last executing test programs: 2m56.815931159s ago: executing program 1 (id=96): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xc, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0xfffffff9, 0xa, 0xffffffff, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x9, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0xe4, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0xffffffff, 0x8, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x9, 0x9, 0xfffffffb], [0x8a3, 0x6, 0x3, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x7ffe, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x4, 0x401, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x4, 0x0, 0x0, 0xc, 0x4, 0xd, 0x3, 0xb8, 0x4, 0x2, 0x5, 0x0, 0x8, 0x1, 0x3, 0x9, 0x6d, 0x81, '\x00', 0x2, 0xfff}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x40, 0x0, 0x0, 0x401}, {0x6, 0xfc, 0x0, 0x6}]}, 0x10) write$binfmt_aout(r7, &(0x7f0000000000)=ANY=[], 0xfdef) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000240), 0x200000, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x29, 0x800, 0x44040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x115, 0xfb}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xb3a406bdd74362ab, 0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x200, 0x20003, 0x10020f5b, 0x0, [{0x0, 0x9}, {}, {}, {0x0, 0x35, 0xff}, {0x20, 0xa, 0xfc}, {0x0, 0x0, 0x6, '\x00', 0x7}, {0x20}, {0x2, 0x2, 0x7}, {0x0, 0x0, 0x8}, {0x0, 0x1, 0x2}, {0x0, 0x0, 0xfe, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0xfc}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x8, 0x0, '\x00', 0xff}, {0x0, 0x75, 0xfa}, {0x0, 0x0, 0x0, '\x00', 0x20}, {}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5, 0x0, '\x00', 0x1}, {0x0, 0xfc}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002880)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x0, 0x0, 0x0, 0x7}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x6, 0x20000000, 0x5, 0x8}, 0x4}, [{0x7, 0x8001, 0x7, 0x4, 0xd, 0x9}, {0x6, 0x9, 0x2, 0x7, 0xffff, 0x1}, {0x9, 0x2, 0x4, 0x3, 0x14000, 0x4}, {0x6, 0x99e1, 0x1, 0x6, 0x7, 0x3}, {0x100, 0x3, 0x4, 0x4, 0x4, 0x9}, {0x1, 0xbea, 0x3, 0x6, 0x40, 0x1}, {0x0, 0x7, 0xa, 0x800, 0x7, 0x6}, {0x2, 0x200, 0x4, 0xffff1a89, 0xe, 0x7d}, {0x1, 0xc, 0x0, 0x401, 0x5, 0x193f}, {0x7105, 0x8, 0xfffff801, 0x6bb, 0x0, 0xfffffffa}, {0x3, 0x6, 0x26, 0x4, 0x7, 0x62}, {0x6e, 0xfe, 0xffffffff, 0xcc, 0x7ff}, {0x800, 0x7, 0x2, 0x2, 0xf376, 0x1}, {0xa04, 0xfffffbff, 0x8000, 0x3, 0x40000000, 0x8}, {0xffffd6ce, 0x5, 0x7f, 0x6, 0x8, 0x18}, {0xf, 0x9, 0x3, 0xe40, 0x10001, 0x41d}, {0xfffffffb, 0x7, 0x99, 0x10001, 0x6, 0x3}, {0xec6, 0x7d6, 0x101, 0x4, 0x2}, {0x3, 0xd11, 0x0, 0xe, 0x4, 0x200}, {0x2, 0x6, 0x8, 0x1, 0x0, 0xffffff64}, {0x3, 0x7fffffff, 0x2, 0x5, 0xbe, 0x9}, {0x1ff, 0x0, 0xb6, 0x1, 0xfffff9d5, 0x5caf9926}, {0xf, 0xd6b, 0x7ff, 0x81, 0xff, 0x6}, {0xa27b, 0x7, 0xe1a, 0x2775, 0x7}, {0xa, 0x4, 0xdf29, 0x5, 0x2, 0x2}, {0x6, 0x9, 0xb, 0x70, 0x4, 0x9}, {0xffff, 0x200, 0xfffff801, 0x0, 0xffffffff, 0x3ff}, {0x1, 0x56d, 0x10, 0x2, 0xe}, {0x7, 0x5, 0x279e, 0x0, 0x8001, 0xffff7fff}, {0x10, 0xe3b7, 0xffffffff, 0xddf, 0x1, 0x8}, {0x7ff8, 0x7, 0x1, 0x81, 0x8a6, 0x200}, {0x10000, 0x10001, 0xb9, 0x400, 0x5, 0x6}, {0x8, 0x6, 0x5, 0x5, 0x1, 0x288fd761}, {0xfffffffe, 0x7, 0x5, 0x0, 0x5, 0x8}, {0x7, 0xffffffff, 0x8, 0x1, 0x2, 0x3ff}, {0x5, 0x5, 0xb, 0x101, 0x80, 0x9}, {0x2, 0xc02, 0xffffff74, 0x2, 0x7, 0x51c8944b}, {0xac5, 0x1, 0xfffffffe, 0x8, 0x5, 0x9}, {0xb7, 0xf, 0x80, 0x1, 0x8}, {0x1, 0x7, 0x4de, 0x10000, 0x2, 0x8}, {0xc, 0x2, 0x3, 0x5, 0x44, 0x1000}, {0x3, 0x7ff, 0x7, 0x4, 0xf412, 0x8}, {0x6, 0x0, 0x4, 0x6, 0x8000, 0xf6c0}, {0x2, 0x5, 0x8000, 0xffffffff, 0x1, 0x2}, {0x1800, 0x5, 0x3, 0x80, 0x709, 0x6}, {0x4, 0x4, 0x7a5f, 0x4, 0xdf8f, 0x3}, {0x3, 0x0, 0x7, 0x22a, 0x3, 0x2}, {0x8, 0x0, 0x7bfa9fe3, 0x101000, 0x4, 0xcf1}, {0x59, 0x28, 0x100, 0x1, 0x1, 0x2}, {0x5db, 0xa86, 0x3, 0x1, 0xbd, 0x9}, {0x5, 0x8001, 0x4, 0x6, 0xffff}, {0xb8, 0x2, 0x5, 0x0, 0x5}, {0xfffffff9, 0x7, 0x10000, 0x10, 0xf}, {0x7fff, 0x5, 0x3, 0x0, 0x1, 0x7}, {0x5, 0x60800, 0x30e8, 0x9, 0x6, 0x7}, {0x7, 0x82, 0xff, 0x8, 0xd, 0x7cbe}, {0x10, 0x83ce, 0x53, 0x9, 0x1, 0x81}, {0x8ae, 0x50, 0x1, 0x7, 0x2, 0x3}, {0x8, 0xffff, 0x87, 0x9, 0x2, 0x5}, {0x9, 0xb0, 0x8, 0x0, 0xffff, 0x19800}, {0x1ff, 0x688, 0x7ff, 0xfffffffd, 0x6, 0x80}, {0x4, 0x7fffffff, 0x1, 0x7f, 0x200, 0x36f7}, {0x7, 0xa177, 0x9, 0x6161, 0x6, 0x7}, {0x8e, 0x3, 0x10000, 0x3, 0x6, 0x8}, {0x8784, 0x0, 0xfffffffb, 0x2, 0x80000000, 0x4}, {0x1, 0x2, 0xc3, 0x0, 0x9}, {0xd9, 0xfa3, 0x5, 0x2, 0x200, 0x6}, {0x7, 0x1, 0x6a8, 0x4, 0x9, 0x5}, {0x1, 0xe, 0x1, 0x8, 0x5}, {0x4, 0x7, 0x7, 0x19, 0x6, 0x5}, {0xd9, 0xfffffffb, 0xb18, 0xf, 0x7, 0x7fffffff}, {0x3, 0x8, 0x8, 0x2a2, 0x10000, 0x4}, {0x1, 0x0, 0x67f1, 0x8001, 0x2, 0x9}, {0x45, 0xff, 0x1138f72f, 0xffffffff, 0xffffffe8, 0x1}, {0x0, 0x0, 0x4, 0xfffff1d0, 0x3, 0x60fc}, {0x2, 0x4, 0xae, 0x9, 0x2, 0x5}, {0x7, 0x0, 0x3, 0xff, 0x401, 0x7}, {0xf13, 0x8f37, 0x47, 0x3, 0x0, 0xff}, {0x2, 0x800, 0x17, 0x1, 0x3a, 0xfffffff7}, {0x800, 0x5, 0x1, 0x4, 0x7fff, 0x3}, {0x4, 0x4, 0xd, 0x9, 0x112, 0xce27}, {0x1000, 0x3, 0x2, 0x1, 0x7, 0x7}, {0x0, 0xe0, 0x3, 0x2ad, 0x10, 0x9a58}, {0xae0, 0x2c6e, 0x2, 0x1, 0x2, 0x40}, {0x8, 0x401, 0x7fffffff, 0x9, 0x2, 0x3}, {0x6, 0x1a, 0x20a, 0x9, 0xdda, 0x7}, {0xc, 0x9, 0x10000, 0x2, 0x1, 0x3}, {0x8, 0xd628, 0x6, 0xde84, 0x0, 0x3}, {0x0, 0x0, 0x29, 0x4, 0x7ff, 0x3}, {0x9, 0x400, 0x7, 0x9, 0x9, 0x80000000}, {0x2, 0x9, 0xa, 0x4, 0x4, 0xfffffff8}, {0x6, 0x2, 0x1, 0xff, 0x7bc4, 0xbf7}, {0xfffffff7, 0x9, 0x0, 0x9, 0x3, 0x40}, {0x4, 0x6, 0x2, 0x7, 0x5, 0x80000000}, {0x3, 0x3, 0x0, 0x9, 0xa, 0x1}, {0xfffffeff, 0x0, 0x6, 0x70b, 0x1, 0xfff}, {0x2, 0x164d, 0x7, 0x1, 0x0, 0x6}, {0x7, 0x1, 0x5, 0x9, 0x400, 0x100}, {0x1, 0x7f, 0x8, 0x1, 0x9, 0xfff}, {0xfffffffe, 0x10001, 0x3, 0xff, 0xd, 0x1ff}, {0x7, 0x800, 0x2, 0x5, 0xae, 0x40}, {0x3ff, 0x133, 0x8, 0x585fdf7c, 0x1, 0x7f}, {0x4, 0x4, 0xc10, 0x4, 0x0, 0x7ff}, {0x4, 0xa, 0x9, 0x75, 0x4, 0x77}, {0x1, 0xf32, 0xffffffff, 0xffffffff, 0x14, 0xfffffff9}, {0x10001, 0x3, 0x2, 0x0, 0x5, 0x3}, {0x8, 0x6, 0x2, 0x400, 0x5, 0xd}, {0x0, 0x9, 0xfffffd6c, 0xa, 0x9, 0xfffffffc}, {0x6, 0x0, 0x4, 0x8e2, 0xf, 0x8200000}, {0x7, 0x1, 0xfffffffb, 0x6, 0x4}, {0x7, 0x5, 0xffff, 0x868, 0x1, 0x10001}, {0x1, 0x80000001, 0x5, 0xa312, 0x5, 0x4}, {0x7, 0x0, 0x4, 0xf, 0x0, 0x80}, {0x7, 0x4, 0x5, 0x0, 0x8, 0x2}, {0xff0, 0x0, 0x1, 0x9, 0x6, 0x2}, {0x0, 0x8000, 0xa, 0x7, 0x3, 0x5}, {0xfffff28c, 0x7e, 0x5, 0x8c, 0x84, 0xe}, {0x7fffffff, 0x3ff, 0x80000000, 0x1, 0x9}, {0x3, 0x8, 0x1000, 0xb521, 0x4000c, 0x8}, {0x4, 0x7, 0x3ff, 0x5, 0x7, 0x4}, {0x0, 0x9, 0x941, 0xf, 0x99, 0x5}, {0x2, 0x5, 0x4862, 0xdb6c, 0x40, 0x1000}, {0x2, 0x734000, 0x5, 0x7fffffff, 0xc, 0x1259}, {0xff, 0x4, 0x0, 0x2, 0x3}, {0x4, 0x2, 0xfff, 0x3, 0x4, 0x4e5}, {0xfff, 0x8001, 0xfffffffc, 0x7, 0x9, 0xffff}, {0x7, 0x81, 0x28d6ca5c, 0x10000, 0x4, 0x2}, {0x7, 0x8dcd, 0x1, 0x3ff, 0x6, 0x1}], [{0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x3}, {0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {}, {}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x5}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x2}, {0x2}, {0x69c9719a6a7588a}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x3}, {}, {0x5}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0xae9c2964e056bda3, 0x1}, {0x2}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x4000) 2m52.735812423s ago: executing program 1 (id=105): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './cgroup\x00'}) write$P9_RLERRORu(r1, &(0x7f0000000100)={0x13, 0x7, 0x1, {{0x6, 'ntfs3\x00'}}}, 0x13) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x20c800, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x3c, r0, 0x10c, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x9}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x82}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000045}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000340)="4ca1341150558361a8bd459b123c1339a4e7f52682ccf881ac9684ec5a1068da726e305e4db3c0a6e1", 0x29) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0) 2m52.266991462s ago: executing program 1 (id=108): openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x48000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500ef0000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000002c0)={r3, 0x400, 0x2, r3}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x5}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140402, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x4, 0x5, 0x7}, {0x1, 0x3, 0x6, 0x1}, {0x2, 0x5, 0x4, 0xb}, {0x5, 0x3, 0xfffffffd, 0x6}, {0x1, 0x2, 0x6, 0xc0e22f9c41bb6fca}, {0x4, 0x1, 0x4, 0x9}, {0x5, 0x1, 0x7, 0x2}, {0x2, 0x2, 0x3, 0x9}, {0x1, 0x8, 0xe, 0x3}, {0x0, 0x4, 0xfffff30c, 0x9}], 0x10, 0xb376, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='netlink_extack\x00', r4, 0x0, 0x3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20600, 0x83) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="080025bd7000eddbdf258600000008002201e8020000"], 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0x3, 0x5a3, 0x1, 0x2, 0xd, 0x0, 0x1, 0x0, 0x81, 0x4, 0x8, 0xb, 0x101}, {0x216, 0x0, 0xa, 0x1, 0x81, 0x6, 0x2, 0x4, 0xc, 0x1, 0x6, 0x3, 0x7f}, {0x4, 0x0, 0x0, 0x80, 0x2, 0x7f, 0x3, 0xa, 0x3, 0x90, 0x0, 0x9b, 0x80000001}], 0xa}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x4c, 0x0, 0x3, 0x1, 0x0, @void, @value}, 0x28) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000500)=ANY=[]) getpriority(0x1, r5) dup(r2) 2m47.188950226s ago: executing program 1 (id=123): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x8, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r2, &(0x7f0000000680), &(0x7f0000000600)=""/73}, 0x28) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000002c0)={0x0, 0x0}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1f530cd38fe8fff96876c4f20f2fcdc86eee82f9a82b4b5d2a0091eae188c40d625e8a9c4008307c3f161f97a780a19c0a45d26ea94b634572eb2522eb8873b7f64e9e2c6698e81f38eb1c30a00bd533701c5abfce2af926279a89d62b83f41a44c4918e4228f2bf763874449555ac", 0x6f}, {&(0x7f0000000200)="b84829b4f130df61f62379a48e86ad8c667d0aa2b97bc35e424b80d99a1c09bc299c2dafc3faa5842109f67bb94a0d0b1bdc1034f2c799068230883f90dfdf1bbc5a37c67608baac8897597138b04224d7b5bbf5b986c627b2959ef206fb7e0b5b0601b914d7abc614ea2a1912f4258972016db864af0830", 0x78}], 0x2, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x1000f42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a300000"], 0xe8}}, 0x0) io_destroy(0x0) syz_io_uring_setup(0x0, &(0x7f0000000040), 0x0, 0x0) dup(r3) 2m45.048020206s ago: executing program 1 (id=129): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000104000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800c0001006d6163766c616e00100002800a0009000180c2000002000008000500", @ANYRES32=r1, @ANYBLOB], 0x48}}, 0x0) (fail_nth: 2) 2m44.495381888s ago: executing program 1 (id=130): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x800e}]}}]}, 0x38}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpid() ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_DO_IT(r4, 0xab03) 2m29.338155742s ago: executing program 32 (id=130): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x800e}]}}]}, 0x38}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpid() ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_DO_IT(r4, 0xab03) 2m21.2416197s ago: executing program 3 (id=198): syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x79, 0x1801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) bpf$MAP_CREATE(0xc0ffffffff, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local, {[@lsrr={0x83, 0x7, 0xc1, [@multicast1]}]}}, @info_request={0xf, 0x0, 0x0, 0x8, 0x5}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) syz_genetlink_get_family_id$devlink(0x0, r1) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001a00)=""/4117, 0x1015}, {0x0}, {&(0x7f0000000400)=""/210, 0xd2}, {&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000003c40)=""/4083, 0xff3}, {&(0x7f0000000100)=""/128, 0x80}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x40008062, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0xffffffb8, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x34}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=@newtclass={0x78, 0x28, 0x10, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xffe2}, {0xc, 0x2}, {0x5, 0xe}}, [@tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0xc635}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x80e}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0xbe}}, @TCA_RATE={0x6, 0x5, {0xf, 0x40}}, @TCA_RATE={0x6, 0x5, {0x9, 0xa}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x20004040) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x8}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "1d86e4e6"}]}}, 0x0}, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x3, 0x31, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x81, 0x8, 0x4}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x6, 0x3, 0x5, 0x8, 0x4}, 0x78, &(0x7f00000003c0)={0x5, 0xf, 0x78, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x7bd, 0xff00, 0x3, [0xff0f, 0xdf70, 0x3f00, 0xcf]}, @generic={0x51, 0x10, 0xa, "ce8c90ba3aea36f47dad5891578b55bcb39cdee964d3cb1827854a19788702d5d97b90188c1e3cfb68e7f47538891d032ba6aaaf317ca9b6734bb55950d6b8a8f89c2ad0c5445eecfd7056b5b94d"}, @generic={0x3, 0x10, 0xf5fa6b2c60855cde}]}, 0x8, [{0x54, &(0x7f0000000180)=@string={0x54, 0x3, "62d99b4f9e800a251947f224aa6500d04f0bf98706a50df542e6b96c1cc276a9508d93184fe9d2a523f87f15cde7ef257160ced1d1a7074022bbf15d88018161e533f34715582c57975d1893f2845d970c15"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x83e}}, {0x26, &(0x7f0000000280)=@string={0x26, 0x3, "f3e00045ac840bd59395bdb0621c30c68184e30a950253da6a0ea0cca192fab8ced9a384"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x51, &(0x7f00000005c0)=@string={0x51, 0x3, "40c9da7694ebae2811e603c6e8b3d94b06095d4ec0f6690832d26c7c2e95a31dbef3c8423f907aeeae6896e364bfdf75a29ebca47d31a6c25aafa03c7622655581b2846200ede235fdefeadac15ca2"}}, {0x5f, &(0x7f0000000640)=@string={0x5f, 0x3, "40c1dd32ad00dbb9746e81b4017f6e872fce1140f3d26c3a4d225bbfe00eea442c21bfeba0e05dae1bb347996ff78703bcdd6ea0201a1adf39f2750533422b7c76f17b644ab4e670c2a2a4c3d290ca2c2c859d954c5395fa602340e040"}}, {0xa, &(0x7f0000000300)=@string={0xa, 0x3, "74d0019a9d3a86bf"}}]}) 2m18.652656788s ago: executing program 3 (id=205): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_clone(0x1300, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000000)=0x525a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x5, 0x20000a2f, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) 2m17.4205559s ago: executing program 3 (id=210): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee00000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb70c7a3667e55e5c2d6218a07445d6d9c7745d2d3876c51d920bb36682fc30dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e00600000000a060008065b44f95caae586a81ed0bffece0b42a9ecb", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x240040c0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = socket(0x10, 0x80003, 0x0) connect$inet(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}, 0x8000) socket(0x1e, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r8, 0x5608) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f00000002c0)) 2m14.087524177s ago: executing program 3 (id=220): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000028000100"], 0x1c}}, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4004550d, &(0x7f0000000500)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000002c0)="0d7e447b51343ed2fc68d8ff10ab", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2m13.733684497s ago: executing program 3 (id=221): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x8, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r2, &(0x7f0000000680), &(0x7f0000000600)=""/73}, 0x28) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000002c0)={0x0, 0x0}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)}, {&(0x7f0000000200)="b84829b4f130df61f62379a48e86ad8c667d0aa2b97bc35e424b80d99a1c09bc299c2dafc3faa5842109f67bb94a0d0b1bdc1034f2c799068230883f90dfdf1bbc5a37c67608baac8897597138b04224d7b5bbf5b986c627b2959ef206fb7e0b5b0601b914d7abc614ea2a1912f4258972016db864af0830", 0x78}], 0x2, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x1000f42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a300000"], 0xe8}}, 0x0) io_destroy(0x0) syz_io_uring_setup(0x0, &(0x7f0000000040), 0x0, 0x0) dup(r3) 2m13.294012232s ago: executing program 3 (id=224): epoll_create1(0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001540)=@delsa={0x28, 0x11, 0x2a4d0fb3869bfd77, 0x5, 0x25dfdbfd, {@in=@dev={0xac, 0x14, 0x14, 0x2f}, 0x4d2, 0x2, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4004010) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x108) r2 = creat(0x0, 0x7a) write$binfmt_elf32(r2, 0x0, 0x69) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000060000000000000802000000050000000000001200000000000000000000000d0000000000000000006f6100"], &(0x7f0000000340)=""/181, 0x44, 0xb5, 0x1, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x1020, 0xffffffffffffffff, 0x0) execve(0x0, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) link(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./bus\x00') 2m12.898377626s ago: executing program 33 (id=224): epoll_create1(0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001540)=@delsa={0x28, 0x11, 0x2a4d0fb3869bfd77, 0x5, 0x25dfdbfd, {@in=@dev={0xac, 0x14, 0x14, 0x2f}, 0x4d2, 0x2, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4004010) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x108) r2 = creat(0x0, 0x7a) write$binfmt_elf32(r2, 0x0, 0x69) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000060000000000000802000000050000000000001200000000000000000000000d0000000000000000006f6100"], &(0x7f0000000340)=""/181, 0x44, 0xb5, 0x1, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x1020, 0xffffffffffffffff, 0x0) execve(0x0, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) link(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./bus\x00') 16.754322964s ago: executing program 2 (id=550): mknodat$null(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000, 0x103) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00050201020c2402060602040c0032a304f0ffffff0001020000090401010101020000072401200404000c2402010201400f290c89c009e900090000f7090707250183020c00090402000001020000090402020101020000072401018105000b2402010f04b4018c703c0905820940"], 0x0) 12.026428326s ago: executing program 2 (id=558): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') pread64(r0, &(0x7f0000001880)=""/4096, 0x1000, 0x100) (fail_nth: 5) 11.897177782s ago: executing program 0 (id=560): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x4200, 0x4000000}, 0x28) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x433) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r3, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x1}) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x32900, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socket$packet(0x11, 0x3, 0x300) 11.466471201s ago: executing program 2 (id=561): futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000140), 0x34ffffff) (fail_nth: 5) 11.17562364s ago: executing program 2 (id=562): socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x13, 0xffffffffffffffff, 0xd000) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4140aecd, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000900)={'bridge_slave_1\x00', @random="0e8bcd1900"}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x2, 0x0, 0x101, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x801}, 0xe) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000013c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 8.610433549s ago: executing program 4 (id=568): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e", 0xf3}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b", 0xe6}, {0x0}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb3dc5", 0xf4}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf64", 0x71}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) socket$igmp6(0xa, 0x3, 0x2) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 8.38360974s ago: executing program 2 (id=571): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xc, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0xfffffff9, 0xa, 0xffffffff, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x9, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0xe4, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0xffffffff, 0x8, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x9, 0x9, 0xfffffffb], [0x8a3, 0x6, 0x3, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x7ffe, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x4, 0x401, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x4, 0x0, 0x0, 0xc, 0x4, 0xd, 0x3, 0xb8, 0x4, 0x2, 0x5, 0x0, 0x8, 0x1, 0x3, 0x9, 0x6d, 0x81, '\x00', 0x2, 0xfff}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x40, 0x0, 0x0, 0x401}, {0x6, 0xfc, 0x0, 0x6}]}, 0x10) write$binfmt_aout(r7, &(0x7f0000000000)=ANY=[], 0xfdef) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000240), 0x200000, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x29, 0x800, 0x44040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x115, 0xfb}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xb3a406bdd74362ab, 0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x200, 0x20003, 0x10020f5b, 0x0, [{0x0, 0x9}, {}, {}, {0x0, 0x35, 0xff}, {0x20, 0xa, 0xfc}, {0x0, 0x0, 0x6, '\x00', 0x7}, {0x20}, {0x2, 0x2, 0x7}, {0x0, 0x0, 0x8}, {0x0, 0x1, 0x2}, {0x0, 0x0, 0xfe, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0xfc}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x8, 0x0, '\x00', 0xff}, {0x0, 0x75, 0xfa}, {0x0, 0x0, 0x0, '\x00', 0x20}, {}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5, 0x0, '\x00', 0x1}, {0x0, 0xfc}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002880)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x0, 0x0, 0x0, 0x7}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x6, 0x20000000, 0x5, 0x8}, 0x4}, [{0x7, 0x8001, 0x7, 0x4, 0xd, 0x9}, {0x6, 0x9, 0x2, 0x7, 0xffff, 0x1}, {0x9, 0x2, 0x4, 0x3, 0x14000, 0x4}, {0x6, 0x99e1, 0x1, 0x6, 0x7, 0x3}, {0x100, 0x3, 0x4, 0x4, 0x4, 0x9}, {0x1, 0xbea, 0x3, 0x6, 0x40, 0x1}, {0x0, 0x7, 0xa, 0x800, 0x7, 0x6}, {0x2, 0x200, 0x4, 0xffff1a89, 0xe, 0x7d}, {0x1, 0xc, 0x0, 0x401, 0x5, 0x193f}, {0x7105, 0x8, 0xfffff801, 0x6bb, 0x0, 0xfffffffa}, {0x3, 0x6, 0x26, 0x4, 0x7, 0x62}, {0x6e, 0xfe, 0xffffffff, 0xcc, 0x7ff}, {0x800, 0x7, 0x2, 0x2, 0xf376, 0x1}, {0xa04, 0xfffffbff, 0x8000, 0x3, 0x40000000, 0x8}, {0xffffd6ce, 0x5, 0x7f, 0x6, 0x8, 0x18}, {0xf, 0x9, 0x3, 0xe40, 0x10001, 0x41d}, {0xfffffffb, 0x7, 0x99, 0x10001, 0x6, 0x3}, {0xec6, 0x7d6, 0x101, 0x4, 0x2}, {0x3, 0xd11, 0x0, 0xe, 0x4, 0x200}, {0x2, 0x6, 0x8, 0x1, 0x0, 0xffffff64}, {0x3, 0x7fffffff, 0x2, 0x5, 0xbe, 0x9}, {0x1ff, 0x0, 0xb6, 0x1, 0xfffff9d5, 0x5caf9926}, {0xf, 0xd6b, 0x7ff, 0x81, 0xff, 0x6}, {0xa27b, 0x7, 0xe1a, 0x2775, 0x7}, {0xa, 0x4, 0xdf29, 0x5, 0x2, 0x2}, {0x6, 0x9, 0xb, 0x70, 0x4, 0x9}, {0xffff, 0x200, 0xfffff801, 0x0, 0xffffffff, 0x3ff}, {0x1, 0x56d, 0x10, 0x2, 0xe}, {0x7, 0x5, 0x279e, 0x0, 0x8001, 0xffff7fff}, {0x10, 0xe3b7, 0xffffffff, 0xddf, 0x1, 0x8}, {0x7ff8, 0x7, 0x1, 0x81, 0x8a6, 0x200}, {0x10000, 0x10001, 0xb9, 0x400, 0x5, 0x6}, {0x8, 0x6, 0x5, 0x5, 0x1, 0x288fd761}, {0xfffffffe, 0x7, 0x5, 0x0, 0x5, 0x8}, {0x7, 0xffffffff, 0x8, 0x1, 0x2, 0x3ff}, {0x5, 0x5, 0xb, 0x101, 0x80, 0x9}, {0x2, 0xc02, 0xffffff74, 0x2, 0x7, 0x51c8944b}, {0xac5, 0x1, 0xfffffffe, 0x8, 0x5, 0x9}, {0xb7, 0xf, 0x80, 0x1, 0x8}, {0x1, 0x7, 0x4de, 0x10000, 0x2, 0x8}, {0xc, 0x2, 0x3, 0x5, 0x44, 0x1000}, {0x3, 0x7ff, 0x7, 0x4, 0xf412, 0x8}, {0x6, 0x0, 0x4, 0x6, 0x8000, 0xf6c0}, {0x2, 0x5, 0x8000, 0xffffffff, 0x1, 0x2}, {0x1800, 0x5, 0x3, 0x80, 0x709, 0x6}, {0x4, 0x4, 0x7a5f, 0x4, 0xdf8f, 0x3}, {0x3, 0x0, 0x7, 0x22a, 0x3, 0x2}, {0x8, 0x0, 0x7bfa9fe3, 0x101000, 0x4, 0xcf1}, {0x59, 0x28, 0x100, 0x1, 0x1, 0x2}, {0x5db, 0xa86, 0x3, 0x1, 0xbd, 0x9}, {0x5, 0x8001, 0x4, 0x6, 0xffff}, {0xb8, 0x2, 0x5, 0x0, 0x5}, {0xfffffff9, 0x7, 0x10000, 0x10, 0xf}, {0x7fff, 0x5, 0x3, 0x0, 0x1, 0x7}, {0x5, 0x60800, 0x30e8, 0x9, 0x6, 0x7}, {0x7, 0x82, 0xff, 0x8, 0xd, 0x7cbe}, {0x10, 0x83ce, 0x53, 0x9, 0x1, 0x81}, {0x8ae, 0x50, 0x1, 0x7, 0x2, 0x3}, {0x8, 0xffff, 0x87, 0x9, 0x2, 0x5}, {0x9, 0xb0, 0x8, 0x0, 0xffff, 0x19800}, {0x1ff, 0x688, 0x7ff, 0xfffffffd, 0x6, 0x80}, {0x4, 0x7fffffff, 0x1, 0x7f, 0x200, 0x36f7}, {0x7, 0xa177, 0x9, 0x6161, 0x6, 0x7}, {0x8e, 0x3, 0x10000, 0x3, 0x6, 0x8}, {0x8784, 0x0, 0xfffffffb, 0x2, 0x80000000, 0x4}, {0x1, 0x2, 0xc3, 0x0, 0x9}, {0xd9, 0xfa3, 0x5, 0x2, 0x200, 0x6}, {0x7, 0x1, 0x6a8, 0x4, 0x9, 0x5}, {0x1, 0xe, 0x1, 0x8, 0x5}, {0x4, 0x7, 0x7, 0x19, 0x6, 0x5}, {0xd9, 0xfffffffb, 0xb18, 0xf, 0x7, 0x7fffffff}, {0x3, 0x8, 0x8, 0x2a2, 0x10000, 0x4}, {0x1, 0x0, 0x67f1, 0x8001, 0x2, 0x9}, {0x45, 0xff, 0x1138f72f, 0xffffffff, 0xffffffe8, 0x1}, {0x0, 0x0, 0x4, 0xfffff1d0, 0x3, 0x60fc}, {0x2, 0x4, 0xae, 0x9, 0x2, 0x5}, {0x7, 0x0, 0x3, 0xff, 0x401, 0x7}, {0xf13, 0x8f37, 0x47, 0x3, 0x0, 0xff}, {0x2, 0x800, 0x17, 0x1, 0x3a, 0xfffffff7}, {0x800, 0x5, 0x1, 0x4, 0x7fff, 0x3}, {0x4, 0x4, 0xd, 0x9, 0x112, 0xce27}, {0x1000, 0x3, 0x2, 0x1, 0x7, 0x7}, {0x0, 0xe0, 0x3, 0x2ad, 0x10, 0x9a58}, {0xae0, 0x2c6e, 0x2, 0x1, 0x2, 0x40}, {0x8, 0x401, 0x7fffffff, 0x9, 0x2, 0x3}, {0x6, 0x1a, 0x20a, 0x9, 0xdda, 0x7}, {0xc, 0x9, 0x10000, 0x2, 0x1, 0x3}, {0x8, 0xd628, 0x6, 0xde84, 0x0, 0x3}, {0x0, 0x0, 0x29, 0x4, 0x7ff, 0x3}, {0x9, 0x400, 0x7, 0x9, 0x9, 0x80000000}, {0x2, 0x9, 0xa, 0x4, 0x4, 0xfffffff8}, {0x6, 0x2, 0x1, 0xff, 0x7bc4, 0xbf7}, {0xfffffff7, 0x9, 0x0, 0x9, 0x3, 0x40}, {0x4, 0x6, 0x2, 0x7, 0x5, 0x80000000}, {0x3, 0x3, 0x0, 0x9, 0xa, 0x1}, {0xfffffeff, 0x0, 0x6, 0x70b, 0x1, 0xfff}, {0x2, 0x164d, 0x7, 0x1, 0x0, 0x6}, {0x7, 0x1, 0x5, 0x9, 0x400, 0x100}, {0x1, 0x7f, 0x8, 0x1, 0x9, 0xfff}, {0xfffffffe, 0x10001, 0x3, 0xff, 0xd, 0x1ff}, {0x7, 0x800, 0x2, 0x5, 0xae, 0x40}, {0x3ff, 0x133, 0x8, 0x585fdf7c, 0x1, 0x7f}, {0x4, 0x4, 0xc10, 0x4, 0x0, 0x7ff}, {0x4, 0xa, 0x9, 0x75, 0x4, 0x77}, {0x1, 0xf32, 0xffffffff, 0xffffffff, 0x14, 0xfffffff9}, {0x10001, 0x3, 0x2, 0x0, 0x5, 0x3}, {0x8, 0x6, 0x2, 0x400, 0x5, 0xd}, {0x0, 0x9, 0xfffffd6c, 0xa, 0x9, 0xfffffffc}, {0x6, 0x0, 0x4, 0x8e2, 0xf, 0x8200000}, {0x7, 0x1, 0xfffffffb, 0x6, 0x4}, {0x7, 0x5, 0xffff, 0x868, 0x1, 0x10001}, {0x1, 0x80000001, 0x5, 0xa312, 0x5, 0x4}, {0x7, 0x0, 0x4, 0xf, 0x0, 0x80}, {0x7, 0x4, 0x5, 0x0, 0x8, 0x2}, {0xff0, 0x0, 0x1, 0x9, 0x6, 0x2}, {0x0, 0x8000, 0xa, 0x7, 0x3, 0x5}, {0xfffff28c, 0x7e, 0x5, 0x8c, 0x84, 0xe}, {0x7fffffff, 0x3ff, 0x80000000, 0x1, 0x9}, {0x3, 0x8, 0x1000, 0xb521, 0x4000c, 0x8}, {0x4, 0x7, 0x3ff, 0x5, 0x7, 0x4}, {0x0, 0x9, 0x941, 0xf, 0x99, 0x5}, {0x2, 0x5, 0x4862, 0xdb6c, 0x40, 0x1000}, {0x2, 0x734000, 0x5, 0x7fffffff, 0xc, 0x1259}, {0xff, 0x4, 0x0, 0x2, 0x3}, {0x4, 0x2, 0xfff, 0x3, 0x4, 0x4e5}, {0xfff, 0x8001, 0xfffffffc, 0x7, 0x9, 0xffff}, {0x7, 0x81, 0x28d6ca5c, 0x10000, 0x4, 0x2}, {0x7, 0x8dcd, 0x1, 0x3ff, 0x6, 0x1}], [{0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x3}, {0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {}, {}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x5}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x2}, {0x2}, {0x69c9719a6a7588a}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x3}, {}, {0x5}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0xae9c2964e056bda3, 0x1}, {0x2}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x4000) 7.966335016s ago: executing program 0 (id=573): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000480)=""/140, &(0x7f00000000c0)=0x8c) prlimit64(0x0, 0xe, 0x0, 0x0) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x48) io_setup(0x7ffe, &(0x7f0000000300)) r2 = gettid() r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r3, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) write$rfkill(r3, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffa}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x44040000}, 0x20000014) 7.791075956s ago: executing program 6 (id=574): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99", 0x8e}, {&(0x7f0000001380)="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", 0x1cb}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686", 0x92}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af", 0x35}, {&(0x7f0000000180)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737491a1c6bd2a64b2a85cbaaf648c9100000000000000006a8f4f5405596e72f8fe08c33a", 0x88}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000840)="3f1c4a04940ee0b20aec8b4090986a3bff84255d40657e7ee0d40a25584e869ef417cfb843df9bab6a733f72f13c385945fbe4f6592503b0013edc972aa7f382cfe6f924e9b3058c5dc3a39af5f6868c9031d7f0fba663fed16b868a", 0x5c}, {&(0x7f00000015c0)="ab802595e16402267afad4132bae032aeebc5d3df8873915f385de7623fdcdbb497d2913cabe2bd146dee84fdcbeaa251db4f747090dc6c625ed3b915aae8dda1394c0d541055b3e89cab518a94118fb170cbedf44d32efc4a292ac9e1b6abf4fdb596196d42019ab8ee0802f493e80af271859ee17cf761faf37c2ca47b51fdcfe21052519fc3ce9735c2e072f998b572fd9d4652856c9dca839a2065f04d3bd311b63f38da9a0aa91b6f0e6bb3d5", 0xaf}, {&(0x7f0000000b80)="5e93f5", 0x3}], 0x3}}], 0x3, 0xc0) 7.442093855s ago: executing program 6 (id=575): syz_usb_connect(0x5, 0x36, &(0x7f00000007c0)={{0x12, 0x1, 0x201, 0x6e, 0x20, 0xdc, 0x20, 0xeb1a, 0x5006, 0x1774, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x3, 0x10, 0x0, [{{0x9, 0x4, 0xfa, 0x8, 0x2, 0xe9, 0x91, 0x85, 0xf8, [], [{{0x9, 0x5, 0x8, 0x2, 0x200, 0x40, 0x5}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x40, 0xc0, 0xf0}}]}}]}}]}}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0}) 7.430247514s ago: executing program 0 (id=576): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000380), 0xfffffffffffffcbf) 7.194355521s ago: executing program 0 (id=577): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x4000000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_io_uring_setup(0x236, &(0x7f0000000380)={0x0, 0x80fd, 0x8, 0x4, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x0, 0x0}) io_uring_enter(r3, 0x1864, 0x6429, 0x1, 0x0, 0x0) 6.00573804s ago: executing program 4 (id=578): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'caif0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 5.986601946s ago: executing program 0 (id=579): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x66d3e714) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x80, 0x1c, {0x5, 0x1, 0x4ffffffd, 0xa80, 0x5, 0x8, 0x4, 0x8020008, 0x5, 0x7ff, 0x4, 0x8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 5.590589741s ago: executing program 2 (id=582): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4001) sendmsg$NFT_BATCH(r4, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0xa) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x35}, 0x1}, 0x1c) 5.462363036s ago: executing program 4 (id=583): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x800000, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40) r2 = socket(0x840000000002, 0x3, 0xf8) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) msgctl$MSG_STAT(0x0, 0xb, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) msgctl$IPC_INFO(0x0, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) 5.438801478s ago: executing program 5 (id=584): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x22882, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x4}], 0x1, 0x0, &(0x7f0000000180)={[0x9]}, 0x8) 4.480001072s ago: executing program 4 (id=585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 4.366353257s ago: executing program 6 (id=586): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, 0x0, 0x0}, 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}, {0x2, 0x4e23, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x84, 0x0, 0x0, 0x0, 0x78, &(0x7f0000000000)='bridge_slave_1\x00', 0x80000000, 0xfffffffffffffff9, 0x7}) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r3, 0x100000000) 4.365836487s ago: executing program 4 (id=587): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000002380)=@nat={'nat\x00', 0x8, 0x5, 0x508, 0x118, 0x208, 0xffffffff, 0x208, 0x0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xe8, 0x118, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@dev, @mcast1, [], [], 'veth0_macvtap\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@mcast2, @local, [], [], 'wg1\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}}, @common=@hl={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv6=@mcast1, @icmp_id=0xfffd, @gre_key}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, [], [], 'vlan0\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) 3.233171745s ago: executing program 4 (id=588): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000200)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.630560776s ago: executing program 5 (id=589): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) 2.477860717s ago: executing program 6 (id=590): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000040295"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x101540, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000010}) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 2.47745491s ago: executing program 0 (id=591): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x5, 0xffffffff], 0x5}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) 2.328952914s ago: executing program 5 (id=592): pipe(0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 1.383625845s ago: executing program 5 (id=593): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) 1.262406241s ago: executing program 6 (id=594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @local}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) 1.145200289s ago: executing program 5 (id=595): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1, 0x1}, 0xc) 196.008179ms ago: executing program 6 (id=596): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='mm_vmscan_node_reclaim_begin\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x1}]}, {0x0, [0x2e]}}, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 0s ago: executing program 5 (id=597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): †ªé‰–ᑓ⮭쌇蘵ï’佱⛼雷㴫뽰溓ä‹è ™ä§©æšç»…ì±›åˆì¢·áµ‘é᪶שׁ솜撪䄓ꃧ㥀﬿꘎ᚚႅ黶ì¸â™ƒáŒ£ã”µä›¿ê• [ 97.278485][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.313119][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.369255][ T5900] usb 2-1: SerialNumber: á„ [ 97.430664][ T5907] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.521109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 97.554324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 97.725655][ T5900] usb 2-1: USB disconnect, device number 2 [ 98.348113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.405407][ T1209] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.736469][ T1209] usb 5-1: too many configurations: 253, using maximum allowed: 8 [ 99.156982][ T5944] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14'. [ 99.433418][ T1209] usb 5-1: string descriptor 0 read error: -71 [ 99.467324][ T1209] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 99.561616][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.634056][ T1209] usb 5-1: can't set config #1, error -71 [ 99.681875][ T1209] usb 5-1: USB disconnect, device number 2 [ 101.345884][ T5824] Bluetooth: hci4: command 0x0405 tx timeout [ 101.355483][ T5966] nfs: Unexpected value for 'acl' [ 101.917513][ T5979] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.959775][ T5980] overlayfs: failed to get inode (-116) [ 101.975052][ T5980] overlayfs: failed to get inode (-116) [ 101.983052][ T5980] overlayfs: failed to get inode (-116) [ 101.999971][ T5980] overlayfs: failed to get inode (-116) [ 102.207810][ T5979] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4278124544 (8556249088 ns) > initial count (40 ns). Using initial count to start timer. [ 102.963935][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 103.788239][ T5992] netlink: 16 bytes leftover after parsing attributes in process `syz.2.27'. [ 105.559481][ T6005] Invalid source name [ 105.573437][ T6005] UBIFS error (pid: 6005): cannot open "./file0", error -22 [ 105.804455][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 105.924417][ T5909] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.136189][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.181332][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.234354][ T9] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 106.294394][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 106.307152][ T5909] usb 3-1: unable to get BOS descriptor or descriptor too short [ 106.314960][ T5829] Bluetooth: hci1: command tx timeout [ 106.316072][ T5909] usb 3-1: too many configurations: 144, using maximum allowed: 8 [ 106.343623][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.396318][ T9] usb 5-1: config 0 descriptor?? [ 106.410812][ T5909] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 106.419768][ T5909] usb 3-1: can't read configurations, error -61 [ 106.594999][ T5909] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.736944][ T5867] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.800265][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 106.809260][ T5909] usb 3-1: unable to get BOS descriptor or descriptor too short [ 106.817706][ T5909] usb 3-1: too many configurations: 144, using maximum allowed: 8 [ 106.830590][ T5909] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 107.401891][ T6012] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 107.444360][ T5909] usb 3-1: can't read configurations, error -61 [ 107.457121][ T6012] bond0: (slave lo): Error: Device can not be enslaved while up [ 107.485732][ T5909] usb usb3-port1: attempt power cycle [ 107.627779][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 107.645171][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 107.651343][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 107.666848][ T5867] usb 4-1: config 0 has an invalid interface number: 5 but max is 0 [ 107.674936][ T5867] usb 4-1: config 0 has no interface number 0 [ 107.681070][ T5867] usb 4-1: config 0 interface 5 altsetting 6 endpoint 0x8C has invalid maxpacket 1024, setting to 64 [ 107.693515][ T5867] usb 4-1: config 0 interface 5 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 107.707158][ T5867] usb 4-1: config 0 interface 5 has no altsetting 0 [ 107.719375][ T9] usb 5-1: USB disconnect, device number 3 [ 107.729363][ T5867] usb 4-1: New USB device found, idVendor=16d8, idProduct=7006, bcdDevice=3e.60 [ 107.740915][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.754449][ T5867] usb 4-1: Product: syz [ 107.758657][ T5867] usb 4-1: Manufacturer: syz [ 107.775830][ T5867] usb 4-1: SerialNumber: syz [ 107.817206][ T6031] ubi31: attaching mtd0 [ 107.831432][ T6031] ubi31: scanning is finished [ 107.837170][ T5909] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.849114][ T6031] ubi31: empty MTD device detected [ 107.878513][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 107.887005][ T5909] usb 3-1: unable to get BOS descriptor or descriptor too short [ 107.911208][ T5909] usb 3-1: too many configurations: 144, using maximum allowed: 8 [ 107.925832][ T5909] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 107.933894][ T5909] usb 3-1: can't read configurations, error -61 [ 107.983443][ T5867] usb 4-1: config 0 descriptor?? [ 108.075621][ T5909] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 108.251357][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 108.360069][ T5909] usb 3-1: unable to get BOS descriptor or descriptor too short [ 108.573890][ T5909] usb 3-1: too many configurations: 144, using maximum allowed: 8 [ 108.722581][ T5900] usb 4-1: USB disconnect, device number 2 [ 108.759640][ T5909] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 108.798325][ T6031] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 108.804565][ T5909] usb 3-1: can't read configurations, error -71 [ 108.853277][ T5909] usb usb3-port1: unable to enumerate USB device [ 109.795670][ T1165] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.826926][ T6044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.41'. [ 110.112289][ T1165] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x78, changing to 0x8 [ 110.238244][ T1165] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 110.349661][ T1165] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 110.410130][ T1165] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.454395][ T1165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.462781][ T1165] usb 2-1: Product: syz [ 110.483310][ T1165] usb 2-1: Manufacturer: syz [ 110.488199][ T1165] usb 2-1: SerialNumber: syz [ 110.848382][ T6050] netlink: 16 bytes leftover after parsing attributes in process `syz.3.44'. [ 111.215166][ T30] audit: type=1326 audit(1748040583.492:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6052 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f838e969 code=0x7ffc0000 [ 111.244131][ T30] audit: type=1326 audit(1748040583.502:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6052 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f838e969 code=0x7ffc0000 [ 111.275886][ T6060] nfs: Unexpected value for 'acl' [ 111.294834][ T6054] ======================================================= [ 111.294834][ T6054] WARNING: The mand mount option has been deprecated and [ 111.294834][ T6054] and is ignored by this kernel. Remove the mand [ 111.294834][ T6054] option from the mount to silence this warning. [ 111.294834][ T6054] ======================================================= [ 111.370663][ T6058] xt_hashlimit: size too large, truncated to 1048576 [ 111.419136][ T30] audit: type=1326 audit(1748040583.702:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6052 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f79f838e969 code=0x7ffc0000 [ 111.468226][ T30] audit: type=1326 audit(1748040583.702:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6052 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f838e969 code=0x7ffc0000 [ 111.473732][ T6064] syz.4.47 uses obsolete (PF_INET,SOCK_PACKET) [ 111.495351][ T30] audit: type=1326 audit(1748040583.732:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6052 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f838e969 code=0x7ffc0000 [ 111.757680][ T1165] cdc_ncm 2-1:1.0: bind() failure [ 111.789635][ T1165] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 111.850679][ T1165] cdc_ncm 2-1:1.1: bind() failure [ 111.865782][ T6067] Zero length message leads to an empty skb [ 111.942331][ T9] usb 2-1: USB disconnect, device number 3 [ 112.060526][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.48'. [ 112.933325][ T6080] ntfs3(nullb0): Primary boot signature is not NTFS. [ 112.949223][ T6080] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 113.664542][ T5900] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 113.756475][ T1165] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.854424][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 113.861281][ T5900] usb 3-1: too many configurations: 60, using maximum allowed: 8 [ 113.881533][ T6094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.55'. [ 113.916485][ T1165] usb 2-1: Using ep0 maxpacket: 16 [ 114.020577][ T1165] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 114.223128][ T1165] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 114.284981][ T5900] usb 3-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 114.326011][ T1165] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 114.371262][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 114.404739][ T5900] usb 3-1: Product: syz [ 114.410870][ T1165] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.430957][ T5900] usb 3-1: Manufacturer: syz [ 114.438649][ T5900] usb 3-1: SerialNumber: syz [ 114.443471][ T1165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 114.466651][ T5900] usb 3-1: config 0 descriptor?? [ 114.473972][ T1165] usb 2-1: SerialNumber: syz [ 114.503251][ T5900] pwc: Philips SPC 880NC USB webcam detected. [ 114.511624][ T6082] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 115.162000][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.321524][ T5900] pwc: Warning: more than 1 configuration available. [ 115.337113][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 115.362566][ T1165] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 115.376068][ T5900] pwc: Failed to set LED on/off time (-71) [ 115.398415][ T5900] pwc: send_video_command error -71 [ 115.403696][ T5900] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 115.413873][ T1165] usb 2-1: USB disconnect, device number 4 [ 115.447890][ T5900] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 115.481279][ T9] usb 4-1: device descriptor read/64, error -71 [ 115.515255][ T5900] usb 3-1: USB disconnect, device number 6 [ 115.994400][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.180345][ T6111] nfs: Unexpected value for 'acl' [ 116.274408][ T9] usb 4-1: device descriptor read/64, error -71 [ 116.384875][ T9] usb usb4-port1: attempt power cycle [ 116.646497][ T6121] FAULT_INJECTION: forcing a failure. [ 116.646497][ T6121] name failslab, interval 1, probability 0, space 0, times 0 [ 116.734641][ T6121] CPU: 0 UID: 0 PID: 6121 Comm: syz.1.63 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 116.734670][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.734691][ T6121] Call Trace: [ 116.734699][ T6121] [ 116.734711][ T6121] dump_stack_lvl+0x189/0x250 [ 116.734746][ T6121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.734772][ T6121] ? __pfx__printk+0x10/0x10 [ 116.734809][ T6121] ? __pfx___might_resched+0x10/0x10 [ 116.734841][ T6121] should_fail_ex+0x414/0x560 [ 116.734868][ T6121] should_failslab+0xa8/0x100 [ 116.734889][ T6121] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 116.734920][ T6121] ? __alloc_skb+0x112/0x2d0 [ 116.734948][ T6121] __alloc_skb+0x112/0x2d0 [ 116.734976][ T6121] netlink_sendmsg+0x5c6/0xb30 [ 116.735000][ T6121] ? is_bpf_text_address+0x26/0x2b0 [ 116.735035][ T6121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.735067][ T6121] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 116.735089][ T6121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.735113][ T6121] __sock_sendmsg+0x219/0x270 [ 116.735138][ T6121] ____sys_sendmsg+0x505/0x830 [ 116.735171][ T6121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.735207][ T6121] ? import_iovec+0x74/0xa0 [ 116.735239][ T6121] ___sys_sendmsg+0x21f/0x2a0 [ 116.735268][ T6121] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.735341][ T6121] ? __fget_files+0x2a/0x420 [ 116.735359][ T6121] ? __fget_files+0x3a0/0x420 [ 116.735387][ T6121] __x64_sys_sendmsg+0x19b/0x260 [ 116.735417][ T6121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.735462][ T6121] ? do_syscall_64+0xba/0x210 [ 116.735492][ T6121] do_syscall_64+0xf6/0x210 [ 116.735518][ T6121] ? clear_bhb_loop+0x60/0xb0 [ 116.735542][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.735561][ T6121] RIP: 0033:0x7f873198e969 [ 116.735589][ T6121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.735605][ T6121] RSP: 002b:00007f8732738038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.735633][ T6121] RAX: ffffffffffffffda RBX: 00007f8731bb6080 RCX: 00007f873198e969 [ 116.735648][ T6121] RDX: 0000000000004050 RSI: 0000200000000100 RDI: 0000000000000003 [ 116.735660][ T6121] RBP: 00007f8732738090 R08: 0000000000000000 R09: 0000000000000000 [ 116.735672][ T6121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.735683][ T6121] R13: 0000000000000000 R14: 00007f8731bb6080 R15: 00007fff12fe79b8 [ 116.735714][ T6121] [ 116.985829][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.008033][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.216700][ T9] usb 4-1: device descriptor read/8, error -71 [ 117.974645][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.099497][ T6133] netlink: 16 bytes leftover after parsing attributes in process `syz.3.66'. [ 118.464994][ T9] usb 4-1: device not accepting address 6, error -71 [ 118.484634][ T9] usb usb4-port1: unable to enumerate USB device [ 118.553477][ T6135] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 118.560275][ T6135] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 118.608651][ T6135] vhci_hcd vhci_hcd.0: Device attached [ 118.645833][ T6136] vhci_hcd: connection closed [ 118.671143][ T36] vhci_hcd: stop threads [ 118.709218][ T36] vhci_hcd: release socket [ 118.713739][ T36] vhci_hcd: disconnect device [ 118.984133][ T6148] Sensor B: ================= START STATUS ================= [ 118.993467][ T6148] Sensor B: Test Pattern: 75% Colorbar [ 118.996666][ T6145] overlayfs: failed to get inode (-116) [ 119.005639][ T6148] Sensor B: Show Information: All [ 119.011883][ T6148] Sensor B: Vertical Flip: false [ 119.021586][ T6148] Sensor B: Horizontal Flip: false [ 119.028794][ T6148] Sensor B: Brightness: 128 [ 119.033705][ T6148] Sensor B: Contrast: 128 [ 119.038721][ T6148] Sensor B: Hue: 0 [ 119.042684][ T6148] Sensor B: Saturation: 128 [ 119.047567][ T6148] Sensor B: ================== END STATUS ================== [ 119.342374][ T6145] overlayfs: failed to get inode (-116) [ 119.393322][ T6145] overlayfs: failed to get inode (-116) [ 119.423044][ T6145] overlayfs: failed to get inode (-116) [ 121.052863][ T6170] netlink: 'syz.3.79': attribute type 1 has an invalid length. [ 123.206061][ T6180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.80'. [ 123.594134][ T6185] xt_CONNSECMARK: invalid mode: 0 [ 123.778146][ T6189] FAULT_INJECTION: forcing a failure. [ 123.778146][ T6189] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 123.791183][ T6191] netlink: 68 bytes leftover after parsing attributes in process `syz.0.82'. [ 123.791304][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.82'. [ 123.851824][ T6189] CPU: 0 UID: 0 PID: 6189 Comm: syz.4.83 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 123.851853][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.851865][ T6189] Call Trace: [ 123.851873][ T6189] [ 123.851881][ T6189] dump_stack_lvl+0x189/0x250 [ 123.851911][ T6189] ? __lock_acquire+0xaac/0xd20 [ 123.851941][ T6189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.851967][ T6189] ? __pfx__printk+0x10/0x10 [ 123.851997][ T6189] ? __might_fault+0xb0/0x130 [ 123.852038][ T6189] should_fail_ex+0x414/0x560 [ 123.852064][ T6189] _copy_from_user+0x2d/0xb0 [ 123.852092][ T6189] do_ip6t_set_ctl+0x69f/0xce0 [ 123.852124][ T6189] ? rcu_is_watching+0x15/0xb0 [ 123.852152][ T6189] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 123.852196][ T6189] ? __pfx___mutex_lock+0x10/0x10 [ 123.852222][ T6189] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 123.852267][ T6189] nf_setsockopt+0x26c/0x290 [ 123.852294][ T6189] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 123.852320][ T6189] do_sock_setsockopt+0x257/0x3e0 [ 123.852349][ T6189] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 123.852372][ T6189] ? __fget_files+0x2a/0x420 [ 123.852396][ T6189] ? __fget_files+0x3a0/0x420 [ 123.852412][ T6189] ? __fget_files+0x2a/0x420 [ 123.852440][ T6189] __x64_sys_setsockopt+0x18b/0x220 [ 123.852473][ T6189] do_syscall_64+0xf6/0x210 [ 123.852499][ T6189] ? clear_bhb_loop+0x60/0xb0 [ 123.852524][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.852543][ T6189] RIP: 0033:0x7fdc7638e969 [ 123.852568][ T6189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.852584][ T6189] RSP: 002b:00007fdc7713c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 123.852606][ T6189] RAX: ffffffffffffffda RBX: 00007fdc765b5fa0 RCX: 00007fdc7638e969 [ 123.852620][ T6189] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 123.852632][ T6189] RBP: 00007fdc7713c090 R08: 0000000000000729 R09: 0000000000000000 [ 123.852644][ T6189] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.852656][ T6189] R13: 0000000000000000 R14: 00007fdc765b5fa0 R15: 00007ffc70e35e98 [ 123.852687][ T6189] [ 124.130818][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 124.191746][ T6197] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.514510][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 124.537875][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.590938][ T6203] netlink: 'syz.2.85': attribute type 1 has an invalid length. [ 127.104457][ T6195] ALSA: mixer_oss: invalid OSS volume '' [ 127.481985][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 127.493999][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 127.504398][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.519748][ T9] usb 4-1: string descriptor 0 read error: -71 [ 127.804974][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 127.814083][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.552624][ T9] usb 4-1: config 0 descriptor?? [ 128.564900][ T9] usb 4-1: can't set config #0, error -71 [ 128.584671][ T9] usb 4-1: USB disconnect, device number 7 [ 129.047349][ T6231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.93'. [ 129.223698][ T6229] overlayfs: failed to resolve './file1/file0': -2 [ 129.574441][ T5823] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.554702][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 130.896292][ T5823] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 130.956172][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.645230][ T5823] usb 3-1: config 0 descriptor?? [ 131.656139][ T9] usb 4-1: device descriptor read/all, error -71 [ 131.697570][ T5823] gspca_main: spca508-2.14.0 probing 8086:0110 [ 131.792413][ T5823] gspca_spca508: reg_read err -71 [ 131.801249][ T5823] gspca_spca508: reg_read err -71 [ 131.835137][ T5823] gspca_spca508: reg_read err -71 [ 131.845925][ T5908] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 131.857025][ T5823] gspca_spca508: reg_read err -71 [ 131.940917][ T5823] gspca_spca508: reg_read err -71 [ 131.952136][ T6247] Cannot find add_set index 0 as target [ 132.031553][ T5823] gspca_spca508: reg write: error -71 [ 132.091127][ T5908] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 132.137041][ T5823] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 132.208455][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.446707][ T5908] usb 5-1: Product: syz [ 132.457754][ T5823] usb 3-1: USB disconnect, device number 7 [ 132.492549][ T5908] usb 5-1: Manufacturer: syz [ 132.517995][ T5908] usb 5-1: SerialNumber: syz [ 132.813125][ T5908] usb 5-1: config 0 descriptor?? [ 132.861874][ T5908] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 132.881348][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.891565][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.898032][ T5908] usb 5-1: Detected FT4232HP [ 133.318026][ T6259] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.054423][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 134.264411][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 134.272531][ T6252] cgroup: fork rejected by pids controller in /syz2 [ 134.292905][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.353170][ T5908] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 134.363068][ T5908] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 134.430715][ T5908] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 134.430744][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 134.472869][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 134.487653][ T5908] usb 5-1: USB disconnect, device number 4 [ 134.495105][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.517070][ T6293] FAULT_INJECTION: forcing a failure. [ 134.517070][ T6293] name failslab, interval 1, probability 0, space 0, times 0 [ 134.535381][ T5908] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 134.551440][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 134.561655][ T5908] ftdi_sio 5-1:0.0: device disconnected [ 134.570978][ T6293] CPU: 1 UID: 0 PID: 6293 Comm: syz.0.101 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 134.571006][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.571019][ T6293] Call Trace: [ 134.571026][ T6293] [ 134.571034][ T6293] dump_stack_lvl+0x189/0x250 [ 134.571069][ T6293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.571096][ T6293] ? __pfx__printk+0x10/0x10 [ 134.571135][ T6293] ? __pfx___might_resched+0x10/0x10 [ 134.571165][ T6293] ? fs_reclaim_acquire+0x7d/0x100 [ 134.571192][ T6293] should_fail_ex+0x414/0x560 [ 134.571220][ T6293] should_failslab+0xa8/0x100 [ 134.571242][ T6293] kmem_cache_alloc_noprof+0x73/0x3c0 [ 134.571271][ T6293] ? ima_d_path+0xb1/0x250 [ 134.571301][ T6293] ima_d_path+0xb1/0x250 [ 134.571330][ T6293] ? __pfx_ima_d_path+0x10/0x10 [ 134.571366][ T6293] ? ima_inode_get+0x2f0/0x4e0 [ 134.571396][ T6293] process_measurement+0x6aa/0x1a40 [ 134.571420][ T6293] ? __lock_acquire+0xaac/0xd20 [ 134.571464][ T6293] ? __pfx_process_measurement+0x10/0x10 [ 134.571536][ T6293] ? rcu_read_lock_any_held+0xb3/0x120 [ 134.571582][ T6293] ima_file_mmap+0x1a2/0x1f0 [ 134.571607][ T6293] ? __pfx_ima_file_mmap+0x10/0x10 [ 134.571632][ T6293] ? ksys_write+0x1cb/0x250 [ 134.571670][ T6293] security_mmap_file+0x7a4/0xa60 [ 134.571697][ T6293] vm_mmap_pgoff+0x12c/0x4c0 [ 134.571732][ T6293] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 134.571761][ T6293] ? __fget_files+0x2a/0x420 [ 134.571783][ T6293] ? __fget_files+0x2a/0x420 [ 134.571802][ T6293] ? __fget_files+0x2a/0x420 [ 134.571825][ T6293] ksys_mmap_pgoff+0x51f/0x760 [ 134.571877][ T6293] do_syscall_64+0xf6/0x210 [ 134.571905][ T6293] ? clear_bhb_loop+0x60/0xb0 [ 134.571931][ T6293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.571951][ T6293] RIP: 0033:0x7fb93478e969 [ 134.571974][ T6293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.571991][ T6293] RSP: 002b:00007fb93558b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 134.572011][ T6293] RAX: ffffffffffffffda RBX: 00007fb9349b5fa0 RCX: 00007fb93478e969 [ 134.572025][ T6293] RDX: 000000000000001f RSI: 0000000000002000 RDI: 0000200000ffc000 [ 134.572038][ T6293] RBP: 00007fb93558b090 R08: 0000000000000004 R09: 0000000100000000 [ 134.572050][ T6293] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 134.572062][ T6293] R13: 0000000000000000 R14: 00007fb9349b5fa0 R15: 00007ffe92f08118 [ 134.572094][ T6293] [ 134.572345][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.573563][ T30] audit: type=1804 audit(1748040606.862:7): pid=6293 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.101" name="file0" dev="tmpfs" ino=134 res=1 errno=0 [ 134.610214][ T10] usb 4-1: Product: syz [ 135.084604][ T10] usb 4-1: Manufacturer: syz [ 135.251233][ T10] usb 4-1: SerialNumber: syz [ 135.487904][ T10] usb 4-1: config 0 descriptor?? [ 135.496816][ T10] xbox_remote_probe: Unexpected endpoint_in [ 135.737516][ T6261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.773546][ T6261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.792465][ T6261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.801473][ T6261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.821260][ T10] usb 4-1: USB disconnect, device number 10 [ 136.130689][ T6327] ntfs3(nullb0): Primary boot signature is not NTFS. [ 136.137719][ T6327] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 137.059578][ T6344] fuse: Bad value for 'fd' [ 139.018604][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.115'. [ 140.216427][ T5829] block nbd2: Receive control failed (result -32) [ 140.235199][ T6367] nbd2: detected capacity change from 0 to 4294967296 [ 140.626317][ T6367] block nbd2: shutting down sockets [ 141.552792][ T6396] Cannot find add_set index 0 as target [ 142.153236][ T30] audit: type=1326 audit(1748040614.312:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6395 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7638e969 code=0x7ffc0000 [ 142.265527][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.125'. [ 142.357730][ T30] audit: type=1326 audit(1748040614.312:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6395 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fdc7638e969 code=0x7ffc0000 [ 142.382776][ T30] audit: type=1326 audit(1748040614.312:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6395 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7638e969 code=0x7ffc0000 [ 142.960196][ T30] audit: type=1326 audit(1748040614.312:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6395 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdc7638e969 code=0x7ffc0000 [ 143.009646][ T30] audit: type=1326 audit(1748040614.312:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6395 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7638e969 code=0x7ffc0000 [ 143.058845][ T30] audit: type=1326 audit(1748040614.312:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6395 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc7638e969 code=0x7ffc0000 [ 143.091708][ T30] audit: type=1326 audit(1748040614.312:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6395 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7638e969 code=0x7ffc0000 [ 143.304866][ T30] audit: type=1326 audit(1748040614.312:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6395 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fdc7638e969 code=0x7ffc0000 [ 143.327164][ T30] audit: type=1326 audit(1748040614.312:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6395 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7638e969 code=0x7ffc0000 [ 143.353319][ T30] audit: type=1326 audit(1748040614.312:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6395 comm="syz.4.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7fdc7638e969 code=0x7ffc0000 [ 143.473434][ T6411] FAULT_INJECTION: forcing a failure. [ 143.473434][ T6411] name failslab, interval 1, probability 0, space 0, times 0 [ 143.514640][ T6411] CPU: 0 UID: 0 PID: 6411 Comm: syz.1.129 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 143.514669][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.514681][ T6411] Call Trace: [ 143.514689][ T6411] [ 143.514698][ T6411] dump_stack_lvl+0x189/0x250 [ 143.514734][ T6411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.514761][ T6411] ? __pfx__printk+0x10/0x10 [ 143.514798][ T6411] ? __pfx___might_resched+0x10/0x10 [ 143.514833][ T6411] should_fail_ex+0x414/0x560 [ 143.514859][ T6411] should_failslab+0xa8/0x100 [ 143.514881][ T6411] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 143.514912][ T6411] ? __alloc_skb+0x112/0x2d0 [ 143.514942][ T6411] __alloc_skb+0x112/0x2d0 [ 143.514971][ T6411] netlink_sendmsg+0x5c6/0xb30 [ 143.514993][ T6411] ? is_bpf_text_address+0x26/0x2b0 [ 143.515030][ T6411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.515062][ T6411] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 143.515083][ T6411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.515108][ T6411] __sock_sendmsg+0x219/0x270 [ 143.515132][ T6411] ____sys_sendmsg+0x505/0x830 [ 143.515166][ T6411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.515203][ T6411] ? import_iovec+0x74/0xa0 [ 143.515243][ T6411] ___sys_sendmsg+0x21f/0x2a0 [ 143.515272][ T6411] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.515336][ T6411] ? __fget_files+0x2a/0x420 [ 143.515354][ T6411] ? __fget_files+0x3a0/0x420 [ 143.515383][ T6411] __x64_sys_sendmsg+0x19b/0x260 [ 143.515413][ T6411] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.515457][ T6411] ? do_syscall_64+0xba/0x210 [ 143.515486][ T6411] do_syscall_64+0xf6/0x210 [ 143.515512][ T6411] ? clear_bhb_loop+0x60/0xb0 [ 143.515535][ T6411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.515554][ T6411] RIP: 0033:0x7f873198e969 [ 143.515571][ T6411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.515586][ T6411] RSP: 002b:00007f8732759038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.515606][ T6411] RAX: ffffffffffffffda RBX: 00007f8731bb5fa0 RCX: 00007f873198e969 [ 143.515621][ T6411] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 143.515633][ T6411] RBP: 00007f8732759090 R08: 0000000000000000 R09: 0000000000000000 [ 143.515645][ T6411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.515654][ T6411] R13: 0000000000000000 R14: 00007f8731bb5fa0 R15: 00007fff12fe79b8 [ 143.515682][ T6411] [ 144.131137][ T5908] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 144.167307][ T6412] warning: `syz.4.127' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 144.626911][ T5908] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.669012][ T6418] nbd1: detected capacity change from 0 to 4294967296 [ 144.683030][ T5908] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 144.718911][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 144.742129][ T5908] usb 1-1: Product: syz [ 144.751777][ T5908] usb 1-1: Manufacturer: syz [ 144.763062][ T5908] usb 1-1: SerialNumber: syz [ 144.810947][ T5908] usb 1-1: config 0 descriptor?? [ 145.051363][ T6423] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 145.319385][ T5824] block nbd1: Receive control failed (result -104) [ 145.670038][ T5908] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 145.684762][ T5908] usb 1-1: USB disconnect, device number 2 [ 145.761244][ T6100] udevd[6100]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.991196][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 147.697012][ T6447] program syz.2.139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.953705][ T6453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.281294][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 149.380052][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.149'. [ 149.489262][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'. [ 149.501646][ T6482] process 'syz.4.149' launched './file0' with NULL argv: empty string added [ 149.660579][ T6484] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4278124544 (8556249088 ns) > initial count (40 ns). Using initial count to start timer. [ 150.221943][ T6489] ntfs3(nullb0): Primary boot signature is not NTFS. [ 150.229175][ T6489] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 150.718658][ T6497] capability: warning: `syz.3.153' uses deprecated v2 capabilities in a way that may be insecure [ 151.091759][ T6500] program syz.2.154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.724767][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 152.895261][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 152.939935][ T9] usb 3-1: config 15 has an invalid interface number: 240 but max is 0 [ 152.949061][ T9] usb 3-1: config 15 has no interface number 0 [ 152.955667][ T9] usb 3-1: config 15 interface 240 altsetting 1 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 152.969245][ T9] usb 3-1: config 15 interface 240 has no altsetting 0 [ 152.980662][ T9] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=3e.58 [ 152.990121][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.998393][ T9] usb 3-1: Product: syz [ 153.002697][ T9] usb 3-1: Manufacturer: syz [ 153.007473][ T9] usb 3-1: SerialNumber: syz [ 153.755225][ T9] usb 3-1: no audio or video endpoints found [ 153.778884][ T9] usb 3-1: USB disconnect, device number 8 [ 154.030637][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 154.549899][ T6534] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4278124544 (8556249088 ns) > initial count (40 ns). Using initial count to start timer. [ 156.875786][ T5824] Bluetooth: Wrong link type (-71) [ 159.235344][ T6563] netlink: 'syz.3.173': attribute type 2 has an invalid length. [ 159.243054][ T6563] netlink: 132 bytes leftover after parsing attributes in process `syz.3.173'. [ 160.645762][ T6577] nbd0: detected capacity change from 0 to 4294967296 [ 160.659828][ T6579] block nbd0: shutting down sockets [ 160.666715][ T6100] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.204530][ T6100] Buffer I/O error on dev nbd0, logical block 0, async page read [ 161.314591][ T41] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.324010][ T41] Buffer I/O error on dev nbd0, logical block 0, async page read [ 161.344458][ T6100] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.405241][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 161.412482][ T6100] Buffer I/O error on dev nbd0, logical block 0, async page read [ 161.421612][ T6100] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.434788][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 161.444391][ T6100] Buffer I/O error on dev nbd0, logical block 0, async page read [ 161.445090][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 161.452396][ T6100] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.494892][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 161.506329][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 161.536736][ T6100] Buffer I/O error on dev nbd0, logical block 0, async page read [ 161.574575][ T6100] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.595190][ T6100] Buffer I/O error on dev nbd0, logical block 0, async page read [ 161.603194][ T6100] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.624569][ T6100] Buffer I/O error on dev nbd0, logical block 0, async page read [ 161.653020][ T6100] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.677051][ T6100] Buffer I/O error on dev nbd0, logical block 0, async page read [ 161.713876][ T6100] ldm_validate_partition_table(): Disk read failed. [ 161.767219][ T6100] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.791166][ T6100] Buffer I/O error on dev nbd0, logical block 0, async page read [ 161.804953][ T6100] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.826804][ T6100] Buffer I/O error on dev nbd0, logical block 0, async page read [ 161.850407][ T6100] Dev nbd0: unable to read RDB block 0 [ 161.865881][ T6100] nbd0: unable to read partition table [ 161.917510][ T6100] ldm_validate_partition_table(): Disk read failed. [ 161.935791][ T6100] Dev nbd0: unable to read RDB block 0 [ 161.941990][ T6100] nbd0: unable to read partition table [ 162.124390][ T5909] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 162.125536][ T6597] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 162.235817][ T6584] chnl_net:caif_netlink_parms(): no params data found [ 162.276640][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 162.299538][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.323476][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 162.338113][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 162.350379][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.366165][ T5909] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 162.390799][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.410085][ T5909] usb 5-1: Product: syz [ 162.415577][ T5909] usb 5-1: Manufacturer: syz [ 162.428187][ T5909] usb 5-1: SerialNumber: syz [ 162.448006][ T5909] usb 5-1: config 0 descriptor?? [ 162.468209][ T5909] xbox_remote_probe: Unexpected endpoint_in [ 162.565110][ T6584] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.572384][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.580539][ T6584] bridge_slave_0: entered allmulticast mode [ 162.597284][ T6584] bridge_slave_0: entered promiscuous mode [ 162.661332][ T6584] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.687316][ T6594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.689962][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.735136][ T6594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.762227][ T6608] Cannot find add_set index 0 as target [ 163.005107][ T6584] bridge_slave_1: entered allmulticast mode [ 163.185223][ T6584] bridge_slave_1: entered promiscuous mode [ 163.358959][ T6613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.369005][ T6613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.409020][ T10] usb 5-1: USB disconnect, device number 5 [ 163.625241][ T5824] Bluetooth: hci5: command tx timeout [ 163.678931][ T6611] ntfs3(nullb0): Primary boot signature is not NTFS. [ 163.686153][ T6611] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 163.767139][ T6584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.806155][ T6584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.295553][ T6584] team0: Port device team_slave_0 added [ 164.316074][ T6584] team0: Port device team_slave_1 added [ 165.237030][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.259590][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.285635][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.342260][ T6584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.441932][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.472070][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.538980][ T6633] ntfs3(nullb0): Primary boot signature is not NTFS. [ 165.546015][ T6584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.566458][ T6633] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 165.664631][ T5824] Bluetooth: hci5: command tx timeout [ 166.362245][ T6584] hsr_slave_0: entered promiscuous mode [ 166.397009][ T6584] hsr_slave_1: entered promiscuous mode [ 166.403372][ T6584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.418270][ T6584] Cannot create hsr debugfs directory [ 166.532779][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 166.621951][ T6643] Cannot find add_set index 0 as target [ 167.090694][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.113208][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.156031][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 167.184342][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 167.225517][ T9] usb 5-1: SerialNumber: syz [ 167.448070][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.456680][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.460863][ T9] usb 5-1: 0:2 : does not exist [ 167.474474][ T48] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 167.546839][ T9] usb 5-1: USB disconnect, device number 6 [ 167.644404][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 167.667071][ T48] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.672721][ T6100] udevd[6100]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.697761][ T48] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 167.763839][ T5824] Bluetooth: hci5: command tx timeout [ 167.773774][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.802055][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 167.820893][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.894830][ T6660] overlayfs: upper fs does not support file handles, falling back to index=off. [ 167.904983][ T48] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.919958][ T6655] evm: overlay not supported [ 167.944928][ T6649] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.955427][ T48] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 167.960262][ T6649] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.974343][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.982415][ T48] usb 4-1: Product: syz [ 167.994345][ T48] usb 4-1: Manufacturer: syz [ 167.999006][ T48] usb 4-1: SerialNumber: syz [ 168.027422][ T48] usb 4-1: config 0 descriptor?? [ 168.036570][ T48] xbox_remote_probe: Unexpected endpoint_in [ 168.051660][ T6649] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.094246][ T6649] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.248645][ T6648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.274956][ T6648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.350869][ T6648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.375175][ T6648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.398940][ T6666] usb 4-1: USB disconnect, device number 11 [ 168.583123][ T6584] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 169.824608][ T5824] Bluetooth: hci5: command tx timeout [ 169.835908][ T6584] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 169.910519][ T6584] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 169.963768][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'. [ 169.989800][ T6689] netlink: 20 bytes leftover after parsing attributes in process `syz.3.205'. [ 170.179346][ T6584] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 170.244680][ T6689] geneve2: entered promiscuous mode [ 170.249971][ T6689] geneve2: entered allmulticast mode [ 170.268961][ T6695] netdevsim netdevsim3: Direct firmware load for / [ 170.268961][ T6695] failed with error -2 [ 170.445387][ T6695] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 170.445387][ T6695] [ 170.536090][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 171.131344][ T6705] netlink: 'syz.3.210': attribute type 12 has an invalid length. [ 171.131996][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 171.150335][ T6705] netlink: 132 bytes leftover after parsing attributes in process `syz.3.210'. [ 171.209415][ T6707] Bluetooth: MGMT ver 1.23 [ 171.227947][ T6707] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 171.329775][ T6707] mmap: syz.2.211 (6707) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 171.377830][ T6584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.489928][ T6584] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.540647][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.547906][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.314996][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.322296][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.438846][ T6714] ntfs3(nullb0): Primary boot signature is not NTFS. [ 172.446071][ T6714] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 172.804431][ T5884] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 172.963756][ T6584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.985513][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 173.022704][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.025943][ T6665] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 173.055062][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 173.093755][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 173.108251][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.125685][ T5884] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 173.137514][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.146730][ T5884] usb 3-1: Product: syz [ 173.151093][ T5884] usb 3-1: Manufacturer: syz [ 173.156148][ T5884] usb 3-1: SerialNumber: syz [ 173.176756][ T5884] usb 3-1: config 0 descriptor?? [ 173.188062][ T5884] xbox_remote_probe: Unexpected endpoint_in [ 173.196513][ T6729] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 173.218012][ T6665] usb 1-1: unable to get BOS descriptor or descriptor too short [ 173.235478][ T6665] usb 1-1: config 15 has an invalid interface number: 240 but max is 0 [ 173.244227][ T6665] usb 1-1: config 15 has no interface number 0 [ 173.257288][ T6665] usb 1-1: config 15 interface 240 altsetting 1 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 173.277282][ T6665] usb 1-1: config 15 interface 240 has no altsetting 0 [ 173.295645][ T6665] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=3e.58 [ 173.310476][ T6665] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.328439][ T6665] usb 1-1: Product: syz [ 173.337362][ T6665] usb 1-1: Manufacturer: syz [ 173.348440][ T6665] usb 1-1: SerialNumber: syz [ 173.395787][ T6719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.414466][ T6719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.461815][ T6719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.482122][ T6719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.514160][ T5884] usb 3-1: USB disconnect, device number 9 [ 173.599272][ T6665] usb 1-1: no audio or video endpoints found [ 173.619167][ T6665] usb 1-1: USB disconnect, device number 3 [ 173.714421][ T6584] veth0_vlan: entered promiscuous mode [ 173.731175][ T6584] veth1_vlan: entered promiscuous mode [ 173.768482][ T6584] veth0_macvtap: entered promiscuous mode [ 173.779659][ T6584] veth1_macvtap: entered promiscuous mode [ 173.805123][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.828789][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.842688][ T6584] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.852899][ T6584] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.862149][ T6584] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.871242][ T6584] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.956318][ T5994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.973719][ T5994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.007489][ T6057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.016216][ T6057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.104977][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 174.694395][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 174.719667][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 174.756468][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 174.807783][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 174.827735][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 174.837442][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.222'. [ 174.853317][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.897571][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 174.925852][ T24] usb 5-1: SerialNumber: syz [ 174.947702][ T6735] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.106869][ T44] block nbd1: Possible stuck request ffff8880249e5080: control (read@0,4096B). Runtime 30 seconds [ 175.280261][ T24] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 175.316679][ T77] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.325037][ T24] usb 5-1: USB disconnect, device number 8 [ 175.483055][ T77] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.628920][ T77] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.731681][ T77] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.035929][ T77] bridge_slave_1: left allmulticast mode [ 177.060895][ T77] bridge_slave_1: left promiscuous mode [ 177.132931][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.189971][ T77] bridge_slave_0: left allmulticast mode [ 177.199417][ T77] bridge_slave_0: left promiscuous mode [ 177.274466][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.617451][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.638934][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.647651][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.656225][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.684476][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 179.298275][ T6779] block device autoloading is deprecated and will be removed. [ 179.815300][ T5829] Bluetooth: hci3: command tx timeout [ 180.544619][ T5829] Bluetooth: hci1: command tx timeout [ 181.418298][ T6666] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 181.529532][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.593033][ T6666] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.612127][ T6666] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.622816][ T6666] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 181.634022][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.650458][ T6666] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.665181][ T77] bond0 (unregistering): Released all slaves [ 181.680973][ T6666] usb 1-1: config 0 descriptor?? [ 181.884657][ T5884] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 181.904535][ T5829] Bluetooth: hci3: command tx timeout [ 182.084467][ T5884] usb 6-1: device descriptor read/64, error -71 [ 182.213498][ T6812] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 182.257888][ T6812] bond0: (slave lo): Error: Device type is different from other slaves [ 182.403178][ T6666] usbhid 1-1:0.0: can't add hid device: -71 [ 182.428597][ T6666] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 182.463983][ T6666] usb 1-1: USB disconnect, device number 5 [ 182.514627][ T5884] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 182.665239][ T5884] usb 6-1: device descriptor read/64, error -71 [ 182.774628][ T5884] usb usb6-port1: attempt power cycle [ 182.801736][ T77] hsr_slave_0: left promiscuous mode [ 182.833841][ T77] hsr_slave_1: left promiscuous mode [ 182.845160][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.863295][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.879673][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.908744][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.034191][ T77] veth1_macvtap: left promiscuous mode [ 183.056177][ T77] veth0_macvtap: left promiscuous mode [ 183.076090][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 183.085157][ T77] veth1_vlan: left promiscuous mode [ 183.100961][ T77] veth0_vlan: left promiscuous mode [ 183.214501][ T5884] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 183.248681][ T5884] usb 6-1: device descriptor read/8, error -71 [ 183.267171][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.308409][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.323548][ T13] Bluetooth: hci6: Frame reassembly failed (-84) [ 183.336001][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 183.355106][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 183.363274][ T9] usb 3-1: SerialNumber: syz [ 183.364819][ T6856] Bluetooth: hci6: Frame reassembly failed (-84) [ 183.524846][ T5884] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 183.570717][ T5884] usb 6-1: device descriptor read/8, error -71 [ 183.617168][ T9] usb 3-1: 0:2 : does not exist [ 183.692668][ T5884] usb usb6-port1: unable to enumerate USB device [ 183.703653][ T9] usb 3-1: USB disconnect, device number 10 [ 184.027949][ T5824] Bluetooth: hci3: command tx timeout [ 184.622586][ T6100] udevd[6100]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.354848][ T5829] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 186.046880][ T77] team0 (unregistering): Port device team_slave_1 removed [ 186.067071][ T5829] Bluetooth: hci3: command tx timeout [ 187.165617][ T77] team0 (unregistering): Port device team_slave_0 removed [ 188.241792][ T5829] Bluetooth: hci5: command tx timeout [ 189.874723][ T6905] fuse: Bad value for 'fd' [ 190.644443][ T6781] chnl_net:caif_netlink_parms(): no params data found [ 190.989374][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.261'. [ 191.294497][ T6781] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.301713][ T6781] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.350364][ T6781] bridge_slave_0: entered allmulticast mode [ 191.377360][ T6781] bridge_slave_0: entered promiscuous mode [ 191.426561][ T6781] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.448022][ T6781] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.471036][ T6781] bridge_slave_1: entered allmulticast mode [ 191.497169][ T6781] bridge_slave_1: entered promiscuous mode [ 192.222357][ T6781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.328560][ T6781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.566554][ T6781] team0: Port device team_slave_0 added [ 192.599779][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'. [ 192.694130][ T6781] team0: Port device team_slave_1 added [ 194.554981][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.561342][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.951419][ T6781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.004393][ T6666] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 195.016467][ T6781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.042385][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.134380][ T6781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.305324][ T6980] fuse: Bad value for 'fd' [ 195.434441][ T6652] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 195.456048][ T6666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.474806][ T6666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.490826][ T6666] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 195.787210][ T6666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.814697][ T6652] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.815037][ T6652] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 195.816171][ T6652] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 195.816558][ T6652] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.275567][ T6666] usb 6-1: config 0 descriptor?? [ 196.276965][ T6976] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 196.286858][ T6652] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.502133][ T6781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.529805][ T6976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.549858][ T6781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.576052][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.592942][ T6976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.861498][ T6781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.970905][ T6973] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 196.994447][ T6973] bond0: (slave lo): Error: Device can not be enslaved while up [ 197.814191][ T6666] usbhid 6-1:0.0: can't add hid device: -71 [ 197.840842][ T6666] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 197.860391][ T6666] usb 6-1: USB disconnect, device number 6 [ 198.092614][ T6781] hsr_slave_0: entered promiscuous mode [ 198.135320][ T6781] hsr_slave_1: entered promiscuous mode [ 198.165576][ T6781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.178999][ T6995] nfs: Unexpected value for 'acl' [ 198.196076][ T6781] Cannot create hsr debugfs directory [ 198.426299][ T6666] usb 1-1: USB disconnect, device number 6 [ 198.974152][ T7014] sctp: [Deprecated]: syz.4.281 (pid 7014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.974152][ T7014] Use struct sctp_sack_info instead [ 201.242200][ T6781] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 201.353647][ T5829] Bluetooth: hci5: command tx timeout [ 201.355012][ T7037] netlink: 132 bytes leftover after parsing attributes in process `syz.5.288'. [ 201.420892][ T6781] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 202.070565][ T6781] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 202.129289][ T6781] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 202.315316][ T5867] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 202.512398][ T7055] fuse: Bad value for 'fd' [ 202.529816][ T5867] usb 6-1: unable to get BOS descriptor or descriptor too short [ 203.014969][ T5867] usb 6-1: config 15 has an invalid interface number: 240 but max is 0 [ 203.025211][ T6781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.059165][ T5867] usb 6-1: config 15 has no interface number 0 [ 203.081093][ T6781] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.090331][ T5867] usb 6-1: config 15 interface 240 altsetting 1 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 203.159498][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.164367][ T5867] usb 6-1: config 15 interface 240 has no altsetting 0 [ 203.166786][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.207617][ T5867] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=3e.58 [ 203.224686][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.268935][ T5867] usb 6-1: Product: syz [ 203.273165][ T5867] usb 6-1: Manufacturer: syz [ 203.304664][ T5867] usb 6-1: SerialNumber: syz [ 203.362423][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.369663][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.562076][ T5867] usb 6-1: no audio or video endpoints found [ 203.619975][ T5867] usb 6-1: USB disconnect, device number 7 [ 203.810739][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 204.341263][ T6781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.276302][ T44] block nbd1: Possible stuck request ffff8880249e5080: control (read@0,4096B). Runtime 60 seconds [ 207.156756][ T7113] geneve2: entered allmulticast mode [ 207.508415][ T6781] veth0_vlan: entered promiscuous mode [ 207.553974][ T6781] veth1_vlan: entered promiscuous mode [ 207.647196][ T6781] veth0_macvtap: entered promiscuous mode [ 207.693689][ T6781] veth1_macvtap: entered promiscuous mode [ 207.742858][ T6781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.772298][ T6781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.836930][ T6781] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.904388][ T6781] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.932301][ T6781] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.953297][ T6781] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.150271][ T7148] nfs: Unexpected value for 'acl' [ 208.457605][ T5902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.548137][ T5902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.758691][ T5902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.779079][ T5902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.884468][ T6664] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 209.054839][ T6664] usb 3-1: Using ep0 maxpacket: 32 [ 209.091525][ T6664] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.148541][ T6664] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.216907][ T6664] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 209.273579][ T6664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.335296][ T6664] usb 3-1: config 0 descriptor?? [ 209.862502][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 209.871753][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 209.879538][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 209.892667][ T6664] usbhid 3-1:0.0: can't add hid device: -32 [ 209.899528][ T6664] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 210.631320][ T6664] usb 3-1: USB disconnect, device number 11 [ 211.344373][ T6664] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 211.924904][ T5128] Bluetooth: hci1: command 0x0406 tx timeout [ 211.931375][ T5128] Bluetooth: hci2: command 0x0406 tx timeout [ 211.938762][ T5128] Bluetooth: hci4: command 0x0405 tx timeout [ 212.427184][ T6664] usb 5-1: config index 0 descriptor too short (expected 47, got 43) [ 212.449790][ T6664] usb 5-1: config 0 has an invalid interface number: 57 but max is 0 [ 212.478771][ T6664] usb 5-1: config 0 has an invalid descriptor of length 56, skipping remainder of the config [ 212.504315][ T6664] usb 5-1: config 0 has no interface number 0 [ 212.534371][ T6664] usb 5-1: config 0 interface 57 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 212.600101][ T6664] usb 5-1: config 0 interface 57 altsetting 0 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 212.645462][ T6664] usb 5-1: config 0 interface 57 altsetting 0 endpoint 0x86 has an invalid bInterval 174, changing to 11 [ 212.734368][ T6664] usb 5-1: config 0 interface 57 altsetting 0 endpoint 0x86 has invalid maxpacket 9287, setting to 1024 [ 212.772862][ T6664] usb 5-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63 [ 212.812644][ T6664] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.860426][ T6664] usb 5-1: config 0 descriptor?? [ 212.900683][ T7181] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 212.936252][ T6664] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 212.984585][ T6664] gspca_mr97310a: reg write [21] error -22 [ 213.019596][ T6664] mr97310a 5-1:0.57: probe with driver mr97310a failed with error -22 [ 213.170804][ T6664] usb 5-1: USB disconnect, device number 9 [ 214.546123][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 214.858981][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 215.418145][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 215.954507][ T10] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 215.985811][ T10] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 215.994045][ T10] usb 1-1: Product: syz [ 216.014290][ T10] usb 1-1: Manufacturer: syz [ 216.053107][ T10] usb 1-1: SerialNumber: syz [ 216.105744][ T10] usb 1-1: config 0 descriptor?? [ 216.122612][ T7223] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 216.654400][ T10] usb 1-1: USB disconnect, device number 7 [ 217.477407][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 217.477448][ T30] audit: type=1107 audit(1748043267.632:24): pid=7244 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=')r0 ¾ßú%λ' [ 217.906042][ T5884] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 217.982734][ T7254] random: crng reseeded on system resumption [ 218.188181][ T5884] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 218.204329][ T5884] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 218.224397][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 218.259086][ T5884] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 218.274455][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.289874][ T7243] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 218.300261][ T5884] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 218.464764][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 218.555973][ T7260] ntfs3(nullb0): Primary boot signature is not NTFS. [ 218.581120][ T7260] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 218.598350][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.667316][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.684509][ T10] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 218.695191][ T7243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.848181][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.859813][ T10] usb 3-1: config 0 descriptor?? [ 218.861255][ T7243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.035197][ T7266] ntfs3(nullb0): Primary boot signature is not NTFS. [ 219.058154][ T7266] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 219.707134][ T7249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.745358][ T7249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.059725][ T10] hid_mf 0003:0079:1801.0001: item fetching failed at offset 0/2 [ 220.134013][ T10] hid_mf 0003:0079:1801.0001: HID parse failed. [ 220.187076][ T10] hid_mf 0003:0079:1801.0001: probe with driver hid_mf failed with error -22 [ 220.285375][ T10] usb 3-1: USB disconnect, device number 12 [ 220.422095][ T6666] usb 7-1: USB disconnect, device number 2 [ 223.246473][ T7300] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 227.164358][ T5884] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 227.582610][ T5884] usb 7-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.593147][ T5884] usb 7-1: config 0 interface 0 has no altsetting 0 [ 227.635328][ T5884] usb 7-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 227.671234][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.663635][ T5884] usb 7-1: config 0 descriptor?? [ 228.915229][ T5884] usbhid 7-1:0.0: can't add hid device: -71 [ 228.998980][ T5884] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 229.012922][ T5884] usb 7-1: USB disconnect, device number 3 [ 233.585639][ T7406] nfs: Unexpected value for 'acl' [ 235.831286][ T5884] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 235.926587][ T44] block nbd1: Possible stuck request ffff8880249e5080: control (read@0,4096B). Runtime 90 seconds [ 236.054472][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 236.135585][ T5884] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 236.243637][ T5884] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 236.274284][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 236.304317][ T5884] usb 1-1: Product: syz [ 236.352508][ T5884] usb 1-1: Manufacturer: syz [ 236.404307][ T5884] usb 1-1: SerialNumber: syz [ 236.462570][ T5884] usb 1-1: config 0 descriptor?? [ 236.529016][ T7447] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 237.665436][ T5884] usb 1-1: USB disconnect, device number 8 [ 238.659230][ T5884] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 239.024463][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 239.379553][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.6.392'. [ 240.089875][ T6666] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 240.424497][ T6666] usb 6-1: Using ep0 maxpacket: 16 [ 240.447926][ T6666] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 240.460460][ T6666] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 240.520479][ T6666] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 240.691802][ T6666] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.714886][ T6666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 240.759265][ T6666] usb 6-1: SerialNumber: syz [ 240.992158][ T7532] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 241.826010][ T6666] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 242.095834][ T6666] usb 6-1: USB disconnect, device number 8 [ 242.545200][ T7582] xt_hashlimit: size too large, truncated to 1048576 [ 243.375321][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 243.954414][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 244.146712][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 244.176775][ T10] usb 6-1: config 15 has an invalid interface number: 240 but max is 0 [ 244.203565][ T10] usb 6-1: config 15 has no interface number 0 [ 244.223621][ T10] usb 6-1: config 15 interface 240 altsetting 1 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 244.247311][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 244.269239][ T10] usb 6-1: config 15 interface 240 has no altsetting 0 [ 244.293802][ T10] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=3e.58 [ 244.335875][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.369358][ T10] usb 6-1: Product: syz [ 244.373590][ T10] usb 6-1: Manufacturer: syz [ 244.399075][ T10] usb 6-1: SerialNumber: syz [ 244.480042][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 244.524174][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.544330][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 244.553373][ T9] usb 3-1: config 1 has no interface number 1 [ 244.593187][ T9] usb 3-1: config 1 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.744853][ T9] usb 3-1: config 1 interface 2 has no altsetting 1 [ 244.906706][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.927679][ T10] usb 6-1: no audio or video endpoints found [ 245.086447][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 245.089649][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.193328][ T10] usb 6-1: USB disconnect, device number 9 [ 245.259443][ T9] usb 3-1: Product: syz [ 245.263697][ T9] usb 3-1: Manufacturer: syz [ 245.273063][ T9] usb 3-1: SerialNumber: syz [ 245.344784][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 245.367636][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 245.413630][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 245.424386][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 245.448672][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.461464][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 245.473276][ T24] usb 7-1: SerialNumber: syz [ 245.536060][ T7619] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 245.569529][ T9] usb 3-1: 2:2 : no or invalid class specific endpoint descriptor [ 245.639541][ T9] usb 3-1: USB disconnect, device number 13 [ 245.739207][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.873296][ T24] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 245.890799][ T24] usb 7-1: USB disconnect, device number 4 [ 247.566011][ T7646] netlink: 1 bytes leftover after parsing attributes in process `syz.5.414'. [ 248.822357][ T7647] ntfs3(nullb0): Primary boot signature is not NTFS. [ 248.829528][ T7647] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 249.184981][ T6652] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 249.325536][ T7669] syz_tun: entered allmulticast mode [ 249.376409][ T6652] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 249.400942][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 249.578821][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 249.609642][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.644604][ T9] usb 6-1: Product: syz [ 249.657639][ T9] usb 6-1: Manufacturer: syz [ 249.672670][ T9] usb 6-1: SerialNumber: syz [ 249.706648][ T9] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 249.788935][ T5867] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 249.944122][ T6652] usb 1-1: config 0 interface 0 has no altsetting 0 [ 250.004292][ T6652] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 250.026368][ T6652] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 250.054416][ T6652] usb 1-1: Product: syz [ 250.059009][ T6652] usb 1-1: Manufacturer: syz [ 250.063641][ T6652] usb 1-1: SerialNumber: syz [ 250.071715][ T7665] random: crng reseeded on system resumption [ 250.090222][ T6652] usb 1-1: config 0 descriptor?? [ 250.112852][ T6652] usb 1-1: selecting invalid altsetting 0 [ 250.206627][ T7668] syz_tun: left allmulticast mode [ 250.235828][ T6665] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 250.428479][ T6652] usb 1-1: USB disconnect, device number 10 [ 250.456325][ T6665] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.500729][ T6665] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.517020][ T6665] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 250.558054][ T6665] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 250.588014][ T6665] usb 3-1: SerialNumber: syz [ 250.869161][ T7688] ntfs3(nullb0): Primary boot signature is not NTFS. [ 250.881867][ T7688] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 250.959421][ T6665] usb 3-1: 0:2 : does not exist [ 251.017948][ T6665] usb 3-1: unit 5 not found! [ 251.041169][ T5867] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 251.282716][ T5867] ath9k_htc: Failed to initialize the device [ 251.426759][ T5867] usb 6-1: ath9k_htc: USB layer deinitialized [ 251.470559][ T6665] usb 3-1: USB disconnect, device number 14 [ 251.604890][ T10] usb 6-1: USB disconnect, device number 10 [ 251.652906][ T6100] udevd[6100]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.834452][ T6665] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 253.844550][ T6652] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 254.012182][ T6665] usb 3-1: config 2 has an invalid interface number: 174 but max is 0 [ 254.031531][ T6652] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 254.048854][ T6665] usb 3-1: config 2 has no interface number 0 [ 254.063133][ T6652] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.077857][ T6665] usb 3-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 254.093916][ T6652] usb 1-1: Product: syz [ 254.098915][ T6652] usb 1-1: Manufacturer: syz [ 254.107861][ T6665] usb 3-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid maxpacket 1023, setting to 64 [ 254.121501][ T6652] usb 1-1: SerialNumber: syz [ 254.145612][ T6652] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 254.156235][ T6665] usb 3-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 254.190547][ T6664] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 254.210527][ T6665] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 254.256440][ T6665] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.277503][ T6665] usb 3-1: Product: syz [ 254.289516][ T6665] usb 3-1: Manufacturer: syz [ 254.314401][ T6665] usb 3-1: SerialNumber: syz [ 254.341515][ T7713] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 254.408872][ T7718] random: crng reseeded on system resumption [ 254.733281][ T6652] usb 1-1: USB disconnect, device number 11 [ 254.958392][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 255.126553][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 255.171083][ T5884] IPVS: starting estimator thread 0... [ 255.179623][ T10] usb 6-1: config 15 has an invalid interface number: 240 but max is 0 [ 255.207488][ T10] usb 6-1: config 15 has no interface number 0 [ 255.231260][ T10] usb 6-1: config 15 interface 240 altsetting 1 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 255.267628][ T6664] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 255.294491][ T7753] IPVS: using max 26 ests per chain, 62400 per kthread [ 255.308423][ T6664] ath9k_htc: Failed to initialize the device [ 255.312619][ T10] usb 6-1: config 15 interface 240 has no altsetting 0 [ 255.328437][ T6652] usb 1-1: ath9k_htc: USB layer deinitialized [ 255.350242][ T10] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=3e.58 [ 255.411662][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.447508][ T10] usb 6-1: Product: syz [ 255.468203][ T10] usb 6-1: Manufacturer: syz [ 255.501988][ T10] usb 6-1: SerialNumber: syz [ 255.519152][ T6665] usb 3-1: probing VID:PID(0424:012C) [ 255.567254][ T6665] usb 3-1: vub300 testing BULK IN EndPoint(0) 8E [ 255.605189][ T6665] usb 3-1: vub300 testing BULK IN EndPoint(1) 82 [ 255.611602][ T6665] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 255.675962][ T6665] vub300 3-1:2.174: probe with driver vub300 failed with error -22 [ 255.748997][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.760752][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.772033][ T6665] usb 3-1: USB disconnect, device number 15 [ 256.610925][ T10] usb 6-1: no audio or video endpoints found [ 256.633457][ T10] usb 6-1: USB disconnect, device number 11 [ 256.855179][ T6652] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 258.210267][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 259.187185][ T6664] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 259.365882][ T6664] usb 5-1: Using ep0 maxpacket: 16 [ 259.426741][ T7809] program syz.2.450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.497857][ T6664] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.804455][ T6664] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 259.846799][ T6664] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 259.904629][ T6664] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.946864][ T6664] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 259.964378][ T6664] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.041370][ T7816] nfs: Unexpected value for 'acl' [ 260.218750][ T6664] usb 5-1: Product: syz [ 260.223006][ T6664] usb 5-1: Manufacturer: syz [ 260.234301][ T6664] usb 5-1: SerialNumber: syz [ 260.250157][ T6664] usb 5-1: config 0 descriptor?? [ 260.297622][ T6664] xbox_remote_probe: Unexpected endpoint_in [ 260.544757][ T5884] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 261.107092][ T7794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.166986][ T7794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.309994][ T5884] usb 7-1: unable to get BOS descriptor or descriptor too short [ 261.329536][ T5884] usb 7-1: config 15 has an invalid interface number: 240 but max is 0 [ 261.339747][ T5884] usb 7-1: config 15 has no interface number 0 [ 261.349147][ T7794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.354332][ T5884] usb 7-1: config 15 interface 240 altsetting 1 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 261.414351][ T5884] usb 7-1: config 15 interface 240 has no altsetting 0 [ 261.434950][ T7794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.462023][ T5884] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=3e.58 [ 261.484580][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.490159][ T6666] usb 5-1: USB disconnect, device number 10 [ 261.521236][ T5884] usb 7-1: Product: syz [ 261.534360][ T5884] usb 7-1: Manufacturer: syz [ 261.544564][ T5884] usb 7-1: SerialNumber: syz [ 261.771497][ T5884] usb 7-1: no audio or video endpoints found [ 261.795029][ T5884] usb 7-1: USB disconnect, device number 6 [ 262.400849][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 262.608913][ T7854] FAULT_INJECTION: forcing a failure. [ 262.608913][ T7854] name failslab, interval 1, probability 0, space 0, times 0 [ 262.622020][ T7854] CPU: 0 UID: 0 PID: 7854 Comm: syz.6.458 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 262.622046][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.622058][ T7854] Call Trace: [ 262.622066][ T7854] [ 262.622074][ T7854] dump_stack_lvl+0x189/0x250 [ 262.622112][ T7854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.622140][ T7854] ? __pfx__printk+0x10/0x10 [ 262.622177][ T7854] ? __pfx___might_resched+0x10/0x10 [ 262.622207][ T7854] ? fs_reclaim_acquire+0x7d/0x100 [ 262.622234][ T7854] should_fail_ex+0x414/0x560 [ 262.622261][ T7854] should_failslab+0xa8/0x100 [ 262.622282][ T7854] __kmalloc_noprof+0xcb/0x4f0 [ 262.622309][ T7854] ? kfree+0x4d/0x440 [ 262.622334][ T7854] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 262.622368][ T7854] tomoyo_realpath_from_path+0xe3/0x5d0 [ 262.622397][ T7854] ? tomoyo_domain+0xda/0x130 [ 262.622429][ T7854] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 262.622452][ T7854] tomoyo_path_number_perm+0x1e8/0x5a0 [ 262.622477][ T7854] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 262.622519][ T7854] ? __lock_acquire+0xaac/0xd20 [ 262.622568][ T7854] ? __fget_files+0x2a/0x420 [ 262.622592][ T7854] ? __fget_files+0x3a0/0x420 [ 262.622608][ T7854] ? __fget_files+0x2a/0x420 [ 262.622631][ T7854] security_file_ioctl+0xcb/0x2d0 [ 262.622658][ T7854] __se_sys_ioctl+0x47/0x170 [ 262.622687][ T7854] do_syscall_64+0xf6/0x210 [ 262.622715][ T7854] ? clear_bhb_loop+0x60/0xb0 [ 262.622740][ T7854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.622759][ T7854] RIP: 0033:0x7f44aa38e969 [ 262.622777][ T7854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.622793][ T7854] RSP: 002b:00007f44ab2ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.622814][ T7854] RAX: ffffffffffffffda RBX: 00007f44aa5b5fa0 RCX: 00007f44aa38e969 [ 262.622829][ T7854] RDX: 0000200000000080 RSI: 00000000c0045005 RDI: 0000000000000007 [ 262.622841][ T7854] RBP: 00007f44ab2ae090 R08: 0000000000000000 R09: 0000000000000000 [ 262.622853][ T7854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.622864][ T7854] R13: 0000000000000000 R14: 00007f44aa5b5fa0 R15: 00007ffc36d9f6a8 [ 262.622896][ T7854] [ 262.622905][ T7854] ERROR: Out of memory at tomoyo_realpath_from_path. [ 266.762787][ T44] block nbd1: Possible stuck request ffff8880249e5080: control (read@0,4096B). Runtime 120 seconds [ 266.998328][ T7904] nfs: Unexpected value for 'acl' [ 267.065325][ T7907] netlink: 388 bytes leftover after parsing attributes in process `syz.0.468'. [ 267.129836][ T7902] overlayfs: failed to resolve './file2': -2 [ 267.713630][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 267.973532][ T10] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 268.004474][ T10] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 268.012711][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.071644][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 268.118360][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 268.132611][ T10] usb 5-1: config 0 has no interface number 0 [ 268.142010][ T10] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 268.170510][ T10] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 268.214283][ T10] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 268.250072][ T10] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.805715][ T7933] syz.0.471: attempt to access beyond end of device [ 268.805715][ T7933] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 269.120439][ T7933] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 269.241039][ T10] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 269.250238][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.266170][ T10] usb 5-1: config 0 descriptor?? [ 269.273806][ T7923] IPVS: Error connecting to the multicast addr [ 269.287085][ T10] gspca_main: spca561-2.14.0 probing abcd:cdee [ 269.341470][ T7928] x_tables: duplicate underflow at hook 3 [ 269.537685][ T10] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 269.555687][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 269.562737][ T10] usb 5-1: MIDIStreaming interface descriptor not found [ 270.705037][ T10] usb 5-1: USB disconnect, device number 11 [ 272.454363][ T5867] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 272.698355][ T5867] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 272.710135][ T5867] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.750784][ T5867] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 272.809747][ T5867] usb 1-1: config 1 has no interface number 1 [ 272.821283][ T5867] usb 1-1: config 1 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 272.854987][ T5867] usb 1-1: config 1 interface 2 has no altsetting 1 [ 272.879884][ T5867] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.892006][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.894469][ T6652] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 272.910887][ T7988] overlayfs: failed to resolve './file1': -2 [ 272.924394][ T5867] usb 1-1: Product: syz [ 272.928700][ T5867] usb 1-1: Manufacturer: syz [ 272.963784][ T5867] usb 1-1: SerialNumber: syz [ 273.086549][ T6652] usb 5-1: Using ep0 maxpacket: 16 [ 273.114675][ T6652] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 273.185297][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 273.204624][ T6652] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 273.217581][ T6652] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 273.243239][ T6652] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.261400][ T6652] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 273.338724][ T5867] usb 1-1: 2:2 : no or invalid class specific endpoint descriptor [ 273.359914][ T6652] usb 5-1: SerialNumber: syz [ 273.398280][ T7974] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 273.506366][ T5867] usb 1-1: USB disconnect, device number 12 [ 274.021520][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 274.047872][ T6652] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 274.085899][ T6652] usb 5-1: USB disconnect, device number 12 [ 274.212342][ T6773] udevd[6773]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.087532][ T8019] kvm: MONITOR instruction emulated as NOP! [ 276.509407][ T8039] No control pipe specified [ 276.542945][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.6.491'. [ 277.113950][ T8048] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4278124544 (8556249088 ns) > initial count (184 ns). Using initial count to start timer. [ 279.534035][ T8071] af_packet: tpacket_rcv: packet too big, clamped from 126 to 4294967286. macoff=82 [ 280.844325][ T5884] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 280.870151][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.6.504'. [ 281.094378][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 281.126016][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 281.445015][ T5884] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 281.484360][ T5884] usb 5-1: can't read configurations, error -61 [ 281.624350][ T5884] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 281.637165][ T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 281.660838][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.704986][ T9] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 281.724580][ T9] usb 6-1: config 1 has no interface number 1 [ 281.730776][ T9] usb 6-1: config 1 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 281.774405][ T9] usb 6-1: config 1 interface 2 has no altsetting 1 [ 281.790521][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 281.807559][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.815826][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 281.832439][ T9] usb 6-1: Product: syz [ 281.837926][ T5884] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 281.847644][ T5884] usb 5-1: can't read configurations, error -61 [ 281.857777][ T9] usb 6-1: Manufacturer: syz [ 281.868332][ T5884] usb usb5-port1: attempt power cycle [ 281.874002][ T9] usb 6-1: SerialNumber: syz [ 282.039725][ T5867] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 282.102726][ T9] usb 6-1: 2:2 : no or invalid class specific endpoint descriptor [ 282.220474][ T9] usb 6-1: USB disconnect, device number 12 [ 282.226770][ T5884] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 282.241895][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 282.256227][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.287412][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 282.307542][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.350705][ T8005] udevd[8005]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.373338][ T5884] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 282.404292][ T5884] usb 5-1: can't read configurations, error -61 [ 282.424884][ T5867] usb 3-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice=fb.00 [ 282.435372][ T5867] usb 3-1: New USB device strings: Mfr=82, Product=0, SerialNumber=0 [ 282.440405][ T8110] netlink: 'syz.0.513': attribute type 3 has an invalid length. [ 282.443476][ T5867] usb 3-1: Manufacturer: syz [ 282.469221][ T5867] usb 3-1: config 0 descriptor?? [ 282.500451][ T5867] usbhid 3-1:0.0: can't add hid device: -22 [ 282.508247][ T5867] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 282.534617][ T5884] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 282.591802][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 282.611181][ T5884] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 282.634355][ T5884] usb 5-1: can't read configurations, error -61 [ 282.645877][ T5884] usb usb5-port1: unable to enumerate USB device [ 282.708248][ T8102] tmpfs: Bad value for 'mpol' [ 282.729753][ T8119] netlink: 'syz.5.517': attribute type 10 has an invalid length. [ 282.740072][ T8119] netlink: 55 bytes leftover after parsing attributes in process `syz.5.517'. [ 282.814733][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 283.228593][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 283.300793][ T9] usb 7-1: config 15 has an invalid interface number: 240 but max is 0 [ 283.309378][ T9] usb 7-1: config 15 has no interface number 0 [ 283.317420][ T9] usb 7-1: config 15 interface 240 altsetting 1 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 283.345581][ T9] usb 7-1: config 15 interface 240 has no altsetting 0 [ 284.342853][ T9] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=3e.58 [ 284.369644][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.408193][ T9] usb 7-1: Product: syz [ 284.448509][ T9] usb 7-1: Manufacturer: syz [ 284.479544][ T9] usb 7-1: SerialNumber: syz [ 284.749618][ T9] usb 7-1: no audio or video endpoints found [ 284.989956][ T6666] usb 3-1: USB disconnect, device number 16 [ 285.000236][ T9] usb 7-1: USB disconnect, device number 7 [ 286.048199][ T8163] netlink: 'syz.2.527': attribute type 3 has an invalid length. [ 286.330994][ T6665] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 287.217366][ T6665] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 287.233761][ T6665] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.422446][ T6665] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 287.432389][ T6665] usb 5-1: config 1 has no interface number 1 [ 288.144827][ T5824] Bluetooth: hci3: command tx timeout [ 288.166603][ T6665] usb 5-1: config 1 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.322736][ T6665] usb 5-1: config 1 interface 2 has no altsetting 1 [ 288.332920][ T6665] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 288.403904][ T6665] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.412445][ T6665] usb 5-1: Product: syz [ 288.417758][ T6665] usb 5-1: Manufacturer: syz [ 288.481276][ T6665] usb 5-1: SerialNumber: syz [ 288.549022][ T5824] Bluetooth: hci5: command 0x0406 tx timeout [ 288.840198][ T8196] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 289.322905][ T30] audit: type=1326 audit(1748043339.602:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8195 comm="syz.6.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44aa38e969 code=0x7ffc0000 [ 289.379888][ T8194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.537'. [ 289.478608][ T30] audit: type=1326 audit(1748043339.602:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8195 comm="syz.6.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f44aa38e969 code=0x7ffc0000 [ 289.494884][ T8194] nbd: must specify at least one socket [ 289.505500][ T30] audit: type=1326 audit(1748043339.602:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8195 comm="syz.6.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44aa38e969 code=0x7ffc0000 [ 289.505550][ T30] audit: type=1326 audit(1748043339.602:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8195 comm="syz.6.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f44aa38e969 code=0x7ffc0000 [ 289.505929][ T6665] usb 5-1: 2:2 : no or invalid class specific endpoint descriptor [ 289.557343][ T30] audit: type=1326 audit(1748043339.602:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8195 comm="syz.6.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44aa38e969 code=0x7ffc0000 [ 289.597572][ T8206] FAULT_INJECTION: forcing a failure. [ 289.597572][ T8206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.613529][ T8206] CPU: 0 UID: 0 PID: 8206 Comm: syz.4.540 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 289.613557][ T8206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.613574][ T8206] Call Trace: [ 289.613582][ T8206] [ 289.613590][ T8206] dump_stack_lvl+0x189/0x250 [ 289.613626][ T8206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.613677][ T8206] ? __pfx__printk+0x10/0x10 [ 289.613723][ T8206] should_fail_ex+0x414/0x560 [ 289.613750][ T8206] _copy_to_user+0x31/0xb0 [ 289.613781][ T8206] simple_read_from_buffer+0xe1/0x170 [ 289.613817][ T8206] proc_fail_nth_read+0x1df/0x250 [ 289.613842][ T8206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.613867][ T8206] ? rw_verify_area+0x258/0x650 [ 289.613893][ T8206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.613916][ T8206] vfs_read+0x200/0x980 [ 289.613949][ T8206] ? __pfx___mutex_lock+0x10/0x10 [ 289.613976][ T8206] ? __pfx_vfs_read+0x10/0x10 [ 289.614005][ T8206] ? __fget_files+0x2a/0x420 [ 289.614029][ T8206] ? __fget_files+0x3a0/0x420 [ 289.614046][ T8206] ? __fget_files+0x2a/0x420 [ 289.614081][ T8206] ksys_read+0x145/0x250 [ 289.614107][ T8206] ? rcu_is_watching+0x15/0xb0 [ 289.614139][ T8206] ? __pfx_ksys_read+0x10/0x10 [ 289.614170][ T8206] ? do_syscall_64+0xba/0x210 [ 289.614201][ T8206] do_syscall_64+0xf6/0x210 [ 289.614225][ T8206] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 289.614245][ T8206] ? clear_bhb_loop+0x60/0xb0 [ 289.614270][ T8206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.614289][ T8206] RIP: 0033:0x7fdc7638d37c [ 289.614308][ T8206] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 289.614325][ T8206] RSP: 002b:00007fdc7713c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 289.614347][ T8206] RAX: ffffffffffffffda RBX: 00007fdc765b5fa0 RCX: 00007fdc7638d37c [ 289.614362][ T8206] RDX: 000000000000000f RSI: 00007fdc7713c0a0 RDI: 0000000000000006 [ 289.614374][ T8206] RBP: 00007fdc7713c090 R08: 0000000000000000 R09: 0000000000000000 [ 289.614387][ T8206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.614399][ T8206] R13: 0000000000000000 R14: 00007fdc765b5fa0 R15: 00007ffc70e35e98 [ 289.614431][ T8206] [ 289.620883][ T30] audit: type=1326 audit(1748043339.602:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8195 comm="syz.6.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44aa38e969 code=0x7ffc0000 [ 289.894427][ T6665] usb 5-1: USB disconnect, device number 17 [ 289.956709][ T8005] udevd[8005]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.982404][ T8210] syz_tun: entered allmulticast mode [ 289.998674][ T30] audit: type=1326 audit(1748043339.602:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8195 comm="syz.6.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44aa38e969 code=0x7ffc0000 [ 290.154300][ T30] audit: type=1326 audit(1748043339.602:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8195 comm="syz.6.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f44aa38e969 code=0x7ffc0000 [ 290.253887][ T30] audit: type=1326 audit(1748043339.602:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8195 comm="syz.6.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44aa38e969 code=0x7ffc0000 [ 290.370310][ T30] audit: type=1326 audit(1748043339.602:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8195 comm="syz.6.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f44aa38e969 code=0x7ffc0000 [ 291.619430][ T8209] syz_tun: left allmulticast mode [ 292.748924][ T8242] FAULT_INJECTION: forcing a failure. [ 292.748924][ T8242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.844826][ T6665] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 293.178082][ T8242] CPU: 1 UID: 0 PID: 8242 Comm: syz.6.551 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 293.178112][ T8242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.178124][ T8242] Call Trace: [ 293.178132][ T8242] [ 293.178141][ T8242] dump_stack_lvl+0x189/0x250 [ 293.178171][ T8242] ? __lock_acquire+0xaac/0xd20 [ 293.178200][ T8242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.178227][ T8242] ? __pfx__printk+0x10/0x10 [ 293.178258][ T8242] ? __might_fault+0xb0/0x130 [ 293.178303][ T8242] should_fail_ex+0x414/0x560 [ 293.178329][ T8242] _copy_to_iter+0x1db/0x15a0 [ 293.178367][ T8242] ? __pfx__copy_to_iter+0x10/0x10 [ 293.178392][ T8242] ? __lock_acquire+0xaac/0xd20 [ 293.178431][ T8242] __skb_datagram_iter+0x3c4/0x960 [ 293.178461][ T8242] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.178485][ T8242] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 293.178524][ T8242] skb_copy_datagram_iter+0xc5/0x230 [ 293.178559][ T8242] mptcp_recvmsg+0x573/0x2560 [ 293.178631][ T8242] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 293.178663][ T8242] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 293.178692][ T8242] ? __lock_acquire+0xaac/0xd20 [ 293.178725][ T8242] ? __lock_acquire+0xaac/0xd20 [ 293.178754][ T8242] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 293.178778][ T8242] inet6_recvmsg+0x237/0x6b0 [ 293.178815][ T8242] ? __pfx_inet6_recvmsg+0x10/0x10 [ 293.178849][ T8242] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 293.178868][ T8242] ? security_socket_recvmsg+0x7e/0x2e0 [ 293.178892][ T8242] sock_recvmsg+0x105/0x270 [ 293.178917][ T8242] ____sys_recvmsg+0x1c9/0x460 [ 293.178955][ T8242] ? __pfx_____sys_recvmsg+0x10/0x10 [ 293.179001][ T8242] ? import_iovec+0x74/0xa0 [ 293.179032][ T8242] ___sys_recvmsg+0x1b5/0x510 [ 293.179066][ T8242] ? __pfx____sys_recvmsg+0x10/0x10 [ 293.179122][ T8242] ? __fget_files+0x3a0/0x420 [ 293.179152][ T8242] do_recvmmsg+0x307/0x760 [ 293.179190][ T8242] ? __pfx_do_recvmmsg+0x10/0x10 [ 293.179231][ T8242] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 293.179276][ T8242] __x64_sys_recvmmsg+0x190/0x240 [ 293.179304][ T8242] ? rcu_is_watching+0x15/0xb0 [ 293.179334][ T8242] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 293.179367][ T8242] ? do_syscall_64+0xba/0x210 [ 293.179396][ T8242] do_syscall_64+0xf6/0x210 [ 293.179422][ T8242] ? clear_bhb_loop+0x60/0xb0 [ 293.179447][ T8242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.179464][ T8242] RIP: 0033:0x7f44aa38e969 [ 293.179483][ T8242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.179499][ T8242] RSP: 002b:00007f44ab2ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 293.179520][ T8242] RAX: ffffffffffffffda RBX: 00007f44aa5b5fa0 RCX: 00007f44aa38e969 [ 293.179534][ T8242] RDX: 0000000000000001 RSI: 0000200000001f00 RDI: 0000000000000003 [ 293.179547][ T8242] RBP: 00007f44ab2ae090 R08: 0000000000000000 R09: 0000000000000000 [ 293.179558][ T8242] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 293.179570][ T8242] R13: 0000000000000000 R14: 00007f44aa5b5fa0 R15: 00007ffc36d9f6a8 [ 293.179616][ T8242] [ 293.901918][ T6665] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 294.164580][ T6665] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.521331][ T6665] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 294.536338][ T6665] usb 3-1: config 1 has no interface number 1 [ 294.545845][ T6665] usb 3-1: config 1 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 294.557355][ T6665] usb 3-1: config 1 interface 2 has no altsetting 1 [ 294.617633][ T6665] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.633023][ T6665] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.645021][ T6665] usb 3-1: Product: syz [ 294.791334][ T6665] usb 3-1: Manufacturer: syz [ 294.797808][ T6665] usb 3-1: SerialNumber: syz [ 296.378741][ T6665] usb 3-1: 2:2 : no or invalid class specific endpoint descriptor [ 296.481951][ T6665] usb 3-1: USB disconnect, device number 17 [ 296.506040][ T8265] FAULT_INJECTION: forcing a failure. [ 296.506040][ T8265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.556993][ T8265] CPU: 0 UID: 0 PID: 8265 Comm: syz.2.558 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 296.557023][ T8265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 296.557035][ T8265] Call Trace: [ 296.557043][ T8265] [ 296.557052][ T8265] dump_stack_lvl+0x189/0x250 [ 296.557082][ T8265] ? __lock_acquire+0xaac/0xd20 [ 296.557113][ T8265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.557139][ T8265] ? __pfx__printk+0x10/0x10 [ 296.557169][ T8265] ? __might_fault+0xb0/0x130 [ 296.557212][ T8265] should_fail_ex+0x414/0x560 [ 296.557238][ T8265] _copy_to_iter+0x1db/0x15a0 [ 296.557270][ T8265] ? seq_putc+0x75/0xf0 [ 296.557308][ T8265] ? __pfx__copy_to_iter+0x10/0x10 [ 296.557330][ T8265] ? __up_read+0x280/0x680 [ 296.557353][ T8265] ? __pfx___up_read+0x10/0x10 [ 296.557385][ T8265] seq_read_iter+0xbeb/0xe10 [ 296.557433][ T8265] vfs_read+0x4d0/0x980 [ 296.557471][ T8265] ? __pfx_vfs_read+0x10/0x10 [ 296.557510][ T8265] ? __fget_files+0x2a/0x420 [ 296.557538][ T8265] __x64_sys_pread64+0x193/0x220 [ 296.557568][ T8265] ? rcu_is_watching+0x15/0xb0 [ 296.557599][ T8265] ? __pfx___x64_sys_pread64+0x10/0x10 [ 296.557633][ T8265] ? do_syscall_64+0xba/0x210 [ 296.557658][ T8265] do_syscall_64+0xf6/0x210 [ 296.557679][ T8265] ? clear_bhb_loop+0x60/0xb0 [ 296.557699][ T8265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.557714][ T8265] RIP: 0033:0x7f79f838e969 [ 296.557729][ T8265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.557743][ T8265] RSP: 002b:00007f79f9173038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 296.557761][ T8265] RAX: ffffffffffffffda RBX: 00007f79f85b5fa0 RCX: 00007f79f838e969 [ 296.557773][ T8265] RDX: 0000000000001000 RSI: 0000200000001880 RDI: 0000000000000003 [ 296.557784][ T8265] RBP: 00007f79f9173090 R08: 0000000000000000 R09: 0000000000000000 [ 296.557794][ T8265] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 296.557804][ T8265] R13: 0000000000000000 R14: 00007f79f85b5fa0 R15: 00007fffae51d738 [ 296.557829][ T8265] [ 296.889506][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.021293][ T8277] FAULT_INJECTION: forcing a failure. [ 297.021293][ T8277] name fail_futex, interval 1, probability 0, space 0, times 1 [ 297.039258][ T8277] CPU: 1 UID: 0 PID: 8277 Comm: syz.2.561 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 297.039284][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.039294][ T8277] Call Trace: [ 297.039300][ T8277] [ 297.039307][ T8277] dump_stack_lvl+0x189/0x250 [ 297.039333][ T8277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.039360][ T8277] ? __pfx__printk+0x10/0x10 [ 297.039384][ T8277] ? __pfx_gup_fast_fallback+0x10/0x10 [ 297.039413][ T8277] should_fail_ex+0x414/0x560 [ 297.039432][ T8277] get_futex_key+0x240/0xe10 [ 297.039461][ T8277] ? __pfx_get_futex_key+0x10/0x10 [ 297.039493][ T8277] futex_wake_op+0x1bc/0xd40 [ 297.039521][ T8277] ? __pfx_futex_wake_op+0x10/0x10 [ 297.039541][ T8277] ? vfs_write+0x8d8/0xa90 [ 297.039568][ T8277] ? ksys_write+0x1cb/0x250 [ 297.039592][ T8277] do_futex+0x3bd/0x420 [ 297.039607][ T8277] ? __pfx_vfs_write+0x10/0x10 [ 297.039629][ T8277] ? __pfx_do_futex+0x10/0x10 [ 297.039650][ T8277] __se_sys_futex+0x36f/0x400 [ 297.039665][ T8277] ? fput+0xa0/0xd0 [ 297.039681][ T8277] ? ksys_write+0x1f0/0x250 [ 297.039701][ T8277] ? __pfx___se_sys_futex+0x10/0x10 [ 297.039721][ T8277] ? __x64_sys_futex+0x21/0xf0 [ 297.039738][ T8277] do_syscall_64+0xf6/0x210 [ 297.039758][ T8277] ? clear_bhb_loop+0x60/0xb0 [ 297.039776][ T8277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.039790][ T8277] RIP: 0033:0x7f79f838e969 [ 297.039803][ T8277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.039815][ T8277] RSP: 002b:00007f79f9173038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 297.039831][ T8277] RAX: ffffffffffffffda RBX: 00007f79f85b5fa0 RCX: 00007f79f838e969 [ 297.039842][ T8277] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000000040 [ 297.039850][ T8277] RBP: 00007f79f9173090 R08: 0000200000000140 R09: 0000000034ffffff [ 297.039860][ T8277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.039868][ T8277] R13: 0000000000000001 R14: 00007f79f85b5fa0 R15: 00007fffae51d738 [ 297.039890][ T8277] [ 297.144673][ T5884] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 297.209951][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 297.346647][ T44] block nbd1: Possible stuck request ffff8880249e5080: control (read@0,4096B). Runtime 150 seconds [ 297.384376][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 297.394792][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.417086][ T8281] netlink: 144 bytes leftover after parsing attributes in process `syz.6.563'. [ 297.420671][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.440808][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 297.455041][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 297.455589][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 297.464188][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.511795][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.522528][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 297.553407][ T24] usb 6-1: config 0 descriptor?? [ 297.573441][ T5884] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 297.592923][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.612726][ T5884] usb 1-1: Product: syz [ 297.623832][ T5884] usb 1-1: Manufacturer: syz [ 297.645632][ T5884] usb 1-1: SerialNumber: syz [ 297.695892][ T5884] usb 1-1: config 0 descriptor?? [ 298.419314][ T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 298.449028][ T24] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 298.459353][ T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 298.467410][ T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 298.481950][ T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 298.489620][ T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 298.498357][ T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 298.508478][ T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 298.534369][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 298.534389][ T30] audit: type=1326 audit(1748043348.812:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8288 comm="syz.6.564" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44aa38e969 code=0x0 [ 298.605883][ T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 298.624586][ T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 298.640722][ T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 298.650791][ T24] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 298.653445][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.6.564'. [ 298.726526][ T8295] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 298.734179][ T8295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.772366][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0002/input/input5 [ 299.191264][ T8299] batadv_slave_0: entered promiscuous mode [ 299.285021][ T8299] batadv_slave_0: left promiscuous mode [ 299.360239][ T24] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 299.377243][ T24] usb 6-1: USB disconnect, device number 13 [ 299.711539][ T8302] fido_id[8302]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 299.975712][ T5884] usb 1-1: USB disconnect, device number 13 [ 300.351430][ T8317] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4278124544 (8556249088 ns) > initial count (184 ns). Using initial count to start timer. [ 300.602861][ T8321] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 300.610097][ T8321] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 300.747808][ T8321] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 300.753945][ T8321] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 300.789677][ T8321] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 300.795802][ T8321] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 300.819310][ T8321] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 300.826066][ T8321] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 300.851016][ T8321] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 300.857036][ T8321] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 301.204581][ T6666] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 301.400787][ T6666] usb 7-1: Using ep0 maxpacket: 32 [ 301.536620][ T6666] usb 7-1: unable to get BOS descriptor or descriptor too short [ 301.700552][ T6666] usb 7-1: config 3 has an invalid interface number: 250 but max is 0 [ 301.821589][ T6666] usb 7-1: config 3 has no interface number 0 [ 302.165668][ T6666] usb 7-1: config 3 interface 250 has no altsetting 0 [ 302.255599][ T6666] usb 7-1: New USB device found, idVendor=eb1a, idProduct=5006, bcdDevice=17.74 [ 302.266885][ T6666] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.304726][ T6666] usb 7-1: Product: syz [ 302.329358][ T6666] usb 7-1: Manufacturer: syz [ 302.364150][ T6666] usb 7-1: SerialNumber: syz [ 302.666788][ T6666] usb 7-1: USB disconnect, device number 8 [ 302.690040][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.578'. [ 302.704598][ T8343] netlink: 68 bytes leftover after parsing attributes in process `syz.5.580'. [ 302.814908][ T9] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 303.007467][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 303.909071][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 303.976555][ T8356] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 304.127792][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.147642][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.404706][ T9] usb 1-1: Product: syz [ 305.218233][ T30] audit: type=1804 audit(1748043355.462:53): pid=8366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.586" name="/newroot/60/file0" dev="tmpfs" ino=330 res=1 errno=0 [ 305.413840][ T9] usb 1-1: Manufacturer: syz [ 305.786420][ T9] usb 1-1: SerialNumber: syz [ 305.928939][ T9] usb 1-1: can't set config #1, error -71 [ 305.946051][ T9] usb 1-1: USB disconnect, device number 14 [ 306.048190][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 306.199978][ T8376] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 306.344502][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 306.972101][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 306.987229][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 307.021092][ T1140] Bluetooth: hci6: Frame reassembly failed (-84) [ 307.031229][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 307.080699][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.140765][ T10] usb 5-1: Product: syz [ 307.154282][ T10] usb 5-1: Manufacturer: syz [ 307.158951][ T10] usb 5-1: SerialNumber: syz [ 307.181955][ T10] usb 5-1: config 0 descriptor?? [ 307.212395][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 307.234260][ T10] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 308.275431][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 308.282086][ T10] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 308.915849][ T31] INFO: task syz.1.130:6418 blocked for more than 143 seconds. [ 309.024712][ T5829] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 309.394560][ T31] Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 [ 309.402263][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 309.411913][ T31] task:syz.1.130 state:D stack:28344 pid:6418 tgid:6414 ppid:5815 task_flags:0x400140 flags:0x00004004 [ 309.424074][ T31] Call Trace: [ 309.454010][ T10] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 309.459582][ T31] [ 309.484461][ T31] __schedule+0x168f/0x4c70 [ 309.494519][ T31] ? register_lock_class+0x51/0x320 [ 309.505403][ T31] ? __lock_acquire+0xaac/0xd20 [ 309.510382][ T31] ? schedule+0x165/0x360 [ 309.521964][ T31] ? __pfx___schedule+0x10/0x10 [ 309.531176][ T31] ? schedule+0x91/0x360 [ 309.541525][ T31] schedule+0x165/0x360 [ 309.545883][ T31] schedule_preempt_disabled+0x13/0x30 [ 309.551865][ T31] __mutex_lock+0x724/0xe80 [ 309.556651][ T31] ? __mutex_lock+0x51b/0xe80 [ 309.561425][ T31] ? bdev_release+0x1a9/0x650 [ 309.694298][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 309.699411][ T31] ? __asan_memset+0x22/0x50 [ 309.704064][ T31] ? __pfx___fsnotify_parent+0x10/0x10 [ 309.714760][ T31] ? do_raw_spin_lock+0x121/0x290 [ 309.719866][ T31] bdev_release+0x1a9/0x650 [ 309.724910][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 309.730179][ T31] blkdev_release+0x15/0x20 [ 309.735769][ T31] __fput+0x449/0xa70 [ 309.739843][ T31] task_work_run+0x1d4/0x260 [ 309.747028][ T31] ? __pfx_task_work_run+0x10/0x10 [ 309.752287][ T31] ? __fget_files+0x3a0/0x420 [ 310.415141][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 310.434426][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 310.444520][ T31] resume_user_mode_work+0x5e/0x80 [ 310.488374][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 310.504253][ T31] syscall_exit_to_user_mode+0x9a/0x120 [ 310.509887][ T31] do_syscall_64+0x103/0x210 [ 310.533479][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 310.564306][ T31] ? clear_bhb_loop+0x60/0xb0 [ 310.569068][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.576906][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 310.639962][ T31] RIP: 0033:0x7f873198e969 [ 310.645138][ T31] RSP: 002b:00007f8732738038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.658242][ T10] usb 5-1: USB disconnect, device number 18 [ 310.673242][ T31] RAX: 0000000000000000 RBX: 00007f8731bb6080 RCX: 00007f873198e969 [ 310.682881][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000008 [ 310.697957][ T31] RBP: 00007f8731a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 310.707547][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.719070][ T31] R13: 0000000000000001 R14: 00007f8731bb6080 R15: 00007fff12fe79b8 [ 310.727206][ T31] [ 310.730307][ T31] [ 310.730307][ T31] Showing all locks held in the system: [ 310.738146][ T31] 3 locks held by kworker/0:1/10: [ 310.746212][ T31] 1 lock held by khungtaskd/31: [ 310.751205][ T31] #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 310.769014][ T31] 2 locks held by getty/5578: [ 310.773855][ T31] #0: ffff888030aa60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 310.784931][ T31] #1: ffffc900033332f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 310.795640][ T31] 1 lock held by udevd/5945: [ 310.800372][ T31] #0: ffff88802492b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 310.810336][ T31] 1 lock held by syz.1.130/6418: [ 310.824496][ T31] #0: ffff88802492b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 310.840140][ T31] 1 lock held by syz.5.597/8395: [ 310.845594][ T31] 2 locks held by dhcpcd/8397: [ 310.850473][ T31] #0: ffff88807a6fee08 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 310.862537][ T31] #1: ffffffff8df439b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 310.906617][ T31] [ 310.910438][ T31] ============================================= [ 310.910438][ T31] [ 310.919650][ T31] NMI backtrace for cpu 0 [ 310.919667][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 310.919691][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.919703][ T31] Call Trace: [ 310.919711][ T31] [ 310.919719][ T31] dump_stack_lvl+0x189/0x250 [ 310.919749][ T31] ? __wake_up_klogd+0xd9/0x110 [ 310.919775][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.919801][ T31] ? __pfx__printk+0x10/0x10 [ 310.919846][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 310.919870][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 310.919887][ T31] ? _printk+0xcf/0x120 [ 310.919921][ T31] ? __pfx__printk+0x10/0x10 [ 310.919962][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 310.919985][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 310.920009][ T31] watchdog+0xfee/0x1030 [ 310.920035][ T31] ? watchdog+0x1de/0x1030 [ 310.920082][ T31] kthread+0x711/0x8a0 [ 310.920129][ T31] ? __pfx_watchdog+0x10/0x10 [ 310.920153][ T31] ? __pfx_kthread+0x10/0x10 [ 310.920189][ T31] ? __pfx_kthread+0x10/0x10 [ 310.920220][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 310.920247][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.920271][ T31] ? __pfx_kthread+0x10/0x10 [ 310.920292][ T31] ret_from_fork+0x4b/0x80 [ 310.920310][ T31] ? __pfx_kthread+0x10/0x10 [ 310.920332][ T31] ret_from_fork_asm+0x1a/0x30 [ 310.920378][ T31] [ 310.920409][ T31] Sending NMI from CPU 0 to CPUs 1: [ 311.070864][ C1] NMI backtrace for cpu 1 [ 311.070881][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 311.070902][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.070913][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 311.070938][ C1] Code: 43 d4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 8f 18 00 f3 0f 1e fa fb f4 18 d4 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 311.070954][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 311.070970][ C1] RAX: 48431b1f96e98500 RBX: ffffffff81977028 RCX: 48431b1f96e98500 [ 311.070983][ C1] RDX: 0000000000000001 RSI: ffffffff8d73aa78 RDI: ffffffff8bc12340 [ 311.070995][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932b5b R09: 1ffff1101712656b [ 311.071008][ C1] R10: dffffc0000000000 R11: ffffed101712656c R12: ffffffff8f7e0b70 [ 311.071021][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038d8b40 [ 311.071032][ C1] FS: 0000000000000000(0000) GS:ffff8881261f6000(0000) knlGS:0000000000000000 [ 311.071047][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.071058][ C1] CR2: 000055ef73a90168 CR3: 000000007bf98000 CR4: 00000000003526f0 [ 311.071074][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 311.071084][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 311.071095][ C1] Call Trace: [ 311.071101][ C1] [ 311.071107][ C1] default_idle+0x13/0x20 [ 311.071130][ C1] default_idle_call+0x74/0xb0 [ 311.071155][ C1] do_idle+0x1e8/0x510 [ 311.071184][ C1] ? __pfx_do_idle+0x10/0x10 [ 311.071219][ C1] cpu_startup_entry+0x44/0x60 [ 311.071245][ C1] start_secondary+0x101/0x110 [ 311.071270][ C1] common_startup_64+0x13e/0x147 [ 311.071303][ C1] [ 311.071913][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 311.257181][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 311.268997][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.279082][ T31] Call Trace: [ 311.282367][ T31] [ 311.285314][ T31] dump_stack_lvl+0x99/0x250 [ 311.289928][ T31] ? __asan_memcpy+0x40/0x70 [ 311.294535][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.299744][ T31] ? __pfx__printk+0x10/0x10 [ 311.304357][ T31] panic+0x2db/0x790 [ 311.308262][ T31] ? __pfx_panic+0x10/0x10 [ 311.312687][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 311.318502][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 311.323874][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 311.330035][ T31] watchdog+0x102d/0x1030 [ 311.334374][ T31] ? watchdog+0x1de/0x1030 [ 311.338796][ T31] kthread+0x711/0x8a0 [ 311.342867][ T31] ? __pfx_watchdog+0x10/0x10 [ 311.347544][ T31] ? __pfx_kthread+0x10/0x10 [ 311.352144][ T31] ? __pfx_kthread+0x10/0x10 [ 311.356739][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 311.361936][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.367133][ T31] ? __pfx_kthread+0x10/0x10 [ 311.371737][ T31] ret_from_fork+0x4b/0x80 [ 311.376179][ T31] ? __pfx_kthread+0x10/0x10 [ 311.380777][ T31] ret_from_fork_asm+0x1a/0x30 [ 311.385554][ T31] [ 311.388768][ T31] Kernel Offset: disabled [ 311.393120][ T31] Rebooting in 86400 seconds..