last executing test programs: 4m16.652754524s ago: executing program 0 (id=242): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000000c0)={r1, 0x6, 0xbc0b, 0x8, 0x7fffffff, 0x4, 0x4}) 4m16.360868743s ago: executing program 0 (id=245): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xea7fc}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x70}}, 0x0) 4m15.659383767s ago: executing program 0 (id=246): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x4, 0x201400) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000200)={0x40, "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"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 4m15.288695249s ago: executing program 0 (id=248): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) r0 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0x1, 0x7, 0x0, '\x00', {0x7ff, 0xa2c, 0x4, 0x28000, r2, r3, 0xa000, '\x00', 0x1, 0xfffffffffffffffe, 0xb4e6, 0x2, {0x8003, 0x8}, {0x6, 0x800}, {0x100000000, 0x7}, {0x4, 0xa00}, 0x3, 0x100000b, 0x0, 0xffff}}}}) (async) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004280)="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", 0x2000, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x78, 0x0, 0xefffffeffffffe00, {0xf0f, 0xfffffffe, 0x0, {0x6, 0x2, 0x80000001, 0xfffffffffffffffe, 0x7, 0x5, 0x3, 0x2, 0xd, 0x1000, 0x6, r5, r6, 0xffffffff, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@private}}, &(0x7f00000002c0)=0xe8) mount$fuse(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x2220080, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x18000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@default_permissions}], [{@fowner_eq={'fowner', 0x3d, r7}}, {@subj_role={'subj_role', 0x3d, '/dev/fuse\x00'}}]}}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_emit_ethernet(0x5a, &(0x7f00000010c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @remote, @local, {[@hopopts={0x8, 0x0, '\x00', [@generic={0x7, 0x3, "801a8f"}]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x3}}}}}}}, 0x0) 4m14.004984303s ago: executing program 0 (id=252): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffa, 0x10000, 0xfee, 0x3, 0x3]}, &(0x7f0000000340)=0x78) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_connect$cdc_ncm(0x5, 0xa6, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x2, 0x1, 0x3, 0x20, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "6987a9"}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x6, 0x5, 0x3f}, {0x6, 0x24, 0x1a, 0x7, 0x3}, [@acm={0x4, 0x24, 0x2, 0xf}, @obex={0x5, 0x24, 0x15, 0xf}, @network_terminal={0x7, 0x24, 0xa, 0x40, 0x0, 0x10, 0x1}, @country_functional={0x10, 0x24, 0x7, 0x6, 0xe, [0x2, 0x1, 0x10, 0x9, 0x2]}, @mdlm={0x15, 0x24, 0x12, 0xef91}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x5, 0x2e}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x24, 0xa3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x2, 0x1}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x6, 0x0, 0x1, 0x8, 0x6}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "c40d6c38337db3659e562a17c5c45215"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0xc, 0x2}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x8, [{0x2c, &(0x7f0000000140)=@string={0x2c, 0x3, "4ad184972a0c81a3239f4783a1c7d002af1c75688fbc8bf9b08548637e3f07b255ef6ad8d2db6cfea39d"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x5f, &(0x7f0000000b80)=@string={0x5f, 0x3, "1a10ea6362ca38c1d06e453291c86450b00f6197e59df460b09edead7ad5bd383bdcdb20c068615fec8e5df7c6defd1049fefe974c7f97f1b783fcf3ffad5dfa7e72258c699d8c45b9fc8af38dde035afda5ba6a3f709ba5ecfa2f5299"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2801}}, {0x60, &(0x7f0000000c00)=ANY=[@ANYBLOB="60030073f6241eab9fb8e04ef76dcc4bfcc1d21da49590bc9b3dfe538c44669720fcc092304726a390a6e3266970306bc6201d90e8972d0383df2e000000000000000000000000000000000000000000bab940525683ad9f9b9fd21da1502f84a30c91ce79fd6d0c20d7a1bdc35b5fc4faf0e79db75d78438e9b0640a2e223551c5d44b729a47e4a20492bf20481fb73a0c051fd3bb8c990279a9d1150797f15a63edcd35f27e9ef2c8b6cf2d57c55916f5ccf0b43732b3559093b3565419e396d9b6f5e4f5cc03ee5"]}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2009}}, {0x62, &(0x7f0000000380)=@string={0x62, 0x3, "cb332a0b32d00a7e686c22a23362946d6dea944ab4fe852a481e54bda3cfb430ec60b8591b1c9f9aee46d12a28ddf0874ebf339f89d64613576429de2f7f0da51ae0433787086100f76d0388a364237465cf83d11826a0938dc99d5265753aa0"}}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x1, 0x40001011, r1, 0x0) read$FUSE(r1, &(0x7f0000000580)={0x2020}, 0x2020) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000004c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x23, 0x5, 0x43, 0x7ff, 0x1, 0x8, "c16f9381e7127500f7d0458116634fac85b1822b702441d536280d86d056446cc7e709"}}, 0x13b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003012000060ec970012301100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000f00)={0x3, 0xffffffff, 0x0, 0xfff, 0x9, 0x10}) 4m12.956973903s ago: executing program 0 (id=255): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000080)='trans=tcp,') futex_waitv(&(0x7f0000001b00)=[{0xfff, &(0x7f0000000340)=0xfffffffffffff697, 0x6}], 0x1, 0x0, 0x0, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x182d00e, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000ae00"/21], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x80000007}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/107, 0x6b}, {&(0x7f0000004500)=""/4112, 0x1010}, {&(0x7f0000001900)=""/4093, 0xffd}, {&(0x7f0000000900)=""/100, 0x64}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f00000000c0)=""/107, 0x6b}, {&(0x7f0000000800)=""/114, 0x72}, {&(0x7f0000001800)=""/203, 0xcb}], 0x9}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x2, 0x0) 4m12.389003604s ago: executing program 32 (id=255): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000080)='trans=tcp,') futex_waitv(&(0x7f0000001b00)=[{0xfff, &(0x7f0000000340)=0xfffffffffffff697, 0x6}], 0x1, 0x0, 0x0, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x182d00e, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000ae00"/21], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x80000007}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/107, 0x6b}, {&(0x7f0000004500)=""/4112, 0x1010}, {&(0x7f0000001900)=""/4093, 0xffd}, {&(0x7f0000000900)=""/100, 0x64}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f00000000c0)=""/107, 0x6b}, {&(0x7f0000000800)=""/114, 0x72}, {&(0x7f0000001800)=""/203, 0xcb}], 0x9}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x2, 0x0) 4m6.344726401s ago: executing program 4 (id=279): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x2, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1404, 0x8, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0xfff8, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 4m6.054605185s ago: executing program 4 (id=280): r0 = syz_io_uring_setup(0xdaf, &(0x7f0000000180)={0x0, 0x2, 0x13291, 0x0, 0x3b3}, &(0x7f0000000100), &(0x7f0000000080)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) (async) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) (async) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x800, &(0x7f0000000440)={[], [{@smackfsdef={'smackfsdef', 0x3d, '&@$--}'}}]}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_VERSION(r6, 0xc0406400, &(0x7f0000000380)={0x8, 0xc1e, 0x7fd, 0x1d, &(0x7f0000000340)=""/29, 0x4c, &(0x7f0000000480)=""/76, 0x1000, &(0x7f0000000f00)=""/4096}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x298, 0x20a, 0x278, 0x298, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0x0, 0x0, 0xff000000], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @private1, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xffffffff], 'veth1_to_hsr\x00', 'batadv0\x00'}, 0x0, 0x160, 0x1c8, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0x5}}, @common=@srh1={{0x90}, {0x3b, 0x4, 0x8, 0xce, 0x935d, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffff00, 0x0, 0xffffffff, 0xb813b09777bf4407], [0xff000000, 0xff000000, 0xff000000, 0xffffff00], [0x0, 0x0, 0x808000ff], 0x80b, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @multicast1}, "f2dfbc81cfe0ca1b360883fff0380bc5"}}}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01f2170000000000000018000000180000000a00000000000000010068beeefe7bb944760004000000000800000002000000000000000000"], &(0x7f0000002600)=""/4096, 0x3a, 0x1000, 0x1, 0x1a}, 0x28) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008085}, 0x20000001) 4m3.089192455s ago: executing program 4 (id=281): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0xb, 0x9b, {0x9b, 0x21, "483c4edadf303d3e1d8e3b72dca44d8d8904fa4ef83946daf447aa897b2062889e5b4267d77e79aed7cdbf6943ab616a717d18e92606012778dedb38e3fea21a7f5a8bcbcb7d0bb16501c9a49270edd3c24fd26c9fe9cfd45758adba9ba0872b325ce5a6b5a92403ba66110cf80579b9a5b47acb93c417c0031166d9bfc9b3583591c2dc92a359f9389456e02cfefcb07c5a1fa4e2aeb7b920"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f00000001c0)={0x40, 0x5, 0x46, "99dff3e0be81c443927ca10a9ea878310fb514de9790e66a755959cc188c9a173123747450d7a17cb5e60fa8ef899ff69939ac61e0d0b4b575c0004461da2980081d094a3038"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xe}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x2, 0xa33c, 0x9, 0x2, 0x101, 0xf, 0x0, 0xffff, 0x3eb, 0x9913, 0xd192, 0xf}}, &(0x7f0000000300)={0x20, 0x85, 0x4}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x2}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x10, &(0x7f0000000180)={0x20, 0x13, 0x2, "a6c0"}, 0x0, 0x0}) 3m56.551246576s ago: executing program 4 (id=297): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@verity_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r3 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000601, 0x0, &(0x7f0000000000)={0x4, 0xa, 0x0, 0x7}) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) unshare(0x60480) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101000000050000000900010073797a300000000048000000030a0103007aa731d8000000050000000900010073797a30000000000900030073797a300000000014000480080002400000001208000140000000000800054000000000140000001100010000000000000000000000000a0000000000"], 0x90}}, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000280)={'wg0\x00'}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="340000001a00010029bd70000000000002202009fc0300030028000008000300", @ANYRES8=r3, @ANYRES64=r4], 0x34}, 0x1, 0x0, 0x0, 0x6010}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x8, 0x6}}, './file1\x00'}) syz_io_uring_setup(0x5b3b, &(0x7f0000000500)={0x0, 0x1d7d, 0x800, 0x0, 0x260, 0x0, r8}, &(0x7f0000000040), &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84) mount(0x0, &(0x7f0000005880)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x18010, 0x0) syz_clone(0xc00e4000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m55.516978813s ago: executing program 4 (id=300): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000fa461ad7e48489", 0xa}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0]) 3m53.148124929s ago: executing program 4 (id=311): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x11, 0x148, 0x0, 0x10, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'vlan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) openat$tun(0xffffffffffffff9c, 0x0, 0x149a40, 0x0) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r3, 0x8) (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (rerun: 64) write$binfmt_elf64(r4, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0xb, 0x4, 0x0, 0x0, 0x0, 0x2, 0x3e, 0xffffffeb, 0x200000294, 0x40, 0xffffffffffffffff, 0x0, 0x8f2d, 0x38, 0x1, 0xfffa, 0x2}, [{0x3, 0xf97, 0x7, 0xd, 0x0, 0xe5, 0x1, 0x3}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa78) (async) close(r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0040}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x100, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x30, r6, 0x0) (async, rerun: 64) r7 = accept4(r3, 0x0, 0x0, 0x80000) (rerun: 64) setsockopt(r7, 0x84, 0x81, &(0x7f00000001c0)="020000000980ffff", 0x8) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x0) (async) mount$nfs4(&(0x7f0000000180)='/', &(0x7f00000001c0)='./file1\x00', 0x0, 0x2085008, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="100804000300000008002900903e000008000dff0f000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) sendmsg$inet6(r4, &(0x7f0000000580)={&(0x7f0000000240)={0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000280)="6dab2019c47edb4520a0ec88272b5d3ad71aa74c79cd76b707be0305872ce9a53c8e2957f17a9631e50e5cbd93927b350c0000004d2eb7724b15c48f82fc34e2cab5a3f9783910168ca30b2a10471cefd18a9d1df3df0e0b8d3b5a2c4faa72ffd0abf21506c3709e51cebf04ddb738d9d44e218e6276a26490edb6e6267cecfe0c48301aa3667e2ce39397573c1d1891d7396070f28cebc064356739f4f6d935211335599df09afbd75a184d23bf71a1a270ba77f5b7011cf1c962127638c6141404b070fd5eca05ad87f3a0a7056ee535c43098a0e47caee04504a4714f19", 0xdf}], 0x1, &(0x7f00000003c0)=[@rthdrdstopts={{0x98, 0x29, 0x37, {0x2f, 0xf, '\x00', [@pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1b}}, @calipso={0x7, 0x50, {0x0, 0x12, 0xff, 0x7, [0x8, 0x89f, 0x81, 0x726, 0x5, 0x8000, 0xffffffff, 0x6, 0x7]}}, @enc_lim, @hao={0xc9, 0x10, @mcast2}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @hopopts_2292={{0x90, 0x29, 0x36, {0x33, 0xe, '\x00', [@ra, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0xfffffffc}, @calipso={0x7, 0x30, {0x0, 0xa, 0xf0, 0x5, [0x1, 0xdd7c, 0x2, 0xe, 0x101]}}, @calipso={0x7, 0x30, {0x1, 0xa, 0x0, 0x8, [0x6, 0x6805, 0x3, 0x2, 0x1]}}, @enc_lim={0x4, 0x1, 0x3}]}}}], 0x140}, 0x45) 3m52.517935147s ago: executing program 33 (id=311): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x11, 0x148, 0x0, 0x10, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'vlan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) openat$tun(0xffffffffffffff9c, 0x0, 0x149a40, 0x0) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r3, 0x8) (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (rerun: 64) write$binfmt_elf64(r4, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0xb, 0x4, 0x0, 0x0, 0x0, 0x2, 0x3e, 0xffffffeb, 0x200000294, 0x40, 0xffffffffffffffff, 0x0, 0x8f2d, 0x38, 0x1, 0xfffa, 0x2}, [{0x3, 0xf97, 0x7, 0xd, 0x0, 0xe5, 0x1, 0x3}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa78) (async) close(r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0040}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x100, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x30, r6, 0x0) (async, rerun: 64) r7 = accept4(r3, 0x0, 0x0, 0x80000) (rerun: 64) setsockopt(r7, 0x84, 0x81, &(0x7f00000001c0)="020000000980ffff", 0x8) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x0) (async) mount$nfs4(&(0x7f0000000180)='/', &(0x7f00000001c0)='./file1\x00', 0x0, 0x2085008, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="100804000300000008002900903e000008000dff0f000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) sendmsg$inet6(r4, &(0x7f0000000580)={&(0x7f0000000240)={0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000280)="6dab2019c47edb4520a0ec88272b5d3ad71aa74c79cd76b707be0305872ce9a53c8e2957f17a9631e50e5cbd93927b350c0000004d2eb7724b15c48f82fc34e2cab5a3f9783910168ca30b2a10471cefd18a9d1df3df0e0b8d3b5a2c4faa72ffd0abf21506c3709e51cebf04ddb738d9d44e218e6276a26490edb6e6267cecfe0c48301aa3667e2ce39397573c1d1891d7396070f28cebc064356739f4f6d935211335599df09afbd75a184d23bf71a1a270ba77f5b7011cf1c962127638c6141404b070fd5eca05ad87f3a0a7056ee535c43098a0e47caee04504a4714f19", 0xdf}], 0x1, &(0x7f00000003c0)=[@rthdrdstopts={{0x98, 0x29, 0x37, {0x2f, 0xf, '\x00', [@pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1b}}, @calipso={0x7, 0x50, {0x0, 0x12, 0xff, 0x7, [0x8, 0x89f, 0x81, 0x726, 0x5, 0x8000, 0xffffffff, 0x6, 0x7]}}, @enc_lim, @hao={0xc9, 0x10, @mcast2}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @hopopts_2292={{0x90, 0x29, 0x36, {0x33, 0xe, '\x00', [@ra, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0xfffffffc}, @calipso={0x7, 0x30, {0x0, 0xa, 0xf0, 0x5, [0x1, 0xdd7c, 0x2, 0xe, 0x101]}}, @calipso={0x7, 0x30, {0x1, 0xa, 0x0, 0x8, [0x6, 0x6805, 0x3, 0x2, 0x1]}}, @enc_lim={0x4, 0x1, 0x3}]}}}], 0x140}, 0x45) 10.639341788s ago: executing program 1 (id=1002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) getsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0), &(0x7f00000004c0)=0x4) r2 = mq_open(&(0x7f00000001c0)='#\x00', 0x2, 0x0, &(0x7f0000000300)={0x847, 0x3, 0x8001, 0x5}) mq_notify(r2, &(0x7f0000000440)={0x0, 0x5, 0x0, @thr={&(0x7f0000000340)="b17a1d0bdc867fdeafa7d0bd2061f22d0bd88f2375257b2486092ae6768f417e48cd351ce98d3e155ea7037f856bb4c62e6727bcf29320c8b3dafea7b107430dd1970b2ad2ef5e3e0dd841249dca4843", &(0x7f00000003c0)="3ee855272a324f3555006b86a5f6eae0c34a5ced665f2933690539610dde5ddfe0621aaa03a6e240b36d839668f1165ddf2e40259a06e3f7a2fbe55f66fbbb986db5a4d93be69823e1590cd159cbe6b8"}}) syz_open_procfs(0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000020000100000000000000000002000000000000000000000014"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x4044) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xa1010000, 0x0, 0x0, 0x9, 0x832]}}) 10.416834419s ago: executing program 5 (id=1004): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1900000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000007f643af66b591bf65507b49e4acb05af9594c6a68c4e08c0d30aca284af04977a076beb0cf6fae87e7d0e8515cb64d969a18561a81453cec87a7648f0b90932d350a014e590bd77165474454e01ff16d2886a905c1e656db607575a51815044cd3e13a5b3e34720c8e7abde3167d5813f31c5fc697d4941acdfcf3035fb600e461d55420ccaaeebaf4965fbced341a25d534a7b5456cdf6c835172b334edb8301029862c199526de3dd67a09575406004520f5f64580412e35c2c6fbdf145edbbc2da52df16237dc0fee0ba4cfca56922101115ba4f9833196845bb378b5d5ee05a9c25056709ce9db070800", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) (async, rerun: 64) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x3816c2, 0x2) (async, rerun: 64) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f0000000340)={0x9, 0x2, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'veth1_to_bond\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="03000000040000050000000000000000000000004198605fa821e6c5cb17e7e46e5628f525cbb708f1f54871e3982f1ff6b5c844448b6ef5bbffba03385780c02caa3d5f664412f0569682c5137934790581c9de7ee027c2e050c3b3324fd58175bdb99379ebaea85e94a4908e3f54aed5e28b8dd254987282d1418d13c88e62a60482", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000300"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647", 0x9}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4", 0x19}], 0x2}], 0x1, 0x40800) (async) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) (async) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) (async) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (async) write$P9_RVERSION(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="130000120085c19522fc624b923030327bf175145a90e4cb2f4f3dacd0102ab6159e3a3c7b25ec7081ca6ace4200dfb7b6767734dc41f6944e821de2181ba753f20b701c4266aeb8006d6c4ec1530609"], 0x13) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x66, 0x1000, 0x7, 0x100a, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x3}, 0x50) (rerun: 64) 9.643673367s ago: executing program 5 (id=1005): prlimit64(0x0, 0xe, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0103c6ed460b43e4cf9f26b7"], 0x14}, 0x1, 0x0, 0x0, 0x20040005}, 0x40040) 9.334063495s ago: executing program 2 (id=1006): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r1, 0x2000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r0, 0x8, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$igmp6(0xa, 0x3, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 8.249102176s ago: executing program 2 (id=1008): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xffd, 0x6, 0x0, 0x8, 0x1, 0x0, 0xfffffffd, 0x1000000}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x35}, 0x1}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x0, 0x0, 0x2d, 0xfffffffc, 0x81}, 0x9c) 7.225061884s ago: executing program 1 (id=1011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r3, 0x0, 0x9}, 0x17) socket$inet(0x2, 0x3, 0x5) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$I2C_SLAVE(0xffffffffffffffff, 0x703, 0x1c4) unshare(0x60400) pidfd_send_signal(0xffffffffffffffff, 0x217, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000080)=0x6) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.156144533s ago: executing program 5 (id=1013): symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x10000000007) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f000001b000)=""/102389, 0x1905b) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b04006cc1b16b975e", 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) read$alg(r5, &(0x7f0000000000)=""/35, 0x23) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001fb57c449e19398431a2dc75c6188c83b082d81ff58b0e63327057ec200a49feb5414f77e0a8e76b6b0b882e9336a619b10aea47df425f340fe4e97bffdf140b31f24823201a22a99ed5d46045d2638383acb8c58e64481ed77899b3618a0b377f4973add44d11014ea893d974443f3576a86207dc6472be93d390671b0"], 0x7c}, 0x1, 0x0, 0x0, 0x4054085}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200000034000480300001800b0001006c6f6f6b7570000020000280080004400000000009000100737984310000000008000240000000080900010073797a30000000000900020073797a3200"], 0x88}}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f024}) 6.981027019s ago: executing program 3 (id=1014): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x68, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x4005, 0x1, {0x1, @win={{}, 0x0, 0xfffffff8, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000140)=0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000580)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000240)='ocfs2\x00']}, &(0x7f0000000780)={[&(0x7f0000000300)='/dev/cpu/#/msr\x00', &(0x7f0000000840)='/du/#/msr\x00\x00\x00\x00\x00\x00\x02\x18\xb2\xb7\xa1\fW\xef\x0fH\x10`h\xd2.\xeco\xec\x16f\xe4v\xb2\xaalkt\xd2\xd8\x12\xc2\t\xef\x02\x84|;;\x88.;\xe27\xa2uPR\x92\x1c\x84J\xee\xf7F!\t\\\x9b\xdd\x19%\xa5\xd5\xf5\x0e\xc6\xf5\xf5L\xa7~\xdb43%\nPsXf\x1c\xdb\xd2)N\xc1\xce \x1e\xc1\xe9H\x96\x1f\x04|\xa6\xf7\f\x0f\x9aN\x8e\x8a|i\xd0\x8bD\xcaw\xf4', &(0x7f0000000480)='b\x00', &(0x7f00000004c0)='*:!/(\'\x00', &(0x7f0000000500)='^@\\\'\x16\x00', &(0x7f0000000000)='/de\x82V\x00/cpu/#/msr\x00', &(0x7f00000006c0)='/dev/cpu/#/msr\x00', &(0x7f0000000700)='(\x00', &(0x7f0000000740)='\x00\x00\x00\x02\x00\x00\x00\x00\x00']}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f00000015c0)=""/102387, 0x18ff3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r4, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x8ab9, 0x4, 0x4, 0x1c9, 0x7, 0x11, 0x120000, 0x847, 0x0, 0x2, 0x8000000000000000, 0x6, 0x0, 0x101, 0x3, 0x1], 0x1, 0x181200}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x0, 0x74}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x1, 0x8, '\x00', 0x3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r8, 0x541b, 0x0) r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8010, r9, 0x1e3d0000) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="45688233e5a58c9a0a39d028e0c390edceb1c6dfc7833d1055afc2aaf6f3315b62030940c4a2b3275e88809ee9e780b2e136ab0960a27874d1815a17253d479c21919ad4b8d9c2e92fafe4368c1cfc59a24040f7236ee5f82a936f07d7827c6644aa0bcb78f79438c532dc1906e400d83d1ef9e5b6d65131edd6e41351dad1d25ae45b74d3c7a10aaeec8767156a78be1f9af032e572c2ae41c39b4859d4018494dedac81680051d5d8a7ae6474b5ddbe7e725f0e793d009f1c4f9e704305fadf222ddde4f4eaa973039c5ae15e213e221ea7af95e8696e8fdc455a076f7956807f82c31ffbd618b95a0642434aa6e", @ANYRES16=r9, @ANYRESDEC=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x400c0) 6.619305308s ago: executing program 3 (id=1015): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000200002000e7a47e2800000008000300", @ANYRES32=r2, @ANYBLOB="080026006c0900000a0006"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) pivot_root(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r5, &(0x7f0000002200)={'#! ', './file1', [{0x20, 'BlA\xf0\x15x\xe9}c)\xf6t\x15\x1f\vBx-@\xdd\xeb\x15\x88\xec\xc4\x94{\x82\xe6\x88\xf2\xe9\xbf\xf2^E\xcdU3\xd7\xf9\xee\x01\x93\xf5\x8f\x82\xfco\xdc\xca\xbf\x92Z\xe1\x8f\xcaM\xea\x82\fNS\x99\x93\b\xb1\x1ad\xf02\xd3\xbb\xb2\xe0\xc7\\\xfc\xb8\xd6\xa6\t\x16R\x9aY(\x03\x9bl/\xd3}\bc<>\xcb\xb2JQh/T\xe1ei\xa5\xcd\x7f\xa5WIfg)\xf4X\xf8\xff\xfc\xf8\xdf\b\x94\xc6BE\xae\x8a\xcbH)\xb3)\xb4\x1d\xb3Aq\x06\x15\xc9\x92\x16\x16tB\x1bMRj\xa9-[$\xbc\x19\'>\xb1\xed\xe9\xbaW\xbf_z\x1c\xc2\xd82@\r\xb4`\xacAQ\x82F:\xce\xcf\xfeh(\xdbf\x0f\x00\xde8:\x9a\x06#?\xd9\x15\xe34`\xc7\xb8\xc8\x1d\xec\xc8\xa9\xa0w\xa5s\xdd\f\x96D\x88\xcd\xa7\x105\x8d\xe1\xca\xb3o~\xc4W,\xbd\x02o\xec\xde\f\x99=X\xde}4\x93\xdc\xfe\x8c\x98\xf81\xa2e\x15\x87\x99\r\xd7\x9e\x05_Q\xc0c$w\x95kon`(\x90\xea8r\x99+T)`\xdd7=\xb6m\xe0G\x8e_g\xdbU\xd4\x9aa0\\\xa5\x88DXp\xf6\xb6`\xcc\xd3\x82\x04\xdf\xa2\xe2X\xad\xa0\xfc\xbb\x9aHP\xd26\xfc\xcb\x11\xb0jl\xda\xce~\x85\x06\x84Sh;9\x95\xd0\x9c\x02\a\x11\xc7\x82\xb248*\xa3\x9e\x8b\xe6F\xac\xb5\x18\x10X\xbc\x84]\x13(\x86m\x80'}]}, 0x17d) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fec0000000000000110880febb0028aafe8000000020000027bfa7b09303960e2f80"], 0xfdef) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = fsopen(&(0x7f0000000100)='cifs\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='user\x00', &(0x7f0000000140)='\x00', 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x66) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, &(0x7f0000000340)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000001000ffff29bd8600fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="133c0300231a0500400012800e0001006970366772657461700000002c000280140007000000000000000021fffffffffffffffe14000600ff010000000000000000000000000001"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) shmget(0x0, 0x3000, 0x400, &(0x7f0000ffb000/0x3000)=nil) 6.587214335s ago: executing program 2 (id=1016): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x92e2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/xfrm_stat\x00') read$FUSE(r3, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f000001c380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000070a010100000000000000000300000324000580080001400000001a080001400000005e08000140000000000800024000325b5300000208000b4000000004"], 0x58}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=""/18, 0x12) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}, @generic="d7"]}, 0x20}}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 6.441192188s ago: executing program 6 (id=1017): socket$nl_route(0x10, 0x3, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x1}, 0x20) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x4c, r2, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05dc60d6de55765ee9f4b09e55be8cae5278597721a2a79179423c82a1ec0839f9578896571992c9934e1d5c1f304e7e5ae125dbcab614c4012647572c0fffaf00ee5dadaf6c92de138fbb39a6f1392b4953bb1bd31dd83eaff23d2ac247a19b09fcde848330046779e8d099d738e850ed775c945959ab144f53aa27e30c7dafe43100"/145, @ANYRES16=r0], 0x0) 6.408765762s ago: executing program 2 (id=1018): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000003c0), 0x1, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$pptp(0x18, 0x1, 0x2) unshare(0x22020400) connect$pptp(r3, 0x0, 0x0) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f0000000400)) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}}, 0x10) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r6 = getpid() r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1, r6}}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="9febbb9ba5002a19579f0b25bd7aee2001001800000000000000100000001000000005005dfb04000000180000", @ANYRES64=r2], 0x0, 0x2d, 0x2b}, 0x28) r8 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x8a, &(0x7f0000000080)=0x5, 0x4) ioctl$SIOCAX25OPTRT(r8, 0x89e7, &(0x7f0000000100)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x2, 0x44}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) io_uring_enter(r9, 0x5b13, 0xb3d6, 0x1, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x8) r10 = syz_open_dev$loop(&(0x7f00000001c0), 0x40000000001, 0x0) fdatasync(r10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e30080670000ec67838717bd86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80, 0xfc}, 'port0\x00', 0xe3, 0xb1c07, 0x89ef, 0x0, 0x0, 0x1000, 0x7ffffffd, 0x0, 0x3, 0xd3}) 6.200027971s ago: executing program 3 (id=1019): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bond_slave_0\x00', 0x10) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) getpid() ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, r8, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 6.080626593s ago: executing program 5 (id=1020): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x2c040090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x1, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x2}}, 0x10, 0x0}, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r1, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="80000000001e00006ca108510000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) write(r5, &(0x7f0000000180)="6c9c31aa439eb5c03c719ad179efb3b6c07f655e74e5c4de7a53785660ad5e924624eddd9a4dee22cb5b4fc4ec800eac1463bb3eadfc426f48956f04a5ad73855f861d2f9ace94c5b25f36096e1ee20ce6970d490bdb45a5511ce91bc86dcfa838fca3b8c9bf92c6c1c193e9875b3806d8e1ba72f3e60389a033e4ee31a3e57d6f2e435da7a544a787ae61087e7824d334025740ad7b31c462a4bf325ad037e765830b012638f05a282a2b05c26ffefa551c6d32f2f9f1edeee6d8490ac94075", 0xc0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000280)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendmsg$rds(r7, &(0x7f0000000d00)={&(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)=""/185, 0xb9}], 0x2, &(0x7f0000000ac0)=[@fadd={0x58, 0x114, 0x6, {{0x2, 0x24f6}, &(0x7f0000000500)=0xe04, &(0x7f0000000540)=0x9, 0x8, 0x4d, 0x7, 0x7, 0x10, 0x1}}, @fadd={0x58, 0x114, 0x6, {{0xfffffff8, 0x7}, &(0x7f0000000580)=0xb, &(0x7f00000005c0)=0xfffffffffffffff9, 0x800, 0x2, 0x3, 0xe, 0x16, 0xe}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000006c0)=""/199, 0xc7}, &(0x7f0000000600), 0x63}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x5}, @rdma_args={0x48, 0x114, 0x1, {{0xdea9}, {&(0x7f00000007c0)=""/132, 0x84}, &(0x7f0000000880)=[{&(0x7f0000000640)}], 0x1, 0x50, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x6, 0x2}, &(0x7f00000008c0)=0x4, &(0x7f0000000900)=0x90ff, 0x0, 0x1, 0x1, 0xfffffffffffffff9, 0x4}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000940)=""/177, 0xb1}, &(0x7f0000000a00), 0x12}}, @mask_fadd={0x58, 0x114, 0x8, {{0x0, 0x200}, &(0x7f0000000a40)=0x9, &(0x7f0000000a80)=0x8eb5, 0xffffffffffffff81, 0x5, 0x4b4a, 0x4, 0x36, 0x8}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x10d}], 0x238, 0x10000}, 0x4000801) socket$inet_sctp(0x2, 0x1, 0x84) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x121002, 0x0) sendfile(r8, r8, &(0x7f0000000500)=0xffffefdfbffffff8, 0xef9) 5.273165907s ago: executing program 3 (id=1021): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) getsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0), &(0x7f00000004c0)=0x4) r2 = mq_open(&(0x7f00000001c0)='#\x00', 0x2, 0x0, &(0x7f0000000300)={0x847, 0x3, 0x8001, 0x5}) mq_notify(r2, &(0x7f0000000440)={0x0, 0x5, 0x0, @thr={&(0x7f0000000340)="b17a1d0bdc867fdeafa7d0bd2061f22d0bd88f2375257b2486092ae6768f417e48cd351ce98d3e155ea7037f856bb4c62e6727bcf29320c8b3dafea7b107430dd1970b2ad2ef5e3e0dd841249dca4843", &(0x7f00000003c0)="3ee855272a324f3555006b86a5f6eae0c34a5ced665f2933690539610dde5ddfe0621aaa03a6e240b36d839668f1165ddf2e40259a06e3f7a2fbe55f66fbbb986db5a4d93be69823e1590cd159cbe6b8"}}) syz_open_procfs(0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000020000100000000000000000002000000000000000000000014"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x4044) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xa1010000, 0x0, 0x0, 0x9, 0x832]}}) 4.95555772s ago: executing program 1 (id=1022): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmmsg$inet6(r3, &(0x7f0000000080)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0xf58, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4040884) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r0, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4.74081449s ago: executing program 1 (id=1023): prlimit64(0x0, 0xe, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0103c6ed460b43e4cf9f26b7"], 0x14}, 0x1, 0x0, 0x0, 0x20040005}, 0x40040) 4.269595444s ago: executing program 6 (id=1024): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0xc008aec1, &(0x7f0000000040)=ANY=[@ANYRES16]) 3.920857462s ago: executing program 6 (id=1025): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x68, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x4005, 0x1, {0x1, @win={{}, 0x0, 0xfffffff8, 0x0, 0x0, 0x0}}}) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000140)=0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x12, 0x800) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f0000000440)={@null, 0x6, 'veth1_virt_wifi\x00'}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x800, 0x0) 3.813038213s ago: executing program 2 (id=1026): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "d091f09e"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="0000e233f100"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.147373644s ago: executing program 6 (id=1027): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22f7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x4f, 0x0, &(0x7f0000000340)="17f42259af4284980679e2fc7eca5270666b1cb1d968506e771f164fb16f0c492ac51cdb6aa28506af09371c2612f1580de3ee27b99e92701088fd2c7ac8fa4adb39707fbc40fb0602bd4c4f0000cb", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x50) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r2, @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200)=[{0x0}], 0x1) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c000440000000000000000214000000110001"], 0xe4}}, 0x200000d4) sendfile(r7, r6, 0x0, 0x20000023893) 2.855233368s ago: executing program 3 (id=1028): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x92e2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/xfrm_stat\x00') read$FUSE(r3, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f000001c380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000070a010100000000000000000300000324000580080001400000001a080001400000005e08000140000000000800024000325b5300000208000b4000000004"], 0x58}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=""/18, 0x12) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}, @generic="d7"]}, 0x20}}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 2.504375393s ago: executing program 5 (id=1029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3ff) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x1c000) r1 = syz_io_uring_setup(0x111, &(0x7f00000004c0)={0x0, 0x334e, 0x10, 0x4, 0x195}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x10, 0x0, 0x0, 0xfff, 0x0}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x81) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) prlimit64(r5, 0xd, &(0x7f0000000040)={0xd4e, 0xfffffffffffffff8}, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0xefe90000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) setuid(0x0) setuid(0x0) 2.371835529s ago: executing program 3 (id=1030): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x70bd25, 0x20234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) r3 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x12) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000080)={0x2a, 0x4, 0x0, {0x1, 0x7fff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000280)={&(0x7f00000001c0)=[{0x7, 0x211, 0x0, 0x0}, {0x50, 0x4000, 0x0, 0x0}], 0x2}) 2.327028304s ago: executing program 6 (id=1031): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$xdp(0x2c, 0x3, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f00000002c0)={0x0, 0x0, r2}) write$binfmt_misc(r3, &(0x7f0000000340)="bc6cde9d65bc1298cd125789c3c85418335cd4c97d6361a96b4ee5ad477afa01a8d6512f3631dfea8ef8384078c0dad7a0cb718ffb2057efee97e108ada785760dd619db19644d796b7e91046b706a5adbc286c6449115a07f576015a976a756d817192fb05dc3af1e8f372471e8a862269690995d6655a7b11edf593cd8e132f8a9bb84c7f3fb31218599184d92c9b5c2ddb8b2de", 0x95) mprotect(&(0x7f00007c2000/0x2000)=nil, 0x2000, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x30, 0x5f, 0x5f]}}, 0x0, 0x29, 0x0, 0x1, 0x5}, 0x28) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x4, 0x3e, 0x16, 0xfffffffd, 0x100, &(0x7f0000000800)="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"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r5, 0x0, 0x7, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000240), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (async) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r6, 0xe8b13d2f3d0d4396}], 0x1, &(0x7f0000000300), 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000140)=@req3={0x6, 0x9aa, 0xb, 0x1, 0x81, 0x3c3, 0x3}, 0x1c) r8 = syz_open_dev$usbfs(&(0x7f0000000200), 0x2, 0x102) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'macvlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb35, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) mmap$usbfs(&(0x7f00005f4000/0x4000)=nil, 0x4000, 0x8, 0x4000010, r8, 0x0) (async) mmap$usbfs(&(0x7f00005f4000/0x4000)=nil, 0x4000, 0x8, 0x4000010, r8, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udplite(0xa, 0x2, 0x88) 2.112990217s ago: executing program 5 (id=1032): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100b28d0000086d040ec2000000000001090224000108004049090400000103000200092103000401220100090581030800950010"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1015c, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x2, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000002c0)={0x3c, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) getrandom(0x0, 0x0, 0x2) socket(0x1e, 0x5, 0x0) syz_open_dev$vim2m(0x0, 0x2, 0x2) r5 = syz_usb_connect$hid(0x5, 0x59, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2179, 0x53, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220700e1ffaa0a6e1c83c887"], 0x0}, 0x0) 2.092856451s ago: executing program 1 (id=1033): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x4, 0x4, 0x3, 0x3}}, 0x26) (async) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x40000cc4, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, 0x3008, 0x0, 0x0, 0x0, 0x200000}) (async, rerun: 32) ioctl$PPPIOCGL2TPSTATS(r2, 0x80047453, 0xfffffffffffffffe) (rerun: 32) 1.864525378s ago: executing program 1 (id=1034): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x408) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00') chdir(&(0x7f0000000140)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r2) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x1, &(0x7f0000000300)='/'}, {0xfffc, 0xd010, 0x0, 0x0}], 0x2}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.424943068s ago: executing program 2 (id=1035): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@cluster={{0x30}, {0x4, 0x4, 0x183e, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x7, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x40}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f00000004c0)) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x6e6f, &(0x7f00000001c0)={0x0, 0xf04d, 0x1, 0x8001, 0x211}) close(r1) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r2, &(0x7f00000005c0)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff00080002"], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}, 0x1c) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES64=r4, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000b4bffc)=0x40000c, 0x4) sendmmsg(r2, &(0x7f0000014140)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000700)="a3", 0x1}], 0x1}}], 0x1, 0x20) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000240)=""/145, 0x91}], 0x1) 0s ago: executing program 6 (id=1036): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x101100) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000003c0), 0x1, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f0000000400)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01161800400000000000100000001000000405000000040000001800000e0400000000000000fbff300000"], 0x0, 0x2d}, 0x28) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) io_uring_enter(0xffffffffffffffff, 0x5990, 0xb3d7, 0x8, &(0x7f00000000c0)={[0x2]}, 0x8) syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x71c, 0x4e23, 0x2, 0x0, 0x80, 0x0, 0xff}, {@in6=@private2, 0x4d6, 0x6c}, @in=@private=0x8010101, {0xffffffffffffffff, 0x192, 0x9ba3, 0x2, 0x251c, 0x3, 0xfffffffffffffffc}, {0xfffffffffffffffd, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3502, 0xa, 0x3, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x880}, 0x0) kernel console output (not intermixed with test programs): 2_fill_super:989 ERROR: superblock probe failed! [ 215.756126][ T7777] (syz.3.370,7777,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 216.046054][ T7788] capability: warning: `syz.3.373' uses 32-bit capabilities (legacy support in use) [ 216.081271][ T30] audit: type=1107 audit(1755946505.108:57): pid=7785 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 216.994392][ T7510] veth0_vlan: entered promiscuous mode [ 217.193258][ T5842] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 217.865503][ T5842] usb 6-1: Using ep0 maxpacket: 16 [ 218.322983][ T5842] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 218.336585][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.345252][ T5842] usb 6-1: Product: syz [ 218.372580][ T5842] usb 6-1: Manufacturer: syz [ 218.381211][ T7510] veth1_vlan: entered promiscuous mode [ 218.386906][ T5842] usb 6-1: SerialNumber: syz [ 218.402510][ T5842] usb 6-1: config 0 descriptor?? [ 218.467825][ T5842] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 218.787180][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.012141][ T7832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.046248][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.072505][ T7832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.089612][ T7510] veth0_macvtap: entered promiscuous mode [ 219.111992][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.126895][ T7510] veth1_macvtap: entered promiscuous mode [ 219.191910][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.236772][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.245514][ T7832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.264258][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.278879][ T7510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.328204][ T7510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.380172][ T7510] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.407917][ T7835] comedi comedi0: comedi_config --init_data is deprecated [ 219.417342][ T7510] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.443024][ T7832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.451159][ T7510] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.495484][ T7510] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.520658][ T5842] usb 6-1: clie_3_5_startup: get config number failed: -71 [ 219.550741][ T5842] visor 6-1:0.0: probe with driver visor failed with error -71 [ 219.601564][ T5842] usb 6-1: USB disconnect, device number 2 [ 219.746387][ T7838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.382'. [ 219.773468][ T5984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.773490][ T5984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.888152][ T5984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.888175][ T5984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.214420][ T51] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 224.024726][ T7898] usb usb8: usbfs: process 7898 (syz.3.393) did not claim interface 0 before use [ 224.446687][ T7911] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 224.633325][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.398'. [ 225.532532][ T7935] netlink: 'syz.1.401': attribute type 25 has an invalid length. [ 225.914786][ T7940] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 225.975756][ T5840] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 226.146875][ T5840] usb 6-1: Using ep0 maxpacket: 32 [ 226.221751][ T5840] usb 6-1: config 0 has an invalid interface number: 78 but max is 0 [ 226.311788][ T5840] usb 6-1: config 0 has no interface number 0 [ 226.383593][ T5840] usb 6-1: config 0 interface 78 has no altsetting 0 [ 226.460438][ T5840] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=9b.26 [ 226.490783][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.504253][ T5840] usb 6-1: Product: syz [ 226.515587][ T5842] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 226.546304][ T5840] usb 6-1: Manufacturer: syz [ 226.552336][ T5840] usb 6-1: SerialNumber: syz [ 227.221239][ T5840] usb 6-1: config 0 descriptor?? [ 227.260795][ T7944] veth3: entered promiscuous mode [ 227.264873][ T5840] (null): radio-mr800 - initialization failed [ 227.303392][ T5840] radio-mr800 6-1:0.78: probe with driver radio-mr800 failed with error -8 [ 227.381196][ T5840] usbhid 6-1:0.78: couldn't find an input interrupt endpoint [ 227.535718][ T5842] usb 4-1: device not accepting address 19, error -71 [ 227.839941][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'. [ 228.672373][ T5910] usb 6-1: USB disconnect, device number 3 [ 229.741460][ T7992] xt_addrtype: ipv6 does not support BROADCAST matching [ 230.493967][ T30] audit: type=1804 audit(1755946519.518:58): pid=8005 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.419" name="/newroot/98/bus/bus" dev="overlay" ino=551 res=1 errno=0 [ 230.533583][ T8005] syzkaller1: entered allmulticast mode [ 230.556968][ T30] audit: type=1800 audit(1755946519.548:59): pid=8005 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.419" name="bus" dev="overlay" ino=551 res=0 errno=0 [ 231.000792][ T5986] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 232.315609][ T5986] usb 4-1: Using ep0 maxpacket: 32 [ 232.332973][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 232.365026][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 232.417707][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 232.454158][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 232.504421][ T5986] usb 4-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 232.530371][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.548823][ T5986] usb 4-1: Product: syz [ 232.557301][ T5986] usb 4-1: Manufacturer: syz [ 232.567828][ T5986] usb 4-1: SerialNumber: syz [ 232.587157][ T5986] usb 4-1: config 0 descriptor?? [ 232.625303][ T5986] cypress_m8 4-1:0.0: HID->COM RS232 Adapter converter detected [ 232.661150][ T5986] cyphidcom ttyUSB0: required endpoint is missing [ 232.707532][ T8041] netlink: 36 bytes leftover after parsing attributes in process `syz.6.429'. [ 232.726691][ T8039] netlink: 'syz.1.430': attribute type 3 has an invalid length. [ 232.734706][ T8039] netlink: 20 bytes leftover after parsing attributes in process `syz.1.430'. [ 232.740660][ T30] audit: type=1326 audit(1755946521.768:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8040 comm="syz.6.429" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1393d8ebe9 code=0x0 [ 232.744928][ T8039] netlink: 'syz.1.430': attribute type 1 has an invalid length. [ 232.805006][ T5986] usb 4-1: USB disconnect, device number 21 [ 232.814218][ T5986] cypress_m8 4-1:0.0: device disconnected [ 232.853117][ T8043] netlink: zone id is out of range [ 232.861019][ T8043] netlink: zone id is out of range [ 232.866474][ T8043] netlink: zone id is out of range [ 232.874269][ T8043] netlink: zone id is out of range [ 232.880084][ T8043] netlink: zone id is out of range [ 232.885286][ T8043] netlink: zone id is out of range [ 232.891361][ T8043] netlink: zone id is out of range [ 232.896775][ T8043] netlink: zone id is out of range [ 232.901927][ T8043] netlink: zone id is out of range [ 232.924299][ T8043] netlink: zone id is out of range [ 233.174729][ T8048] bridge0: port 3(batadv0) entered disabled state [ 233.181568][ T8048] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.189324][ T8048] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.289644][ T8048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.305025][ T8048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.428442][ T8048] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.439249][ T8048] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.452262][ T8048] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.479670][ T8048] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.932229][ T8077] netlink: 4344 bytes leftover after parsing attributes in process `syz.5.438'. [ 234.990090][ T8077] input: syz1 as /devices/virtual/input/input12 [ 235.156006][ T5840] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 235.362193][ T5840] usb 7-1: unable to get BOS descriptor or descriptor too short [ 235.441511][ T5840] usb 7-1: not running at top speed; connect to a high speed hub [ 235.848393][ T5840] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.861969][ T5840] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 235.905590][ T5840] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 235.979355][ T5840] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.010463][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.047591][ T5840] usb 7-1: Product: syz [ 236.051906][ T5840] usb 7-1: Manufacturer: syz [ 236.057205][ T5840] usb 7-1: SerialNumber: syz [ 236.113253][ T8106] netlink: 32 bytes leftover after parsing attributes in process `syz.5.445'. [ 236.153705][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 236.162919][ T8104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.444'. [ 236.285519][ T3592] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 237.431712][ T5840] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 237.624927][ T5840] usb 7-1: USB disconnect, device number 2 [ 237.799731][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.298835][ T5840] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 238.368030][ T8121] syzkaller0: entered promiscuous mode [ 238.549100][ T8121] syzkaller0: entered allmulticast mode [ 238.580319][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 238.597842][ T5840] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 238.630481][ T5840] usb 2-1: New USB device found, idVendor=17cf, idProduct=721e, bcdDevice=de.06 [ 238.647296][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.655712][ T5840] usb 2-1: Product: syz [ 238.660111][ T5840] usb 2-1: Manufacturer: syz [ 238.666036][ T5840] usb 2-1: SerialNumber: syz [ 238.699455][ T5840] usb 2-1: config 0 descriptor?? [ 238.805547][ T5842] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 239.009621][ T5842] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 239.038523][ T5842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 239.071639][ T5842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 239.093335][ T5842] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 239.108619][ T3592] usb 2-1: USB disconnect, device number 18 [ 239.134528][ T5842] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.144161][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.160190][ T5842] usb 7-1: config 0 descriptor?? [ 239.174059][ T8135] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 239.917368][ T5842] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 240.128346][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.6.452'. [ 240.145781][ T3592] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 240.304260][ T3592] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 240.354431][ T3592] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.402084][ T3592] usb 4-1: Product: syz [ 240.411921][ T3592] usb 4-1: Manufacturer: syz [ 240.434129][ T3592] usb 4-1: SerialNumber: syz [ 240.608465][ T3592] usb 4-1: config 0 descriptor?? [ 240.629072][ T3592] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 241.042542][ T3592] usb 4-1: USB disconnect, device number 22 [ 241.297411][ T5840] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 244.695443][ T5842] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 244.855585][ T5842] usb 4-1: device descriptor read/64, error -71 [ 244.989603][ T5972] usb 7-1: USB disconnect, device number 3 [ 245.187003][ T5842] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 245.525670][ T5842] usb 4-1: device descriptor read/64, error -71 [ 245.552306][ T30] audit: type=1800 audit(1755946534.568:61): pid=8181 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.465" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 245.898039][ T5842] usb usb4-port1: attempt power cycle [ 246.052803][ T8190] loop2: detected capacity change from 0 to 7 [ 246.239523][ T8190] Dev loop2: unable to read RDB block 7 [ 246.245260][ T8190] loop2: AHDI p1 p2 p3 [ 246.526217][ T8190] loop2: partition table partially beyond EOD, truncated [ 246.648258][ T8190] loop2: p1 start 1601398130 is beyond EOD, truncated [ 246.701445][ T8199] trusted_key: encrypted_key: insufficient parameters specified [ 246.743119][ T8190] loop2: p2 start 1702059890 is beyond EOD, truncated [ 247.155546][ T5840] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 247.226294][ T5842] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 247.232363][ T3592] libceph: connect (1)[c::]:6789 error -101 [ 247.241045][ T3592] libceph: mon0 (1)[c::]:6789 connect error [ 247.325440][ T5840] usb 6-1: Using ep0 maxpacket: 8 [ 247.416241][ T5842] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 247.907798][ T3592] libceph: connect (1)[c::]:6789 error -101 [ 247.924829][ T5840] usb 6-1: config 5 has an invalid interface number: 35 but max is 0 [ 247.938873][ T3592] libceph: mon0 (1)[c::]:6789 connect error [ 247.977542][ T5840] usb 6-1: config 5 has no interface number 0 [ 247.993524][ T8210] ceph: No mds server is up or the cluster is laggy [ 248.084376][ T5840] usb 6-1: config 5 interface 35 altsetting 10 endpoint 0x5 has an invalid bInterval 64, changing to 10 [ 248.122042][ T5842] usb 4-1: Using ep0 maxpacket: 32 [ 248.153170][ T5842] usb 4-1: config 0 has an invalid interface number: 212 but max is 0 [ 248.160548][ T5840] usb 6-1: config 5 interface 35 has no altsetting 0 [ 248.168412][ T5842] usb 4-1: config 0 has no interface number 0 [ 248.174544][ T5842] usb 4-1: config 0 interface 212 has no altsetting 0 [ 248.186892][ T5840] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=d4.1b [ 248.203828][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.274085][ T5840] usb 6-1: Product: syz [ 248.338868][ T5840] usb 6-1: Manufacturer: syz [ 248.343677][ T5840] usb 6-1: SerialNumber: syz [ 248.485028][ T5842] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=c5.d3 [ 248.517609][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.586250][ T5842] usb 4-1: Product: syz [ 248.631922][ T5842] usb 4-1: Manufacturer: syz [ 248.668305][ T5842] usb 4-1: SerialNumber: syz [ 248.686677][ T5842] usb 4-1: config 0 descriptor?? [ 248.701523][ T5840] ttusbir 6-1:5.35: cannot find expected altsetting [ 248.705835][ T5842] kvaser_usb 4-1:0.212: error -ENODEV: Cannot get usb endpoint(s) [ 248.765648][ T5840] usb 6-1: USB disconnect, device number 4 [ 248.924722][ T5929] usb 4-1: USB disconnect, device number 26 [ 249.293932][ T8228] hub 8-0:1.0: USB hub found [ 249.312345][ T8228] hub 8-0:1.0: 1 port detected [ 250.133286][ T8246] netlink: 'syz.1.480': attribute type 1 has an invalid length. [ 250.141049][ T8246] netlink: 224 bytes leftover after parsing attributes in process `syz.1.480'. [ 250.720129][ T8234] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 251.216893][ T5986] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 251.399140][ T5986] usb 6-1: device descriptor read/64, error -71 [ 251.671391][ T5986] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 251.840947][ T5986] usb 6-1: device descriptor read/64, error -71 [ 251.965846][ T5986] usb usb6-port1: attempt power cycle [ 252.365472][ T5986] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 252.405510][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 252.411660][ T8250] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 252.432791][ T5986] usb 6-1: device descriptor read/8, error -71 [ 253.656455][ T5986] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 253.832497][ T5986] usb 6-1: device descriptor read/8, error -71 [ 254.006985][ T5986] usb usb6-port1: unable to enumerate USB device [ 254.523339][ T8296] (syz.5.494,8296,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 254.532423][ T8296] (syz.5.494,8296,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 255.265626][ T5910] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 255.425499][ T5910] usb 2-1: device descriptor read/64, error -71 [ 255.579404][ T8318] netlink: 92 bytes leftover after parsing attributes in process `syz.3.501'. [ 255.679909][ T8317] syz.3.501: attempt to access beyond end of device [ 255.679909][ T8317] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 255.700674][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.728288][ T5929] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 255.843870][ T5910] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 255.968826][ T5929] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.031247][ T5929] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.090386][ T5929] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 256.110072][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.165504][ T5910] usb 2-1: device descriptor read/64, error -71 [ 256.285810][ T5910] usb usb2-port1: attempt power cycle [ 256.527327][ T8325] block device autoloading is deprecated and will be removed. [ 256.685624][ T5910] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 256.716572][ T5910] usb 2-1: device descriptor read/8, error -71 [ 257.335492][ T5910] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 257.398422][ T5910] usb 2-1: device descriptor read/8, error -71 [ 257.435524][ T5929] usb 7-1: usb_control_msg returned -71 [ 257.476306][ T5929] usbtmc 7-1:16.0: can't read capabilities [ 257.516696][ T5910] usb usb2-port1: unable to enumerate USB device [ 257.536684][ T5929] usb 7-1: USB disconnect, device number 4 [ 258.948980][ T8343] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 258.955550][ T8343] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 259.236579][ T8354] random: crng reseeded on system resumption [ 260.037600][ T8350] netlink: 104 bytes leftover after parsing attributes in process `syz.6.508'. [ 260.089525][ T8343] vhci_hcd vhci_hcd.0: Device attached [ 260.100708][ T8344] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 260.146586][ T8357] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 260.182027][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.6.508'. [ 260.195665][ T8350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.218034][ T8343] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 260.275510][ T5910] vhci_hcd: vhci_device speed not set [ 261.075519][ T5910] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 261.230794][ T8350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.266641][ T8345] vhci_hcd: connection reset by peer [ 261.295686][ T2993] vhci_hcd: stop threads [ 261.299993][ T2993] vhci_hcd: release socket [ 261.324851][ T2993] vhci_hcd: disconnect device [ 261.607052][ T8380] netlink: 40 bytes leftover after parsing attributes in process `syz.3.515'. [ 261.729117][ T8387] sg_write: data in/out 209152/4 bytes for SCSI command 0x89-- guessing data in; [ 261.729117][ T8387] program syz.2.516 not setting count and/or reply_len properly [ 262.920263][ T8401] netlink: 356 bytes leftover after parsing attributes in process `syz.2.522'. [ 265.575604][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 265.967467][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 265.978041][ T9] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 266.019404][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 266.043540][ T9] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 266.067168][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.084669][ T9] usb 2-1: config 0 descriptor?? [ 266.236134][ T5910] vhci_hcd: vhci_device speed not set [ 266.255767][ T5903] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 266.440308][ T5903] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 266.482943][ T5903] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.566813][ T5903] usb 3-1: config 0 has no interface number 0 [ 266.578324][ T5929] usb 2-1: USB disconnect, device number 23 [ 266.595923][ T5903] usb 3-1: New USB device found, idVendor=045b, idProduct=024d, bcdDevice=27.16 [ 266.614442][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.635552][ T5903] usb 3-1: Product: syz [ 266.639748][ T5903] usb 3-1: Manufacturer: syz [ 266.653219][ T5903] usb 3-1: SerialNumber: syz [ 266.753319][ T5903] usb 3-1: config 0 descriptor?? [ 267.030041][ T5903] usb 3-1: USB disconnect, device number 13 [ 267.488338][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.532'. [ 269.507180][ T8458] fuse: Bad value for 'group_id' [ 269.520280][ T8458] fuse: Bad value for 'group_id' [ 269.984971][ T8465] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 271.085488][ T30] audit: type=1800 audit(1755946560.098:62): pid=8479 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.544" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 272.590007][ T3019] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.880601][ T8499] fuse: Bad value for 'group_id' [ 272.893344][ T8499] fuse: Bad value for 'group_id' [ 273.975561][ T5903] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 274.204489][ T8519] tmpfs: Bad value for 'huge' [ 274.212070][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 274.248160][ T5972] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 274.536343][ T5972] usb 6-1: Using ep0 maxpacket: 16 [ 274.554613][ T5903] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 274.577299][ T5972] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 274.578928][ T5903] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 274.599070][ T5972] usb 6-1: config 0 has no interface number 0 [ 274.606102][ T5903] usb 2-1: Product: syz [ 274.610308][ T5903] usb 2-1: Manufacturer: syz [ 274.627645][ T5903] usb 2-1: SerialNumber: syz [ 274.633518][ T5972] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 274.660957][ T5903] usb 2-1: config 0 descriptor?? [ 274.678239][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.678941][ T5903] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 274.687506][ T5972] usb 6-1: Product: syz [ 274.703163][ T5972] usb 6-1: Manufacturer: syz [ 274.713460][ T5972] usb 6-1: SerialNumber: syz [ 274.746939][ T5972] usb 6-1: config 0 descriptor?? [ 274.756037][ T8524] netlink: 'syz.6.559': attribute type 2 has an invalid length. [ 274.763752][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.6.559'. [ 274.776119][ T5972] ftdi_sio 6-1:0.231: FTDI USB Serial Device converter detected [ 274.785920][ T5972] usb 6-1: Detected FT232H [ 274.825526][ T5842] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 274.874369][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 274.975643][ T5842] usb 3-1: Using ep0 maxpacket: 16 [ 274.984095][ T5842] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 274.989913][ T8516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.996077][ T5842] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.012891][ T5842] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.026901][ T8516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.036960][ T5842] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.046722][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.069639][ T5842] usb 3-1: Product: syz [ 275.074140][ T5842] usb 3-1: Manufacturer: syz [ 275.074308][ T5972] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 275.081072][ T5842] usb 3-1: SerialNumber: syz [ 275.297995][ T5972] ftdi_sio 6-1:0.231: GPIO initialisation failed: -71 [ 275.313628][ T5903] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 275.353030][ T5972] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 275.661083][ T5972] usb 6-1: USB disconnect, device number 9 [ 275.663500][ T5903] usb 2-1: USB disconnect, device number 24 [ 275.677830][ T5972] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 275.726907][ T5972] ftdi_sio 6-1:0.231: device disconnected [ 275.734152][ T8532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.799600][ T8532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.850688][ T8532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.142165][ T8532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.496222][ T8542] netlink: 'syz.6.563': attribute type 6 has an invalid length. [ 276.504623][ T8542] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.563'. [ 276.886781][ T8543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.938180][ T8543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.982183][ T8546] fuse: Bad value for 'group_id' [ 277.008886][ T8546] fuse: Bad value for 'group_id' [ 278.801559][ T5910] IPVS: starting estimator thread 0... [ 278.915563][ T8563] IPVS: using max 33 ests per chain, 79200 per kthread [ 278.994507][ T8568] net_ratelimit: 16 callbacks suppressed [ 278.994549][ T8568] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 280.225649][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.572'. [ 281.544734][ T5842] usb 3-1: 0:2 : does not exist [ 281.596796][ T8581] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 281.649926][ T8586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.708608][ T5910] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 281.758041][ T5842] usb 3-1: USB disconnect, device number 14 [ 281.857592][ T5910] usb 2-1: device descriptor read/64, error -71 [ 281.869209][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.105625][ T5903] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 282.755508][ T5910] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 282.856989][ T5903] usb 7-1: Using ep0 maxpacket: 8 [ 282.867428][ T5903] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.899163][ T5903] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 282.926741][ T5903] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 282.945557][ T5903] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.977838][ T5910] usb 2-1: device descriptor read/64, error -71 [ 282.989029][ T5903] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 283.003117][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.024074][ T8603] 9pnet_fd: Insufficient options for proto=fd [ 283.159039][ T5910] usb usb2-port1: attempt power cycle [ 283.776208][ T5903] usb 7-1: GET_CAPABILITIES returned 0 [ 283.799882][ T5903] usbtmc 7-1:16.0: can't read capabilities [ 283.805951][ T5910] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 283.964044][ T8610] loop1: detected capacity change from 0 to 14 [ 283.994517][ T8610] Dev loop1: unable to read RDB block 14 [ 284.017239][ T5840] usb 7-1: USB disconnect, device number 5 [ 284.025484][ T5910] usb 2-1: device not accepting address 27, error -71 [ 284.034409][ T8610] loop1: AHDI p4 [ 284.042368][ T8610] loop1: partition table partially beyond EOD, truncated [ 284.078030][ T5206] Dev loop1: unable to read RDB block 14 [ 284.083878][ T5206] loop1: AHDI p4 [ 284.088204][ T5206] loop1: partition table partially beyond EOD, truncated [ 284.168304][ T8617] futex_wake_op: syz.1.585 tries to shift op by -1; fix this program [ 284.255521][ T5903] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 284.410416][ T5903] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 284.438261][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.446847][ T8624] netlink: 20 bytes leftover after parsing attributes in process `syz.3.582'. [ 284.480614][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.519147][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 284.546886][ T5903] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 284.556661][ T5903] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 284.564779][ T5903] usb 3-1: Manufacturer: syz [ 284.599513][ T5903] usb 3-1: config 0 descriptor?? [ 285.022208][ T5903] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 285.144818][ T5903] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 285.247608][ T8619] comedi comedi2: reset error (fatal) [ 285.585826][ T5972] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 285.857401][ T5972] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 285.934272][ T5972] usb 2-1: config 0 has no interface number 0 [ 285.998295][ T5972] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 286.107721][ T5972] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 286.224111][ T5972] usb 2-1: config 0 interface 255 has no altsetting 0 [ 286.235999][ T5972] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 286.249736][ T5840] usb 3-1: USB disconnect, device number 15 [ 286.388271][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.481900][ T5972] usb 2-1: config 0 descriptor?? [ 286.511660][ T5972] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 286.600586][ T8652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.750867][ T5903] usb 2-1: USB disconnect, device number 29 [ 287.755178][ T8664] Bluetooth: MGMT ver 1.23 [ 287.851766][ T8664] hub 1-0:1.0: USB hub found [ 287.865695][ T8664] hub 1-0:1.0: 1 port detected [ 291.208401][ T5929] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 292.473928][ T5910] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 292.656617][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 292.686166][ T8682] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 292.734480][ T5910] usb 4-1: device descriptor read/all, error -71 [ 292.812829][ T8680] cgroup: fork rejected by pids controller in /syz6 [ 292.975530][ T5842] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 294.065463][ T5842] usb 2-1: Using ep0 maxpacket: 16 [ 294.077553][ T5842] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 294.154923][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.200144][ T5842] usb 2-1: Product: syz [ 294.221003][ T5842] usb 2-1: Manufacturer: syz [ 294.242778][ T5842] usb 2-1: SerialNumber: syz [ 294.268793][ T5842] usb 2-1: config 0 descriptor?? [ 294.510059][ T8698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.510698][ T8835] netlink: 'syz.5.610': attribute type 10 has an invalid length. [ 294.536854][ T8698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.548521][ T8835] syz_tun: entered promiscuous mode [ 294.571446][ T8835] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 294.575055][ T5842] usb 2-1: USB disconnect, device number 30 [ 294.604971][ T8837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.611'. [ 294.620388][ T8840] netlink: 32 bytes leftover after parsing attributes in process `syz.6.613'. [ 294.642217][ T8837] fuse: Bad value for 'user_id' [ 294.652089][ T8837] fuse: Bad value for 'user_id' [ 294.718979][ T8837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.785100][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.045695][ T5929] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 295.225966][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 295.252247][ T5929] usb 3-1: unable to get BOS descriptor or descriptor too short [ 295.268203][ T5929] usb 3-1: config 5 has an invalid interface number: 215 but max is 0 [ 295.278281][ T5929] usb 3-1: config 5 has no interface number 0 [ 295.284431][ T5929] usb 3-1: config 5 interface 215 has no altsetting 0 [ 295.318106][ T5929] usb 3-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 295.404103][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.519430][ T5929] usb 3-1: Product: syz [ 295.544131][ T5929] usb 3-1: Manufacturer: syz [ 295.560737][ T5929] usb 3-1: SerialNumber: syz [ 296.975197][ T5929] cypress_m8 3-1:5.215: DeLorme Earthmate USB converter detected [ 297.019105][ T5929] usb 3-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 297.047339][ T5929] usb 3-1: USB disconnect, device number 16 [ 297.092652][ T5929] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 297.133937][ T8872] netlink: 20 bytes leftover after parsing attributes in process `syz.1.621'. [ 297.156244][ T5929] cypress_m8 3-1:5.215: device disconnected [ 298.030400][ T8893] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 298.276168][ T8893] netlink: 'syz.5.626': attribute type 15 has an invalid length. [ 298.805220][ T8904] tipc: Started in network mode [ 298.810187][ T8904] tipc: Node identity fa4e2d6a3177, cluster identity 4711 [ 298.818332][ T8904] tipc: Enabled bearer , priority 0 [ 298.825812][ T8903] syzkaller0: entered promiscuous mode [ 298.831594][ T8903] syzkaller0: entered allmulticast mode [ 300.055657][ T5910] tipc: Node number set to 3409522026 [ 300.063420][ T8903] tipc: Resetting bearer [ 300.218855][ T8903] tipc: Disabling bearer [ 301.663230][ T8918] 9pnet_fd: Insufficient options for proto=fd [ 301.885495][ T5842] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 301.999001][ T5929] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 302.025498][ T5842] usb 3-1: device descriptor read/64, error -71 [ 302.186465][ T5929] usb 2-1: device descriptor read/64, error -71 [ 302.413459][ T5842] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 302.471694][ T8934] (syz.6.637,8934,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 302.480935][ T8934] (syz.6.637,8934,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 302.497218][ T5929] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 302.675505][ T5842] usb 3-1: device descriptor read/64, error -71 [ 302.832713][ T5842] usb usb3-port1: attempt power cycle [ 302.833612][ T5929] usb 2-1: device descriptor read/64, error -71 [ 303.094673][ T5929] usb usb2-port1: attempt power cycle [ 303.146149][ T8941] 9pnet_virtio: no channels available for device 127.0.0.1 [ 303.445529][ T5929] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 303.474433][ T5972] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 303.542896][ T5929] usb 2-1: device descriptor read/8, error -71 [ 303.845554][ T5156] Bluetooth: hci2: command 0x0406 tx timeout [ 303.919083][ T5842] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 303.946867][ T5842] usb 3-1: device descriptor read/8, error -71 [ 303.980275][ T5929] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 304.005675][ T5972] usb 4-1: Using ep0 maxpacket: 8 [ 304.012820][ T5972] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 304.025808][ T5929] usb 2-1: device descriptor read/8, error -71 [ 304.035586][ T5972] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 304.057374][ T5972] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 304.077449][ T5972] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 304.109516][ T5972] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.157505][ T5929] usb usb2-port1: unable to enumerate USB device [ 304.174634][ T5972] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 304.187931][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.215503][ T5842] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 304.256227][ T5842] usb 3-1: device descriptor read/8, error -71 [ 304.365826][ T5842] usb usb3-port1: unable to enumerate USB device [ 304.412317][ T5972] usb 4-1: GET_CAPABILITIES returned 0 [ 304.418216][ T5972] usbtmc 4-1:16.0: can't read capabilities [ 304.448544][ T5903] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 304.460868][ T5972] usb 4-1: USB disconnect, device number 29 [ 304.538615][ T5910] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 304.578324][ T8958] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 304.593088][ T8958] netlink: 20 bytes leftover after parsing attributes in process `syz.3.643'. [ 304.596197][ T5903] usb 6-1: device descriptor read/64, error -71 [ 304.697193][ T5910] usb 7-1: Using ep0 maxpacket: 8 [ 304.714350][ T5910] usb 7-1: unable to get BOS descriptor or descriptor too short [ 304.733514][ T5910] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 304.892721][ T5910] usb 7-1: config 4 has an invalid descriptor of length 15, skipping remainder of the config [ 304.904104][ T5910] usb 7-1: config 4 has no interface number 0 [ 304.914041][ T5910] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 304.924548][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.933566][ T8965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.646'. [ 304.943130][ T8965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.646'. [ 304.952274][ T5903] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 305.548328][ T5910] usb 7-1: Product: syz [ 305.553227][ T5910] usb 7-1: Manufacturer: syz [ 305.666417][ T5910] usb 7-1: SerialNumber: syz [ 305.695536][ T5903] usb 6-1: device descriptor read/64, error -71 [ 305.806705][ T5903] usb usb6-port1: attempt power cycle [ 305.826691][ T8973] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.647'. [ 305.948786][ T5910] usb 7-1: Found UVC 0.02 device syz (04f2:b746) [ 305.955289][ T5910] uvcvideo 7-1:4.147: Entity type for entity Output 251 was not initialized! [ 305.983495][ T5910] usb 7-1: Failed to create links for entity 251 [ 305.995186][ T8984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.004512][ T5910] usb 7-1: Failed to register entities (-22). [ 306.013685][ T8984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.024960][ T5910] usb 7-1: USB disconnect, device number 6 [ 306.145625][ T5903] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 306.186135][ T5903] usb 6-1: device descriptor read/8, error -71 [ 306.225615][ T5842] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 306.425665][ T5903] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 306.446364][ T5903] usb 6-1: device descriptor read/8, error -71 [ 306.562134][ T5903] usb usb6-port1: unable to enumerate USB device [ 306.628137][ T8990] can0: slcan on ttyS3. [ 308.184653][ T8996] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 308.731585][ T8987] can0 (unregistered): slcan off ttyS3. [ 308.878699][ T5842] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 308.908857][ T30] audit: type=1326 audit(1755946597.928:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9006 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1cd58ebe9 code=0x7fc00000 [ 309.934683][ T9021] xt_CT: No such helper "netbios-ns" [ 310.000943][ T5842] usb 4-1: Using ep0 maxpacket: 8 [ 310.018175][ T5842] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 310.157168][ T5842] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.185519][ T5842] usb 4-1: config 0 has no interface number 0 [ 310.202182][ T5842] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 310.255009][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.274073][ T5842] usb 4-1: Product: syz [ 310.285452][ T5842] usb 4-1: Manufacturer: syz [ 310.295612][ T5842] usb 4-1: SerialNumber: syz [ 310.370851][ T5842] usb 4-1: config 0 descriptor?? [ 310.559447][ T5842] usb 4-1: Found UVC 0.00 device syz (046d:08c3) [ 310.685701][ T5842] usb 4-1: No valid video chain found. [ 310.846402][ T9011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.867625][ T9011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.003829][ T9035] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[9035] [ 311.091821][ T9039] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.117228][ T9038] netlink: 'syz.6.663': attribute type 6 has an invalid length. [ 311.455022][ T9048] xt_nat: multiple ranges no longer supported [ 312.156440][ T5929] usb 4-1: USB disconnect, device number 30 [ 312.190458][ T9039] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.878190][ T9039] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.441882][ T9039] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.600601][ T9056] ubi31: attaching mtd0 [ 313.610710][ T9056] ubi31: scanning is finished [ 313.615630][ T9056] ubi31: empty MTD device detected [ 313.633011][ T9061] netlink: 'syz.6.669': attribute type 15 has an invalid length. [ 313.658081][ T30] audit: type=1326 audit(1755946602.658:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9060 comm="syz.6.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393d8ebe9 code=0x7ffc0000 [ 313.770231][ T9056] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 313.777985][ T9056] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 313.785276][ T9056] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 313.792406][ T9056] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 313.799917][ T9056] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 313.806829][ T9056] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 313.814889][ T9056] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 50266803 [ 313.824820][ T9056] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 313.838558][ T9063] ubi31: background thread "ubi_bgt31d" started, PID 9063 [ 313.886413][ T30] audit: type=1326 audit(1755946602.658:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9060 comm="syz.6.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f1393d8ebe9 code=0x7ffc0000 [ 313.924671][ T9039] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.958769][ T30] audit: type=1326 audit(1755946602.658:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9060 comm="syz.6.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393d8ebe9 code=0x7ffc0000 [ 314.026773][ T30] audit: type=1326 audit(1755946602.658:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9060 comm="syz.6.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1393d8ebe9 code=0x7ffc0000 [ 314.112373][ T30] audit: type=1326 audit(1755946602.658:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9060 comm="syz.6.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393d8ebe9 code=0x7ffc0000 [ 314.142051][ T9039] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.191120][ T9039] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.279595][ T30] audit: type=1326 audit(1755946602.658:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9060 comm="syz.6.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1393d8ebe9 code=0x7ffc0000 [ 314.307325][ T9039] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.369504][ T30] audit: type=1326 audit(1755946602.698:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9060 comm="syz.6.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393d8ebe9 code=0x7ffc0000 [ 314.441255][ T30] audit: type=1326 audit(1755946602.698:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9060 comm="syz.6.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1393d8ebe9 code=0x7ffc0000 [ 314.705600][ T30] audit: type=1326 audit(1755946602.698:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9060 comm="syz.6.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393d8ebe9 code=0x7ffc0000 [ 314.877948][ T30] audit: type=1326 audit(1755946602.698:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9060 comm="syz.6.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393d8ebe9 code=0x7ffc0000 [ 316.263075][ T9084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.676'. [ 316.617530][ T5910] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 316.788667][ T5910] usb 6-1: Using ep0 maxpacket: 32 [ 316.796451][ T5910] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 316.804791][ T5910] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 316.828626][ T5910] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 316.845529][ T5910] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 316.859690][ T5910] usb 6-1: config 0 interface 0 has no altsetting 0 [ 316.871595][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.6.678'. [ 316.888295][ T5910] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 316.898026][ T5910] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 316.907873][ T5910] usb 6-1: Product: syz [ 316.912589][ T5910] usb 6-1: Manufacturer: syz [ 316.917676][ T5910] usb 6-1: SerialNumber: syz [ 316.928875][ T5910] usb 6-1: config 0 descriptor?? [ 316.988384][ T5910] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 317.035126][ T5910] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 317.144864][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.243242][ T9081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.316120][ T9081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.340744][ T5972] usb 6-1: USB disconnect, device number 15 [ 317.560876][ T5910] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 317.892174][ T5910] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 318.037086][ T5910] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 318.045222][ T5910] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 318.113021][ T5972] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 318.145777][ T5910] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 318.198889][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 318.272161][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 318.299292][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 318.415924][ T9102] fuse: Unknown parameter 'ro00000A"B;E00000' [ 318.510027][ T5910] usb 2-1: string descriptor 0 read error: -22 [ 318.518949][ T5910] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 318.537378][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.549243][ T5910] usb 2-1: config 0 descriptor?? [ 318.556834][ T5910] hub 2-1:0.0: bad descriptor, ignoring hub [ 318.562787][ T5910] hub 2-1:0.0: probe with driver hub failed with error -5 [ 318.695577][ T5929] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 319.092558][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 319.118914][ T5910] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 319.173563][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.250634][ T5929] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 319.296922][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.311360][ T5929] usb 4-1: config 0 descriptor?? [ 319.642469][ T43] usb 2-1: USB disconnect, device number 35 [ 319.677779][ T5972] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 319.765325][ T5929] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 319.815389][ T9122] veth0_macvtap: left promiscuous mode [ 319.843619][ T9122] macvtap0: entered allmulticast mode [ 319.902143][ T5972] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 319.928084][ T5972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.982960][ T5972] usb 7-1: config 0 descriptor?? [ 320.055201][ T5842] usb 4-1: USB disconnect, device number 31 [ 320.227761][ T9117] netlink: 12 bytes leftover after parsing attributes in process `syz.6.687'. [ 320.238057][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.6.687'. [ 320.283677][ T5972] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 320.485000][ T5972] [drm:udl_init] *ERROR* Selecting channel failed [ 320.590190][ T5972] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 320.609358][ T5972] [drm] Initialized udl on minor 2 [ 320.638956][ T5972] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 320.673931][ T5972] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 320.733503][ T43] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 320.758033][ T5972] usb 7-1: USB disconnect, device number 7 [ 320.776042][ T43] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 322.475748][ T5972] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 322.768100][ T5972] usb 7-1: Using ep0 maxpacket: 32 [ 322.945649][ T5972] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 322.954234][ T5972] usb 7-1: config 0 has no interface number 0 [ 322.971283][ T5972] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 323.022769][ T5972] usb 7-1: config 0 interface 1 has no altsetting 0 [ 323.077286][ T5972] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 323.119186][ T5972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.136974][ T5972] usb 7-1: Product: syz [ 323.145641][ T5972] usb 7-1: Manufacturer: syz [ 323.150293][ T5972] usb 7-1: SerialNumber: syz [ 323.296362][ T5972] usb 7-1: config 0 descriptor?? [ 323.313701][ T9157] syzkaller1: entered promiscuous mode [ 323.363961][ T9157] syzkaller1: entered allmulticast mode [ 323.915881][ T9161] can0: slcan on ttyS3. [ 323.955715][ T5972] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 324.009219][ T5972] cx231xx 7-1:0.1: Failed to read PCB config [ 324.020608][ T5972] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -71 [ 324.036980][ T9154] can0 (unregistered): slcan off ttyS3. [ 324.147169][ T5842] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 324.148793][ T5972] usb 7-1: USB disconnect, device number 8 [ 324.305784][ T5842] usb 3-1: device descriptor read/64, error -71 [ 324.408709][ T5156] Bluetooth: hci4: command 0x041b tx timeout [ 324.655753][ T5842] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 324.925186][ T5842] usb 3-1: device descriptor read/64, error -71 [ 325.008384][ T30] audit: type=1326 audit(1755946614.018:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9177 comm="syz.6.699" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1393d8ebe9 code=0x0 [ 325.073127][ T5842] usb usb3-port1: attempt power cycle [ 325.526317][ T5842] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 325.656461][ T5842] usb 3-1: device descriptor read/8, error -71 [ 326.047181][ T5842] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 326.298306][ T5842] usb 3-1: device descriptor read/8, error -71 [ 326.417272][ T51] Bluetooth: hci4: connection err: -111 [ 326.426153][ T5842] usb usb3-port1: unable to enumerate USB device [ 326.520227][ T51] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 326.528921][ T51] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 326.556455][ T5986] kernel write not supported for file /367/clear_refs (pid: 5986 comm: kworker/0:7) [ 326.567945][ T5910] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 326.945518][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 326.969026][ T5910] usb 2-1: unable to get BOS descriptor or descriptor too short [ 326.992508][ T5910] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 83, changing to 7 [ 327.029268][ T5910] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.056932][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.065232][ T5910] usb 2-1: Product: syz [ 327.071881][ T5910] usb 2-1: Manufacturer: syz [ 327.109918][ T5910] usb 2-1: SerialNumber: syz [ 328.230827][ T9226] tmpfs: Unknown parameter 'usrquotad' [ 328.249553][ T9224] bond0: (slave syz_tun): Releasing backup interface [ 328.310055][ T9224] bridge_slave_0: left allmulticast mode [ 328.336582][ T9224] bridge_slave_0: left promiscuous mode [ 328.368597][ T9224] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.411569][ T9224] bridge_slave_1: left allmulticast mode [ 328.429982][ T9224] bridge_slave_1: left promiscuous mode [ 328.449830][ T9224] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.483354][ T9224] bond0: (slave bond_slave_0): Releasing backup interface [ 328.513264][ T9224] bond0: (slave bond_slave_1): Releasing backup interface [ 328.579762][ T9224] team0: Port device team_slave_0 removed [ 328.760733][ T5986] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 329.168759][ T9224] team0: Port device team_slave_1 removed [ 329.198416][ T9224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.217864][ T5910] usb 2-1: 2:1 : unsupported format bits 0x80 [ 329.218307][ T9224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.260870][ T9224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.293606][ T9224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.305744][ T5986] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 329.381962][ T5986] usb 3-1: config 179 has no interface number 0 [ 329.423169][ T5986] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 329.444357][ T5910] usb 2-1: USB disconnect, device number 36 [ 329.468018][ T5986] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 329.518549][ T5986] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 329.547778][ T5986] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 329.559929][ T5986] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 329.650663][ T5986] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 329.679608][ T9246] netlink: 32 bytes leftover after parsing attributes in process `syz.6.717'. [ 329.767710][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.980578][ T9231] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 330.179255][ T5986] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 330.431049][ T5986] xpad 3-1:179.65: probe with driver xpad failed with error -90 [ 330.555956][ T3592] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 330.589784][ T51] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 330.601189][ T51] Bluetooth: hci4: Injecting HCI hardware error event [ 330.612509][ T5156] Bluetooth: hci4: hardware error 0x00 [ 330.739812][ T5929] usb 3-1: USB disconnect, device number 26 [ 330.856387][ T3592] usb 4-1: Using ep0 maxpacket: 32 [ 330.922858][ T3592] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 330.933999][ T3592] usb 4-1: config 0 has no interface number 0 [ 330.958370][ T3592] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 331.045848][ T5986] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 331.169547][ T3592] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.179369][ T3592] usb 4-1: Product: syz [ 331.183892][ T3592] usb 4-1: Manufacturer: syz [ 331.188676][ T3592] usb 4-1: SerialNumber: syz [ 331.285534][ T5986] usb 2-1: Using ep0 maxpacket: 8 [ 331.296131][ T5986] usb 2-1: unable to get BOS descriptor or descriptor too short [ 331.319845][ T3592] usb 4-1: config 0 descriptor?? [ 331.325772][ T5986] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 331.327988][ T3592] smsc95xx v2.0.0 [ 331.421295][ T5986] usb 2-1: config 0 has no interface number 0 [ 331.428907][ T5986] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 331.443375][ T5986] usb 2-1: config 0 interface 88 has no altsetting 0 [ 331.463922][ T5986] usb 2-1: string descriptor 0 read error: -22 [ 331.473688][ T5986] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 331.489628][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 331.636541][ T5986] usb 2-1: config 0 descriptor?? [ 331.693154][ T5986] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input19 [ 331.802514][ T3592] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 331.842921][ T3592] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 331.878955][ T5986] usb 2-1: USB disconnect, device number 37 [ 331.884937][ C0] usb_acecad 2-1:0.88: can't resubmit intr, dummy_hcd.1-1/input0, status -19 [ 331.898840][ T3592] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 331.926036][ T3592] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 332.015694][ T8430] udevd[8430]: Error opening device "/dev/input/event4": No such device [ 332.024269][ T8430] udevd[8430]: Unable to EVIOCGABS device "/dev/input/event4" [ 332.042406][ T8430] udevd[8430]: Unable to EVIOCGABS device "/dev/input/event4" [ 332.578179][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 332.610847][ T9282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.726'. [ 332.805662][ T5156] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 333.048758][ T5910] usb 4-1: USB disconnect, device number 32 [ 333.155418][ T9294] tmpfs: Bad value for 'mpol' [ 333.576370][ T9301] netlink: 16 bytes leftover after parsing attributes in process `syz.6.733'. [ 333.736801][ T43] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 333.975667][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 334.382741][ T43] usb 2-1: config index 0 descriptor too short (expected 52, got 36) [ 334.404084][ T43] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 334.421325][ T43] usb 2-1: config 0 has no interface number 0 [ 334.821901][ T43] usb 2-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.832085][ T43] usb 2-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 334.841988][ T43] usb 2-1: config 0 interface 12 has no altsetting 0 [ 334.917325][ T43] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 334.931505][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.939874][ T43] usb 2-1: Product: syz [ 334.944074][ T43] usb 2-1: Manufacturer: syz [ 335.022255][ T43] usb 2-1: SerialNumber: syz [ 335.046577][ T43] usb 2-1: config 0 descriptor?? [ 335.052002][ T9303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.732'. [ 335.064863][ T43] f81534 2-1:0.12: unsupported endpoint max packet size [ 335.280474][ T9297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.289145][ T9297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.298665][ T43] usb 2-1: USB disconnect, device number 38 [ 335.759667][ T9329] netlink: 32 bytes leftover after parsing attributes in process `syz.5.738'. [ 335.775605][ T43] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 336.058484][ T43] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 336.068044][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.185161][ T43] usb 4-1: config 0 descriptor?? [ 338.794731][ T9325] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 338.823832][ T5156] Bluetooth: hci0: command 0x0406 tx timeout [ 338.826173][ T9325] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 338.945876][ T43] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 338.988385][ T9325] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 338.995191][ T9325] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 338.995403][ T43] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 339.022853][ T9325] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 339.055686][ T9325] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 339.090489][ T43] asix 4-1:0.0: probe with driver asix failed with error -71 [ 339.216180][ T9350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.744'. [ 339.481067][ T9325] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 339.482333][ T43] usb 4-1: USB disconnect, device number 33 [ 339.508543][ T9325] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 339.816774][ T5986] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 341.205680][ T5156] Bluetooth: hci0: command 0x0406 tx timeout [ 341.205946][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 341.212809][ T5156] Bluetooth: hci1: command 0x0406 tx timeout [ 341.384822][ T9375] netlink: 32 bytes leftover after parsing attributes in process `syz.3.750'. [ 341.395629][ T5845] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 341.525241][ T9375] fuse: Bad value for 'user_id' [ 341.530706][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 341.545835][ T9375] fuse: Bad value for 'user_id' [ 341.966366][ T9381] netlink: 32 bytes leftover after parsing attributes in process `syz.6.752'. [ 343.286078][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 343.605570][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 344.034907][ T9411] netlink: 132 bytes leftover after parsing attributes in process `syz.2.760'. [ 344.104225][ T9413] netlink: 16 bytes leftover after parsing attributes in process `syz.5.759'. [ 346.086563][ T9423] netlink: 32 bytes leftover after parsing attributes in process `syz.3.763'. [ 346.132917][ T9423] fuse: Bad value for 'user_id' [ 346.137969][ T9423] fuse: Bad value for 'user_id' [ 346.755724][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.766'. [ 347.170846][ T9437] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 347.810311][ T5910] IPVS: starting estimator thread 0... [ 347.935887][ T9449] IPVS: using max 32 ests per chain, 76800 per kthread [ 348.082407][ T9451] cgroup: fork rejected by pids controller in /syz3 [ 348.125081][ T9446] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 348.136908][ T30] audit: type=1800 audit(1755946893.143:75): pid=9446 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.769" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 348.155487][ T9446] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 348.166711][ T9446] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 348.687600][ T9566] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 348.723837][ T9566] netlink: 'syz.5.774': attribute type 10 has an invalid length. [ 348.885838][ T5929] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 348.911009][ T9566] batman_adv: batadv0: Adding interface: team0 [ 349.044677][ T9566] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.555550][ T9566] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 349.685102][ T9572] netlink: 32 bytes leftover after parsing attributes in process `syz.6.775'. [ 349.705217][ T9572] fuse: Bad value for 'user_id' [ 349.712289][ T9572] fuse: Bad value for 'user_id' [ 349.785918][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.806671][ T9575] 9pnet_fd: Insufficient options for proto=fd [ 349.816201][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.844286][ T5929] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 349.895480][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.929581][ T5929] usb 2-1: config 0 descriptor?? [ 350.003752][ T9584] netlink: 32 bytes leftover after parsing attributes in process `syz.5.779'. [ 350.450795][ T9586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.460790][ T9586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.949124][ T5929] usbhid 2-1:0.0: can't add hid device: -71 [ 350.959450][ T5929] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 351.002514][ T5929] usb 2-1: USB disconnect, device number 39 [ 352.399775][ T9598] syz.2.782: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 352.415069][ T9598] CPU: 0 UID: 0 PID: 9598 Comm: syz.2.782 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 352.415084][ T9598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 352.415097][ T9598] Call Trace: [ 352.415104][ T9598] [ 352.415110][ T9598] dump_stack_lvl+0x189/0x250 [ 352.415129][ T9598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.415141][ T9598] ? __pfx__printk+0x10/0x10 [ 352.415155][ T9598] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 352.415170][ T9598] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 352.415183][ T9598] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 352.415197][ T9598] warn_alloc+0x214/0x310 [ 352.415209][ T9598] ? stack_depot_save_flags+0x40/0x900 [ 352.415223][ T9598] ? __pfx_warn_alloc+0x10/0x10 [ 352.415236][ T9598] ? kasan_save_track+0x4f/0x80 [ 352.415252][ T9598] ? xskq_create+0x56/0x170 [ 352.415270][ T9598] ? xsk_init_queue+0xb0/0x110 [ 352.415279][ T9598] ? xsk_setsockopt+0x43f/0x710 [ 352.415294][ T9598] ? do_sock_setsockopt+0x179/0x1b0 [ 352.415308][ T9598] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 352.415322][ T9598] ? do_syscall_64+0xfa/0x3b0 [ 352.415333][ T9598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.415357][ T9598] __vmalloc_node_range_noprof+0x125/0x12f0 [ 352.415409][ T9598] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 352.415425][ T9598] ? __kasan_kmalloc+0x93/0xb0 [ 352.415437][ T9598] vmalloc_user_noprof+0xad/0xf0 [ 352.415448][ T9598] ? xskq_create+0xbf/0x170 [ 352.415459][ T9598] xskq_create+0xbf/0x170 [ 352.415471][ T9598] xsk_init_queue+0xb0/0x110 [ 352.415482][ T9598] xsk_setsockopt+0x43f/0x710 [ 352.415499][ T9598] ? __pfx_xsk_setsockopt+0x10/0x10 [ 352.415516][ T9598] ? __fget_files+0x2a/0x420 [ 352.415529][ T9598] ? __fget_files+0x2a/0x420 [ 352.415540][ T9598] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 352.415550][ T9598] ? __pfx_xsk_setsockopt+0x10/0x10 [ 352.415567][ T9598] do_sock_setsockopt+0x179/0x1b0 [ 352.415584][ T9598] __x64_sys_setsockopt+0x13f/0x1b0 [ 352.415602][ T9598] do_syscall_64+0xfa/0x3b0 [ 352.415612][ T9598] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.415624][ T9598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.415634][ T9598] ? clear_bhb_loop+0x60/0xb0 [ 352.415646][ T9598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.415656][ T9598] RIP: 0033:0x7fa385d8ebe9 [ 352.415672][ T9598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.415681][ T9598] RSP: 002b:00007fa383bd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 352.415693][ T9598] RAX: ffffffffffffffda RBX: 00007fa385fb6270 RCX: 00007fa385d8ebe9 [ 352.415701][ T9598] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 352.415707][ T9598] RBP: 00007fa385e11e19 R08: 0000000000000052 R09: 0000000000000000 [ 352.415714][ T9598] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.415720][ T9598] R13: 00007fa385fb6308 R14: 00007fa385fb6270 R15: 00007fff2fd6f3d8 [ 352.415738][ T9598] [ 352.708923][ T9598] Mem-Info: [ 352.712077][ T9598] active_anon:6016 inactive_anon:11271 isolated_anon:0 [ 352.712077][ T9598] active_file:15590 inactive_file:39632 isolated_file:0 [ 352.712077][ T9598] unevictable:768 dirty:120 writeback:0 [ 352.712077][ T9598] slab_reclaimable:10724 slab_unreclaimable:100634 [ 352.712077][ T9598] mapped:36087 shmem:12865 pagetables:1265 [ 352.712077][ T9598] sec_pagetables:0 bounce:0 [ 352.712077][ T9598] kernel_misc_reclaimable:0 [ 352.712077][ T9598] free:1302307 free_pcp:15475 free_cma:0 [ 352.758025][ T9598] Node 0 active_anon:24064kB inactive_anon:45084kB active_file:62156kB inactive_file:158528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144348kB dirty:472kB writeback:0kB shmem:49924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12264kB pagetables:4924kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 352.792522][ T9598] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 352.824129][ T9598] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 352.852954][ T9598] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 352.858723][ T9598] Node 0 DMA32 free:1297912kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24060kB inactive_anon:45040kB active_file:60380kB inactive_file:158468kB unevictable:1536kB writepending:468kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:37656kB local_pcp:21896kB free_cma:0kB [ 352.892363][ T9598] lowmem_reserve[]: 0 0 1 1 1 [ 352.897124][ T9598] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1776kB inactive_file:60kB unevictable:0kB writepending:4kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 352.926193][ T9598] lowmem_reserve[]: 0 0 0 0 0 [ 352.930898][ T9598] Node 1 Normal free:3895948kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:24288kB local_pcp:9120kB free_cma:0kB [ 352.962040][ T9598] lowmem_reserve[]: 0 0 0 0 0 [ 352.971906][ T9598] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 352.985617][ T9598] Node 0 DMA32: 1*4kB (E) 1*8kB (E) 248*16kB (UME) 395*32kB (ME) 227*64kB (UM) 88*128kB (UME) 78*256kB (UM) 47*512kB (UM) 25*1024kB (UM) 9*2048kB (UM) 285*4096kB (UM) = 1297836kB [ 353.003434][ T9598] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 353.015253][ T9598] Node 1 Normal: 171*4kB (UM) 50*8kB (UME) 29*16kB (UME) 146*32kB (UME) 39*64kB (UME) 5*128kB (UME) 4*256kB (ME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3895948kB [ 353.033301][ T9598] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 353.042875][ T9598] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 353.052181][ T9598] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 353.061772][ T9598] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 353.071070][ T9598] 68084 total pagecache pages [ 353.075772][ T9598] 0 pages in swap cache [ 353.079904][ T9598] Free swap = 124996kB [ 353.084038][ T9598] Total swap = 124996kB [ 353.088875][ T9598] 2097051 pages RAM [ 353.092682][ T9598] 0 pages HighMem/MovableOnly [ 353.097406][ T9598] 424695 pages reserved [ 353.101552][ T9598] 0 pages cma reserved [ 353.351411][ T9604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.784'. [ 353.674435][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.687481][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.698320][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.710064][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.717854][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.995116][ T3019] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.165659][ T3019] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.597028][ T9611] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.659273][ T9618] netlink: 32 bytes leftover after parsing attributes in process `syz.5.788'. [ 355.670840][ T9618] fuse: Bad value for 'user_id' [ 355.678334][ T9618] fuse: Bad value for 'user_id' [ 355.754225][ T3019] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.776421][ T5156] Bluetooth: hci0: command tx timeout [ 356.189548][ T3019] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.592078][ T9621] (syz.5.789,9621,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 356.600807][ T9621] (syz.5.789,9621,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 357.000939][ T9606] chnl_net:caif_netlink_parms(): no params data found [ 357.130820][ T3019] bridge_slave_1: left allmulticast mode [ 357.226228][ T9642] netlink: 24 bytes leftover after parsing attributes in process `syz.5.792'. [ 357.235228][ T9642] openvswitch: netlink: Flow key attr not present in new flow. [ 357.852541][ T5156] Bluetooth: hci0: command tx timeout [ 358.075607][ T3019] bridge_slave_1: left promiscuous mode [ 358.083147][ T3019] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.362991][ T3019] : left allmulticast mode [ 358.454822][ T3019] : left promiscuous mode [ 358.487212][ T3019] bridge0: port 1() entered disabled state [ 359.701160][ T9657] (syz.5.796,9657,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 359.709987][ T9657] (syz.5.796,9657,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 359.965478][ T5156] Bluetooth: hci0: command tx timeout [ 361.179263][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.801'. [ 361.919620][ T3019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.929684][ T3019] bond_slave_0: left promiscuous mode [ 361.938150][ T3019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.947297][ T3019] bond_slave_1: left promiscuous mode [ 361.955335][ T3019] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 361.965206][ T3019] batadv0: left promiscuous mode [ 361.976268][ T3019] bond0 (unregistering): Released all slaves [ 362.005538][ T5156] Bluetooth: hci0: command tx timeout [ 362.267277][ T3019] tipc: Left network mode [ 363.129326][ T9697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.804'. [ 363.276584][ T9606] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.284034][ T9606] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.301749][ T9606] bridge_slave_0: entered allmulticast mode [ 363.323358][ T9706] loop2: detected capacity change from 0 to 7 [ 363.328589][ T9606] bridge_slave_0: entered promiscuous mode [ 363.471718][ T9606] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.485523][ T9606] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.542495][ T9606] bridge_slave_1: entered allmulticast mode [ 363.606137][ T9710] (syz.5.809,9710,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 363.615065][ T9710] (syz.5.809,9710,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 363.621503][ T9606] bridge_slave_1: entered promiscuous mode [ 364.177531][ T9606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.251578][ T9606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.338553][ T3019] hsr_slave_0: left promiscuous mode [ 364.354183][ T3019] hsr_slave_1: left promiscuous mode [ 364.362035][ T3019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.377611][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.455612][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 364.496685][ T3019] veth1_macvtap: left promiscuous mode [ 364.521255][ T3019] veth0_macvtap: left promiscuous mode [ 364.541235][ T3019] veth1_vlan: left promiscuous mode [ 364.565059][ T3019] veth0_vlan: left promiscuous mode [ 364.618651][ T9] usb 7-1: config 0 has an invalid interface number: 30 but max is 0 [ 364.633802][ T9] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 364.683305][ T9] usb 7-1: config 0 has no interface number 0 [ 364.701907][ T9] usb 7-1: config 0 interface 30 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 364.740895][ T9] usb 7-1: config 0 interface 30 has no altsetting 0 [ 364.752642][ T9] usb 7-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=74.47 [ 364.780482][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.811690][ T9] usb 7-1: config 0 descriptor?? [ 364.873159][ T9] usb 7-1: unknown interface protocol 0x41, assuming v1 [ 364.889343][ T9] usb 7-1: 30:2 : does not exist [ 365.106968][ T9] usb 7-1: USB disconnect, device number 9 [ 366.483433][ T3019] team0 (unregistering): Port device team_slave_1 removed [ 367.120084][ T3019] team0 (unregistering): Port device team_slave_0 removed [ 367.753410][ T43] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 367.915887][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 367.942210][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 62432, setting to 1024 [ 367.953646][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 367.963835][ T43] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 367.981595][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.022471][ T43] usb 2-1: config 0 descriptor?? [ 368.032089][ T9764] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 368.061877][ T43] hso 2-1:0.0: Can't find BULK OUT endpoint [ 368.314712][ T5910] usb 2-1: USB disconnect, device number 40 [ 368.489619][ T9606] team0: Port device team_slave_0 added [ 368.499760][ T9606] team0: Port device team_slave_1 added [ 368.724189][ T9777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.825'. [ 369.046853][ T5910] IPVS: starting estimator thread 0... [ 369.056382][ T9781] sd 0:0:1:0: device reset [ 369.185998][ T9783] IPVS: using max 24 ests per chain, 57600 per kthread [ 370.307602][ T9793] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.828'. [ 370.317024][ T9793] netlink: zone id is out of range [ 370.322209][ T9793] netlink: get zone limit has 8 unknown bytes [ 370.829050][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.829'. [ 371.137133][ T3592] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 371.276167][ T3592] usb 6-1: device descriptor read/64, error -71 [ 371.515721][ T3592] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 371.657466][ T3592] usb 6-1: device descriptor read/64, error -71 [ 371.777470][ T3592] usb usb6-port1: attempt power cycle [ 372.125971][ T3592] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 372.158990][ T3592] usb 6-1: device descriptor read/8, error -71 [ 372.395833][ T3592] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 372.427712][ T3592] usb 6-1: device descriptor read/8, error -71 [ 372.537039][ T3592] usb usb6-port1: unable to enumerate USB device [ 373.154181][ T9606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.247209][ T9803] netlink: 16 bytes leftover after parsing attributes in process `syz.5.831'. [ 373.256475][ T9606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.344629][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.6.830'. [ 373.865316][ T9803] netlink: 16 bytes leftover after parsing attributes in process `syz.5.831'. [ 374.060778][ T9606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.308548][ T9606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.321395][ T9606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.353223][ T9606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.016060][ T9606] hsr_slave_0: entered promiscuous mode [ 375.030853][ T9606] hsr_slave_1: entered promiscuous mode [ 375.040726][ T9606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.050339][ T9606] Cannot create hsr debugfs directory [ 375.290680][ T9831] netlink: 20 bytes leftover after parsing attributes in process `syz.6.839'. [ 375.390230][ T9839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.841'. [ 376.342837][ T30] audit: type=1326 audit(1755947177.373:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9830 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393d8ebe9 code=0x7ffc0000 [ 377.207434][ T30] audit: type=1326 audit(1755947177.373:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9830 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393d8ebe9 code=0x7ffc0000 [ 377.241176][ T30] audit: type=1326 audit(1755947177.373:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9830 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1393d8ebe9 code=0x7ffc0000 [ 377.264180][ T30] audit: type=1326 audit(1755947177.373:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9830 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393d8ebe9 code=0x7ffc0000 [ 377.291408][ T30] audit: type=1326 audit(1755947177.373:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9830 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1393d8ebe9 code=0x7ffc0000 [ 377.316738][ T30] audit: type=1326 audit(1755947177.373:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9830 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393d8ebe9 code=0x7ffc0000 [ 377.342758][ T30] audit: type=1326 audit(1755947177.373:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9830 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f1393d8ebe9 code=0x7ffc0000 [ 377.425476][ T30] audit: type=1326 audit(1755947177.373:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9830 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 377.611458][ T30] audit: type=1326 audit(1755947177.373:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9830 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393d8ebe9 code=0x7ffc0000 [ 377.632994][ T30] audit: type=1326 audit(1755947178.183:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9830 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1393d8ebe9 code=0x7ffc0000 [ 377.666074][ T43] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 377.849416][ T43] usb 2-1: config 13 has an invalid interface number: 219 but max is 1 [ 377.872169][ T43] usb 2-1: config 13 has an invalid interface number: 5 but max is 1 [ 377.886126][ T43] usb 2-1: config 13 has an invalid descriptor of length 136, skipping remainder of the config [ 377.906155][ T9850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.843'. [ 377.930525][ T43] usb 2-1: config 13 has no interface number 0 [ 377.940564][ T43] usb 2-1: config 13 has no interface number 1 [ 377.955009][ T43] usb 2-1: config 13 interface 219 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 377.976382][ T43] usb 2-1: too many endpoints for config 13 interface 5 altsetting 1: 101, using maximum allowed: 30 [ 377.995674][ T43] usb 2-1: config 13 interface 5 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 378.013750][ T43] usb 2-1: config 13 interface 219 has no altsetting 0 [ 378.021186][ T43] usb 2-1: config 13 interface 5 has no altsetting 0 [ 378.097113][ T43] usb 2-1: Dual-Role OTG device on HNP port [ 378.105214][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=d8e4, bcdDevice=90.cf [ 378.116677][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.132254][ T43] usb 2-1: Product: syz [ 378.139817][ T43] usb 2-1: Manufacturer: syz [ 378.145287][ T43] usb 2-1: SerialNumber: syz [ 378.586562][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.161970][ T9606] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 379.192917][ T43] usb 2-1: USB disconnect, device number 41 [ 379.239201][ T9606] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 379.313219][ T9606] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 379.372985][ T9606] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 380.113737][ T9606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.240194][ T9606] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.264605][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.271834][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.357460][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.364730][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.392072][ T5910] kernel write not supported for file /677/clear_refs (pid: 5910 comm: kworker/0:6) [ 380.695620][ T9890] overlayfs: overlapping lowerdir path [ 380.706922][ T9890] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 382.511463][ T9606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.770380][ T9914] netlink: 44 bytes leftover after parsing attributes in process `syz.5.859'. [ 382.874650][ T9606] veth0_vlan: entered promiscuous mode [ 382.931345][ T9606] veth1_vlan: entered promiscuous mode [ 382.975479][ T5910] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 383.204413][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 383.207229][ T9606] veth0_macvtap: entered promiscuous mode [ 383.226120][ T9922] netlink: 'syz.6.862': attribute type 3 has an invalid length. [ 383.252575][ T9922] netlink: 'syz.6.862': attribute type 3 has an invalid length. [ 383.264741][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 383.276607][ T9606] veth1_macvtap: entered promiscuous mode [ 383.286735][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 383.305776][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 383.636612][ T5910] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 383.637914][ T9606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.655991][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.664034][ T5910] usb 3-1: Product: syz [ 383.679048][ T9606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.685432][ T5910] usb 3-1: Manufacturer: syz [ 383.697913][ T5910] usb 3-1: SerialNumber: syz [ 383.711642][ T9606] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.724213][ T5910] usb 3-1: config 0 descriptor?? [ 383.733286][ T9606] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.743013][ T9606] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.749405][ T5910] radioshark 3-1:0.0: Invalid radioSHARK device [ 383.752315][ T9606] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.798323][ T5910] radioshark 3-1:0.0: probe with driver radioshark failed with error -22 [ 383.844871][ T5910] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 383.978116][ T5910] usb 3-1: USB disconnect, device number 27 [ 384.006602][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.031113][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.138274][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.161518][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.169833][ T9932] (syz.1.864,9932,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 384.178453][ T9932] (syz.1.864,9932,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 384.753611][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.866'. [ 384.886046][ T43] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 385.063707][ T9946] binder: BINDER_SET_CONTEXT_MGR already set [ 385.074426][ T9946] binder: 9944:9946 ioctl 4018620d 2000000000c0 returned -16 [ 385.107391][ T43] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 385.121180][ T43] usb 6-1: config 0 has no interface number 0 [ 385.136156][ T43] usb 6-1: config 0 interface 41 has no altsetting 0 [ 385.274526][ T43] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 385.294076][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.308142][ T43] usb 6-1: Product: syz [ 385.312359][ T43] usb 6-1: Manufacturer: syz [ 385.354565][ T43] usb 6-1: SerialNumber: syz [ 385.371838][ T9954] loop2: detected capacity change from 0 to 7 [ 385.376959][ T43] usb 6-1: config 0 descriptor?? [ 386.048545][ T9954] loop2: [ 386.051688][ T9954] loop2: partition table partially beyond EOD, truncated [ 386.386489][ T9961] fuse: Unknown parameter 'allow_xther' [ 386.436664][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.875'. [ 387.198986][ T9968] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 387.260698][ T9936] overlayfs: failed to verify upper (134/file1, ino=740, err=-116) [ 387.330079][ T9936] overlayfs: failed to verify index dir 'upper' xattr [ 387.346107][ T5842] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 387.355538][ T9936] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 387.586421][ T9977] (syz.1.876,9977,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 387.598570][ T9977] (syz.1.876,9977,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 387.731470][ T5842] usb 3-1: config 0 has an invalid interface number: 152 but max is 0 [ 387.848748][ T43] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 387.854095][ T5842] usb 3-1: config 0 has no interface number 0 [ 387.967925][ T43] usb 6-1: USB disconnect, device number 21 [ 387.982155][ T5842] usb 3-1: config 0 interface 152 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 388.014760][ T5842] usb 3-1: config 0 interface 152 has no altsetting 0 [ 388.034355][ T5842] usb 3-1: New USB device found, idVendor=0e7e, idProduct=1001, bcdDevice=a3.17 [ 388.082663][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.116836][ T5842] usb 3-1: Product: syz [ 388.121063][ T5842] usb 3-1: Manufacturer: syz [ 388.132147][ T5842] usb 3-1: SerialNumber: syz [ 388.151465][ T5842] usb 3-1: config 0 descriptor?? [ 388.166130][ T9964] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 388.174814][ T5842] hub 3-1:0.152: bad descriptor, ignoring hub [ 388.188787][ T5842] hub 3-1:0.152: probe with driver hub failed with error -5 [ 388.242008][ T9987] FAT-fs (nullb0): bogus number of reserved sectors [ 388.267618][ T9987] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 388.347851][ T9984] trusted_key: encrypted_key: insufficient parameters specified [ 388.376293][ T9964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.400727][ T9964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.442841][ T9964] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 388.521497][ T5842] cdc_subset 3-1:0.152 usb0: register 'cdc_subset' at usb-dummy_hcd.2-1, Yopy, 9a:62:fa:a1:47:fc [ 388.871262][ T5929] usb 3-1: USB disconnect, device number 28 [ 388.881318][ T5929] cdc_subset 3-1:0.152 usb0: unregister 'cdc_subset' usb-dummy_hcd.2-1, Yopy [ 389.538169][T10004] netlink: 16 bytes leftover after parsing attributes in process `syz.6.884'. [ 392.635567][ T5840] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 392.876182][ T5840] usb 4-1: Using ep0 maxpacket: 8 [ 392.895225][ T5840] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 392.936071][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.947980][ T43] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 392.978246][ T5840] usb 4-1: Product: syz [ 392.992823][ T5840] usb 4-1: Manufacturer: syz [ 393.000171][ T5840] usb 4-1: SerialNumber: syz [ 393.042112][ T5840] usb 4-1: config 0 descriptor?? [ 393.057514][T10049] kAFS: unable to lookup cell '.,' [ 393.087690][ T5840] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 393.265000][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 393.348149][ T3592] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 393.359982][ T43] usb 6-1: config 0 has no interfaces? [ 393.368515][ T43] usb 6-1: New USB device found, idVendor=0482, idProduct=0103, bcdDevice= 1.00 [ 393.377935][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.386788][ T43] usb 6-1: Product: syz [ 393.391095][ T43] usb 6-1: Manufacturer: syz [ 393.398947][ T43] usb 6-1: SerialNumber: syz [ 393.407935][ T43] usb 6-1: config 0 descriptor?? [ 393.517603][ T3592] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 393.526097][ T3592] usb 7-1: config 0 has no interface number 0 [ 393.535656][ T3592] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 393.544966][ T3592] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.553082][ T3592] usb 7-1: Product: syz [ 393.557538][ T3592] usb 7-1: Manufacturer: syz [ 393.562240][ T3592] usb 7-1: SerialNumber: syz [ 393.573985][ T3592] usb 7-1: config 0 descriptor?? [ 393.702289][ T5840] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 393.717283][ T5840] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 393.717652][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 393.717668][ T30] audit: type=1804 audit(1755947194.733:96): pid=10059 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.900" name="file0" dev="ramfs" ino=26381 res=1 errno=0 [ 393.763764][ T5840] usb 4-1: USB disconnect, device number 34 [ 393.931407][T10064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.901'. [ 393.971491][T10036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.993687][T10036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.608472][T10045] x_tables: ip_tables: ah match: only valid for protocol 51 [ 394.715694][ T3592] usb 7-1: Firmware version (0.0) predates our first public release. [ 394.741002][ T3592] usb 7-1: Please update to version 0.2 or newer [ 394.959442][ T3592] usb 7-1: USB disconnect, device number 10 [ 395.118127][ T43] usb 6-1: USB disconnect, device number 22 [ 395.180498][T10082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.904'. [ 395.445638][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 395.506528][T10087] netlink: 4 bytes leftover after parsing attributes in process `syz.6.907'. [ 395.635475][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 395.649423][ T9] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 395.660823][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.683014][ T9] usb 4-1: Product: syz [ 395.713629][ T9] usb 4-1: Manufacturer: syz [ 395.733865][ T9] usb 4-1: SerialNumber: syz [ 395.887305][ T9] usb 4-1: config 0 descriptor?? [ 395.889686][T10093] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 395.918149][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 396.495445][ T3592] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 396.806166][ T3592] usb 2-1: Using ep0 maxpacket: 8 [ 396.817311][ T3592] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 396.841874][ T3592] usb 2-1: config 179 has no interface number 0 [ 396.851946][ T3592] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 396.869759][ T3592] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 396.883197][ T3592] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 396.895634][ T3592] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 396.921816][ T3592] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 396.951443][ T3592] usb 2-1: config 179 interface 65 has no altsetting 0 [ 396.963072][ T3592] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 396.972926][ T3592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.127364][ T9] gspca_stk1135: reg_w 0x7 err -71 [ 397.450608][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 397.457072][ T9] gspca_stk1135: Sensor write failed [ 397.462403][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 397.468869][ T9] gspca_stk1135: Sensor write failed [ 397.474498][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 397.482557][ T9] gspca_stk1135: Sensor read failed [ 397.487904][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 397.494344][ T9] gspca_stk1135: Sensor read failed [ 397.502117][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 397.509099][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 397.515837][ T9] gspca_stk1135: Sensor read failed [ 397.517589][ T3592] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input20 [ 397.521119][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 397.541577][ T9] gspca_stk1135: Sensor read failed [ 397.546941][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 397.553345][ T9] gspca_stk1135: Sensor write failed [ 397.558830][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 397.565264][ T9] gspca_stk1135: Sensor write failed [ 397.571112][ T9] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 397.584863][ T9] usb 4-1: USB disconnect, device number 35 [ 397.787365][ T5191] input input20: unable to receive magic message: -110 [ 397.919440][T10125] input: syz1 as /devices/virtual/input/input21 [ 397.923612][ T3592] usb 2-1: USB disconnect, device number 42 [ 397.925973][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 398.865668][ T5842] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 398.955575][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 399.216175][ T5842] usb 7-1: Using ep0 maxpacket: 8 [ 399.367812][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 399.387076][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 399.428268][ T5842] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 399.444964][ T9] usb 6-1: config 0 has no interface number 0 [ 399.452610][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.461826][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.474245][ T5842] usb 7-1: Product: syz [ 399.480293][ T5842] usb 7-1: Manufacturer: syz [ 399.485087][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.494924][ T5842] usb 7-1: SerialNumber: syz [ 399.501759][ T9] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 399.536540][ T5842] usb 7-1: config 0 descriptor?? [ 399.546403][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.596574][ T9] usb 6-1: config 0 descriptor?? [ 399.655325][T10155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.924'. [ 399.862957][ T5842] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 400.158354][T10142] loop8: detected capacity change from 0 to 8 [ 400.188428][T10142] Dev loop8: unable to read RDB block 8 [ 400.204079][T10142] loop8: unable to read partition table [ 400.224812][T10142] loop8: partition table beyond EOD, truncated [ 400.231427][T10142] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 400.527521][ T5842] usb write operation failed. (-71) [ 400.572984][ T5842] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 400.620542][ T5842] dvbdev: DVB: registering new adapter (Terratec H7) [ 400.640314][ T5842] usb 7-1: media controller created [ 400.659128][ T5842] usb read operation failed. (-71) [ 400.674629][ T5842] usb write operation failed. (-71) [ 400.700026][ T5842] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 400.748201][ T5842] usb 7-1: USB disconnect, device number 11 [ 402.203204][ T9] usbhid 6-1:0.1: can't add hid device: -71 [ 402.319156][ T9] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 402.385147][ T9] usb 6-1: USB disconnect, device number 23 [ 402.405930][ T5842] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 402.485075][T10187] loop6: detected capacity change from 0 to 524287999 [ 402.537422][ T5894] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 402.555460][ T5842] usb 2-1: device descriptor read/64, error -71 [ 402.885742][ T5842] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 403.105476][ T5842] usb 2-1: device descriptor read/64, error -71 [ 403.226237][ T5842] usb usb2-port1: attempt power cycle [ 403.480671][ T5894] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 403.576072][ T5842] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 403.596244][ T5842] usb 2-1: device descriptor read/8, error -71 [ 403.689382][ T5894] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 403.859062][ T5842] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 403.916242][ T5842] usb 2-1: device descriptor read/8, error -71 [ 404.046428][ T5842] usb usb2-port1: unable to enumerate USB device [ 404.510381][ T30] audit: type=1326 audit(1755947205.533:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10213 comm="syz.2.940" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa385d8ebe9 code=0x0 [ 404.869424][T10227] netlink: 16 bytes leftover after parsing attributes in process `syz.3.941'. [ 405.052126][T10230] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 405.104231][T10232] 9pnet_fd: Insufficient options for proto=fd [ 405.120459][T10232] netlink: 'syz.6.945': attribute type 10 has an invalid length. [ 405.131277][T10232] netlink: 'syz.6.945': attribute type 49 has an invalid length. [ 405.826595][T10245] netlink: 'syz.2.948': attribute type 16 has an invalid length. [ 405.834381][T10245] netlink: 'syz.2.948': attribute type 3 has an invalid length. [ 405.842138][T10245] netlink: 132 bytes leftover after parsing attributes in process `syz.2.948'. [ 406.135791][ T5842] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 406.205549][ T5910] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 406.355470][ T5842] usb 2-1: Using ep0 maxpacket: 8 [ 406.362739][ T5842] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.373393][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 406.381609][ T5910] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.392779][ T5910] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.406526][ T5842] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 406.416310][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.424649][ T5842] usb 2-1: Product: syz [ 406.430025][ T5910] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 406.441781][ T5842] usb 2-1: Manufacturer: syz [ 406.448137][ T5842] usb 2-1: SerialNumber: syz [ 406.453002][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 406.466172][ T5910] usb 3-1: SerialNumber: syz [ 406.480129][ T5842] usb 2-1: bad CDC descriptors [ 406.485806][ T3592] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 406.502302][ T5910] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 406.510793][ T9] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 406.523654][ T5910] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 406.531423][ T5910] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 406.678863][ T9] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 406.687244][ T9] usb 6-1: config 0 has no interface number 0 [ 406.706885][ T9] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 406.718815][ T5910] usb 3-1: USB disconnect, device number 29 [ 406.728496][ T3592] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 406.731526][ T9] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 406.814766][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.823012][ T9] usb 6-1: Product: syz [ 406.823340][ T3592] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.827299][ T9] usb 6-1: Manufacturer: syz [ 406.827319][ T9] usb 6-1: SerialNumber: syz [ 406.839432][ T9] usb 6-1: config 0 descriptor?? [ 406.855242][ T3592] usb 7-1: Product: syz [ 406.858581][T10253] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 406.865157][ T3592] usb 7-1: Manufacturer: syz [ 406.868828][ T9] usb-storage 6-1:0.20: USB Mass Storage device detected [ 406.872591][ T3592] usb 7-1: SerialNumber: syz [ 406.891684][ T9] usb-storage 6-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 406.893711][ T3592] usb 7-1: config 0 descriptor?? [ 407.201304][ T3592] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 407.217760][ T9] scsi host1: usb-storage 6-1:0.20 [ 407.433405][ T5840] usb 6-1: USB disconnect, device number 24 [ 408.216585][ T3592] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 408.471946][ T9] usb 2-1: USB disconnect, device number 47 [ 408.473087][T10251] netlink: 'syz.6.949': attribute type 12 has an invalid length. [ 408.530666][T10251] netlink: 'syz.6.949': attribute type 29 has an invalid length. [ 408.555533][T10251] netlink: 148 bytes leftover after parsing attributes in process `syz.6.949'. [ 408.571252][T10287] misc userio: The device must be registered before sending interrupts [ 408.621952][ T5842] usb 7-1: USB disconnect, device number 12 [ 408.745643][T10291] x_tables: duplicate underflow at hook 1 [ 409.047656][T10296] misc userio: The device must be registered before sending interrupts [ 409.274291][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'. [ 410.260385][T10317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.961'. [ 410.496714][ T5840] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 411.217807][ T5840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 411.229748][ T5840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 411.266144][ T5840] usb 7-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 411.285456][ T5840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.352731][ T5840] usb 7-1: config 0 descriptor?? [ 411.364663][T10315] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 411.404591][ T5840] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input22 [ 411.579296][ T5191] bcm5974 7-1:0.0: could not read from device [ 411.633634][ T5191] bcm5974 7-1:0.0: could not read from device [ 411.651836][ T5191] bcm5974 7-1:0.0: could not read from device [ 411.663048][ T5840] usb 7-1: USB disconnect, device number 13 [ 412.047455][T10333] binder: BINDER_SET_CONTEXT_MGR already set [ 412.053517][T10333] binder: 10330:10333 ioctl 4018620d 2000000002c0 returned -16 [ 412.612972][T10341] netlink: 'syz.2.970': attribute type 2 has an invalid length. [ 412.620844][T10341] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.970'. [ 412.630267][T10341] nbd: must specify a device to reconfigure [ 413.122041][T10337] loop6: detected capacity change from 0 to 4096 [ 413.466021][T10344] netlink: 116 bytes leftover after parsing attributes in process `syz.2.972'. [ 413.704441][T10359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.975'. [ 413.920924][T10362] netlink: 32 bytes leftover after parsing attributes in process `syz.5.976'. [ 413.987994][T10362] fuse: Bad value for 'user_id' [ 414.012182][T10362] fuse: Bad value for 'user_id' [ 414.304561][T10372] (syz.3.977,10372,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 414.314046][T10372] (syz.3.977,10372,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 414.557136][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.978'. [ 415.068048][T10385] netlink: 16 bytes leftover after parsing attributes in process `syz.6.980'. [ 416.223679][ T5840] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 416.375578][ T5840] usb 3-1: Using ep0 maxpacket: 16 [ 416.425212][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.569597][T10411] syz.5.988: attempt to access beyond end of device [ 416.569597][T10411] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 416.576453][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.610263][T10411] syz.5.988: attempt to access beyond end of device [ 416.610263][T10411] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 416.623813][T10411] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 416.635753][T10411] syz.5.988: attempt to access beyond end of device [ 416.635753][T10411] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 416.649911][T10411] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 416.726269][T10411] syz.5.988: attempt to access beyond end of device [ 416.726269][T10411] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 416.745533][T10411] syz.5.988: attempt to access beyond end of device [ 416.745533][T10411] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 416.754969][ T5840] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 416.775520][T10411] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 416.798353][T10411] syz.5.988: attempt to access beyond end of device [ 416.798353][T10411] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 416.812318][T10411] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 416.838186][T10411] syz.5.988: attempt to access beyond end of device [ 416.838186][T10411] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 416.857209][T10411] syz.5.988: attempt to access beyond end of device [ 416.857209][T10411] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 416.875043][T10411] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 416.880507][ T5840] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 416.904083][T10411] syz.5.988: attempt to access beyond end of device [ 416.904083][T10411] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 416.918073][T10411] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 416.945485][T10411] syz.5.988: attempt to access beyond end of device [ 416.945485][T10411] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 416.958706][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.980160][T10413] netlink: 32 bytes leftover after parsing attributes in process `syz.1.989'. [ 416.998679][T10413] fuse: Bad value for 'user_id' [ 416.999468][ T5840] usb 3-1: config 0 descriptor?? [ 417.003572][T10413] fuse: Bad value for 'user_id' [ 417.017714][T10411] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 417.058556][T10411] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 417.103019][T10411] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 417.705567][ T5840] usbhid 3-1:0.0: can't add hid device: -71 [ 417.750630][ T5840] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 418.205828][ T5840] usb 3-1: USB disconnect, device number 30 [ 419.244648][T10454] befs: (nullb0): No write support. Marking filesystem read-only [ 419.255965][T10454] befs: (nullb0): invalid magic header [ 419.585920][ T5972] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 419.666672][T10453] nfs4: Unknown parameter 'rdma!' [ 419.966362][ T5972] usb 3-1: Using ep0 maxpacket: 32 [ 419.988664][ T5972] usb 3-1: unable to get BOS descriptor or descriptor too short [ 420.003343][ T5972] usb 3-1: config 8 has an invalid interface number: 203 but max is 0 [ 420.012275][T10464] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1000'. [ 420.028309][ T5972] usb 3-1: config 8 has no interface number 0 [ 420.045482][ T5972] usb 3-1: config 8 interface 203 altsetting 2 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 420.059219][T10464] fuse: Bad value for 'user_id' [ 420.094651][T10464] fuse: Bad value for 'user_id' [ 420.185612][ T5972] usb 3-1: config 8 interface 203 has no altsetting 0 [ 420.379975][ T5972] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=a1.d3 [ 420.399759][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.407884][ T5972] usb 3-1: Product: syz [ 420.412219][ T5972] usb 3-1: Manufacturer: syz [ 420.500337][ T5972] usb 3-1: SerialNumber: syz [ 420.855528][ T5972] usb 3-1: USB disconnect, device number 31 [ 420.975717][T10480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1002'. [ 424.169229][T10528] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1015'. [ 424.212332][T10530] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1016'. [ 424.829989][T10539] netlink: 'syz.3.1019': attribute type 16 has an invalid length. [ 424.929716][T10543] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.990441][T10543] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.155603][ T43] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 425.358439][ T43] usb 7-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 425.428498][ T43] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 425.484245][ T43] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 425.514502][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 425.533435][ T43] usb 7-1: SerialNumber: syz [ 425.829328][ T43] usb 7-1: 0:2 : does not exist [ 425.904763][ T43] usb 7-1: USB disconnect, device number 14 [ 425.970032][T10552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1021'. [ 426.518634][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.239989][T10562] (syz.6.1025,10562,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 427.249212][T10562] (syz.6.1025,10562,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 427.265548][ T5910] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 427.596340][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 427.611365][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.644832][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.786555][ T5910] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 427.868546][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.905002][ T5910] usb 3-1: config 0 descriptor?? [ 428.246964][T10569] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1028'. [ 428.432106][ T5910] greenasia 0003:0E8F:0012.000D: item fetching failed at offset 0/3 [ 428.481433][ T5910] greenasia 0003:0E8F:0012.000D: parse failed [ 428.525522][ T5910] greenasia 0003:0E8F:0012.000D: probe with driver greenasia failed with error -22 [ 428.633916][ T43] usb 3-1: USB disconnect, device number 32 [ 428.705586][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 428.898873][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 428.938431][ T9] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 428.961786][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.977068][ T9] usb 4-1: Product: syz [ 428.981402][ T9] usb 4-1: Manufacturer: syz [ 428.986974][ T9] usb 4-1: SerialNumber: syz [ 428.995653][ T5972] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 429.007610][ T9] usb 4-1: config 0 descriptor?? [ 429.115633][ T5910] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 429.156483][ T5972] usb 6-1: Using ep0 maxpacket: 8 [ 429.293186][ T5910] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 429.305694][ T5910] usb 2-1: config 0 has no interface number 0 [ 429.322856][ T5910] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 429.357357][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.577219][ T5910] usb 2-1: Product: syz [ 429.645709][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 429.663455][ T5910] usb 2-1: Manufacturer: syz [ 429.695518][ T5910] usb 2-1: SerialNumber: syz [ 429.715178][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 429.725386][ T5910] usb 2-1: config 0 descriptor?? [ 429.739441][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 429.827587][ T9] usb 4-1: media controller created [ 430.065047][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 430.197287][T10596] dtv5100: wlen = 0, aborting. [ 430.559751][ T5910] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 430.584815][T10599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.593931][T10599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.656903][ T5910] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 430.716358][ T5910] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 430.740847][ T5910] usb 2-1: media controller created [ 430.945926][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 430.950204][T10594] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1035'. [ 431.562837][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 431.575464][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 431.583427][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 431.592492][T10586] ------------[ cut here ]------------ [ 431.598182][T10586] usb 4-1: BOGUS control dir, pipe 80002480 doesn't match bRequestType c0 [ 431.655905][T10586] WARNING: CPU: 1 PID: 10586 at drivers/usb/core/urb.c:413 usb_submit_urb+0x115d/0x1890 [ 431.665856][T10586] Modules linked in: [ 431.670170][T10586] CPU: 1 UID: 0 PID: 10586 Comm: syz.1.1034 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 431.680217][T10586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 431.690438][T10586] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 431.696132][T10586] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 20 5c 33 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 14 47 6b fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 431.716035][T10586] RSP: 0000:ffffc900185a7830 EFLAGS: 00010246 [ 431.722111][T10586] RAX: 6cf4eb6b20685e00 RBX: ffff88802722fa00 RCX: 0000000000080000 [ 431.730551][T10586] RDX: ffffc9000c1a9000 RSI: 000000000000564e RDI: 000000000000564f [ 431.738843][T10586] RBP: 1ffff1100d8555d8 R08: 0000000000000003 R09: 0000000000000004 [ 431.746887][T10586] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffff88806c2aaec0 [ 431.754900][T10586] R13: dffffc0000000000 R14: 0000000080002480 R15: ffff888027f82cc0 [ 431.762933][T10586] FS: 00007fa1ce43f6c0(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 431.772010][T10586] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 431.778674][T10586] CR2: 00007f1391fd5d58 CR3: 00000000346ba000 CR4: 00000000003526f0 [ 431.786696][T10586] Call Trace: [ 431.789995][T10586] [ 431.792942][T10586] usb_start_wait_urb+0x114/0x4c0 [ 431.798018][T10586] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 431.803581][T10586] usb_control_msg+0x232/0x3e0 [ 431.808391][T10586] dtv5100_i2c_msg+0x250/0x330 [ 431.813167][T10586] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 431.818066][T10586] __i2c_transfer+0x874/0x2170 [ 431.822862][T10586] ? i2c_transfer+0x11d/0x3a0 [ 431.827590][T10586] ? __pfx___i2c_transfer+0x10/0x10 [ 431.833062][T10586] ? rt_mutex_lock_nested+0x172/0x1e0 [ 431.838702][T10586] ? i2c_transfer+0x11d/0x3a0 [ 431.843392][T10586] i2c_transfer+0x25b/0x3a0 [ 431.848365][T10586] ? __pfx_i2c_transfer+0x10/0x10 [ 431.853415][T10586] ? _copy_from_user+0x94/0xb0 [ 431.858255][T10586] i2cdev_ioctl_rdwr+0x460/0x740 [ 431.863222][T10586] i2cdev_ioctl+0x64b/0x7f0 [ 431.867807][T10586] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 431.872835][T10586] ? __fget_files+0x3a0/0x420 [ 431.877552][T10586] ? __fget_files+0x2a/0x420 [ 431.882167][T10586] ? bpf_lsm_file_ioctl+0x9/0x20 [ 431.887149][T10586] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 431.892179][T10586] __se_sys_ioctl+0xfc/0x170 [ 431.896938][T10586] do_syscall_64+0xfa/0x3b0 [ 431.901453][T10586] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.906689][T10586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.912778][T10586] ? clear_bhb_loop+0x60/0xb0 [ 431.917528][T10586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.923445][T10586] RIP: 0033:0x7fa1cd58ebe9 [ 431.927966][T10586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.947897][T10586] RSP: 002b:00007fa1ce43f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.956554][T10586] RAX: ffffffffffffffda RBX: 00007fa1cd7b5fa0 RCX: 00007fa1cd58ebe9 [ 431.964536][T10586] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000006 [ 431.972571][T10586] RBP: 00007fa1cd611e19 R08: 0000000000000000 R09: 0000000000000000 [ 431.980603][T10586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.988642][T10586] R13: 00007fa1cd7b6038 R14: 00007fa1cd7b5fa0 R15: 00007fff40642fb8 [ 431.996652][T10586] [ 431.999702][T10586] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 432.007008][T10586] CPU: 1 UID: 0 PID: 10586 Comm: syz.1.1034 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 432.016982][T10586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 432.027031][T10586] Call Trace: [ 432.030332][T10586] [ 432.033271][T10586] dump_stack_lvl+0x99/0x250 [ 432.037857][T10586] ? __asan_memcpy+0x40/0x70 [ 432.042443][T10586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.047669][T10586] ? __pfx__printk+0x10/0x10 [ 432.052255][T10586] panic+0x2db/0x790 [ 432.056147][T10586] ? __pfx_panic+0x10/0x10 [ 432.060561][T10586] __warn+0x31b/0x4b0 [ 432.064536][T10586] ? usb_submit_urb+0x115d/0x1890 [ 432.069550][T10586] ? usb_submit_urb+0x115d/0x1890 [ 432.074559][T10586] report_bug+0x2be/0x4f0 [ 432.078873][T10586] ? usb_submit_urb+0x115d/0x1890 [ 432.083894][T10586] ? usb_submit_urb+0x115d/0x1890 [ 432.088915][T10586] ? usb_submit_urb+0x115f/0x1890 [ 432.093976][T10586] handle_bug+0x84/0x160 [ 432.098317][T10586] exc_invalid_op+0x1a/0x50 [ 432.102817][T10586] asm_exc_invalid_op+0x1a/0x20 [ 432.107664][T10586] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 432.113289][T10586] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 20 5c 33 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 14 47 6b fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 432.132898][T10586] RSP: 0000:ffffc900185a7830 EFLAGS: 00010246 [ 432.138971][T10586] RAX: 6cf4eb6b20685e00 RBX: ffff88802722fa00 RCX: 0000000000080000 [ 432.146968][T10586] RDX: ffffc9000c1a9000 RSI: 000000000000564e RDI: 000000000000564f [ 432.154966][T10586] RBP: 1ffff1100d8555d8 R08: 0000000000000003 R09: 0000000000000004 [ 432.162929][T10586] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffff88806c2aaec0 [ 432.170913][T10586] R13: dffffc0000000000 R14: 0000000080002480 R15: ffff888027f82cc0 [ 432.178967][T10586] usb_start_wait_urb+0x114/0x4c0 [ 432.183996][T10586] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 432.189551][T10586] usb_control_msg+0x232/0x3e0 [ 432.194360][T10586] dtv5100_i2c_msg+0x250/0x330 [ 432.199140][T10586] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 432.203982][T10586] __i2c_transfer+0x874/0x2170 [ 432.208737][T10586] ? i2c_transfer+0x11d/0x3a0 [ 432.213405][T10586] ? __pfx___i2c_transfer+0x10/0x10 [ 432.218593][T10586] ? rt_mutex_lock_nested+0x172/0x1e0 [ 432.223952][T10586] ? i2c_transfer+0x11d/0x3a0 [ 432.228615][T10586] i2c_transfer+0x25b/0x3a0 [ 432.233114][T10586] ? __pfx_i2c_transfer+0x10/0x10 [ 432.238148][T10586] ? _copy_from_user+0x94/0xb0 [ 432.242920][T10586] i2cdev_ioctl_rdwr+0x460/0x740 [ 432.247858][T10586] i2cdev_ioctl+0x64b/0x7f0 [ 432.252351][T10586] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 432.257363][T10586] ? __fget_files+0x3a0/0x420 [ 432.262035][T10586] ? __fget_files+0x2a/0x420 [ 432.266634][T10586] ? bpf_lsm_file_ioctl+0x9/0x20 [ 432.271558][T10586] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 432.276565][T10586] __se_sys_ioctl+0xfc/0x170 [ 432.281147][T10586] do_syscall_64+0xfa/0x3b0 [ 432.285639][T10586] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.290823][T10586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.296877][T10586] ? clear_bhb_loop+0x60/0xb0 [ 432.301563][T10586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.307442][T10586] RIP: 0033:0x7fa1cd58ebe9 [ 432.311857][T10586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.331476][T10586] RSP: 002b:00007fa1ce43f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.339886][T10586] RAX: ffffffffffffffda RBX: 00007fa1cd7b5fa0 RCX: 00007fa1cd58ebe9 [ 432.347861][T10586] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000006 [ 432.355826][T10586] RBP: 00007fa1cd611e19 R08: 0000000000000000 R09: 0000000000000000 [ 432.363788][T10586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.371755][T10586] R13: 00007fa1cd7b6038 R14: 00007fa1cd7b5fa0 R15: 00007fff40642fb8 [ 432.379729][T10586] [ 432.383027][T10586] Kernel Offset: disabled [ 432.387346][T10586] Rebooting in 86400 seconds..