [ 435.798728][ T8719] input: syz0 as /devices/virtual/input/input11 [ 436.087396][ T8722] device pim6reg1 entered promiscuous mode [ 436.114084][ T6961] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 436.354427][ T6961] usb 1-1: Using ep0 maxpacket: 32 [ 436.642612][ T6961] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.656039][ T6961] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 436.894490][ T6961] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 437.038378][ T6961] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 437.162116][ T6961] usb 1-1: Product: syz [ 437.237559][ T6961] usb 1-1: Manufacturer: syz [ 437.372652][ T6961] usb 1-1: SerialNumber: syz [ 437.544832][ T6961] usb 1-1: config 0 descriptor?? [ 437.626360][ T8745] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 438.869120][ T8762] 9pnet: Insufficient options for proto=fd [ 438.975219][ T4211] usb 1-1: USB disconnect, device number 9 [ 439.954894][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.053082][ T21] vhci_hcd: vhci_device speed not set [ 441.917936][ T8832] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1149'. [ 442.168046][ T6961] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 442.189126][ T8839] netlink: 'syz.6.1153': attribute type 10 has an invalid length. [ 442.462653][ T6961] usb 6-1: Using ep0 maxpacket: 16 [ 442.563854][ T8839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.607630][ T8839] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 442.772646][ T6961] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 442.781786][ T6961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.834054][ T6961] usb 6-1: Product: syz [ 442.838279][ T6961] usb 6-1: Manufacturer: syz [ 442.868035][ T6961] usb 6-1: SerialNumber: syz [ 442.884038][ T6961] usb 6-1: config 0 descriptor?? [ 442.954327][ T6961] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 443.238984][ T6961] usb 6-1: clie_3_5_startup: get config number bad return length: 0 [ 443.255790][ T6961] visor: probe of 6-1:0.0 failed with error -5 [ 443.421901][ T4211] usb 6-1: USB disconnect, device number 11 [ 443.530455][ T8874] loop6: detected capacity change from 0 to 16 [ 443.607680][ T8874] erofs: (device loop6): mounted with root inode @ nid 36. [ 443.912335][ T8886] attempt to access beyond end of device [ 443.912335][ T8886] loop6: rw=0, want=24, limit=16 [ 445.792439][ T8920] mmap: syz.6.1182 (8920) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 445.837601][ T8922] loop0: detected capacity change from 0 to 16 [ 445.907280][ T8922] erofs: (device loop0): mounted with root inode @ nid 36. [ 446.125203][ T8927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1184'. [ 446.142383][ T8927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1184'. [ 446.213665][ T8931] attempt to access beyond end of device [ 446.213665][ T8931] loop0: rw=0, want=24, limit=16 [ 446.429868][ T8933] input: syz0 as /devices/virtual/input/input12 [ 447.929015][ T8967] loop6: detected capacity change from 0 to 16 [ 448.038932][ T8967] erofs: (device loop6): mounted with root inode @ nid 36. [ 448.395649][ T8972] attempt to access beyond end of device [ 448.395649][ T8972] loop6: rw=0, want=24, limit=16 [ 448.565273][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 448.657698][ T8974] netlink: 'syz.2.1200': attribute type 10 has an invalid length. [ 448.972438][ T7] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 449.242355][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 449.362604][ T7] usb 6-1: config 5 has an invalid interface number: 183 but max is 0 [ 449.381045][ T7] usb 6-1: config 5 has no interface number 0 [ 449.414074][ T7] usb 6-1: config 5 interface 183 has no altsetting 0 [ 449.542619][ T4818] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 449.572582][ T7] usb 6-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 1.10 [ 449.591912][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.621932][ T7] usb 6-1: Product: syz [ 449.626618][ T7] usb 6-1: Manufacturer: syz [ 449.631241][ T7] usb 6-1: SerialNumber: syz [ 449.838704][ T4818] usb 7-1: Using ep0 maxpacket: 32 [ 449.937776][ T7] usb-storage 6-1:5.183: USB Mass Storage device detected [ 449.972757][ T4818] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 449.991641][ T4818] usb 7-1: config 0 has no interface number 0 [ 450.004477][ T7] usb-storage 6-1:5.183: Quirks match for vid 04b8 pid 0602: 1 [ 450.112619][ T7] usb 6-1: USB disconnect, device number 12 [ 450.182556][ T4818] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 450.217806][ T4818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.236306][ T4818] usb 7-1: Product: syz [ 450.240550][ T4818] usb 7-1: Manufacturer: syz [ 450.249821][ T4818] usb 7-1: SerialNumber: syz [ 450.256914][ T4818] usb 7-1: config 0 descriptor?? [ 450.304958][ T4818] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 450.402359][ T21] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 450.457070][ T4244] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 450.528160][ T4818] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 450.572756][ T4818] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 450.732980][ T4244] usb 4-1: Using ep0 maxpacket: 32 [ 450.782539][ T21] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 450.790850][ T21] usb 1-1: config 0 has no interface number 0 [ 450.805040][ T21] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 450.826173][ T21] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 450.852363][ T21] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 450.855321][ T4244] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 450.890475][ T21] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 450.898616][ T4244] usb 4-1: config 0 has no interface number 0 [ 450.916277][ T4244] usb 4-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 450.918197][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.937703][ T4244] usb 4-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 450.952429][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 450.970545][ T4244] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 450.973666][ T21] usb 1-1: config 0 descriptor?? [ 450.996166][ T4244] usb 4-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 451.012965][ T9019] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 451.023917][ T4818] usb 7-1: USB disconnect, device number 11 [ 451.042074][ T4818] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 451.055672][ T21] ldusb 1-1:0.55: Interrupt in endpoint not found [ 451.112790][ T4818] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 451.134784][ T4818] quatech2 7-1:0.51: device disconnected [ 451.223602][ T4244] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 451.245839][ T4244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.276826][ T4244] usb 4-1: Product: syz [ 451.281031][ T4244] usb 4-1: Manufacturer: syz [ 451.332126][ T4244] usb 4-1: SerialNumber: syz [ 451.341736][ T4214] usb 1-1: USB disconnect, device number 10 [ 451.374471][ T4244] usb 4-1: config 0 descriptor?? [ 451.392647][ T9022] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 451.420364][ T9022] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 451.561942][ T9043] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 451.685028][ T9015] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1213'. [ 451.718311][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1213'. [ 451.742511][ T9015] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1213'. [ 451.742726][ T9046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1223'. [ 451.804200][ T9015] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1213'. [ 451.876874][ T4244] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz) driver version 1.00 [ 451.933679][ T4244] usb 4-1: USB disconnect, device number 7 [ 452.872439][ T4214] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 452.992529][ T4818] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 453.162436][ T4214] usb 3-1: Using ep0 maxpacket: 8 [ 453.282589][ T4818] usb 1-1: Using ep0 maxpacket: 8 [ 453.468507][ T4214] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 453.482413][ T4214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.531110][ T4214] usb 3-1: Product: syz [ 453.551362][ T4214] usb 3-1: Manufacturer: syz [ 453.562042][ T4214] usb 3-1: SerialNumber: syz [ 453.582628][ T4818] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 453.600354][ T4214] usb 3-1: config 0 descriptor?? [ 453.615893][ T4818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.654057][ T4818] usb 1-1: Product: syz [ 453.668554][ T4818] usb 1-1: Manufacturer: syz [ 453.686169][ T4818] usb 1-1: SerialNumber: syz [ 453.732973][ T4818] usb 1-1: config 0 descriptor?? [ 453.902638][ T4214] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 453.915327][ T4211] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 454.012590][ T4818] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 454.301516][ T4211] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 454.320197][ T4211] usb 7-1: config 0 has no interface number 0 [ 454.337940][ T4211] usb 7-1: config 0 interface 31 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 454.379373][ T4211] usb 7-1: config 0 interface 31 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 454.420940][ T4211] usb 7-1: config 0 interface 31 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 454.627198][ T4211] usb 7-1: New USB device found, idVendor=2001, idProduct=f112, bcdDevice=d5.df [ 454.653500][ T4211] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.678235][ T4211] usb 7-1: Product: syz [ 454.688532][ T4211] usb 7-1: Manufacturer: syz [ 454.695381][ T4211] usb 7-1: SerialNumber: syz [ 454.702557][ T4214] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 454.724001][ T4211] usb 7-1: config 0 descriptor?? [ 454.741918][ T4214] usb 3-1: USB disconnect, device number 7 [ 454.742635][ T9086] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 455.013535][ T6961] usb 7-1: USB disconnect, device number 12 [ 455.556235][ T9125] netlink: 'syz.2.1256': attribute type 10 has an invalid length. [ 455.667854][ T9135] 9pnet: Insufficient options for proto=fd [ 455.929724][ T4818] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 456.448198][ T4818] usb 1-1: USB disconnect, device number 11 [ 458.786928][ T9224] nftables ruleset with unbound chain [ 459.162715][ T4244] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 459.508355][ T4818] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 459.532545][ T4244] usb 3-1: config 1 interface 0 has no altsetting 0 [ 459.692920][ T4244] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 459.713492][ T4244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.733283][ T4244] usb 3-1: Product: syz [ 459.737495][ T4244] usb 3-1: Manufacturer: syz [ 459.774214][ T4244] usb 3-1: SerialNumber: syz [ 459.857708][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.879200][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.889700][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 459.912632][ T4818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.932268][ T4818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.958501][ T4818] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 460.000170][ T4818] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 460.016349][ T4818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.058747][ T4818] usb 1-1: config 0 descriptor?? [ 460.491572][ T4244] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 460.503746][ T4211] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 460.719000][ T7] usb 3-1: USB disconnect, device number 8 [ 460.769571][ T7] usblp0: removed [ 460.872652][ T4211] usb 4-1: config 0 has an invalid interface number: 57 but max is 0 [ 460.887980][ T4211] usb 4-1: config 0 has no interface number 0 [ 460.918209][ T4211] usb 4-1: config 0 interface 57 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 460.965307][ T4211] usb 4-1: config 0 interface 57 altsetting 0 has an invalid endpoint with address 0x54, skipping [ 461.014790][ T4211] usb 4-1: config 0 interface 57 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 461.018889][ T4818] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 461.052811][ T4818] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 461.074673][ T4818] usb 1-1: USB disconnect, device number 12 [ 461.119777][ T4211] usb 4-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63 [ 461.153559][ T4211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.175662][ T4211] usb 4-1: config 0 descriptor?? [ 461.214639][ T4211] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 461.226231][ T4211] gspca_mr97310a: reg write [21] error -22 [ 461.232134][ T4211] mr97310a: probe of 4-1:0.57 failed with error -22 [ 461.396592][ T9292] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 461.432030][ T4818] usb 4-1: USB disconnect, device number 8 [ 461.572549][ T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 462.622609][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 462.742399][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.761226][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.782484][ T7] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 462.978073][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.988678][ T7] usb 3-1: config 0 descriptor?? [ 463.084037][ T6961] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 463.472434][ T6961] usb 6-1: Using ep0 maxpacket: 16 [ 463.623908][ T6961] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.893700][ T6961] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 463.959765][ T6961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.186045][ T7] macally 0003:060B:0001.000E: unexpected long global item [ 464.199442][ T6961] usb 6-1: Product: syz [ 464.205364][ T6961] usb 6-1: Manufacturer: syz [ 464.209992][ T6961] usb 6-1: SerialNumber: syz [ 464.219229][ T6961] usb 6-1: config 0 descriptor?? [ 464.246438][ T7] macally: probe of 0003:060B:0001.000E failed with error -22 [ 464.264805][ T6961] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 464.369944][ T7] usb 3-1: USB disconnect, device number 9 [ 464.488146][ T9360] netlink: 'syz.6.1339': attribute type 29 has an invalid length. [ 464.497817][ T9360] netlink: 'syz.6.1339': attribute type 29 has an invalid length. [ 464.508421][ T9360] netlink: 'syz.6.1339': attribute type 29 has an invalid length. [ 464.702379][ T4210] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 464.751654][ T9364] program syz.3.1341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 464.845276][ T4818] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 464.942568][ T4210] usb 1-1: Using ep0 maxpacket: 8 [ 465.062768][ T4210] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 465.089674][ T4210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.102600][ T4818] usb 7-1: Using ep0 maxpacket: 16 [ 465.122661][ T6961] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 465.129516][ T6961] gspca_pac7302: probe of 6-1:0.0 failed with error -71 [ 465.134770][ T4210] usb 1-1: config 0 descriptor?? [ 465.172041][ T6961] usb 6-1: USB disconnect, device number 13 [ 465.245927][ T4818] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.304098][ T4818] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.349646][ T4818] usb 7-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 465.374580][ T4818] usb 7-1: config 0 interface 0 has no altsetting 0 [ 465.388351][ T4818] usb 7-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 466.194268][ T4818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.204450][ T4818] usb 7-1: config 0 descriptor?? [ 466.495865][ T9399] device batadv0 entered promiscuous mode [ 466.525991][ T9399] device macvtap1 entered promiscuous mode [ 466.549773][ T9399] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 466.570666][ T9399] device batadv0 left promiscuous mode [ 466.635944][ T9405] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1357'. [ 466.704555][ T4818] wacom 0003:056A:002A.000F: unknown main item tag 0x0 [ 466.721609][ T4818] wacom 0003:056A:002A.000F: unknown main item tag 0x0 [ 466.752911][ T4818] wacom 0003:056A:002A.000F: unknown main item tag 0x0 [ 466.779927][ T4818] wacom 0003:056A:002A.000F: unknown main item tag 0x0 [ 466.797426][ T4818] wacom 0003:056A:002A.000F: unknown main item tag 0x0 [ 466.816256][ T4818] wacom 0003:056A:002A.000F: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 466.844408][ T4818] wacom 0003:056A:002A.000F: hidraw0: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.6-1/input0 [ 466.878013][ T4818] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:002A.000F/input/input17 [ 467.002472][ T4818] usb 7-1: USB disconnect, device number 13 [ 467.076426][ T9416] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6_vti0, syncid = -2, id = 0 [ 467.102375][ T9417] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 3, id = 0 [ 467.627637][ T4210] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 467.637712][ T6961] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 467.660140][ T4210] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 467.677687][ T4210] asix: probe of 1-1:0.0 failed with error -71 [ 467.688955][ T4210] usb 1-1: USB disconnect, device number 13 [ 467.858361][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1370'. [ 467.912531][ T6961] usb 3-1: Using ep0 maxpacket: 32 [ 468.042493][ T6961] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 468.050628][ T6961] usb 3-1: config 0 has no interface number 0 [ 468.124186][ T9449] netlink: 632 bytes leftover after parsing attributes in process `syz.3.1374'. [ 468.417907][ T6961] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 468.427243][ T6961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.435850][ T6961] usb 3-1: Product: syz [ 468.440033][ T6961] usb 3-1: Manufacturer: syz [ 468.446016][ T6961] usb 3-1: SerialNumber: syz [ 468.452890][ T6961] usb 3-1: config 0 descriptor?? [ 468.503333][ T6961] smsc95xx v2.0.0 [ 468.851380][ T9475] input: syz0 as /devices/virtual/input/input21 [ 468.932527][ T6961] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 468.965314][ T6961] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 469.291708][ T9487] hub 6-0:1.0: USB hub found [ 469.296916][ T9487] hub 6-0:1.0: 1 port detected [ 469.652374][ T4214] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 469.672493][ T6961] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32 [ 469.695656][ T6961] smsc95xx: probe of 3-1:0.67 failed with error -32 [ 470.059205][ T4214] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 470.084249][ T4214] usb 1-1: config 0 has no interface number 0 [ 470.272820][ T4214] usb 1-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= e.96 [ 470.281906][ T4214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.327673][ T4214] usb 1-1: Product: syz [ 470.363531][ T4214] usb 1-1: Manufacturer: syz [ 470.382633][ T4214] usb 1-1: SerialNumber: syz [ 470.418214][ T4214] usb 1-1: config 0 descriptor?? [ 470.488110][ T4214] cx231xx 1-1:0.1: New device syz syz @ 12 Mbps (2013:0259) with 1 interfaces [ 470.521162][ T4214] cx231xx 1-1:0.1: Not found matching IAD interface [ 470.693240][ T4214] usb 1-1: USB disconnect, device number 14 [ 471.240356][ T9525] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1403'. [ 471.421010][ T4244] usb 3-1: USB disconnect, device number 10 [ 473.469797][ T4956] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 474.232599][ T4956] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 474.272553][ T4956] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 474.332280][ T4956] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 474.381059][ T4956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.492874][ T9575] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 474.762507][ T4214] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 474.886890][ T4956] usb 3-1: USB disconnect, device number 11 [ 475.022433][ T4214] usb 1-1: Using ep0 maxpacket: 8 [ 475.152581][ T4214] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 475.160834][ T4214] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 475.192406][ T4214] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 475.231838][ T4214] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 475.248491][ T4214] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.263756][ T4214] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 475.273579][ T4214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.316352][ T4956] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 475.336822][ T4956] Bluetooth: hci4: Injecting HCI hardware error event [ 475.358457][ T4167] Bluetooth: hci4: hardware error 0x00 [ 475.692593][ T4214] usb 1-1: usb_control_msg returned -32 [ 475.701515][ T4214] usbtmc 1-1:16.0: can't read capabilities [ 476.416817][ T9642] 9pnet: Insufficient options for proto=fd [ 476.645979][ T9647] futex_wake_op: syz.2.1447 tries to shift op by 36; fix this program [ 476.763174][ T4956] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 477.102644][ T4956] usb 4-1: Using ep0 maxpacket: 16 [ 477.265970][ T4956] usb 4-1: config index 0 descriptor too short (expected 255, got 36) [ 477.312294][ T4956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.369107][ T4244] usb 1-1: USB disconnect, device number 15 [ 477.402313][ T4956] usb 4-1: config 0 has no interfaces? [ 477.559830][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1456'. [ 477.608034][ T9670] device batadv0 entered promiscuous mode [ 477.614630][ T4956] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 477.636104][ T4956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.651100][ T9670] device macvtap1 entered promiscuous mode [ 477.682841][ T4956] usb 4-1: Product: syz [ 477.687067][ T4956] usb 4-1: Manufacturer: syz [ 477.694785][ T9670] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 477.710700][ T4956] usb 4-1: SerialNumber: syz [ 477.738243][ T4956] usb 4-1: config 0 descriptor?? [ 477.969083][ T9672] device batadv0 left promiscuous mode [ 478.784339][ T4214] usb 4-1: USB disconnect, device number 9 [ 478.855435][ T9688] 9pnet: Insufficient options for proto=fd [ 479.001547][ T9690] loop2: detected capacity change from 0 to 16 [ 479.081558][ T9690] erofs: (device loop2): mounted with root inode @ nid 36. [ 479.728707][ T4956] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 480.070707][ T9702] attempt to access beyond end of device [ 480.070707][ T9702] loop2: rw=0, want=24, limit=16 [ 480.152438][ T4956] usb 1-1: Using ep0 maxpacket: 16 [ 480.302641][ T4956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.350972][ T4956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.442527][ T4956] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 480.528304][ T4956] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 480.594182][ T4956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.641670][ T4956] usb 1-1: config 0 descriptor?? [ 480.701095][ T26] audit: type=1326 audit(1731072302.751:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.6.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d55e9719 code=0x7ffc0000 [ 480.768409][ T26] audit: type=1326 audit(1731072302.781:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9715 comm="syz.6.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d55e9719 code=0x7ffc0000 [ 480.980332][ T9724] 9pnet: Insufficient options for proto=fd [ 481.184428][ T4956] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 481.191713][ T4956] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max [ 481.225461][ T4956] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 481.307707][ T4956] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 481.428490][ T4956] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 481.584131][ T4956] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 481.705363][ T4956] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 481.983126][ T4956] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0010/input/input23 [ 482.052400][ T9734] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 482.058966][ T9734] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 482.111990][ T4956] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 482.125028][ T9734] vhci_hcd vhci_hcd.0: Device attached [ 482.166715][ T4956] usb 1-1: USB disconnect, device number 16 [ 482.285698][ T9744] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1480'. [ 482.365620][ T9744] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.375483][ T9744] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.384330][ T9744] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.393113][ T9744] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.413830][ T9744] device vxlan0 entered promiscuous mode [ 482.473083][ T4214] vhci_hcd: vhci_device speed not set [ 482.552305][ T4214] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 482.559902][ T21] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 482.962989][ T21] usb 3-1: config 0 has no interfaces? [ 482.969121][ T21] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 482.998970][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.020654][ T9744] syz.6.1480 (9744) used greatest stack depth: 18944 bytes left [ 483.035881][ T21] usb 3-1: config 0 descriptor?? [ 483.256892][ T9765] loop3: detected capacity change from 0 to 512 [ 483.296003][ T9735] usb 37-1: recv xbuf, 0 [ 483.301892][ T144] vhci_hcd: stop threads [ 483.304704][ T6961] usb 3-1: USB disconnect, device number 12 [ 483.309609][ T144] vhci_hcd: release socket [ 483.339335][ T144] vhci_hcd: disconnect device [ 483.372383][ T4214] vhci_hcd: vhci_device speed not set [ 483.419728][ T9765] EXT4-fs (loop3): 1 truncate cleaned up [ 483.431046][ T9765] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 483.502163][ T9770] binder: 9769:9770 ioctl c00c6211 20000040 returned -22 [ 483.635385][ T4956] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 484.073501][ T4956] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.192475][ T4956] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 484.206391][ T9768] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 484.319373][ T4956] usb 1-1: New USB device found, idVendor=04d5, idProduct=0001, bcdDevice= 0.00 [ 484.369320][ T4956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.430880][ T4956] usb 1-1: config 0 descriptor?? [ 484.515065][ T4956] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 484.906342][ T7] usb 1-1: USB disconnect, device number 17 [ 485.222297][ T4956] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 485.492329][ T4956] usb 3-1: Using ep0 maxpacket: 32 [ 485.638620][ T4956] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 485.649283][ T4956] usb 3-1: config 0 has no interface number 0 [ 485.683635][ T4956] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.724672][ T4956] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.765247][ T4956] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 485.837249][ T4956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.680785][ T4956] usb 3-1: config 0 descriptor?? [ 486.824551][ T9819] loop0: detected capacity change from 0 to 512 [ 486.973518][ T9819] EXT4-fs (loop0): 1 truncate cleaned up [ 487.007893][ T9819] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 487.052569][ T4211] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 487.471769][ T9825] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 487.504009][ T4956] uclogic 0003:28BD:0094.0011: pen parameters not found [ 487.504191][ T4956] uclogic 0003:28BD:0094.0011: interface is invalid, ignoring [ 487.533702][ T4211] usb 6-1: Using ep0 maxpacket: 32 [ 487.573960][ T4214] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 487.763348][ T4211] usb 6-1: unable to get BOS descriptor or descriptor too short [ 487.843859][ T4211] usb 6-1: config 2 has an invalid interface number: 57 but max is 0 [ 487.843893][ T4211] usb 6-1: config 2 has no interface number 0 [ 487.843920][ T4211] usb 6-1: config 2 interface 57 has no altsetting 0 [ 488.006209][ T4211] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=57.15 [ 488.047662][ T4211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.055897][ T4211] usb 6-1: Product: syz [ 488.061312][ T4211] usb 6-1: Manufacturer: syz [ 488.066670][ T4211] usb 6-1: SerialNumber: syz [ 488.179330][ T4214] usb 7-1: Using ep0 maxpacket: 8 [ 488.190710][ T7] usb 3-1: USB disconnect, device number 13 [ 488.214633][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'. [ 488.325781][ T4214] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.358294][ T4214] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xED, skipping [ 488.382489][ T4214] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 488.562796][ T4211] cxacru 6-1:2.57: usbatm_usb_probe: bind failed: -19! [ 488.950617][ T4211] usb 6-1: USB disconnect, device number 14 [ 489.393656][ T4214] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 489.404526][ T4214] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 489.417184][ T4214] usb 7-1: Product: syz [ 489.421386][ T4214] usb 7-1: Manufacturer: syz [ 489.426739][ T4214] usb 7-1: SerialNumber: syz [ 489.444167][ T4214] usb 7-1: config 0 descriptor?? [ 489.482631][ T9835] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 489.507940][ T4214] radio-si470x 7-1:0.0: could not find interrupt in endpoint [ 489.523790][ T4214] radio-si470x: probe of 7-1:0.0 failed with error -5 [ 489.544808][ T4214] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 489.750576][ T9868] loop2: detected capacity change from 0 to 512 [ 489.815931][ T9868] EXT4-fs (loop2): 1 truncate cleaned up [ 489.822412][ T9868] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 489.832422][ T7] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 490.073042][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 490.944324][ T7] usb 6-1: config 0 has an invalid interface number: 206 but max is 0 [ 490.957097][ T7] usb 6-1: config 0 has no interface number 0 [ 491.142580][ T7] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 491.166672][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.190845][ T9886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 491.198807][ T9886] IPv6: NLM_F_CREATE should be set when creating new route [ 491.210255][ T7] usb 6-1: Product: syz [ 491.215066][ T7] usb 6-1: Manufacturer: syz [ 491.220232][ T7] usb 6-1: SerialNumber: syz [ 491.228016][ T7] usb 6-1: config 0 descriptor?? [ 491.274790][ T7] radioshark2 6-1:0.206: Invalid radioSHARK2 device [ 491.296039][ T7] radioshark2: probe of 6-1:0.206 failed with error -22 [ 491.334683][ T7] usbhid 6-1:0.206: couldn't find an input interrupt endpoint [ 491.365535][ T1107] usb 7-1: USB disconnect, device number 14 [ 491.487947][ T7] usb 6-1: USB disconnect, device number 15 [ 492.702971][ T9916] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1536'. [ 492.932337][ T7] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 493.323124][ T7] usb 6-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=e1.fc [ 493.337273][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.358219][ T7] usb 6-1: config 0 descriptor?? [ 493.407133][ T7] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input24 [ 493.697146][ T3529] bcm5974 6-1:0.0: could not read from device [ 493.718595][ T7] usb 6-1: USB disconnect, device number 16 [ 493.749874][ T4156] bcm5974 6-1:0.0: could not read from device [ 498.446695][T10001] netlink: 'syz.2.1565': attribute type 10 has an invalid length. [ 499.186682][ T7] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 500.142550][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 500.470523][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 500.705325][ T7] usb 3-1: config 3 has an invalid interface number: 182 but max is 0 [ 500.714802][ T7] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 500.725070][ T7] usb 3-1: config 3 has no interface number 0 [ 500.731281][ T7] usb 3-1: config 3 interface 182 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 500.754150][ T7] usb 3-1: config 3 interface 182 altsetting 8 endpoint 0xA has an invalid bInterval 129, changing to 11 [ 500.766845][ T7] usb 3-1: config 3 interface 182 altsetting 8 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 500.777956][ T7] usb 3-1: config 3 interface 182 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 500.791366][ T7] usb 3-1: config 3 interface 182 has no altsetting 0 [ 501.262566][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57 [ 501.284065][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.343943][T10048] netlink: 'syz.0.1581': attribute type 10 has an invalid length. [ 501.347186][ T7] usb 3-1: Product: syz [ 501.377650][ T7] usb 3-1: Manufacturer: syz [ 501.396890][ T7] usb 3-1: SerialNumber: syz [ 501.455944][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.799205][T10048] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 502.937290][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1590'. [ 502.949156][T10077] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 502.972413][ T7] usbtest 3-1:3.182: couldn't get endpoints, -71 [ 502.982093][ T7] usbtest: probe of 3-1:3.182 failed with error -71 [ 503.023334][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1591'. [ 503.031922][ T7] usb 3-1: USB disconnect, device number 14 [ 505.419582][T10130] syz.3.1606 sent an empty control message without MSG_MORE. [ 507.889676][ T1107] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 508.263019][ T1107] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 508.412160][ T1107] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 508.676449][ T1107] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 509.028132][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.796039][ T1107] usb 4-1: config 0 descriptor?? [ 509.866037][ T1107] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 509.971272][ T1107] usb 4-1: USB disconnect, device number 10 [ 509.988283][T10194] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1624'. [ 512.448355][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1637'. [ 512.490210][T10227] netlink: 'syz.3.1637': attribute type 10 has an invalid length. [ 512.589863][T10227] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 512.662435][ T1107] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 513.762508][ T1107] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 513.771600][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.804153][ T1107] usb 1-1: config 0 descriptor?? [ 513.846166][ T1107] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 514.272400][ T1107] gspca_cpia1: usb_control_msg 03, error -32 [ 514.312500][ T1107] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 514.532386][ T1107] gspca_cpia1: usb_control_msg 01, error -71 [ 514.538523][ T1107] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 514.579868][ T1107] usb 1-1: USB disconnect, device number 18 [ 514.823521][T10272] netlink: 'syz.5.1651': attribute type 10 has an invalid length. [ 514.908360][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1651'. [ 515.015066][T10279] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1652'. [ 515.438813][T10294] netlink: 'syz.3.1659': attribute type 1 has an invalid length. [ 515.447010][T10294] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1659'. [ 516.021779][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1665'. [ 516.032601][T10307] netlink: 'syz.2.1665': attribute type 10 has an invalid length. [ 516.131008][T10315] device syzkaller1 entered promiscuous mode [ 516.342438][ T4956] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 516.612934][ T4956] usb 3-1: Using ep0 maxpacket: 8 [ 516.763728][ T4956] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.800444][ T4956] usb 3-1: config 0 has no interfaces? [ 516.821305][ T4956] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 516.842586][ T4956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.864688][ T4956] usb 3-1: config 0 descriptor?? [ 517.175516][ T1107] usb 3-1: USB disconnect, device number 15 [ 517.531868][T10347] netlink: 'syz.6.1676': attribute type 10 has an invalid length. [ 517.636630][T10347] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 517.812686][T10350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1677'. [ 518.636141][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1690'. [ 518.687423][T10391] netlink: 'syz.2.1690': attribute type 10 has an invalid length. [ 519.091120][T10409] loop0: detected capacity change from 0 to 16 [ 519.157652][T10409] erofs: (device loop0): mounted with root inode @ nid 36. [ 519.165557][ T26] audit: type=1326 audit(1731072341.221:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10404 comm="syz.3.1697" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f473dfa8719 code=0x0 [ 519.386717][T10422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1704'. [ 519.566791][T10429] attempt to access beyond end of device [ 519.566791][T10429] loop0: rw=0, want=24, limit=16 [ 519.966125][T10432] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1705'. [ 520.658698][T10473] loop2: detected capacity change from 0 to 16 [ 520.690641][T10473] erofs: (device loop2): mounted with root inode @ nid 36. [ 521.027341][T10481] attempt to access beyond end of device [ 521.027341][T10481] loop2: rw=0, want=24, limit=16 [ 522.566244][T10491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1722'. [ 523.031558][T10523] loop5: detected capacity change from 0 to 16 [ 523.166873][ T4956] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 523.197840][T10523] erofs: (device loop5): mounted with root inode @ nid 36. [ 523.479694][T10530] attempt to access beyond end of device [ 523.479694][T10530] loop5: rw=0, want=24, limit=16 [ 523.602779][ T4956] usb 3-1: Using ep0 maxpacket: 16 [ 523.763687][ T4956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 524.052697][ T4956] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 524.092023][ T4956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.151490][ T4956] usb 3-1: Product: syz [ 524.169566][ T4956] usb 3-1: Manufacturer: syz [ 524.189175][ T4956] usb 3-1: SerialNumber: syz [ 524.205659][ T4956] usb 3-1: config 0 descriptor?? [ 524.267962][ T4956] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 524.283354][ T4956] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 524.735859][T10559] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1747'. [ 524.752459][ T21] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 524.922385][ T4956] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 525.012521][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 525.152651][ T21] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 525.169855][ T21] usb 4-1: config 150 has no interface number 0 [ 525.180909][ T21] usb 4-1: config 150 interface 204 has no altsetting 0 [ 525.191599][ T21] usb 4-1: config 150 interface 1 has no altsetting 0 [ 525.280375][T10571] loop5: detected capacity change from 0 to 16 [ 525.358787][T10571] erofs: (device loop5): mounted with root inode @ nid 36. [ 525.383662][ T21] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 525.401427][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.581903][ T21] usb 4-1: Product: syz [ 525.586784][ T21] usb 4-1: Manufacturer: syz [ 525.591502][ T21] usb 4-1: SerialNumber: syz [ 525.702491][T10578] attempt to access beyond end of device [ 525.702491][T10578] loop5: rw=0, want=24, limit=16 [ 525.734526][ T4956] em28xx 3-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=120) [ 525.779557][ T4956] em28xx 3-1:0.0: board has no eeprom [ 525.875045][ T21] xr_serial 4-1:150.204: xr_serial converter detected [ 526.272704][ T4956] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 526.280584][ T4956] em28xx 3-1:0.0: dvb set to bulk mode. [ 526.367110][ T4956] usb 3-1: USB disconnect, device number 16 [ 526.388696][ T4956] em28xx 3-1:0.0: Disconnecting em28xx [ 526.406444][ T4212] em28xx 3-1:0.0: Binding DVB extension [ 526.513760][ T21] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 526.520206][ T21] xr_serial: probe of ttyUSB0 failed with error -71 [ 526.539285][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1759'. [ 526.551710][ T4212] em28xx 3-1:0.0: Registering input extension [ 526.589912][T10587] netlink: 'syz.0.1759': attribute type 10 has an invalid length. [ 526.593219][ T21] usb 4-1: USB disconnect, device number 11 [ 526.610861][ T4956] em28xx 3-1:0.0: Closing input extension [ 526.621671][ T4956] em28xx 3-1:0.0: Freeing device [ 526.651368][ T21] xr_serial 4-1:150.204: device disconnected [ 527.040532][T10609] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1764'. [ 527.087257][T10614] loop3: detected capacity change from 0 to 16 [ 527.166701][T10614] erofs: (device loop3): mounted with root inode @ nid 36. [ 527.502728][T10628] attempt to access beyond end of device [ 527.502728][T10628] loop3: rw=0, want=24, limit=16 [ 528.389282][ T26] audit: type=1326 audit(1731072350.441:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.2.1775" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1961299719 code=0x0 [ 528.659215][T10655] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 528.668874][T10655] syzkaller0: linktype set to 6 [ 528.790818][T10663] loop0: detected capacity change from 0 to 16 [ 528.952905][T10663] erofs: (device loop0): mounted with root inode @ nid 36. [ 529.093705][T10668] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1789'. [ 529.299618][T10670] attempt to access beyond end of device [ 529.299618][T10670] loop0: rw=0, want=24, limit=16 [ 529.942622][ T4818] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 529.978314][ T21] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 530.169391][T10684] usb usb8: usbfs: process 10684 (syz.5.1796) did not claim interface 0 before use [ 530.283237][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 530.370185][T10696] loop5: detected capacity change from 0 to 16 [ 530.412886][ T21] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 530.428909][ T21] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 530.437895][T10696] erofs: (device loop5): mounted with root inode @ nid 36. [ 530.445048][ T21] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 530.462455][ T21] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 530.476548][ T21] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 530.486574][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.608981][ T4818] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 530.622865][ T4818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.649193][ T4818] usb 3-1: Product: syz [ 530.660519][ T4818] usb 3-1: Manufacturer: syz [ 530.668519][ T4818] usb 3-1: SerialNumber: syz [ 530.692037][ T4818] usb 3-1: config 0 descriptor?? [ 530.712416][ T1107] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 530.760700][T10698] attempt to access beyond end of device [ 530.760700][T10698] loop5: rw=0, want=24, limit=16 [ 531.113387][ T1107] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 531.260000][ T1107] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.314162][ T1107] usb 7-1: config 0 descriptor?? [ 531.377303][T10700] loop0: detected capacity change from 0 to 512 [ 531.439512][ T21] usb 4-1: GET_CAPABILITIES returned 0 [ 531.445137][ T21] usbtmc 4-1:16.0: can't read capabilities [ 531.459426][ T21] usb 4-1: USB disconnect, device number 12 [ 531.507418][T10700] EXT4-fs (loop0): 1 truncate cleaned up [ 531.547341][T10700] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 531.960431][T10708] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1804'. [ 532.592506][T10702] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 532.662517][ T4818] usb 3-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1d, error -71 [ 532.680886][ T4818] usb 3-1: Firmware version (0.0) predates our first public release. [ 532.700068][ T4818] usb 3-1: Please update to version 0.2 or newer [ 532.742430][ T4818] usb 3-1: atusb_probe: initialization failed, error = -71 [ 532.770629][ T4818] atusb: probe of 3-1:0.0 failed with error -71 [ 532.812399][ T4818] usb 3-1: USB disconnect, device number 17 [ 532.828008][T10722] tipc: Started in network mode [ 532.834920][T10722] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 532.851649][T10722] tipc: Enabling of bearer rejected, failed to enable media [ 533.272560][ T1107] pegasus 7-1:0.0: setup Pegasus II specific registers [ 533.853077][ T1107] pegasus 7-1:0.0: can't locate MII phy, using default [ 533.989290][T10741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1817'. [ 534.182404][ T1107] pegasus 7-1:0.0: eth9, ELECOM USB Ethernet LD-USB20, d6:84:b9:ea:7e:99 [ 534.193928][ T1107] usb 7-1: USB disconnect, device number 15 [ 534.371474][T10759] xt_cgroup: path and classid specified [ 534.661549][T10768] loop0: detected capacity change from 0 to 512 [ 534.759186][T10768] EXT4-fs (loop0): 1 truncate cleaned up [ 534.771206][T10768] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 534.968339][ T4956] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 535.242400][ T4956] usb 6-1: Using ep0 maxpacket: 16 [ 535.374046][ T4956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 535.421613][ T4956] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 535.562314][ T4956] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 535.785678][ T4956] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 535.798116][ T4956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.809221][ T4956] usb 6-1: Product: syz [ 535.836999][ T4956] usb 6-1: Manufacturer: syz [ 535.846650][ T4956] usb 6-1: SerialNumber: syz [ 535.884109][ T4956] usb 6-1: config 0 descriptor?? [ 535.913595][T10764] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 535.943962][ T4956] mcba_usb 6-1:0.0 can0: failed tx_urb -90 [ 535.949864][ T4956] mcba_usb 6-1:0.0 can0: Failed to send cmd (169) [ 535.979347][ T4956] mcba_usb 6-1:0.0 can0: failed tx_urb -90 [ 535.992261][ T4956] mcba_usb 6-1:0.0 can0: Failed to send cmd (169) [ 536.002599][ T4956] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected [ 537.401569][ T4818] usb 6-1: USB disconnect, device number 17 [ 537.423379][ T4818] mcba_usb 6-1:0.0 can0: device disconnected [ 537.435869][T10823] loop0: detected capacity change from 0 to 512 [ 537.442414][ T4211] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 537.591608][T10823] EXT4-fs (loop0): 1 truncate cleaned up [ 537.602267][T10823] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 537.692440][ T4211] usb 7-1: Using ep0 maxpacket: 32 [ 537.812699][ T4211] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 537.842898][ T4211] usb 7-1: config 0 has no interface number 0 [ 538.008919][T10839] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1840'. [ 538.022675][ T4211] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 538.597583][ T4211] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.605709][ T4211] usb 7-1: Product: syz [ 538.609971][ T4211] usb 7-1: Manufacturer: syz [ 538.614655][ T4211] usb 7-1: SerialNumber: syz [ 538.621308][ T4211] usb 7-1: config 0 descriptor?? [ 538.668725][ T4211] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 538.698057][ T4211] usb 7-1: selecting invalid altsetting 1 [ 538.712293][ T4211] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 538.759084][ T4211] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 538.787292][ T4211] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 539.232699][T10829] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 539.594590][ T4211] usb 7-1: media controller created [ 539.616568][ T4211] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 539.682395][ T4211] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 539.690059][ T4211] zl10353_read_register: readreg error (reg=127, ret==-71) [ 539.746519][ T4211] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 539.874004][ T4211] usb 7-1: USB disconnect, device number 16 [ 540.132278][ T1107] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 540.288583][T10898] loop5: detected capacity change from 0 to 512 [ 540.350697][T10898] EXT4-fs (loop5): 1 truncate cleaned up [ 540.376831][T10898] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 540.382471][ T1107] usb 3-1: Using ep0 maxpacket: 8 [ 540.512493][ T1107] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 540.524432][ T1107] usb 3-1: config 150 has no interface number 0 [ 540.566938][ T1107] usb 3-1: config 150 interface 204 has no altsetting 0 [ 540.823589][ T1107] usb 3-1: config 150 interface 1 has no altsetting 0 [ 542.139684][T10922] loop3: detected capacity change from 0 to 16 [ 542.371157][T10922] erofs: (device loop3): mounted with root inode @ nid 36. [ 542.472432][ T1107] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 542.493225][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.501265][ T1107] usb 3-1: Product: syz [ 542.562500][ T1107] usb 3-1: Manufacturer: syz [ 542.567151][ T1107] usb 3-1: SerialNumber: syz [ 542.726650][T10929] attempt to access beyond end of device [ 542.726650][T10929] loop3: rw=0, want=24, limit=16 [ 543.092457][ T21] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 543.221810][T10936] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1864'. [ 543.343724][ T1107] xr_serial 3-1:150.204: xr_serial converter detected [ 543.362583][ T1107] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 543.369005][ T1107] xr_serial: probe of ttyUSB0 failed with error -71 [ 543.380989][ T1107] usb 3-1: USB disconnect, device number 18 [ 543.398346][ T1107] xr_serial 3-1:150.204: device disconnected [ 543.622554][ T21] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 543.651101][ T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.682991][ T21] usb 7-1: Product: syz [ 543.687258][ T21] usb 7-1: Manufacturer: syz [ 543.691877][ T21] usb 7-1: SerialNumber: syz [ 543.738250][ T4818] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 543.757968][ T4818] Bluetooth: hci1: Injecting HCI hardware error event [ 543.789069][ T21] usb 7-1: config 0 descriptor?? [ 543.800357][ T4167] Bluetooth: hci1: hardware error 0x00 [ 544.738137][T10974] loop3: detected capacity change from 0 to 16 [ 544.760298][T10974] erofs: (device loop3): mounted with root inode @ nid 36. [ 544.955337][ T1107] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 545.080264][T10986] attempt to access beyond end of device [ 545.080264][T10986] loop3: rw=0, want=24, limit=16 [ 545.423080][ T21] usb 7-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1d, error -71 [ 545.479516][ T21] usb 7-1: Firmware version (0.0) predates our first public release. [ 545.630962][ T21] usb 7-1: Please update to version 0.2 or newer [ 545.672483][ T21] usb 7-1: atusb_probe: initialization failed, error = -71 [ 545.690291][ T21] atusb: probe of 7-1:0.0 failed with error -71 [ 545.745383][ T21] usb 7-1: USB disconnect, device number 17 [ 546.042482][ T1107] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.068490][ T1107] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 546.093698][T10995] hub 6-0:1.0: USB hub found [ 546.108781][T10995] hub 6-0:1.0: 1 port detected [ 546.173793][ T1107] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 546.190564][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 546.217735][ T1107] usb 1-1: SerialNumber: syz [ 546.536928][ T1107] usb 1-1: 0:2 : does not exist [ 547.423369][ T1107] usb 1-1: USB disconnect, device number 19 [ 547.533839][T11022] loop3: detected capacity change from 0 to 512 [ 547.612901][T11014] xt_CT: No such helper "snmp" [ 547.692651][T11022] EXT4-fs (loop3): 1 truncate cleaned up [ 547.698352][T11022] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 547.872147][T11033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1891'. [ 549.264506][ T4156] udevd[4156]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.367011][T11058] hub 6-0:1.0: USB hub found [ 550.399004][T11058] hub 6-0:1.0: 1 port detected [ 551.272552][T11089] fuse: Bad value for 'fd' [ 551.942938][ T4211] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 552.222670][ T4211] usb 6-1: Using ep0 maxpacket: 16 [ 552.383801][ T4211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.486753][ T4211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.527254][ T4211] usb 6-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 552.552770][ T4211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.614116][ T4211] usb 6-1: config 0 descriptor?? [ 552.939632][T11123] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1923'. [ 553.227853][ T4211] macally 0003:060B:0001.0012: unexpected long global item [ 553.246704][ T4211] macally: probe of 0003:060B:0001.0012 failed with error -22 [ 553.427449][ T4211] usb 6-1: USB disconnect, device number 18 [ 556.089038][T11195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1942'. [ 557.022687][ T4818] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 557.493193][ T4818] usb 7-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=e1.fc [ 557.581155][ T4818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.641569][ T4818] usb 7-1: config 0 descriptor?? [ 557.745600][ T4818] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input28 [ 557.962584][ T3529] bcm5974 7-1:0.0: could not read from device [ 557.974412][T11226] xt_cgroup: path and classid specified [ 557.982776][ T4818] usb 7-1: USB disconnect, device number 18 [ 557.989851][ T3529] bcm5974 7-1:0.0: could not read from device [ 558.072378][ T4212] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 558.342294][ T4212] usb 6-1: Using ep0 maxpacket: 32 [ 558.382351][ T21] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 558.492569][ T4212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.509221][ T4212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.520978][ T4212] usb 6-1: New USB device found, idVendor=056a, idProduct=00b7, bcdDevice= 0.00 [ 558.531966][ T4212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.553490][ T4212] usb 6-1: config 0 descriptor?? [ 558.652367][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 558.792589][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 558.802721][ T21] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 558.812948][ T21] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 558.992601][ T21] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 559.002265][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.010470][ T21] usb 1-1: Product: syz [ 559.015087][ T21] usb 1-1: Manufacturer: syz [ 559.019737][ T21] usb 1-1: SerialNumber: syz [ 559.026590][ T21] usb 1-1: config 0 descriptor?? [ 559.059804][ T4212] wacom 0003:056A:00B7.0013: Unknown device_type for 'HID 056a:00b7'. Assuming pen. [ 559.070164][T11227] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 559.078845][ T4212] wacom 0003:056A:00B7.0013: hidraw0: USB HID v0.00 Device [HID 056a:00b7] on usb-dummy_hcd.5-1/input0 [ 559.103793][ T4212] input: Wacom Intuos3 4x6 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00B7.0013/input/input29 [ 559.124946][ T21] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 559.140106][ T21] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 559.154031][ T21] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 559.161211][ T21] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 559.167937][ T21] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 559.257639][ T4211] usb 6-1: USB disconnect, device number 19 [ 559.373562][ T4213] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 559.627872][ T4213] usb 4-1: Using ep0 maxpacket: 16 [ 559.752659][ T4213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 559.797637][ T4213] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 559.891532][ T3836] mcba_usb 1-1:0.0 can0: bit-timing not yet defined [ 559.982564][ T4213] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 559.992098][ T4213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.027012][ T4213] usb 4-1: Product: syz [ 560.031230][ T4213] usb 4-1: Manufacturer: syz [ 560.062319][ T4213] usb 4-1: SerialNumber: syz [ 560.099334][ T4213] usb 4-1: config 0 descriptor?? [ 560.105963][T11285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1970'. [ 560.392460][ T4213] usb 4-1: Limiting number of CPorts to U8_MAX [ 560.401722][ T4213] usb 4-1: Not enough endpoints found in device, aborting! [ 560.612494][ T1107] usb 4-1: USB disconnect, device number 13 [ 560.643734][T11293] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1974'. [ 561.007609][ T4213] usb 1-1: USB disconnect, device number 20 [ 561.015534][ T4213] mcba_usb 1-1:0.0 can0: device disconnected [ 561.892628][T11343] xt_cgroup: path and classid specified [ 562.377909][T11363] tipc: Cannot configure node identity twice [ 562.579388][T11368] loop3: detected capacity change from 0 to 512 [ 562.706888][T11368] EXT4-fs (loop3): 1 truncate cleaned up [ 562.746155][T11368] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 562.797104][T11372] loop2: detected capacity change from 0 to 16 [ 562.836447][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.991578][T11376] fuse: Bad value for 'fd' [ 563.063009][T11372] erofs: (device loop2): mounted with root inode @ nid 36. [ 563.576232][T11384] attempt to access beyond end of device [ 563.576232][T11384] loop2: rw=0, want=24, limit=16 [ 564.155029][T11391] 9pnet: Insufficient options for proto=fd [ 565.268658][T11414] fuse: Bad value for 'fd' [ 565.430704][T11419] loop0: detected capacity change from 0 to 512 [ 565.520669][T11419] EXT4-fs (loop0): 1 truncate cleaned up [ 565.541318][T11419] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 566.594395][T11439] 9pnet: Insufficient options for proto=fd [ 567.537252][T11449] fuse: Bad value for 'fd' [ 567.644147][T11453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2029'. [ 567.669053][T11453] netlink: 'syz.0.2029': attribute type 10 has an invalid length. [ 567.815024][T11466] loop6: detected capacity change from 0 to 512 [ 568.027566][T11466] EXT4-fs (loop6): 1 truncate cleaned up [ 568.033473][T11466] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 568.350362][T11480] 9pnet: Insufficient options for proto=fd [ 569.657702][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2046'. [ 569.690214][T11497] netlink: 'syz.3.2046': attribute type 10 has an invalid length. [ 569.904450][ T21] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 570.001415][T11510] 9pnet: Insufficient options for proto=fd [ 570.282393][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 570.425075][ T21] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.515620][ T21] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.667374][ T21] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 570.902592][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 570.952447][ T21] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 571.009497][T11520] loop5: detected capacity change from 0 to 512 [ 571.014709][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.038542][ T21] usb 3-1: config 0 descriptor?? [ 571.107657][T11520] EXT4-fs (loop5): 1 truncate cleaned up [ 571.113626][T11520] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 571.483633][ T4214] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 571.680797][ T21] hid-generic 0003:045E:05DA.0014: ignoring exceeding usage max [ 571.773185][ T4214] usb 4-1: Using ep0 maxpacket: 16 [ 571.928237][ T21] hid-generic 0003:045E:05DA.0014: unbalanced collection at end of report description [ 571.962913][T11523] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 572.008169][ T21] hid-generic: probe of 0003:045E:05DA.0014 failed with error -22 [ 572.032595][ T4214] usb 4-1: unable to get BOS descriptor or descriptor too short [ 572.072619][ T21] usb 3-1: USB disconnect, device number 19 [ 572.139348][ T4214] usb 4-1: config 5 has an invalid interface number: 211 but max is 0 [ 572.172351][ T4214] usb 4-1: config 5 has no interface number 0 [ 572.178684][ T4214] usb 4-1: config 5 interface 211 has no altsetting 0 [ 572.296435][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2059'. [ 572.313132][T11536] netlink: 'syz.0.2059': attribute type 10 has an invalid length. [ 572.442503][ T4214] usb 4-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=b8.74 [ 572.455828][ T4214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.519426][ T4214] usb 4-1: Product: syz [ 572.540297][ T4214] usb 4-1: Manufacturer: syz [ 572.578191][ T4214] usb 4-1: SerialNumber: syz [ 572.768193][T11559] loop6: detected capacity change from 0 to 512 [ 572.864582][T11559] EXT4-fs (loop6): 1 truncate cleaned up [ 572.870465][T11559] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 572.883479][ T4214] quatech2 4-1:5.211: Quatech 2nd gen USB to Serial Driver converter detected [ 573.102315][ T4214] usb 4-1: qt2_attach - failed to power on unit: -71 [ 573.109196][ T4214] quatech2: probe of 4-1:5.211 failed with error -71 [ 573.122777][ T4214] usb 4-1: USB disconnect, device number 14 [ 573.933538][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2072'. [ 573.966461][T11575] netlink: 'syz.5.2072': attribute type 10 has an invalid length. [ 575.435962][T11612] loop0: detected capacity change from 0 to 512 [ 575.635504][T11612] EXT4-fs (loop0): 1 truncate cleaned up [ 575.662328][T11612] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 576.673323][ T26] audit: type=1326 audit(1731072398.731:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11629 comm="syz.0.2085" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15e336b719 code=0x0 [ 578.475898][T11651] xt_cgroup: path and classid specified [ 578.530161][T11653] loop6: detected capacity change from 0 to 512 [ 578.771473][T11653] EXT4-fs (loop6): 1 truncate cleaned up [ 578.782455][T11653] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 578.933992][T11669] 9pnet: Insufficient options for proto=fd [ 579.461479][T11662] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 581.908032][T11707] xt_cgroup: path and classid specified [ 582.170510][T11715] loop0: detected capacity change from 0 to 512 [ 582.296533][T11715] EXT4-fs (loop0): 1 truncate cleaned up [ 582.312332][T11715] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 583.155272][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2117'. [ 583.228252][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2118'. [ 584.732390][ T4213] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 585.122404][ T4213] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 585.131077][ T4213] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 585.139890][ T4213] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 585.149082][ T4213] usb 3-1: config 1 has no interface number 0 [ 585.155273][ T4213] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 585.166372][ T4213] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 585.179343][ T4213] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 585.188655][ T4213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.260313][ T4213] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 585.646531][T11773] loop3: detected capacity change from 0 to 16 [ 585.760168][T11773] erofs: (device loop3): mounted with root inode @ nid 36. [ 585.942641][ T4213] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 586.064687][T11778] attempt to access beyond end of device [ 586.064687][T11778] loop3: rw=0, want=24, limit=16 [ 587.005396][ T4244] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 587.050424][T11794] device vlan3 entered promiscuous mode [ 587.081143][T11795] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2146'. [ 587.483528][ T4244] usb 3-1: USB disconnect, device number 20 [ 587.511064][ T4244] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 587.537292][T11806] loop2: detected capacity change from 0 to 16 [ 587.595443][T11806] erofs: (device loop2): mounted with root inode @ nid 36. [ 587.611247][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2151'. [ 587.951297][T11815] attempt to access beyond end of device [ 587.951297][T11815] loop2: rw=0, want=24, limit=16 [ 588.450475][T11820] tun0: tun_chr_ioctl cmd 3223385353 [ 588.645257][T11822] device gretap0 entered promiscuous mode [ 588.651075][T11822] device macsec1 entered promiscuous mode [ 588.754754][T11826] tipc: Started in network mode [ 588.774188][T11826] tipc: Node identity f6125f2c84f, cluster identity 4711 [ 588.781795][T11826] tipc: Enabled bearer , priority 10 [ 589.624279][T11850] loop6: detected capacity change from 0 to 16 [ 589.681582][T11850] erofs: (device loop6): mounted with root inode @ nid 36. [ 589.892266][ T21] tipc: Node number set to 1927438124 [ 590.030642][T11855] attempt to access beyond end of device [ 590.030642][T11855] loop6: rw=0, want=24, limit=16 [ 590.805099][T11861] loop3: detected capacity change from 0 to 512 [ 590.937144][T11861] EXT4-fs (loop3): 1 truncate cleaned up [ 590.962724][T11842] ODEBUG: Out of memory. ODEBUG disabled [ 590.962787][T11842] [ 590.962793][T11842] ====================================================== [ 590.962799][T11842] WARNING: possible circular locking dependency detected [ 590.962806][T11842] 5.15.170-syzkaller #0 Not tainted [ 590.962818][T11842] ------------------------------------------------------ [ 590.962824][T11842] syz.5.2166/11842 is trying to acquire lock: [ 590.962835][T11842] ffffffff8c7fc4b8 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x1c/0xa0 [ 590.962907][T11842] [ 590.962907][T11842] but task is already holding lock: [ 590.962913][T11842] ffff888025f301b8 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc5/0xc00 [ 590.962958][T11842] [ 590.962958][T11842] which lock already depends on the new lock. [ 590.962958][T11842] [ 590.962964][T11842] [ 590.962964][T11842] the existing dependency chain (in reverse order) is: [ 590.962970][T11842] [ 590.962970][T11842] -> #3 (&trie->lock){..-.}-{2:2}: [ 590.962995][T11842] lock_acquire+0x1db/0x4f0 [ 590.963013][T11842] _raw_spin_lock_irqsave+0xd1/0x120 [ 590.963035][T11842] trie_delete_elem+0x90/0x690 [ 590.963060][T11842] 0xffffffffa00185b2 [ 590.963073][T11842] bpf_trace_run3+0x1d1/0x380 [ 590.963093][T11842] __schedule+0x1e8d/0x45b0 [ 590.963111][T11842] schedule+0x11b/0x1f0 [ 590.963128][T11842] schedule_timeout+0x1b9/0x300 [ 590.963179][T11842] rcu_exp_sel_wait_wake+0x7cb/0x1c00 [ 590.963202][T11842] process_one_work+0x8a1/0x10c0 [ 590.963223][T11842] worker_thread+0xaca/0x1280 [ 590.963243][T11842] kthread+0x3f6/0x4f0 [ 590.963261][T11842] ret_from_fork+0x1f/0x30 [ 590.963282][T11842] [ 590.963282][T11842] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 590.963307][T11842] lock_acquire+0x1db/0x4f0 [ 590.963323][T11842] _raw_spin_lock_nested+0x2d/0x40 [ 590.963344][T11842] raw_spin_rq_lock_nested+0x26/0x140 [ 590.963367][T11842] task_fork_fair+0x5d/0x350 [ 590.963385][T11842] sched_cgroup_fork+0x2d3/0x330 [ 590.963407][T11842] copy_process+0x224a/0x3ef0 [ 590.963426][T11842] kernel_clone+0x210/0x960 [ 590.963444][T11842] kernel_thread+0x168/0x1e0 [ 590.963461][T11842] rest_init+0x21/0x330 [ 590.963482][T11842] start_kernel+0x48c/0x540 [ 590.963500][T11842] secondary_startup_64_no_verify+0xb1/0xbb [ 590.963522][T11842] [ 590.963522][T11842] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 590.963548][T11842] lock_acquire+0x1db/0x4f0 [ 590.963570][T11842] _raw_spin_lock_irqsave+0xd1/0x120 [ 590.963591][T11842] try_to_wake_up+0xae/0x1300 [ 590.963613][T11842] up+0x6e/0x90 [ 590.963632][T11842] __up_console_sem+0x11a/0x1e0 [ 590.963652][T11842] console_unlock+0x1145/0x12b0 [ 590.963671][T11842] vprintk_emit+0xbf/0x150 [ 590.963688][T11842] _printk+0xd1/0x120 [ 590.963709][T11842] kauditd_hold_skb+0x1b5/0x200 [ 590.963727][T11842] kauditd_send_queue+0x2a3/0x2f0 [ 590.963745][T11842] kauditd_thread+0x6fb/0xae0 [ 590.963762][T11842] kthread+0x3f6/0x4f0 [ 590.963779][T11842] ret_from_fork+0x1f/0x30 [ 590.963798][T11842] [ 590.963798][T11842] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 590.963823][T11842] validate_chain+0x1649/0x5930 [ 590.963842][T11842] __lock_acquire+0x1295/0x1ff0 [ 590.963860][T11842] lock_acquire+0x1db/0x4f0 [ 590.963878][T11842] _raw_spin_lock_irqsave+0xd1/0x120 [ 590.963898][T11842] down_trylock+0x1c/0xa0 [ 590.963918][T11842] __down_trylock_console_sem+0x105/0x250 [ 590.963939][T11842] console_trylock_spinning+0x8a/0x3f0 [ 590.963958][T11842] vprintk_emit+0xa6/0x150 [ 590.963975][T11842] _printk+0xd1/0x120 [ 590.963996][T11842] debug_objects_oom+0xb4/0x370 [ 590.964014][T11842] debug_object_activate+0x42d/0x4e0 [ 590.964031][T11842] kvfree_call_rcu+0xb6/0x8a0 [ 590.964050][T11842] trie_update_elem+0x808/0xc00 [ 590.964072][T11842] bpf_map_update_value+0x5d7/0x6c0 [ 590.964095][T11842] generic_map_update_batch+0x54d/0x8b0 [ 590.964116][T11842] bpf_map_do_batch+0x4d0/0x620 [ 590.964133][T11842] __sys_bpf+0x55c/0x670 [ 590.964154][T11842] __x64_sys_bpf+0x78/0x90 [ 590.964175][T11842] do_syscall_64+0x3b/0xb0 [ 590.964193][T11842] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 590.964216][T11842] [ 590.964216][T11842] other info that might help us debug this: [ 590.964216][T11842] [ 590.964222][T11842] Chain exists of: [ 590.964222][T11842] (console_sem).lock --> &rq->__lock --> &trie->lock [ 590.964222][T11842] [ 590.964251][T11842] Possible unsafe locking scenario: [ 590.964251][T11842] [ 590.964256][T11842] CPU0 CPU1 [ 590.964261][T11842] ---- ---- [ 590.964266][T11842] lock(&trie->lock); [ 590.964277][T11842] lock(&rq->__lock); [ 590.964289][T11842] lock(&trie->lock); [ 590.964301][T11842] lock((console_sem).lock); [ 590.964313][T11842] [ 590.964313][T11842] *** DEADLOCK *** [ 590.964313][T11842] [ 590.964317][T11842] 2 locks held by syz.5.2166/11842: [ 590.964329][T11842] #0: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 590.964379][T11842] #1: ffff888025f301b8 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc5/0xc00 [ 590.964439][T11842] [ 590.964439][T11842] stack backtrace: [ 590.964444][T11842] CPU: 0 PID: 11842 Comm: syz.5.2166 Not tainted 5.15.170-syzkaller #0 [ 590.964464][T11842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 590.964481][T11842] Call Trace: [ 590.964487][T11842] [ 590.964494][T11842] dump_stack_lvl+0x1e3/0x2d0 [ 590.964515][T11842] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 590.964541][T11842] ? print_circular_bug+0x12b/0x1a0 [ 590.964568][T11842] check_noncircular+0x2f8/0x3b0 [ 590.964591][T11842] ? add_chain_block+0x850/0x850 [ 590.964612][T11842] ? lockdep_lock+0x11f/0x2a0 [ 590.964634][T11842] ? mark_lock+0x98/0x340 [ 590.964651][T11842] ? _find_first_zero_bit+0xcf/0xf0 [ 590.964676][T11842] validate_chain+0x1649/0x5930 [ 590.964706][T11842] ? reacquire_held_locks+0x660/0x660 [ 590.964725][T11842] ? data_push_tail+0x693/0x700 [ 590.964750][T11842] ? desc_read+0x3d0/0x3d0 [ 590.964770][T11842] ? unwind_next_frame+0x1437/0x1fa0 [ 590.964793][T11842] ? reacquire_held_locks+0x660/0x660 [ 590.964816][T11842] ? mark_lock+0x98/0x340 [ 590.964836][T11842] __lock_acquire+0x1295/0x1ff0 [ 590.964861][T11842] lock_acquire+0x1db/0x4f0 [ 590.964878][T11842] ? down_trylock+0x1c/0xa0 [ 590.964899][T11842] ? vsnprintf+0x1c70/0x1c70 [ 590.964917][T11842] ? read_lock_is_recursive+0x10/0x10 [ 590.964936][T11842] ? memcpy+0x3c/0x60 [ 590.964954][T11842] ? vsnprintf+0x1b93/0x1c70 [ 590.964972][T11842] ? _prb_commit+0x30a/0x3e0 [ 590.964991][T11842] ? prb_reserve+0x1240/0x1240 [ 590.965011][T11842] _raw_spin_lock_irqsave+0xd1/0x120 [ 590.965031][T11842] ? down_trylock+0x1c/0xa0 [ 590.965051][T11842] ? _raw_spin_lock+0x40/0x40 [ 590.965071][T11842] ? vprintk_store+0xf1b/0x1300 [ 590.965091][T11842] down_trylock+0x1c/0xa0 [ 590.965111][T11842] __down_trylock_console_sem+0x105/0x250 [ 590.965131][T11842] ? printk_parse_prefix+0x2c0/0x2c0 [ 590.965148][T11842] ? vprintk_emit+0xa6/0x150 [ 590.965165][T11842] ? console_trylock+0x70/0x70 [ 590.965185][T11842] ? is_bpf_text_address+0x24f/0x260 [ 590.965205][T11842] ? vprintk_emit+0xa6/0x150 [ 590.965239][T11842] console_trylock_spinning+0x8a/0x3f0 [ 590.965259][T11842] ? vprintk_emit+0x150/0x150 [ 590.965278][T11842] ? __lock_acquire+0x1295/0x1ff0 [ 590.965301][T11842] vprintk_emit+0xa6/0x150 [ 590.965322][T11842] _printk+0xd1/0x120 [ 590.965345][T11842] ? panic+0x860/0x860 [ 590.965365][T11842] ? do_raw_spin_lock+0x14a/0x370 [ 590.965385][T11842] ? __lock_acquire+0x1ff0/0x1ff0 [ 590.965406][T11842] debug_objects_oom+0xb4/0x370 [ 590.965427][T11842] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 590.965449][T11842] ? debug_object_activate+0x4e0/0x4e0 [ 590.965472][T11842] debug_object_activate+0x42d/0x4e0 [ 590.965493][T11842] kvfree_call_rcu+0xb6/0x8a0 [ 590.965515][T11842] ? call_rcu+0xa70/0xa70 [ 590.965532][T11842] ? __kmalloc_node+0x199/0x390 [ 590.965553][T11842] ? bpf_map_kmalloc_node+0xdb/0x160 [ 590.965578][T11842] ? _raw_spin_lock+0x40/0x40 [ 590.965599][T11842] ? longest_prefix_match+0x2db/0x640 [ 590.965624][T11842] trie_update_elem+0x808/0xc00 [ 590.965653][T11842] bpf_map_update_value+0x5d7/0x6c0 [ 590.965679][T11842] generic_map_update_batch+0x54d/0x8b0 [ 590.965708][T11842] ? rcu_read_unlock+0x90/0x90 [ 590.965730][T11842] ? __fdget+0x191/0x220 [ 590.965749][T11842] ? rcu_read_unlock+0x90/0x90 [ 590.965770][T11842] bpf_map_do_batch+0x4d0/0x620 [ 590.965790][T11842] __sys_bpf+0x55c/0x670 [ 590.965812][T11842] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 590.965842][T11842] ? syscall_enter_from_user_mode+0x2e/0x240 [ 590.965865][T11842] ? lockdep_hardirqs_on+0x94/0x130 [ 590.965887][T11842] __x64_sys_bpf+0x78/0x90 [ 590.965909][T11842] do_syscall_64+0x3b/0xb0 [ 590.965927][T11842] ? clear_bhb_loop+0x15/0x70 [ 590.965944][T11842] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 590.965967][T11842] RIP: 0033:0x7f621cc6f719 [ 590.965983][T11842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.966000][T11842] RSP: 002b:00007f621b0e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 590.966018][T11842] RAX: ffffffffffffffda RBX: 00007f621ce26f80 RCX: 00007f621cc6f719 [ 590.966032][T11842] RDX: 0000000000000038 RSI: 0000000020000640 RDI: 000000000000001a [ 590.966045][T11842] RBP: 00007f621cce239e R08: 0000000000000000 R09: 0000000000000000 [ 590.966056][T11842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.966068][T11842] R13: 0000000000000000 R14: 00007f621ce26f80 R15: 00007ffe9ee25f48 [ 590.966087][T11842] [ 590.972240][T11861] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.