last executing test programs: 7m27.607069759s ago: executing program 1 (id=273): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x100400, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000007800)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000200)) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x5, 0x2, 0x4, 0x5, 0xcc5, 0xf, 0x7, 0xa, 0xe8aa, 0x2, 0x1, 0xfffffffd, 0x1, 0x6, 0x7, 0x0, 0x1a449, 0x3, 0x40000003, 0x99, 0xcaa7, 0x1, 0x20001e58, 0x7, 0xe69, 0x3c, 0x1, 0x6, 0x0, 0xfffffff8]}) read(r0, 0x0, 0x0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102000000086b1d010140000102030109025f00"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 7m25.426679498s ago: executing program 1 (id=284): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) select(0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2205, 0x0) r3 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000000001010400000000141a00000200000024001400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1e000108000200ac1e00010c000280050001000000000008000740ffff639c"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)="ccbd861646857a39780fb7ca51c99b68b25d74959346a0c9ba7728c609a2d7f250d30713da3a32aa60f2ba3ba67b628aeb015e5eca3dd167bc1340abf2f4f9853b5bec0b994ec7e424155c895f370eeb05958be007908a94e874a3964244996164529ba1f7db9bf3100954eb308e2d23fd568fbc73c9fa1f2567af9d60ef8d9528750967142d696428d1491fe66af4d87f6ff3973c3773fab2d9269721a9523adc544d5b7568d5aa0b91a7847f03b6d59e01d9d6ab4c134b445a2e1018b2bac73afd6e70a8d1820a6b", 0xc9, r7}, 0x68) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 7m22.239445063s ago: executing program 1 (id=293): socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb9e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, 0x0, 0x844) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) readv(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000880)=""/229, 0xe5}], 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r5, &(0x7f00000007c0)="25d7fe75fa3496bb8e75411fe8ffffffffffffff000000000020ded4c9310457da979fa4388dd60154c2", 0x2a, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 7m20.60493702s ago: executing program 1 (id=296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x50) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) renameat2(r2, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xeeee0000, 0xb, 0xfefffffb, 0xfffffffc, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb4}, {0x83, 0x1, 0xa, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x8}, {0x8, 0xd, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x0, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x16, '\x00', 0x5}, {0x1, 0x9, 0x15, '\x00', 0x8}, {0x0, 0x3, 0x9b, '\x00', 0x7}, {0x1, 0xca, 0x80, '\x00', 0x4}, {0x3, 0xf1, 0x6, '\x00', 0xb2}, {0x8, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x6, 0x4, '\x00', 0xff}, {0xf, 0x41, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x54, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x4}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x5, 0x6, 0xfa, '\x00', 0x40}]}}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000100)=0x9) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5, r5}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r5, r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) mknod$loop(&(0x7f00000007c0)='./bus\x00', 0x0, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r3, 0x4068aea3, &(0x7f0000000140)={0xce, 0x0, r3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r6}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000880)={'mpc624\x00', [0x4f27, 0x2, 0x2, 0x7, 0x1, 0xcc7, 0x4, 0x9, 0x7, 0x3ff, 0x802, 0x3, 0x1, 0x719, 0x9, 0xe1cb, 0x8, 0x4, 0x5, 0x395, 0x0, 0x3, 0x0, 0xfffffff5, 0xfeffcadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xc1e]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000000000000070b0000000000000900000000000000ac7fa50063b3fa155a13719f551a3219ccd0e30000008048"]) 7m20.14878679s ago: executing program 1 (id=299): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000040)=0x6e, 0x800) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x480901, 0x0) syz_clone3(&(0x7f0000000a00)={0x8a0a2b99cf660f52, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)=0x0, {0x34}, &(0x7f0000000800)=""/201, 0xc9, &(0x7f0000000900)=""/242, &(0x7f0000000680)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0}, &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0, 0x0}, &(0x7f0000000b40)=0xc) accept$inet6(0xffffffffffffffff, &(0x7f0000000b80), &(0x7f0000000bc0)=0x1c) (async) r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000000b80), &(0x7f0000000bc0)=0x1c) sendmsg$unix(r1, &(0x7f0000000cc0)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000200)="2537f8f9dfe539414091eb3fee1b7ead96a5fb8e44cc9974f725f01ffeb90e62ef3389ca406c83e78bcf02ab5e40cc5f69d16a9445aa589bd7d00fa964bc2b773056a307e93029e423de51f5c911aff65dd016418b257ad4bda5a5f231ae2e491dfa77faa5d6dfa63e9f3b6b2f500e34465f8018b87fb92dea62fbd883761abba057e20f4bd9bac8033893af80457603b52d84bf5d7477375710cf9983e79bfed51f9cff3029b821b55bcfa1b80a10739c10250af86fedb8864da057e0c4190b0c8e9853157ea349284b1aa8e84447cacee16beeea47", 0xd6}, {&(0x7f0000000300)="f84552e31480bdc0c75876b58c37c0a6b889908c1471181de883a3b357746cbe9631fb2cf007d422007f65c139bb35fa7c8e6b8131c749794b7faebd3b89838cfe24482168bddae66a2cee54b0c5c89928947bedd8ea189e8388709d5b9d06d79b793411c3200d216b9aec0e711ce6df61799f52f08ddb8dcdb9fc541eb2448e4c0dfd878d69abf88eca", 0x8a}, {&(0x7f00000003c0)="5a741fe8b97d575f18b4cfda2e2783649d7f0b90ff31f23f3ebb3281c8b1d3e2d435fd8e2486a2ebed936c84bfdc70da498756885dc320b925f803b14ee37bef16530c28727e7f23026205a7018aae23d32993d29e1cd922e5510e96bc39813daa6b47fe5d4f6dcf92b4122dd2ccabd27f83e5d67c7c54368016fb76ff60b8d00c3f245d6203111857f65ee31abd57f6983dff6ebea282571793f74bd879aac4e1b7e0309838f74ee1fb", 0xaa}, {&(0x7f0000000480)="0a4649b764c0a1b9312199534825e7592809564a7192737b818cbfc1e4914c08e4b2f30edc687081f7e25c906facbc27523e15e7995f2edd951885c0fc11", 0x3e}, {&(0x7f00000004c0)="fd046ee60b038c2148f5c6b21286c799e28e5ff3d6798c", 0x17}], 0x5, &(0x7f0000000c00)=[@rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r2, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r6, r0]}}], 0x90}, 0x800) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@empty}, {@in6=@dev, 0x4d4, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {}, {}, {}, 0x40, 0x0, 0xa, 0x0, 0x3}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) 7m18.968872245s ago: executing program 1 (id=302): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000021c0)='lo\x00', 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2840) readv(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/248, 0xf8}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000080)={0x20071026}, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, &(0x7f0000000100)={{}, 0x7}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@enum64={0x6, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x1000000, 0x2, 0xb}]}]}, {0x0, [0x2e, 0x2e, 0x30, 0x30, 0x2e, 0x5f]}}, 0x0, 0x38, 0x0, 0x1, 0x6}, 0x28) 7m17.972250162s ago: executing program 32 (id=302): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000021c0)='lo\x00', 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2840) readv(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/248, 0xf8}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000080)={0x20071026}, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, &(0x7f0000000100)={{}, 0x7}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@enum64={0x6, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x1000000, 0x2, 0xb}]}]}, {0x0, [0x2e, 0x2e, 0x30, 0x30, 0x2e, 0x5f]}}, 0x0, 0x38, 0x0, 0x1, 0x6}, 0x28) 14.059494315s ago: executing program 0 (id=1554): r0 = syz_open_dev$sg(0x0, 0x7fffffff, 0x200500) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x0, 0x28, 0x0, 0x1, 0x2}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="100001200000010000000000000000008000ffff", @ANYRES32=0x0, @ANYBLOB="421c0000000000001c001280090001007866726d000000000c0002800800010003000000140003007866726d3000"/56], 0x50}}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffb) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x40102, 0x0) ioctl$FBIOGET_FSCREENINFO(r4, 0x4602, 0x0) mkdir(0x0, 0x1a0) mount(0x0, 0x0, &(0x7f00000002c0)='tmpfs\x00', 0x8, 0x0) r5 = semget$private(0x0, 0x3, 0x40d) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth0_virt_wifi\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000180)={0x18, 0x0, {0x0, @multicast, 'batadv_slave_1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'veth0_virt_wifi\x00'}}) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000080)=[0x400, 0x6]) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f000051d000/0x2000)=nil, 0x2000, 0x2, 0x10, r2, 0x6e430000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfffffffffffffd18) mmap(&(0x7f0000f46000/0x2000)=nil, 0x2000, 0x2000008, 0x11, r1, 0x34dee000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmsg(r0, 0x0, 0x0) 13.552892201s ago: executing program 0 (id=1556): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000b40)={'#! ', '', [{}]}, 0x5) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x70}}, 0x0) close(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) fspick(0xffffffffffffffff, 0x0, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x8}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40c4) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) recvfrom(r5, &(0x7f0000000100)=""/49, 0x31, 0x4100, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac36070045000008000000140012552d8c44f29c817b91301c783161"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) 11.511063359s ago: executing program 5 (id=1558): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') pread64(r1, &(0x7f00000000c0)=""/144, 0x90, 0x4005e) (async) pread64(r1, &(0x7f00000000c0)=""/144, 0x90, 0x4005e) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000400)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="400f07"], 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) getpid() (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) setgroups(0x0, 0x0) lseek(r8, 0x10000000005, 0x0) (async) lseek(r8, 0x10000000005, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a000000"], 0xd) 10.464689208s ago: executing program 0 (id=1561): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x200}) 7.481039537s ago: executing program 4 (id=1570): r0 = syz_open_dev$loop(&(0x7f0000000380), 0x8c9, 0x40) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0xfffffffffffffffc, 0x440100) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0xc06c4124, &(0x7f0000000c40)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) clock_getres(0x3, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000040)={0x1, 0x5, 0x402, 0x5, 0xffffc479, 0x3}) 7.310045049s ago: executing program 0 (id=1571): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x618e, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000340)) sendmsg$nl_generic(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0xc0d0) socket$netlink(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32], 0xc4}}, 0x0) 7.056942813s ago: executing program 4 (id=1573): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000006c0), 0x42800, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x7}, @TCA_FW_MASK={0x4, 0x5, 0x4}]}}]}, 0x40}}, 0x20040054) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000700)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000740)={0x28, 0x5, r4, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x140000000000}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r6 = socket$packet(0x11, 0x2, 0x300) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r7, @ANYRES64=r6], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x28, "7ce4120a5bf2f6e6ff395ad63274ff6d01000000000000000000bdef2859adf67d6c6752f2b31860"}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) setsockopt(r5, 0x3, 0xffff, &(0x7f00000005c0)="bd2a397c8f1fc75b1a012d3e8f4143246eb8aa03e5c4657bab26e4b5cb4c557411a6f9ced5869872d2edbae71d742b795dcc1c266dc808be4f2fca36bdf2e98efe76fe66a3516460d34e2aa9f279f3afbf5274bc5d3c9b944b2fd7e4a372b5af8dac2a25984f7cbce1528bc70e05aea92f9099f45ef198efabb7a582469fc9d75694dfb0154e2257de547c5a3de2be0c7013e564cf44169386af1eae21eb1d4e0623f2a8538b6ef0982bb1e85015c9777f2a044fb67f4013e16d88f6e675a878b11005d3b9e4370ae100782f98b06121c289ff1395e06d716e2b16ebc996e7", 0xdf) 5.990260193s ago: executing program 3 (id=1578): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r0 = socket$inet6(0xa, 0x3, 0x75) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff7}, {0x0, 0xfef2, 0xd, 0x40000000000}, 0x101, 0x1, 0x1, 0x0, 0x2, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffe, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x35ced141}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x0, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x2}}, 0xe8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='-', @ANYRESHEX], 0x7) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48081) shutdown(0xffffffffffffffff, 0x1) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'macvlan1\x00', 0x0}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000100003052bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1546040000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}}, 0x0) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'wg1\x00', 0x2}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[], 0x28}}, 0x40000c0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x28020480) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x7, 0x400000) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) 5.78162135s ago: executing program 2 (id=1579): socket$kcm(0x2, 0x200000000000001, 0x106) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000776000/0x2000)=nil, 0x2000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) (async) dup(0xffffffffffffffff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=r0], 0x6c}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065cc}, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xec}}, 0x0) (async) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102374, 0x18fe6) mq_open(0x0, 0x40, 0x61, &(0x7f0000000480)={0xfffffffffffffffe, 0x2, 0x3, 0x40ffffffff}) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x520) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mbind(&(0x7f0000641000/0x2000)=nil, 0x2000, 0x4002, 0x0, 0xfffffffffffffffd, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) 5.621009815s ago: executing program 3 (id=1580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8004, 0x0, 0x8, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340), &(0x7f0000000040)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x10, &(0x7f00000003c0)=""/145, &(0x7f0000000300)=0x91) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=r3], 0xf) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea4430009058525c2"], 0x0) 5.57616368s ago: executing program 2 (id=1581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r5}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9048}}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)}, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x110, @tick=0x1, 0x78, {0x4, 0x1}, 0x3a, 0x0, 0x2}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioperm(0x4, 0x7, 0x400) 5.467086181s ago: executing program 0 (id=1582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8004, 0x0, 0x8, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x10, &(0x7f00000003c0)=""/145, &(0x7f0000000300)=0x91) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=r4], 0xf) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea4430009058525c2"], 0x0) 5.344973264s ago: executing program 5 (id=1583): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000001c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x2}}}, 0xa) socket(0x10, 0x2, 0x0) r3 = io_uring_setup(0x1a9c, &(0x7f0000000100)={0x0, 0x1701, 0x20, 0x1, 0x194}) syz_io_uring_setup(0x10d2, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0xfffffffc, 0xd3, 0x0, r3}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000900)={0x1d, r10, 0x1}, 0x18) sendmmsg$unix(r9, &(0x7f0000004a80)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000440)="bd", 0x1}], 0x1, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x533509e98f3a73c}}], 0x2, 0x1d3) close_range(r6, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) lstat(0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x54, 0x0, 0x0, 0x0, 0x23456}) 4.560301751s ago: executing program 2 (id=1584): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r2, &(0x7f0000000280)={0x11, 0x0, r4, 0x1, 0xf, 0x6, @link_local}, 0x14) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x1a, 0x0) 4.435483037s ago: executing program 2 (id=1585): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) prlimit64(r0, 0x2, &(0x7f0000000040)={0x9, 0x3}, &(0x7f0000000140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, 0x300) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newchain={0x80, 0x64, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x5}, {0xffff, 0xb}, {0x8, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xba}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0xff, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c051) recvmsg$can_raw(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x2}, 0x10120) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r5}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r5, 0x0, 0x100000000000000}, 0x38) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)={0x184, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x11c, 0xac, 0x0, 0x1, [@nested={0x118, 0x13e, 0x0, 0x1, [@nested={0x114, 0xa0, 0x0, 0x1, [@nested={0x110, 0x61, 0x0, 0x1, [@nested={0x10c, 0x9d, 0x0, 0x1, [@nested={0x108, 0x63, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @uid}, @nested={0xfc, 0x90, 0x0, 0x1, [@nested={0x99, 0x44, 0x0, 0x1, [@typed={0x8, 0xb0, 0x0, 0x0, @str='GPL\x00'}, @generic="a4f2bdc07e8cc0404f617143e4f7b263ba6fc1453ff8932426cb0b2024dd0f1b7350887762644cd52aa60500cdf7e959a84b3dad1bc88841ef786cbde7d6215a38138e3e97b00517bbc1841901c1583a335075ea5754b2eaa78293f03551b0562fb5a45f1f7cbb3d6e117248069b9fb39c95d130e184c9b4c03c06137216485441b97dd59aa0e33633390ce64b"]}, @nested={0x59, 0x84, 0x0, 0x1, [@generic="578f41f21346600e8b97c8547badffbc172d50c86fbb143d0bfd04bd981257b4b68897845ab03be89e385e60e3b5b9022e699ec98db9b119e703878e33759b6390cb0d3969ae645f7370b17f51dcc1425bad654f2c"]}]}]}]}]}]}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20048000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) gettid() epoll_create(0x400) 4.381081128s ago: executing program 3 (id=1586): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103"], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 4.360842766s ago: executing program 4 (id=1587): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="4013250000006cacee05e37ca2aa5772676b85472504bc41c0b7867ab0d4d2d59e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaa8aaaaaaaaaaaaa3386dd600000000014060000000000000000000000ffff00000000fe8000000000000000000000000000aa00004e224bd88fbb911582cd02ee864817ce9087567e7b2947db", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5410000090780000"], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000340), 0x10) socket$l2tp(0x2, 0x2, 0x73) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000080)={0xd, 0x0, 0x120000000000, 0x7fff, 0x500, 0x0, 0x7, 0x8000000000000000}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x10001, 0x9, 0x86, 0x800, 0x1a, 0x400000000}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="53df2b456239eaaaaaaaaabb080045000028000000000080907800000000ffffffff0e00d600000010000000000000000000000000006ea0b9fc1329d6fd3ab00466da7a8fd3a5461bb4ff771af561808a748703061bda222107fce1417c2319fb8b3dcee70e38f691e37a5d7c32f25657b0918ee7e0542bf7f20d2594f20be69bc9299fea37de176e25ffe33bbcff567cfa88c127a6d3b8ff961d0f2808ea1fd317f5bbc6c5bd7d6d43fb68606f"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) eventfd2(0x8, 0x80800) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) 4.337448318s ago: executing program 5 (id=1588): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'nicvf0\x00', {0x2, 0x4e21, @remote}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, 0x0, 0x800) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d82297200090582"], 0x0) 3.924667788s ago: executing program 5 (id=1589): prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0xc26080b) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x52, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x2, 0x0, 0x3}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @loopback={0x300}, @local, {[], {{0xfffe, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x1ff) accept4$inet(r1, 0x0, 0x0, 0x80000) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r4, &(0x7f00000000c0)="ab", 0x1, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x2000006) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b4000000000000006910810000000000040000000000000095000000000000007220abb1b364768c328613d20a4d2451a69f9642"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\trmr'], 0xa) 3.810970284s ago: executing program 3 (id=1590): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7fffffffffffffff, 0x2000) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0"], 0x40}}, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) write$char_usb(r3, &(0x7f0000000140)="cee186f2435e30dbc4b02caf63f4453596bb18f1645c87b3156e15af264d5ab3a6d44462cbfdb0cbd7bff4eaa5d8b6d2773f14ff985562acdca27810f3fdc8f0568ab53ce6dcfc4c4bd8eb00", 0x4c) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x4, 0x40, {0x0, 0x0, 0x0, 0x0, 0x501}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r1}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x7f}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r2}, @IFLA_GTP_ROLE={0x8}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x60}}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r5, r5, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000440)='./file0\x00', r6, r7) setreuid(r5, r6) 3.581698694s ago: executing program 3 (id=1591): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x7}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4040800) syz_usb_connect(0x3, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x7, 0x1, 0x1, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9d, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x80, 0xd, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3e, 0x5, 0x4}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x2, 0xbb, 0xff, 0x3}, 0x20, &(0x7f0000000080)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x22, "f6afe56bc2156e8504d7bfff091caa73"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x9, 0x7ff}]}, 0x5, [{0x75, &(0x7f00000000c0)=@string={0x75, 0x3, "d786f875c125c6c3d5d769f5db5777d7fe72f3501ae012cb104e3083679b12913082c01477faa186f1fd46d3fcead0b4d0c69eb956c42a35b5d2525df78eee835aede2b87af4903b2f02b41e5d65ccdcd51381b338e5179ece80c993bc97d17ce09ea080fefaefde7afaa80b51e73063ed1fbe"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43e}}, {0x7, &(0x7f00000001c0)=@string={0x7, 0x3, "844982066f"}}, {0xa5, &(0x7f0000000200)=@string={0xa5, 0x3, "474106e86afbdea6d8d423af810645132dbf52e35c02e9f7f16ce2bd7bc96007905f884162ef3c35fb1da631dd97fafb1b487135488f9b54951819463c5eb94052af9a4128e226a6a4169f35f92496f4acd3d85f1f07d18f42e27bce66ac53ef5f7b6b39f78712d69c1427ac98cca3aedc44a02ca107e65a39d2d67383b0915f8fe3f0e821bfc539ca3d1acb0589ff8c2d14072db3424aa02e38c174b01eba0d3c87cc"}}]}) 3.22060303s ago: executing program 4 (id=1592): socket(0x2, 0x80805, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) r0 = userfaultfd(0x80001) r1 = epoll_create1(0x80000) r2 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) close(r4) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000000)=0xa, 0x83, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x2, 0x18, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @private1}, @in={0x2, 0x0, @private}}]}, 0xd8}}, 0x0) syz_emit_ethernet(0x25, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000bbf2bbbbbbbb884700000000000000000000000000000000000000004edc5a4a935bbb1376a5ae56bffb0f"], &(0x7f00000003c0)={0x0, 0x3, [0xea8, 0xf9f, 0xdc4, 0xbc2]}) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$llc(r4, &(0x7f0000000940)=""/4096, 0x1000, 0x2, &(0x7f0000000180)={0x1a, 0x118, 0x6, 0x9, 0x2, 0x7b, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2, 0x2}, 0x50) openat$smackfs_access(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/smackfs/access\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0), 0x10) 2.644268784s ago: executing program 2 (id=1594): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000240)={{0x32, @loopback, 0x4e22, 0x2, 'dh\x00', 0x20, 0xd049, 0x55}, {@broadcast, 0x4e23, 0x2004, 0x8, 0x8, 0x374}}, 0x44) sched_rr_get_interval(r3, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, 0x0) pipe(&(0x7f0000000d00)) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xffffffc6}, 0x0) r7 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 2.597108249s ago: executing program 3 (id=1595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161b01, 0x0) splice(r1, 0x0, r2, 0x0, 0x100000006, 0x0) r3 = syz_io_uring_setup(0x3fcb, &(0x7f0000000140)={0x0, 0xeffd, 0x8000, 0x3, 0xfedfffff}, &(0x7f00000000c0), &(0x7f0000000280)) io_uring_enter(r3, 0x47f4, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = socket(0x28, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r7, 0x4068aea3, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r3], 0xa0}}, 0x0) 2.596749351s ago: executing program 4 (id=1596): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x30, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1ff}]}, 0x30}}, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000c80)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) dup(r5) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r8 = socket(0x840000000002, 0x3, 0x100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r9, 0x0) sendmsg(r10, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 1.330592887s ago: executing program 5 (id=1597): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) r5 = dup3(r3, r0, 0x80000) ioctl$NBD_DO_IT(r5, 0xab03) ioctl$SOUND_OLD_MIXER_INFO(r5, 0x80304d65, &(0x7f0000000140)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x6071, 0x0, 0xe7, {[@generic={0x5, 0xa, "09df168a00000000"}]}}}}}}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2b, 0x6, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 560.294294ms ago: executing program 0 (id=1598): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000001c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x2}}}, 0xa) socket(0x10, 0x2, 0x0) r3 = io_uring_setup(0x1a9c, &(0x7f0000000100)={0x0, 0x1701, 0x20, 0x1, 0x194}) syz_io_uring_setup(0x10d2, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0xfffffffc, 0xd3, 0x0, r3}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000900)={0x1d, r10, 0x1}, 0x18) sendmmsg$unix(r9, &(0x7f0000004a80)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000440)="bd", 0x1}], 0x1, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x533509e98f3a73c}}], 0x2, 0x1d3) close_range(r6, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) lstat(0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x54, 0x0, 0x0, 0x0, 0x23456}) 531.912928ms ago: executing program 4 (id=1599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001080)=@nat={'nat\x00', 0x670, 0x5, 0x398, 0x0, 0x0, 0xffffffff, 0x110, 0x110, 0x300, 0x300, 0xffffffff, 0x300, 0x300, 0x5, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x40000, 0x2, 0x0, 0x6}}, @common=@ttl={{0x28}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@dev, @gre_key}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x250}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x3, "d596aeacb7ccdc0169c1d865b82ad7084d1c88c6b7cec8c99cc89cb57cda"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1cfaff00000005000300110000000000000000000000000000000000f8f8d32ca4aafea9198ad60080d38a1ce9016d3debe8ac6d8e5b0161da2c5bdc5b797cd93c373e82152646e88a0112cd814722690f8dfdb6"], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x200000c4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r3, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) recvmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000002ac0)=""/4101, 0x1005}], 0x1}, 0x4}], 0x1, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4fe, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x1, @mcast1, @loopback, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x61}]}}}}}}}, 0x0) r5 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r7 = syz_open_procfs(r5, &(0x7f0000000000)='map_files\x00') fchdir(r7) 0s ago: executing program 2 (id=1600): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) setpriority(0x1, 0xa0e, 0x0) (async) unshare(0x2040400) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = syz_open_pts(0xffffffffffffffff, 0x181083) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000640)={0x40, 0x7, 0x1, 0x3, 0xffff, 0x6}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x58, 0x54, 0x93d, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x2, {r4, 0x0, 0x0, 0x0, {@in6_addr=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x3, 0x0, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000740)={0x1, 'macvtap0\x00', 0x2}, 0x18) (async) r5 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002200)=@delchain={0xdc, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8}, {0x0, 0x9}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x7, 0x7, 0x1, 0x4}, {0xf3d0, 0xeb, 0x30, 0x2}, {0x7bd, 0x7, 0xdf, 0x3616}, {0x0, 0xb, 0x81, 0x1}, {0x81, 0x80, 0x40, 0x3}, {0x8, 0xa1, 0x5, 0xc365}]}}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}, @TCA_CHAIN={0x8, 0xb, 0x101}, @filter_kind_options=@f_route={{0xa}, {0x50, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x34, 0x6, [@m_vlan={0x30, 0x13, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x81}, 0x8000) (rerun: 32) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x3c}}, 0x40080) (async, rerun: 32) r6 = socket(0x10, 0x803, 0x0) (rerun: 32) sendto(r6, &(0x7f0000000880)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000002840)=@newtaction={0x44, 0x76, 0x1, 0x70bd29, 0xfffffffe, {}, [{0x30, 0x1, [@m_xt={0x2c, 0x3, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x44}}, 0x4000) syz_usb_control_io(r5, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9c3, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @alu={0x7, 0x0, 0x0, 0x8, 0x0, 0x4, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0x67, &(0x7f00000001c0)=""/103, 0x40f00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x6, 0x995, 0x40}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000300)=[{0x1, 0x4, 0x6, 0x7}], 0x10, 0x3}, 0x94) (async) r9 = getuid() quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000780)=@md0, r9, &(0x7f00000008c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='rpcb_getport\x00', r8, 0x0, 0x4}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) kernel console output (not intermixed with test programs): ller1: entered promiscuous mode [ 401.402785][ T9715] syzkaller1: entered allmulticast mode [ 402.394539][ T7437] usbhid 5-1:0.0: can't add hid device: -71 [ 402.400857][ T7437] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 402.412015][ T7437] usb 5-1: USB disconnect, device number 65 [ 402.430706][ T9730] hfsplus: unable to find HFS+ superblock [ 402.556125][ T9736] fuse: Unknown parameter '000000000000000000030x00000000000000030000000000000000000300000000000000000000003' [ 403.031189][ T9752] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.920'. [ 403.113345][ T9757] siw: device registration error -23 [ 403.127894][ T9757] tmpfs: Bad value for 'mpol' [ 404.503786][ T7437] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 404.525442][ T9773] netlink: 165 bytes leftover after parsing attributes in process `syz.5.925'. [ 404.671381][ T7437] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.943961][ T7437] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.968563][ T7437] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 404.981101][ T7437] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.001095][ T7437] usb 5-1: config 0 descriptor?? [ 405.015096][ T7423] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 405.078381][ T7438] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 405.202503][ T7423] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.224932][ T7423] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 405.236815][ T7423] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 405.441950][ T7423] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 405.456415][ T7438] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.464582][ T7423] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.477318][ T7438] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 405.482860][ T7423] usb 6-1: Product: syz [ 405.747659][ T7438] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 405.893444][ T7438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.005780][ T7423] usb 6-1: Manufacturer: syz [ 406.010462][ T7423] usb 6-1: SerialNumber: syz [ 406.029550][ T7423] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 406.031369][ T7438] usb 4-1: Product: syz [ 406.043939][ T7423] cdc_ncm 6-1:1.0: bind() failure [ 406.055523][ T7438] usb 4-1: Manufacturer: syz [ 406.066642][ T7438] usb 4-1: SerialNumber: syz [ 406.218851][ T9788] ceph: No mds server is up or the cluster is laggy [ 406.639168][ T9793] random: crng reseeded on system resumption [ 406.666969][ T5984] usb 6-1: USB disconnect, device number 32 [ 407.123606][ T7437] usbhid 5-1:0.0: can't add hid device: -71 [ 407.183309][ T7437] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 407.248246][ T7437] usb 5-1: USB disconnect, device number 66 [ 407.803290][ T5984] IPVS: starting estimator thread 0... [ 407.881188][ T9807] siw: device registration error -23 [ 407.894411][ T9807] tmpfs: Bad value for 'mpol' [ 408.674483][ T9806] IPVS: using max 33 ests per chain, 79200 per kthread [ 408.774434][ T7423] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 408.944400][ T7424] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 408.944535][ T7438] cdc_ncm 4-1:1.0: bind() failure [ 408.975576][ T7423] usb 6-1: Using ep0 maxpacket: 8 [ 409.015639][ T7423] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 409.073312][ T7423] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 409.166198][ T7424] usb 5-1: Using ep0 maxpacket: 32 [ 409.194388][ T7423] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 409.201226][ T7438] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 409.230219][ T7438] cdc_ncm 4-1:1.1: bind() failure [ 409.234372][ T7424] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 409.243877][ T7424] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 409.277399][ T7423] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.292685][ T7424] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 409.303647][ T7424] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 409.314432][ T7423] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 409.323559][ T7424] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 409.344781][ T7438] usb 4-1: USB disconnect, device number 39 [ 409.358842][ T7423] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.445044][ T7424] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 409.515134][ T7424] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 409.542371][ T7424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.570884][ T7424] usb 5-1: config 0 descriptor?? [ 409.718513][ T9810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.761212][ T9810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.814460][ T7423] usb 6-1: GET_CAPABILITIES returned 0 [ 409.820061][ T7423] usbtmc 6-1:16.0: can't read capabilities [ 409.857122][ T9824] netlink: 47 bytes leftover after parsing attributes in process `syz.3.940'. [ 410.052634][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 410.076109][ T7438] usb 6-1: USB disconnect, device number 33 [ 410.247713][ T7424] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 67 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 410.268396][ T7424] usb 5-1: USB disconnect, device number 67 [ 410.296052][ T9830] xt_l2tp: v2 sid > 0xffff: 262144 [ 410.302816][ T7424] usblp0: removed [ 412.102682][ T9852] xt_l2tp: v2 sid > 0xffff: 262144 [ 412.122845][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'. [ 413.231679][ T9863] netlink: 10 bytes leftover after parsing attributes in process `syz.2.948'. [ 413.514800][ T7424] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 413.589732][ T7423] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 413.654807][ T7424] usb 3-1: device descriptor read/64, error -71 [ 413.859394][ T7423] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 413.870164][ T7423] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 413.884911][ T7423] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1088, setting to 1024 [ 413.900955][ T7423] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 413.918091][ T7423] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 413.927286][ T7424] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 413.941616][ T7423] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.032849][ T7423] usb 6-1: Product: syz [ 414.038464][ T7423] usb 6-1: Manufacturer: syz [ 414.043216][ T7423] usb 6-1: SerialNumber: syz [ 414.084300][ T7423] usb 6-1: config 0 descriptor?? [ 414.090048][ T7424] usb 3-1: device descriptor read/64, error -71 [ 414.117393][ T9868] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 414.127944][ T7423] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 414.129832][ T9926] loop2: detected capacity change from 0 to 7 [ 414.144110][ T6078] Dev loop2: unable to read RDB block 7 [ 414.150027][ T6078] loop2: unable to read partition table [ 414.156839][ T6078] loop2: partition table beyond EOD, truncated [ 414.183055][ T9926] Dev loop2: unable to read RDB block 7 [ 414.203191][ T9926] loop2: unable to read partition table [ 414.215557][ T7424] usb usb3-port1: attempt power cycle [ 414.222008][ T9926] loop2: partition table beyond EOD, truncated [ 414.234851][ T9926] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 414.410370][ T9930] 9pnet_fd: p9_fd_create_unix (9930): problem connecting socket: .: -111 [ 414.442216][ T9868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.468234][ T9868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.492542][ T9868] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 414.668695][ T9937] 9pnet_fd: p9_fd_create_unix (9937): problem connecting socket: .: -111 [ 414.766287][ T7423] scsi host1: usb-storage 6-1:0.0 [ 414.795446][ T7423] usb 6-1: USB disconnect, device number 34 [ 414.988363][ T9940] overlayfs: missing 'lowerdir' [ 415.047072][ T7424] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 415.077471][ T7424] usb 3-1: device descriptor read/8, error -71 [ 415.235053][ T7438] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 415.342215][ T9949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.505299][ T7438] usb 5-1: Using ep0 maxpacket: 32 [ 415.775621][ T7424] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 415.855537][ T7438] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 415.876735][ T7424] usb 3-1: device descriptor read/8, error -71 [ 415.896594][ T7438] usb 5-1: config 0 has no interface number 0 [ 415.910805][ T7438] usb 5-1: config 0 interface 106 has no altsetting 0 [ 415.926862][ T7438] usb 5-1: New USB device found, idVendor=0421, idProduct=6901, bcdDevice=2d.1d [ 416.014528][ T7424] usb usb3-port1: unable to enumerate USB device [ 416.042119][ T7438] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.075975][ T7438] usb 5-1: Product: syz [ 416.080339][ T7438] usb 5-1: Manufacturer: syz [ 416.088153][ T7438] usb 5-1: SerialNumber: syz [ 416.107173][ T7438] usb 5-1: config 0 descriptor?? [ 416.117559][ T9957] [U] ²§N{st3 ö)ŸLÌó´ñb§o7UˆÑŽÌNQþʈ t™²­QöZ4s  [ 416.171265][ T7438] cdc_phonet 5-1:0.106: probe with driver cdc_phonet failed with error -22 [ 416.329476][ T5984] usb 5-1: USB disconnect, device number 68 [ 416.663003][ T9965] xt_l2tp: v2 sid > 0xffff: 262144 [ 417.478016][ T9969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 418.220979][ T9977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.964'. [ 418.682047][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.969'. [ 419.633277][T10000] netlink: 52 bytes leftover after parsing attributes in process `syz.2.970'. [ 419.644912][T10000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.645704][ T30] audit: type=1326 audit(1755923819.932:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9980 comm="syz.3.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc654f8ebe9 code=0x7fc00000 [ 419.673087][ C1] vkms_vblank_simulate: vblank timer overrun [ 419.683086][T10000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.257117][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.972'. [ 420.268551][T10014] nbd: socks must be embedded in a SOCK_ITEM attr [ 422.379297][ T7438] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 422.853307][ T7438] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 422.878905][ T7438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.909164][ T7438] usb 4-1: config 0 descriptor?? [ 422.937747][ T7438] cp210x 4-1:0.0: cp210x converter detected [ 423.123423][ T7438] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 423.131570][ T7438] cp210x 4-1:0.0: querying part number failed [ 423.184788][ T7438] usb 4-1: cp210x converter now attached to ttyUSB0 [ 424.724882][T10077] xt_l2tp: v2 sid > 0xffff: 262144 [ 424.839378][ T7424] usb 4-1: USB disconnect, device number 40 [ 425.132637][ T7424] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 425.438132][ T7424] cp210x 4-1:0.0: device disconnected [ 426.122729][ T7438] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 426.288742][ T7438] usb 6-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 426.331470][ T7438] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 426.375905][ T7438] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 426.394620][T10107] loop2: detected capacity change from 0 to 7 [ 426.411806][ T7438] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.419858][T10107] Dev loop2: unable to read RDB block 7 [ 426.419900][T10107] loop2: unable to read partition table [ 426.420099][T10107] loop2: partition table beyond EOD, truncated [ 426.439150][T10107] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 426.458636][ T7438] usb 6-1: config 0 descriptor?? [ 427.624886][T10131] overlayfs: failed to clone upperpath [ 427.867816][T10131] overlayfs: missing 'lowerdir' [ 427.912652][T10135] loop2: detected capacity change from 0 to 7 [ 428.026522][ T7424] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 428.887521][T10124] random: crng reseeded on system resumption [ 428.922401][T10135] Dev loop2: unable to read RDB block 7 [ 428.956990][T10135] loop2: unable to read partition table [ 428.982402][T10135] loop2: partition table beyond EOD, truncated [ 429.052792][ T7424] usb 3-1: unable to get BOS descriptor or descriptor too short [ 429.072634][ T7424] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.095084][T10135] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 429.119447][ T7424] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.252555][ T7424] usb 3-1: string descriptor 0 read error: -22 [ 429.320924][ T7424] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 429.383592][ T7424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.561224][ T7424] usb 3-1: invalid UAC_HEADER (v1) [ 429.581459][ T7424] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 429.650415][ T6050] udevd[6050]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.764883][ T7423] usb 3-1: USB disconnect, device number 56 [ 429.834332][T10144] random: crng reseeded on system resumption [ 429.846849][ T7424] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 429.919813][T10150] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1009'. [ 429.948388][ T7423] usb 6-1: USB disconnect, device number 35 [ 429.966129][T10144] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1009'. [ 430.030318][ T7424] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.049227][ T7424] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 430.060336][ T7424] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 430.085993][ T7424] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 430.114340][ T7424] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.135234][ T7424] usb 4-1: Product: syz [ 430.139739][ T7424] usb 4-1: Manufacturer: syz [ 430.152240][ T7424] usb 4-1: SerialNumber: syz [ 430.168291][ T7424] usb 4-1: config 0 descriptor?? [ 430.401221][T10142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.441966][T10142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.506988][ T7424] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 430.718980][ T7424] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.741038][ T7424] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.779471][ T7423] usb 4-1: USB disconnect, device number 41 [ 430.839185][ T7424] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 430.905645][ T7424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.136061][ T7424] usb 5-1: config 0 descriptor?? [ 432.777805][ T7424] usbhid 5-1:0.0: can't add hid device: -71 [ 432.783858][ T7424] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 432.828809][ T7424] usb 5-1: USB disconnect, device number 69 [ 433.177941][ T7424] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 433.317150][ T7424] usb 5-1: device descriptor read/64, error -71 [ 433.425211][T10204] program syz.5.1025 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 433.539062][T10205] hub 8-0:1.0: USB hub found [ 433.544724][T10205] hub 8-0:1.0: 1 port detected [ 433.549946][ T7426] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 433.617182][ T7424] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 433.747329][ T7424] usb 5-1: device descriptor read/64, error -71 [ 433.753756][ T7426] usb 4-1: Using ep0 maxpacket: 16 [ 433.760282][ T7426] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 433.768935][ T7426] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 433.777425][ T7426] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 433.785656][ T7426] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 433.789396][T10208] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 433.793930][ T7426] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 433.811147][ T7426] usb 4-1: config 0 has no interface number 0 [ 433.817555][ T7426] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 433.828914][ T7426] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 433.838954][ T7426] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 433.849288][ T7426] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 433.862389][ T7426] usb 4-1: config 0 interface 125 has no altsetting 0 [ 433.869517][ T7424] usb usb5-port1: attempt power cycle [ 433.874952][ T7426] usb 4-1: config 0 interface 125 has no altsetting 2 [ 433.884988][ T7426] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 433.894333][ T7426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.902446][ T7426] usb 4-1: Product: syz [ 433.906675][ T7426] usb 4-1: Manufacturer: syz [ 433.911394][ T7426] usb 4-1: SerialNumber: syz [ 433.918585][ T7426] usb 4-1: config 0 descriptor?? [ 433.927217][ T7426] usb 4-1: selecting invalid altsetting 2 [ 434.131911][ C1] usb 4-1: async_complete: urb error -71 [ 434.137754][ C1] usb 4-1: async_complete: urb error -71 [ 434.143517][ C1] usb 4-1: async_complete: urb error -71 [ 434.149241][ C1] usb 4-1: async_complete: urb error -71 [ 434.155548][ C1] vkms_vblank_simulate: vblank timer overrun [ 434.210180][ T7426] get_1284_register: usb error -71 [ 434.215952][ T7426] uss720 4-1:0.125: probe with driver uss720 failed with error -71 [ 434.239612][ T7426] usb 4-1: USB disconnect, device number 42 [ 434.267532][ T7424] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 434.299059][ T7424] usb 5-1: device descriptor read/8, error -71 [ 434.475020][T10212] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1028'. [ 434.661491][ T7424] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 434.687950][ T7424] usb 5-1: device descriptor read/8, error -71 [ 434.898661][ T7424] usb usb5-port1: unable to enumerate USB device [ 435.735271][T10233] : entered promiscuous mode [ 436.504126][T10241] xt_CT: No such helper "snmp" [ 437.348176][T10257] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.1038'. [ 438.191459][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1042'. [ 438.415666][ T5984] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 438.775841][ T5984] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 439.207552][ T5984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 439.253725][ T5984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 439.423460][ T5984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 439.447531][ T5984] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 439.557832][ T5984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.622364][ T5984] usb 5-1: Product: syz [ 439.626581][ T5984] usb 5-1: Manufacturer: syz [ 439.655597][ T5984] usb 5-1: SerialNumber: syz [ 439.659152][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1045'. [ 439.693816][ T5984] usb 5-1: config 0 descriptor?? [ 439.723199][ T5984] iguanair 5-1:0.0: failed to get version [ 439.738261][ T5984] iguanair 5-1:0.0: probe with driver iguanair failed with error -90 [ 439.936293][ T7426] usb 5-1: USB disconnect, device number 74 [ 439.942682][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.949041][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.555483][T10294] xt_CT: No such helper "snmp" [ 442.565236][T10318] siw: device registration error -23 [ 442.582629][T10318] tmpfs: Bad value for 'mpol' [ 443.518160][T10326] dlm: non-version read from control device 240 [ 443.669862][T10326] input: syz0 as /devices/virtual/input/input19 [ 444.015481][T10334] loop2: detected capacity change from 0 to 7 [ 444.310708][T10334] Dev loop2: unable to read RDB block 7 [ 444.316637][T10334] loop2: unable to read partition table [ 444.323550][T10334] loop2: partition table beyond EOD, truncated [ 444.330005][T10334] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 446.159657][T10346] xt_CT: No such helper "snmp" [ 447.011744][ T7426] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 447.078729][ T7424] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 447.198802][ T7426] usb 3-1: Using ep0 maxpacket: 8 [ 447.208484][ T7426] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 447.231731][ T7424] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.264407][ T7424] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.303909][ T7426] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 447.349301][ T7424] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 447.368007][ T7426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.407857][ T7424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.423051][ T7426] usb 3-1: Product: syz [ 447.448919][ T7426] usb 3-1: Manufacturer: syz [ 447.476001][ T7426] usb 3-1: SerialNumber: syz [ 447.510405][ T7424] usb 5-1: config 0 descriptor?? [ 447.586104][ T7426] usb 3-1: config 0 descriptor?? [ 447.807964][ T7426] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 447.926660][ T7426] usb 3-1: setting power ON [ 447.983832][ T7426] dvb-usb: bulk message failed: -22 (2/0) [ 448.381489][ T7426] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 448.392422][ T7426] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 448.402002][ T7426] usb 3-1: media controller created [ 449.190329][ T7426] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 449.757472][ T7426] usb 3-1: selecting invalid altsetting 6 [ 449.790878][ T7426] usb 3-1: digital interface selection failed (-22) [ 449.816814][ T7426] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 449.903573][ T7426] usb 3-1: setting power OFF [ 450.063505][ T7426] dvb-usb: bulk message failed: -22 (2/0) [ 451.233109][ T7426] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 451.754808][T10371] loop2: detected capacity change from 0 to 7 [ 451.771225][T10371] Dev loop2: unable to read RDB block 7 [ 451.783061][T10371] loop2: unable to read partition table [ 451.789117][T10371] loop2: partition table beyond EOD, truncated [ 451.797923][T10371] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 451.814458][ T7424] usbhid 5-1:0.0: can't add hid device: -71 [ 451.820517][ T7424] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 451.840188][ T7426] (NULL device *): no alternate interface [ 451.950369][T10375] dlm: non-version read from control device 240 [ 451.970512][ T7424] usb 5-1: USB disconnect, device number 75 [ 452.460968][ T7426] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 452.584368][ T7426] usb 3-1: USB disconnect, device number 57 [ 453.579863][T10390] xt_CT: No such helper "snmp" [ 454.023587][ T5984] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 454.064300][T10394] xt_CT: No such helper "snmp" [ 454.379928][ T5984] usb 5-1: device descriptor read/64, error -71 [ 454.560462][T10399] 9pnet_fd: Insufficient options for proto=fd [ 454.783412][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1075'. [ 454.792629][ T5984] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 454.803182][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1075'. [ 454.940310][ T5984] usb 5-1: device descriptor read/64, error -71 [ 455.051484][ T5984] usb usb5-port1: attempt power cycle [ 455.069637][ T7438] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 455.305374][ T7438] usb 3-1: Using ep0 maxpacket: 32 [ 455.313139][ T7438] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 455.332705][ T7438] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 455.351556][ T7438] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 455.399645][ T5984] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 455.425084][ T7438] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 455.438587][ T7438] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 455.450411][T10420] random: crng reseeded on system resumption [ 455.469544][ T5984] usb 5-1: device descriptor read/8, error -71 [ 455.489421][ T7438] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 455.519697][ T7438] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 455.527745][ T7438] usb 3-1: SerialNumber: syz [ 455.542735][T10406] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 455.552334][ T7438] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 455.561115][ T7438] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 455.569957][ T7438] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 455.709696][ T5984] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 455.740257][ T5984] usb 5-1: device descriptor read/8, error -71 [ 455.962678][ T5984] usb usb5-port1: unable to enumerate USB device [ 456.170999][T10429] loop2: detected capacity change from 0 to 7 [ 456.200703][T10429] Dev loop2: unable to read RDB block 7 [ 456.206328][T10429] loop2: unable to read partition table [ 456.223125][T10429] loop2: partition table beyond EOD, truncated [ 456.233699][T10429] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 456.621460][T10437] Invalid source name [ 458.629066][T10454] siw: device registration error -23 [ 458.645756][T10454] tmpfs: Bad value for 'mpol' [ 460.140262][ T5984] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 460.300248][ T5984] usb 5-1: Using ep0 maxpacket: 16 [ 460.337903][ T5984] usb 5-1: config 0 has no interfaces? [ 460.364293][ T5984] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 460.399037][ T5984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.417197][ T5984] usb 5-1: Product: syz [ 460.427744][ T5984] usb 5-1: Manufacturer: syz [ 460.448131][ T5984] usb 5-1: SerialNumber: syz [ 460.473960][ T5984] usb 5-1: config 0 descriptor?? [ 460.516835][T10470] netlink: 'syz.3.1094': attribute type 1 has an invalid length. [ 460.611649][T10470] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.706609][ T5984] usb 5-1: USB disconnect, device number 80 [ 460.766760][ T7426] usb 3-1: USB disconnect, device number 58 [ 460.790422][T10472] gretap1: entered promiscuous mode [ 463.480837][T10492] siw: device registration error -23 [ 463.900916][T10492] tmpfs: Bad value for 'mpol' [ 465.078672][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1104'. [ 465.177642][T10503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.737125][ T5155] Bluetooth: hci3: unexpected event for opcode 0x0405 [ 465.981043][ T5984] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 466.241041][ T5984] usb 5-1: device descriptor read/64, error -71 [ 466.540981][ T5984] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 466.801143][ T5984] usb 5-1: device descriptor read/64, error -71 [ 466.812475][T10522] syz.5.1109: attempt to access beyond end of device [ 466.812475][T10522] loop11: rw=0, sector=0, nr_sectors = 1 limit=0 [ 466.825941][T10522] FAT-fs (loop11): unable to read boot sector [ 466.983250][ T5984] usb usb5-port1: attempt power cycle [ 467.480534][ T5984] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 467.753002][ T5984] usb 5-1: device descriptor read/8, error -71 [ 468.001719][ T5984] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 468.071285][ T5984] usb 5-1: device descriptor read/8, error -71 [ 468.143581][T10535] siw: device registration error -23 [ 468.159879][T10535] tmpfs: Bad value for 'mpol' [ 468.725975][ T5984] usb usb5-port1: unable to enumerate USB device [ 469.121419][ T5984] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 469.884299][T10564] xt_CT: No such helper "snmp" [ 470.291484][ T5984] usb 5-1: device descriptor read/64, error -71 [ 470.891100][T10572] xt_CT: No such helper "snmp" [ 471.611619][ T5984] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 471.692240][T10578] xt_CT: No such helper "snmp" [ 471.771989][ T5984] usb 5-1: device descriptor read/64, error -71 [ 471.884398][ T5984] usb usb5-port1: attempt power cycle [ 471.946327][T10589] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1127'. [ 472.046672][T10594] virtio-fs: tag not found [ 472.096701][T10584] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1124'. [ 473.333621][T10622] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1131'. [ 473.611792][ T5984] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 475.312141][T10638] xt_CT: No such helper "snmp" [ 475.426117][ T5984] usb 3-1: config 2 has an invalid interface number: 232 but max is 0 [ 475.441901][ T5984] usb 3-1: config 2 has no interface number 0 [ 475.448045][ T5984] usb 3-1: New USB device found, idVendor=0df6, idProduct=0067, bcdDevice= 1.79 [ 476.134806][T10643] xt_CT: No such helper "snmp" [ 476.301997][ T5984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.423625][T10665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1142'. [ 478.644269][T10667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1143'. [ 479.732066][T10677] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1146'. [ 480.312902][ T7424] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 480.687398][ T7424] usb 6-1: Using ep0 maxpacket: 16 [ 480.696907][ T7424] usb 6-1: config 0 has an invalid interface number: 25 but max is 0 [ 480.714655][ T7424] usb 6-1: config 0 has no interface number 0 [ 480.740712][ T7424] usb 6-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=f9.12 [ 480.768370][ T7424] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.781955][ T7424] usb 6-1: Product: syz [ 480.793829][ T7424] usb 6-1: Manufacturer: syz [ 480.798608][ T7424] usb 6-1: SerialNumber: syz [ 480.821970][ T5984] usb 3-1: can't set config #2, error -71 [ 480.843767][ T7424] usb 6-1: config 0 descriptor?? [ 480.873271][ T5984] usb 3-1: USB disconnect, device number 59 [ 480.874047][ T7424] mct_u232 6-1:0.25: MCT U232 converter detected [ 480.916965][ T7424] mct_u232 ttyUSB0: expected endpoint missing [ 480.975161][T10688] xt_CT: You must specify a L4 protocol and not use inversions on it [ 481.143169][T10682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.153740][T10682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.893108][ T5984] usb 6-1: USB disconnect, device number 36 [ 481.900741][ T5984] mct_u232 6-1:0.25: device disconnected [ 482.472430][T10718] loop2: detected capacity change from 0 to 7 [ 482.479964][ T6078] loop2: [ 482.487207][T10720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1157'. [ 482.501528][ T6078] loop2: partition table partially beyond EOD, truncated [ 482.545866][T10718] loop2: [ 482.548987][T10718] loop2: partition table partially beyond EOD, truncated [ 483.913829][T10728] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1160'. [ 484.233369][ T5984] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 484.450458][ T5984] usb 6-1: config 2 has an invalid interface number: 232 but max is 0 [ 484.475303][ T5984] usb 6-1: config 2 has no interface number 0 [ 484.532197][ T5984] usb 6-1: New USB device found, idVendor=0df6, idProduct=0067, bcdDevice= 1.79 [ 484.614756][ T5984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.666660][T10755] ieee802154 phy0 wpan0: encryption failed: -22 [ 485.343360][ T5984] usb 6-1: USB disconnect, device number 37 [ 485.774021][T10759] tmpfs: Bad value for 'mpol' [ 485.995594][T10764] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1169'. [ 486.253630][ T7426] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 487.215695][ T7426] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 488.281016][ T7426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.383493][T10771] loop2: detected capacity change from 0 to 7 [ 488.423788][ T7426] usb 4-1: config 0 descriptor?? [ 488.540540][T10771] loop2: [ 488.596631][T10771] loop2: partition table partially beyond EOD, truncated [ 488.696076][ T7426] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 488.843895][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1172'. [ 488.899077][ T7426] [drm:udl_init] *ERROR* Selecting channel failed [ 488.931820][ T7426] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 488.980453][ T7426] [drm] Initialized udl on minor 2 [ 488.997103][T10776] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1174'. [ 489.010123][ T7426] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 489.041424][ T7426] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 489.049704][ T7424] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 489.068123][ T7426] usb 4-1: USB disconnect, device number 43 [ 489.074446][ T7424] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 489.083769][ T7424] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 489.673444][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1179'. [ 489.894987][ T5984] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 490.018105][T10806] can0: slcan on ttyS3. [ 490.158215][ T7437] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 490.244569][ T5984] usb 5-1: Using ep0 maxpacket: 32 [ 490.256133][ T5984] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 490.309615][ T5984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 490.309837][T10806] can0 (unregistered): slcan off ttyS3. [ 490.330561][T10808] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1182'. [ 490.515102][ T7437] usb 6-1: Using ep0 maxpacket: 32 [ 490.543877][ T5984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 490.802345][ T5984] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 490.812544][ T7437] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 490.824219][ T5984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.864453][ T5984] usb 5-1: config 0 descriptor?? [ 490.886176][ T7437] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 490.904205][ T5984] hub 5-1:0.0: USB hub found [ 490.919141][ T7437] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.951403][ T7437] usb 6-1: Product: syz [ 490.966528][ T7437] usb 6-1: Manufacturer: syz [ 490.982640][ T7437] usb 6-1: SerialNumber: syz [ 491.013387][ T7437] usb 6-1: config 0 descriptor?? [ 491.570166][ T7437] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input20 [ 491.626014][ T7437] usbtouchscreen 6-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 491.721013][ T7437] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 491.721871][ T7426] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 491.970961][ T7426] usb 4-1: Using ep0 maxpacket: 32 [ 491.976846][ T7437] usb 6-1: USB disconnect, device number 38 [ 492.001083][ T7426] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 492.026279][ T7426] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 492.053307][ T7426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.068057][ T7426] usb 4-1: Product: syz [ 492.083402][ T7426] usb 4-1: Manufacturer: syz [ 492.247702][ T7426] usb 4-1: SerialNumber: syz [ 492.489250][ T7426] usb 4-1: config 0 descriptor?? [ 492.509263][ T7426] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21 [ 492.528303][ T7426] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 492.552155][ T7426] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 492.710534][ T7426] usb 4-1: USB disconnect, device number 44 [ 492.711714][ T5984] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 492.746229][ T5984] usbhid 5-1:0.0: can't add hid device: -71 [ 492.752236][ T5984] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 492.785713][ T5984] usb 5-1: USB disconnect, device number 88 [ 493.073721][T10825] loop2: detected capacity change from 0 to 7 [ 493.099804][ T6078] loop2: [ 493.102894][ T6078] loop2: partition table partially beyond EOD, truncated [ 493.118769][T10825] loop2: [ 493.121759][T10825] loop2: partition table partially beyond EOD, truncated [ 493.591749][T10843] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 493.619512][ T7426] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 493.942502][T10849] xt_l2tp: v2 sid > 0xffff: 262144 [ 494.024710][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1193'. [ 494.358743][ T7426] usb 6-1: device descriptor read/64, error -71 [ 495.084934][ T7426] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 495.185646][T10862] comedi: valid board names for 8255 driver are: [ 495.192001][T10862] 8255 [ 495.197493][T10862] comedi: valid board names for vmk80xx driver are: [ 495.409040][T10862] vmk80xx [ 495.412182][T10862] comedi: valid board names for usbduxsigma driver are: [ 495.419805][T10862] usbduxsigma [ 495.423552][T10862] comedi: valid board names for usbduxfast driver are: [ 495.430952][T10862] usbduxfast [ 495.434626][T10862] comedi: valid board names for usbdux driver are: [ 495.441590][T10862] usbdux [ 495.445509][T10862] comedi: valid board names for ni6501 driver are: [ 495.452903][T10862] ni6501 [ 495.456539][T10862] comedi: valid board names for dt9812 driver are: [ 496.172480][T10871] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 496.292212][ T7426] usb 6-1: device descriptor read/64, error -71 [ 496.308919][T10862] dt9812 [ 496.446455][T10862] comedi: valid board names for ni_labpc_cs driver are: [ 496.534566][T10862] ni_labpc_cs [ 496.537995][T10862] comedi: valid board names for ni_daq_700 driver are: [ 496.568731][T10862] ni_daq_700 [ 496.572052][T10862] comedi: valid board names for labpc_pci driver are: [ 496.588956][ T7426] usb usb6-port1: attempt power cycle [ 496.614355][T10862] labpc_pci [ 496.666754][ T7437] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 496.680799][T10862] comedi: valid board names for adl_pci9118 driver are: [ 496.760677][T10862] pci9118dg [ 496.806446][T10862] pci9118hg [ 496.852977][T10862] pci9118hr [ 496.869966][T10862] comedi: valid board names for 8255_pci driver are: [ 496.873064][ T7437] usb 3-1: config 0 has no interfaces? [ 496.880315][T10862] 8255_pci [ 496.892752][T10862] comedi: valid board names for s526 driver are: [ 496.893141][ T7437] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 496.913427][T10862] s526 [ 497.544544][ T7426] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 497.546585][T10862] comedi: valid board names for multiq3 driver are: [ 497.562588][ T7437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.578063][T10862] multiq3 [ 497.581263][T10862] comedi: valid board names for pcmuio driver are: [ 497.581635][ T7426] usb 6-1: Using ep0 maxpacket: 32 [ 497.589759][ T7437] usb 3-1: config 0 descriptor?? [ 497.600264][T10862] pcmuio48 [ 497.607823][T10862] pcmuio96 [ 497.612805][ T7426] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 497.624598][T10884] loop2: detected capacity change from 0 to 7 [ 497.631444][T10862] comedi: valid board names for pcmmio driver are: [ 497.634618][T10884] loop2: [ 497.638013][T10862] pcmmio [ 497.640911][T10884] loop2: partition table partially beyond EOD, truncated [ 497.644138][T10862] comedi: valid board names for pcmda12 driver are: [ 497.746956][T10862] pcmda12 [ 497.750096][T10862] comedi: valid board names for pcmad driver are: [ 498.188214][T10862] pcmad12 [ 498.191345][T10862] pcmad16 [ 498.194408][T10862] comedi: valid board names for ni_labpc driver are: [ 498.286351][T10862] lab-pc-1200 [ 498.295770][ T7426] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 498.300203][T10862] lab-pc-1200ai [ 498.312986][ T7424] usb 3-1: USB disconnect, device number 60 [ 498.323619][T10862] lab-pc+ [ 498.347412][T10862] comedi: valid board names for atmio16 driver are: [ 498.352852][ T7426] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.371865][T10862] atmio16 [ 498.384690][ T7426] usb 6-1: Product: syz [ 498.388883][ T7426] usb 6-1: Manufacturer: syz [ 498.393506][ T7426] usb 6-1: SerialNumber: syz [ 498.398629][T10862] atmio16d [ 498.409629][T10862] comedi: valid board names for ni_at_ao driver are: [ 498.427044][ T7426] usb 6-1: config 0 descriptor?? [ 498.456674][T10862] at-ao-6 [ 498.459829][T10862] at-ao-10 [ 498.463047][T10862] comedi: valid board names for ni_at_a2150 driver are: [ 498.550608][T10862] ni_at_a2150 [ 498.605100][T10862] comedi: valid board names for adq12b driver are: [ 498.673910][T10862] adq12b [ 498.685418][ T7426] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input22 [ 498.689637][ T7437] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 498.744845][T10862] comedi: valid board names for mpc624 driver are: [ 498.857194][T10862] mpc624 [ 498.876635][T10862] comedi: valid board names for c6xdigio driver are: [ 498.923585][ T7426] usbtouchscreen 6-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 499.009232][T10862] c6xdigio [ 499.015867][T10862] comedi: valid board names for aio_iiro_16 driver are: [ 499.031941][ T7437] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 499.045517][T10862] aio_iiro_16 [ 499.048927][T10862] comedi: valid board names for aio_aio12_8 driver are: [ 499.065489][ T7437] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 499.079236][T10862] aio_aio12_8 [ 499.081999][ T7426] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 499.083634][T10862] aio_ai12_8 [ 499.123232][ T7437] hid-generic 0003:0004:0000.000F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 499.123402][T10893] tipc: Enabling of bearer rejected, failed to enable media [ 499.141472][T10862] aio_ao12_4 [ 499.156960][T10862] comedi: valid board names for fl512 driver are: [ 499.184005][ T7426] usb 6-1: USB disconnect, device number 41 [ 499.190466][T10862] fl512 [ 499.190479][T10862] comedi: valid board names for dmm32at driver are: [ 499.190490][T10862] dmm32at [ 499.190499][T10862] comedi: valid board names for dt282x driver are: [ 499.190509][T10862] dt2821 [ 499.190517][T10862] dt2821-f [ 499.190525][T10862] dt2821-g [ 499.190533][T10862] dt2823 [ 499.190540][T10862] dt2824-pgh [ 499.190548][T10862] dt2824-pgl [ 499.190556][T10862] dt2825 [ 499.190564][T10862] dt2827 [ 499.190571][T10862] dt2828 [ 499.190579][T10862] dt2829 [ 499.190586][T10862] dt21-ez [ 499.190603][T10862] dt23-ez [ 499.190611][T10862] dt24-ez [ 499.190619][T10862] dt24-ez-pgl [ 499.190627][T10862] comedi: valid board names for dt2817 driver are: [ 499.190637][T10862] dt2817 [ 499.190645][T10862] comedi: valid board names for dt2815 driver are: [ 499.190655][T10862] dt2815 [ 499.190662][T10862] comedi: valid board names for dt2814 driver are: [ 499.190672][T10862] dt2814 [ 499.190680][T10862] comedi: valid board names for dt2811 driver are: [ 499.190690][T10862] dt2811-pgh [ 499.190699][T10862] dt2811-pgl [ 499.190706][T10862] comedi: valid board names for dt2801 driver are: [ 499.190716][T10862] dt2801 [ 499.190724][T10862] comedi: valid board names for das6402 driver are: [ 499.190735][T10862] das6402-12 [ 499.190743][T10862] das6402-16 [ 499.190751][T10862] comedi: valid board names for das1800 driver are: [ 499.190761][T10862] das-1701st [ 499.190769][T10862] das-1701st-da [ 499.190777][T10862] das-1702st [ 499.190786][T10862] das-1702st-da [ 499.190793][T10862] das-1702hr [ 499.190801][T10862] das-1702hr-da [ 499.190809][T10862] das-1701ao [ 499.190817][T10862] das-1702ao [ 499.190825][T10862] das-1801st [ 499.190832][T10862] das-1801st-da [ 499.190840][T10862] das-1802st [ 499.190849][T10862] das-1802st-da [ 499.190856][T10862] das-1802hr [ 499.190865][T10862] das-1802hr-da [ 499.190872][T10862] das-1801hc [ 499.190880][T10862] das-1802hc [ 499.190888][T10862] das-1801ao [ 499.190896][T10862] das-1802ao [ 499.190904][T10862] comedi: valid board names for das800 driver are: [ 499.190914][T10862] das-800 [ 499.190922][T10862] cio-das800 [ 499.190929][T10862] das-801 [ 499.190937][T10862] cio-das801 [ 499.190945][T10862] das-802 [ 499.190952][T10862] cio-das802 [ 499.190960][T10862] cio-das802/16 [ 499.190969][T10862] comedi: valid board names for isa-das08 driver are: [ 499.190979][T10862] isa-das08 [ 499.190986][T10862] das08-pgm [ 499.190994][T10862] das08-pgh [ 499.191002][T10862] das08-pgl [ 499.191010][T10862] das08-aoh [ 499.191017][T10862] das08-aol [ 499.191025][T10862] das08-aom [ 499.191033][T10862] das08/jr-ao [ 499.191041][T10862] das08jr-16-ao [ 499.191049][T10862] pc104-das08 [ 499.191057][T10862] das08jr/16 [ 499.191065][T10862] comedi: valid board names for das16m1 driver are: [ 499.191075][T10862] das16m1 [ 499.191083][T10862] comedi: valid board names for dac02 driver are: [ 499.191093][T10862] dac02 [ 499.191101][T10862] comedi: valid board names for rti802 driver are: [ 499.191111][T10862] rti802 [ 499.191119][T10862] comedi: valid board names for rti800 driver are: [ 499.191129][T10862] rti800 [ 499.191136][T10862] rti815 [ 499.191144][T10862] comedi: valid board names for pcm3724 driver are: [ 499.191154][T10862] pcm3724 [ 499.191162][T10862] comedi: valid board names for pcl818 driver are: [ 499.191172][T10862] pcl818l [ 499.191179][T10862] pcl818h [ 499.191187][T10862] pcl818hd [ 499.191195][T10862] pcl818hg [ 499.191203][T10862] pcl818 [ 499.191210][T10862] pcl718 [ 499.191218][T10862] pcm3718 [ 499.191225][T10862] comedi: valid board names for pcl816 driver are: [ 499.191235][T10862] pcl816 [ 499.191243][T10862] pcl814b [ 499.191250][T10862] comedi: valid board names for pcl812 driver are: [ 499.191260][T10862] pcl812 [ 499.191268][T10862] pcl812pg [ 499.191276][T10862] acl8112pg [ 499.569748][T10862] acl8112dg [ 499.572975][T10862] acl8112hg [ 499.576439][T10862] a821pgl [ 499.579488][T10862] a821pglnda [ 499.582786][T10862] a821pgh [ 499.585870][T10862] a822pgl [ 499.588932][T10862] a822pgh [ 499.591968][T10862] a823pgl [ 499.595080][T10862] a823pgh [ 499.598120][T10862] pcl813 [ 499.601074][T10862] pcl813b [ 499.604107][T10862] acl8113 [ 499.607180][T10862] iso813 [ 499.610134][T10862] acl8216 [ 499.613171][T10862] a826pg [ 499.621432][T10862] comedi: valid board names for pcl730 driver are: [ 499.628275][T10862] pcl730 [ 499.631660][T10862] iso730 [ 499.634689][T10862] acl7130 [ 499.637723][T10862] pcm3730 [ 499.640758][T10862] pcl725 [ 499.643705][T10862] p8r8dio [ 499.647499][T10862] acl7225b [ 499.650635][T10862] p16r16dio [ 499.653850][T10862] pcl733 [ 499.656883][T10862] pcl734 [ 499.660263][T10862] opmm-1616-xt [ 499.663749][T10862] pearl-mm-p [ 499.667198][T10862] ir104-pbf [ 499.668740][T10898] fido_id[10898]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 499.670398][T10862] comedi: valid board names for pcl726 driver are: [ 499.670411][T10862] pcl726 [ 499.670419][T10862] pcl727 [ 499.670427][T10862] pcl728 [ 499.670435][T10862] acl6126 [ 499.720423][T10862] acl6128 [ 499.723775][T10862] comedi: valid board names for pcl724 driver are: [ 499.744375][T10862] pcl724 [ 499.751776][T10862] pcl722 [ 499.757578][T10862] pcl731 [ 499.760549][T10862] acl7122 [ 499.764073][T10905] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1211'. [ 499.776732][T10862] acl7124 [ 499.780145][T10862] pet48dio [ 499.783457][T10862] pcmio48 [ 499.786671][T10862] onyx-mm-dio [ 499.795149][T10862] comedi: valid board names for pcl711 driver are: [ 499.801740][T10862] pcl711 [ 499.804946][T10862] pcl711b [ 499.808148][T10862] acl8112hg [ 499.811486][T10862] acl8112dg [ 499.816423][T10862] comedi: valid board names for amplc_pc263 driver are: [ 499.823440][T10862] pc263 [ 499.829531][T10862] comedi: valid board names for amplc_pc236 driver are: [ 499.837700][T10862] pc36at [ 499.840725][T10862] comedi: valid board names for amplc_dio200 driver are: [ 499.918968][T10862] pc212e [ 500.040189][T10862] pc214e [ 500.043164][T10862] pc215e [ 500.084933][T10862] pc218e [ 500.104380][T10862] pc272e [ 500.114175][T10862] comedi: valid board names for comedi_parport driver are: [ 500.125006][T10862] comedi_parport [ 500.128728][T10862] comedi: valid board names for comedi_test driver are: [ 500.152941][T10862] comedi_test [ 500.159208][T10862] comedi: valid board names for comedi_bond driver are: [ 500.184715][T10862] comedi_bond [ 500.822366][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1209'. [ 501.380952][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.387458][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.454569][T10930] loop2: detected capacity change from 0 to 7 [ 501.475121][T10930] loop2: [ 501.478126][T10930] loop2: partition table partially beyond EOD, truncated [ 501.904919][ T7426] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 502.087747][ T7426] usb 4-1: config 0 has no interfaces? [ 502.093404][ T7426] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 502.103510][ T7426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.122625][ T7426] usb 4-1: config 0 descriptor?? [ 502.125166][ T7437] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 502.188945][ T7424] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 502.343985][ T7438] usb 4-1: USB disconnect, device number 45 [ 502.351475][ T7437] usb 6-1: Using ep0 maxpacket: 16 [ 502.355028][ T7424] usb 3-1: Using ep0 maxpacket: 8 [ 502.360783][ T7437] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 502.371439][ T7424] usb 3-1: too many configurations: 226, using maximum allowed: 8 [ 502.372627][ T7437] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.383947][ T7424] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 183 [ 502.391154][ T7437] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 502.403850][ T7424] usb 3-1: can't read configurations, error -22 [ 502.408555][ T7437] usb 6-1: config 1 has no interface number 1 [ 502.420346][ T7437] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 502.435238][ T7437] usb 6-1: New USB device found, idVendor=9f6b, idProduct=c643, bcdDevice= 0.9d [ 502.444293][ T7437] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.452406][ T5984] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 502.460323][ T7437] usb 6-1: Product: syz [ 502.464619][ T7437] usb 6-1: Manufacturer: syz [ 502.469863][ T7437] usb 6-1: SerialNumber: syz [ 502.535072][ T7424] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 502.614948][ T5984] usb 5-1: Using ep0 maxpacket: 32 [ 502.621720][ T5984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 502.638240][ T5984] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 502.647513][ T5984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.655684][ T5984] usb 5-1: Product: syz [ 502.659891][ T5984] usb 5-1: Manufacturer: syz [ 502.664510][ T5984] usb 5-1: SerialNumber: syz [ 502.672454][ T5984] usb 5-1: config 0 descriptor?? [ 502.684372][T10938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.686310][ T5984] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input23 [ 502.693506][ T7424] usb 3-1: Using ep0 maxpacket: 8 [ 502.709350][T10938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.719176][ T7424] usb 3-1: too many configurations: 226, using maximum allowed: 8 [ 502.720254][ T5984] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 502.730667][ T7424] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 183 [ 502.747389][ T7424] usb 3-1: can't read configurations, error -22 [ 502.754048][ T7424] usb usb3-port1: attempt power cycle [ 502.765793][ T7437] usb 6-1: cannot find UAC_HEADER [ 502.776381][ T5984] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 502.796849][ T7437] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 502.817238][ T7437] usb 6-1: USB disconnect, device number 42 [ 502.861156][ T6050] udevd[6050]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 502.888471][ T7426] usb 5-1: USB disconnect, device number 89 [ 503.112949][T10945] loop2: detected capacity change from 0 to 7 [ 503.119685][ T7424] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 503.135890][T10945] Dev loop2: unable to read RDB block 7 [ 503.141843][T10945] loop2: unable to read partition table [ 503.148491][T10945] loop2: partition table beyond EOD, truncated [ 503.154729][T10945] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 503.260057][ T7424] usb 3-1: Using ep0 maxpacket: 8 [ 503.293589][ T7424] usb 3-1: too many configurations: 226, using maximum allowed: 8 [ 503.365213][ T7424] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 183 [ 503.489791][ T7424] usb 3-1: can't read configurations, error -22 [ 503.705251][ T7424] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 503.790285][ T7424] usb 3-1: Using ep0 maxpacket: 8 [ 503.824195][ T7424] usb 3-1: too many configurations: 226, using maximum allowed: 8 [ 503.909063][ T7424] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 183 [ 504.013842][ T7424] usb 3-1: can't read configurations, error -22 [ 504.122279][ T7424] usb usb3-port1: unable to enumerate USB device [ 504.704960][ T7437] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 505.737236][T10968] loop2: detected capacity change from 0 to 7 [ 505.791716][T10968] loop2: [ 505.806526][T10968] loop2: partition table partially beyond EOD, truncated [ 506.068445][T10964] random: crng reseeded on system resumption [ 506.324940][ T7437] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 506.506700][ T7437] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 506.515457][ T7437] usb 6-1: config 150 has no interface number 0 [ 506.521764][ T7437] usb 6-1: config 150 interface 204 has no altsetting 0 [ 506.534232][ T7437] usb 6-1: config 150 interface 1 has no altsetting 0 [ 506.545067][ T7424] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 506.705101][ T7424] usb 3-1: Using ep0 maxpacket: 32 [ 506.713132][ T7424] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 506.742458][ T7424] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 506.764910][ T7424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.772999][ T7424] usb 3-1: Product: syz [ 506.784924][ T7424] usb 3-1: Manufacturer: syz [ 506.789556][ T7424] usb 3-1: SerialNumber: syz [ 506.815775][ T7424] usb 3-1: config 0 descriptor?? [ 506.839229][ T7424] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input24 [ 506.868365][ T7424] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 506.903245][ T7424] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 507.281959][ T7424] usb 3-1: USB disconnect, device number 65 [ 507.325161][T10988] xt_CT: No such helper "snmp" [ 507.477262][T10991] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 507.614592][T10993] block device autoloading is deprecated and will be removed. [ 507.814005][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1238'. [ 507.864134][T10996] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1238'. [ 508.125028][ T5984] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 509.212959][ T5984] usb 5-1: device descriptor read/64, error -71 [ 509.351073][T10995] infiniband syz1: set active [ 509.355285][ T7437] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 509.379369][ T7437] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.379415][T10995] infiniband syz1: added bond_slave_0 [ 509.435526][ T7437] usb 6-1: can't set config #150, error -71 [ 509.465789][ T7437] usb 6-1: USB disconnect, device number 44 [ 509.479653][T11014] loop2: detected capacity change from 0 to 7 [ 509.518148][ T5840] loop2: [ 509.518804][T10995] RDS/IB: syz1: added [ 509.521117][ T5840] loop2: partition table partially beyond EOD, truncated [ 509.525781][T10995] smc: adding ib device syz1 with port count 1 [ 509.532405][ T5984] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 509.548496][T10995] smc: ib device syz1 port 1 has pnetid [ 509.581800][T11014] loop2: [ 509.584790][T11014] loop2: partition table partially beyond EOD, truncated [ 509.616353][T11019] tmpfs: Cannot retroactively limit inodes [ 509.744977][ T5984] usb 5-1: device descriptor read/64, error -71 [ 509.875199][ T5984] usb usb5-port1: attempt power cycle [ 510.129234][T11031] tmpfs: Bad value for 'mpol' [ 510.804952][ T5984] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 511.075504][T11041] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1250'. [ 511.114952][ T7424] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 511.352296][ T7424] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.524193][ T7424] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.688837][ T7424] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 511.811450][ T7424] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.870233][ T7424] usb 3-1: config 0 descriptor?? [ 513.195041][ T7438] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 513.839310][ T7437] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 513.987907][ T7438] usb 4-1: device descriptor read/64, error -71 [ 514.023238][ T7437] usb 6-1: device descriptor read/all, error -71 [ 514.245943][ T7438] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 514.317394][T11060] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1255'. [ 514.405336][ T7438] usb 4-1: device descriptor read/64, error -71 [ 514.573388][ T7438] usb usb4-port1: attempt power cycle [ 514.589808][T11068] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1256'. [ 514.985165][ T7438] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 515.018817][ T7424] usbhid 3-1:0.0: can't add hid device: -71 [ 515.025099][ T7424] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 515.056049][ T7424] usb 3-1: USB disconnect, device number 66 [ 515.083550][ T7438] usb 4-1: device descriptor read/8, error -71 [ 515.182643][T11070] loop2: detected capacity change from 0 to 7 [ 515.192488][T11074] loop2: [ 515.195327][ T7437] usb 6-1: new low-speed USB device number 46 using dummy_hcd [ 515.205087][T11074] loop2: partition table partially beyond EOD, truncated [ 515.224680][T11070] loop2: [ 515.232281][T11070] loop2: partition table partially beyond EOD, truncated [ 515.511933][ T7437] usb 6-1: config 2 has an invalid interface number: 232 but max is 0 [ 515.534788][ T7437] usb 6-1: config 2 has no interface number 0 [ 515.551407][ T7437] usb 6-1: New USB device found, idVendor=0df6, idProduct=0067, bcdDevice= 1.79 [ 515.657849][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'. [ 515.701548][T11083] tmpfs: Bad value for 'mpol' [ 516.243180][ T5984] usb 5-1: device descriptor read/8, error -110 [ 516.274075][ T7437] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.505044][ T5984] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 516.513236][T11081] siw: device registration error -23 [ 517.212141][ T5984] usb 5-1: device descriptor read/8, error -32 [ 517.393146][ T7424] usb 6-1: USB disconnect, device number 46 [ 517.410941][ T5984] usb usb5-port1: unable to enumerate USB device [ 517.511112][T11101] binder: BINDER_SET_CONTEXT_MGR already set [ 517.515895][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1267'. [ 517.539008][T11101] binder: 11100:11101 ioctl 4018620d 200000004a80 returned -16 [ 517.700348][T11116] loop2: detected capacity change from 0 to 7 [ 517.720961][ T6050] loop2: [ 517.721454][T11119] syz_tun: entered allmulticast mode [ 517.731010][ T6050] loop2: partition table partially beyond EOD, truncated [ 517.737876][T11119] dvmrp8: entered allmulticast mode [ 517.788986][T11116] loop2: [ 517.791974][T11116] loop2: partition table partially beyond EOD, truncated [ 517.834466][T11119] syz_tun: left allmulticast mode [ 519.471549][ T30] audit: type=1326 audit(2000000017.569:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11146 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6f38ebe9 code=0x7ffc0000 [ 520.113540][ T30] audit: type=1326 audit(2000000017.599:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11146 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c6f38ebe9 code=0x7ffc0000 [ 520.195217][ T30] audit: type=1326 audit(2000000017.649:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11146 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6f38ebe9 code=0x7ffc0000 [ 520.322325][ T30] audit: type=1326 audit(2000000017.849:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11146 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c6f38ebe9 code=0x7ffc0000 [ 520.606501][T11154] random: crng reseeded on system resumption [ 520.739289][ T30] audit: type=1326 audit(2000000018.129:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11146 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6f38ebe9 code=0x7ffc0000 [ 521.242509][T11168] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1283'. [ 521.645665][ T30] audit: type=1326 audit(2000000018.239:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11146 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6f38ebe9 code=0x7ffc0000 [ 521.730108][ T30] audit: type=1326 audit(2000000018.269:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11146 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f8c6f38ebe9 code=0x7ffc0000 [ 521.755674][T11174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1284'. [ 521.794653][ T30] audit: type=1326 audit(2000000018.269:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11146 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6f38ebe9 code=0x7ffc0000 [ 521.865465][ T30] audit: type=1326 audit(2000000018.269:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11146 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6f38ebe9 code=0x7ffc0000 [ 521.895108][ T5984] usb 6-1: new low-speed USB device number 47 using dummy_hcd [ 521.938747][ T30] audit: type=1326 audit(2000000018.269:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11146 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8c6f38ebe9 code=0x7ffc0000 [ 522.155372][ T5984] usb 6-1: config 2 has an invalid interface number: 232 but max is 0 [ 522.971255][ T5984] usb 6-1: config 2 has no interface number 0 [ 523.025003][ T5984] usb 6-1: New USB device found, idVendor=0df6, idProduct=0067, bcdDevice= 1.79 [ 523.137076][ T5984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.165186][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 523.570268][T11189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1288'. [ 523.851470][ T5984] usb 6-1: USB disconnect, device number 47 [ 523.943867][T11194] netlink: 'syz.2.1289': attribute type 11 has an invalid length. [ 524.125421][T11203] net veth1_virt_wifi €Â: renamed from virt_wifi0 [ 525.660151][ T7438] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 525.847314][ T7438] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.864283][ T7438] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.882431][T11222] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1297'. [ 525.899564][T11217] tipc: New replicast peer: 255.255.255.255 [ 525.909098][ T7438] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 525.924271][T11217] tipc: Enabled bearer , priority 10 [ 525.935715][ T7438] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 525.955145][ T7438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.965760][T11222] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1297'. [ 525.988635][T11222] ucma_write: process 655 (syz.5.1297) changed security contexts after opening file descriptor, this is not allowed. [ 526.011020][ T7438] usb 4-1: config 0 descriptor?? [ 526.135349][T11224] xt_l2tp: v2 sid > 0xffff: 262144 [ 526.829545][T11230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1298'. [ 526.839136][T11230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1298'. [ 526.921205][ T7438] usbhid 4-1:0.0: can't add hid device: -71 [ 526.929769][ T5984] tipc: Node number set to 3851593672 [ 526.949206][ T7438] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 526.974535][ T7438] usb 4-1: USB disconnect, device number 50 [ 527.109931][T11236] loop2: detected capacity change from 0 to 7 [ 527.171309][T11236] Dev loop2: unable to read RDB block 7 [ 527.177177][T11236] loop2: unable to read partition table [ 527.184651][T11236] loop2: partition table beyond EOD, truncated [ 527.191300][T11236] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 527.216845][T11209] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 529.016299][T11246] devtmpfs: Too few inodes for current use [ 529.081736][T11246] geneve2: entered promiscuous mode [ 529.201339][T11255] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 529.244594][T11255] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 529.272425][T11255] overlayfs: conflicting options: userxattr,redirect_dir=on [ 529.352157][T11261] loop2: detected capacity change from 0 to 7 [ 529.365941][ T6050] Dev loop2: unable to read RDB block 7 [ 529.371970][ T6050] loop2: unable to read partition table [ 529.386921][ T6050] loop2: partition table beyond EOD, truncated [ 529.398936][T11261] Dev loop2: unable to read RDB block 7 [ 529.404636][T11261] loop2: unable to read partition table [ 529.461876][T11261] loop2: partition table beyond EOD, truncated [ 529.468512][T11261] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 529.488761][ T5205] Dev loop2: unable to read RDB block 7 [ 529.494370][ T5205] loop2: unable to read partition table [ 529.501251][ T5205] loop2: partition table beyond EOD, truncated [ 529.514060][T11265] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1307'. [ 529.789013][T11269] xt_l2tp: v2 sid > 0xffff: 262144 [ 530.481200][ T7426] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 530.585599][T11272] netlink: 'syz.0.1310': attribute type 10 has an invalid length. [ 530.600207][T11272] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.608918][T11272] bond0: (slave team0): Enslaving as an active interface with an up link [ 530.760905][T11280] siw: device registration error -23 [ 530.762192][ T7426] usb 4-1: config 2 has an invalid interface number: 232 but max is 0 [ 530.841051][T11276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.865147][ T7426] usb 4-1: config 2 has no interface number 0 [ 530.889868][ T7426] usb 4-1: New USB device found, idVendor=0df6, idProduct=0067, bcdDevice= 1.79 [ 530.969369][ T7426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.044950][ T7422] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 531.254035][T11276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.301533][ T5984] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 531.347662][ T7422] usb 3-1: Invalid ep0 maxpacket: 64 [ 531.352145][ T5984] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 531.505400][ T7422] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 531.693575][T11294] No source specified [ 531.906257][ T5984] usb 4-1: USB disconnect, device number 51 [ 531.917767][ T7422] usb 3-1: Invalid ep0 maxpacket: 64 [ 531.924767][ T5205] udevd[5205]: worker [6050] terminated by signal 33 (Unknown signal 33) [ 531.933085][ T7422] usb usb3-port1: attempt power cycle [ 531.945808][ T5205] udevd[5205]: worker [6050] failed while handling '/devices/virtual/misc/uhid/0000:0000:0000.0010/hidraw/hidraw0' [ 532.044987][ T7426] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 532.227065][ T7426] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 532.245271][ T7426] usb 5-1: config 0 has no interface number 0 [ 532.253771][ T7426] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 532.263592][ T7426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.283013][ T7426] usb 5-1: Product: syz [ 532.288754][ T7426] usb 5-1: Manufacturer: syz [ 532.293405][ T7426] usb 5-1: SerialNumber: syz [ 532.298385][ T7422] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 532.309390][ T7426] usb 5-1: config 0 descriptor?? [ 532.335662][ T7422] usb 3-1: Invalid ep0 maxpacket: 64 [ 532.479036][ T7422] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 532.508882][ T7422] usb 3-1: Invalid ep0 maxpacket: 64 [ 532.519734][ T7426] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 532.528867][ T7422] usb usb3-port1: unable to enumerate USB device [ 532.543326][ T7426] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 532.554500][ T7426] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 532.562906][ T7426] usb 5-1: media controller created [ 532.599896][ T7426] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 533.094286][T11295] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1315'. [ 533.110613][T11310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1320'. [ 533.169985][ T5984] usb 5-1: USB disconnect, device number 94 [ 534.008970][T11311] block device autoloading is deprecated and will be removed. [ 534.283816][T11311] syz.5.1320: attempt to access beyond end of device [ 534.283816][T11311] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 534.985507][ T7426] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 536.134943][ T7426] usb 5-1: Using ep0 maxpacket: 32 [ 536.165499][ T7426] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 536.189000][ T7426] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 536.198366][ T7426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.207643][ T7426] usb 5-1: Product: syz [ 536.212002][ T7426] usb 5-1: Manufacturer: syz [ 536.240249][ T7426] usb 5-1: SerialNumber: syz [ 536.288618][ T7426] usb 5-1: config 0 descriptor?? [ 536.349708][ T7426] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input25 [ 536.418803][ T7426] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 536.573681][ T7426] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 536.796240][ T5984] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 536.926606][ T7437] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 536.971644][ T5984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.992703][ T5984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.005237][ T5984] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 537.014741][ T5984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.038457][ T5984] usb 6-1: config 0 descriptor?? [ 537.115265][ T7437] usb 3-1: Using ep0 maxpacket: 16 [ 537.134790][ T7437] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 537.143547][ T7437] usb 3-1: can't read configurations, error -61 [ 537.185715][ T7426] usb 5-1: USB disconnect, device number 95 [ 537.285165][ T7437] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 537.451955][ T5984] usbhid 6-1:0.0: can't add hid device: -71 [ 537.459571][ T5984] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 537.467471][ T7437] usb 3-1: Using ep0 maxpacket: 16 [ 537.475795][ T5984] usb 6-1: USB disconnect, device number 48 [ 537.483022][ T7437] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 537.494812][ T7437] usb 3-1: can't read configurations, error -61 [ 537.512662][ T7437] usb usb3-port1: attempt power cycle [ 538.252807][ T7437] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 538.343407][ T7437] usb 3-1: Using ep0 maxpacket: 16 [ 538.351058][ T7437] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 538.359196][ T7437] usb 3-1: can't read configurations, error -61 [ 538.495373][ T7437] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 538.526328][ T7437] usb 3-1: Using ep0 maxpacket: 16 [ 538.535411][ T7422] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 538.540866][ T7437] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 538.552247][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1336'. [ 538.561396][ T7437] usb 3-1: can't read configurations, error -61 [ 538.571449][ T7437] usb usb3-port1: unable to enumerate USB device [ 538.644069][T11370] futex_wake_op: syz.4.1337 tries to shift op by 32; fix this program [ 538.665032][ T7422] usb 6-1: device descriptor read/64, error -71 [ 538.876099][T11373] trusted_key: syz.4.1338 sent an empty control message without MSG_MORE. [ 538.945160][ T7422] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 539.085067][ T7422] usb 6-1: device descriptor read/64, error -71 [ 539.091517][T11380] netlink: 'syz.4.1340': attribute type 1 has an invalid length. [ 539.215828][ T7422] usb usb6-port1: attempt power cycle [ 539.555097][ T7422] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 539.575517][ T7422] usb 6-1: device descriptor read/8, error -71 [ 539.818204][ T7422] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 539.847845][ T7422] usb 6-1: device descriptor read/8, error -71 [ 539.967211][ T7422] usb usb6-port1: unable to enumerate USB device [ 540.118253][ T7426] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 540.414294][ T7426] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.425612][ T7426] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.445059][ T7426] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 540.469099][ T7426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.563840][T11401] random: crng reseeded on system resumption [ 540.573477][ T7426] usb 3-1: config 0 descriptor?? [ 541.023537][ T7426] usbhid 3-1:0.0: can't add hid device: -71 [ 541.032894][ T7426] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 541.076701][ T7426] usb 3-1: USB disconnect, device number 75 [ 541.840858][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'. [ 542.165263][ T7422] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 542.300612][ T7437] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 542.368448][ T7422] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.502623][ T7422] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.579657][ T7422] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 542.661952][ T7422] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.675974][ T7437] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 542.684802][ T7437] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 542.707908][ T7422] usb 4-1: config 0 descriptor?? [ 542.750116][ T7437] usb 6-1: config 220 has no interface number 2 [ 542.757169][ T7437] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 542.771325][ T7437] usb 6-1: config 220 interface 0 has no altsetting 0 [ 542.778496][ T7437] usb 6-1: config 220 interface 76 has no altsetting 0 [ 542.785587][ T7437] usb 6-1: config 220 interface 1 has no altsetting 0 [ 542.797121][ T7437] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 542.815327][ T7437] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.855050][ T7437] usb 6-1: Product: syz [ 542.859354][ T7437] usb 6-1: Manufacturer: syz [ 542.864248][ T7437] usb 6-1: SerialNumber: syz [ 542.876402][T11438] loop2: detected capacity change from 0 to 7 [ 542.883472][T11438] loop2: [ 542.894903][T11438] loop2: partition table partially beyond EOD, truncated [ 542.957877][ T7422] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 543.014351][ T7422] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 543.137782][T11422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.143951][ T7422] cp2112 0003:10C4:EA90.0011: Part Number: 0x82 Device Version: 0xFE [ 543.157085][T11443] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 543.177142][T11422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.350307][T11455] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1361'. [ 543.815142][ T7438] usb 5-1: new low-speed USB device number 96 using dummy_hcd [ 543.825927][ T7437] usb 6-1: selecting invalid altsetting 0 [ 543.832155][ T7437] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 543.910315][ T7422] cp2112 0003:10C4:EA90.0011: error reading lock byte: -71 [ 543.921056][ T7422] usb 4-1: USB disconnect, device number 52 [ 543.937049][ T9871] Bluetooth: hci5: Frame reassembly failed (-84) [ 543.974900][ T7437] usb 6-1: No valid video chain found. [ 544.041641][ T7437] usb 6-1: selecting invalid altsetting 0 [ 544.050820][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1364'. [ 544.077261][ T7438] usb 5-1: config 2 has an invalid interface number: 232 but max is 0 [ 544.102973][ T7437] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 544.129457][ T7438] usb 5-1: config 2 has no interface number 0 [ 544.152775][T11473] netem: change failed [ 544.237203][ T7438] usb 5-1: New USB device found, idVendor=0df6, idProduct=0067, bcdDevice= 1.79 [ 544.252774][ T7437] usb 6-1: USB disconnect, device number 53 [ 544.289754][ T7438] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.914745][T11477] random: crng reseeded on system resumption [ 544.980446][ T7422] usb 5-1: USB disconnect, device number 96 [ 545.346370][T11484] siw: device registration error -23 [ 545.368542][T11484] tmpfs: Bad value for 'mpol' [ 545.985009][ T5155] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 546.615624][T11495] loop2: detected capacity change from 0 to 7 [ 546.628916][T11495] loop2: [ 546.634242][T11495] loop2: partition table partially beyond EOD, truncated [ 546.825124][ T7437] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 546.858554][T11499] tipc: Enabled bearer , priority 0 [ 546.867582][T11499] syzkaller0: entered promiscuous mode [ 546.873914][T11499] syzkaller0: entered allmulticast mode [ 546.905454][T11499] tipc: Resetting bearer [ 546.917435][T11499] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 546.964282][T11497] tipc: Resetting bearer [ 547.029266][T11497] tipc: Disabling bearer [ 547.143955][ T7437] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 547.153124][ T7437] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.161459][ T7437] usb 6-1: Product: syz [ 547.165823][ T7437] usb 6-1: Manufacturer: syz [ 547.170730][ T7437] usb 6-1: SerialNumber: syz [ 547.204879][ T7437] usb 6-1: config 0 descriptor?? [ 547.402976][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1376'. [ 547.508901][ T7437] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 547.515644][ T7437] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 547.523050][ T7437] sq905c 6-1:0.0: Get version command failed [ 547.529314][ T7437] sq905c 6-1:0.0: probe with driver sq905c failed with error -71 [ 547.539767][ T7437] usb 6-1: USB disconnect, device number 54 [ 548.675062][ T7422] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 549.105015][ T7422] usb 4-1: Using ep0 maxpacket: 16 [ 549.123233][ T7422] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 549.149788][ T7422] usb 4-1: config 0 has no interface number 0 [ 549.181196][ T7422] usb 4-1: config 0 interface 48 has no altsetting 0 [ 549.204064][ T7422] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 549.249514][ T7422] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.252996][T11535] loop2: detected capacity change from 0 to 7 [ 549.269767][ T7422] usb 4-1: Product: syz [ 549.273969][ T7422] usb 4-1: Manufacturer: syz [ 549.279065][ T7422] usb 4-1: SerialNumber: syz [ 549.287907][T11535] loop2: [ 549.292475][T11535] loop2: partition table partially beyond EOD, truncated [ 549.302366][ T7422] usb 4-1: config 0 descriptor?? [ 550.103214][T11547] random: crng reseeded on system resumption [ 550.183410][T11549] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1383'. [ 550.606446][T11541] ALSA: mixer_oss: invalid OSS volume '@@' [ 550.615097][ T7437] usb 6-1: new low-speed USB device number 55 using dummy_hcd [ 551.235409][ T7422] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 551.347016][ T7437] usb 6-1: config 2 has an invalid interface number: 232 but max is 0 [ 551.361611][ T7437] usb 6-1: config 2 has no interface number 0 [ 551.374569][ T7437] usb 6-1: New USB device found, idVendor=0df6, idProduct=0067, bcdDevice= 1.79 [ 551.405426][ T7422] usb 3-1: Using ep0 maxpacket: 8 [ 551.427208][ T7422] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 551.428957][ T7437] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.446745][ T7422] usb 3-1: config 1 has no interface number 1 [ 551.462835][ T7422] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 551.593249][ T7426] usb 4-1: USB disconnect, device number 53 [ 551.678032][ T7422] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 551.732019][ T7437] usb 6-1: USB disconnect, device number 55 [ 551.742089][ T7422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.780833][T11560] loop2: detected capacity change from 0 to 7 [ 551.835511][ T7422] usb 3-1: Product: syz [ 551.857111][T11560] Dev loop2: unable to read RDB block 7 [ 551.876118][T11560] loop2: unable to read partition table [ 551.882512][ T7422] usb 3-1: Manufacturer: syz [ 551.882630][T11560] loop2: partition table beyond EOD, truncated [ 551.909092][T11560] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 551.914908][ T7422] usb 3-1: SerialNumber: syz [ 552.618806][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1389'. [ 554.293766][ T7422] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 554.307207][ T7422] usb 3-1: 2:1 : sample bitwidth 243 in over sample bytes 3 [ 554.319285][ T7422] usb 3-1: 2:1 : invalid channels 0 [ 554.400575][ T7422] usb 3-1: USB disconnect, device number 76 [ 554.556152][ T6078] udevd[6078]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 554.620891][T11590] loop2: detected capacity change from 0 to 7 [ 554.659879][T11590] loop2: [ 554.703612][T11590] loop2: partition table partially beyond EOD, truncated [ 556.062225][T11620] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1400'. [ 556.534965][ T7437] usb 6-1: new low-speed USB device number 56 using dummy_hcd [ 556.567056][T11616] random: crng reseeded on system resumption [ 556.894215][ T7437] usb 6-1: config 2 has an invalid interface number: 232 but max is 0 [ 556.914688][ T7437] usb 6-1: config 2 has no interface number 0 [ 556.922422][T11638] loop2: detected capacity change from 0 to 7 [ 556.935242][ T7437] usb 6-1: New USB device found, idVendor=0df6, idProduct=0067, bcdDevice= 1.79 [ 557.008294][T11639] netlink: 'syz.2.1404': attribute type 10 has an invalid length. [ 557.030691][T11639] team0: Device ipvlan1 failed to register rx_handler [ 557.533881][T11638] loop2: [ 557.543554][T11638] loop2: partition table partially beyond EOD, truncated [ 557.550792][ T7437] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.932164][ T7422] usb 6-1: USB disconnect, device number 56 [ 558.032571][T11649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.045950][T11649] netlink: 'syz.2.1408': attribute type 10 has an invalid length. [ 558.825103][ T7424] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 558.832918][ T7426] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 558.974982][ T7424] usb 4-1: device descriptor read/64, error -71 [ 559.208878][ T7426] usb 5-1: Using ep0 maxpacket: 32 [ 559.409076][ T7426] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 559.498654][ T7426] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.556023][ T7426] usb 5-1: config 0 descriptor?? [ 559.561237][ T7424] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 559.583514][ T7426] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 559.733098][ T7424] usb 4-1: device descriptor read/64, error -71 [ 560.949455][ T7424] usb usb4-port1: attempt power cycle [ 562.819642][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.826041][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.870588][ T7426] usb 5-1: USB disconnect, device number 97 [ 563.730660][T11679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1419'. [ 563.852752][T11678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1419'. [ 564.326256][T11696] random: crng reseeded on system resumption [ 564.404605][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1425'. [ 564.458283][T11703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.955406][ T7438] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 566.363887][ T7438] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.442481][ T7437] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 566.462838][ T7438] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.503668][ T7438] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 566.572351][ T7438] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.642493][ T7438] usb 5-1: config 0 descriptor?? [ 566.651502][ T7437] usb 6-1: Using ep0 maxpacket: 32 [ 566.701232][ T7437] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 566.785966][ T7437] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 566.809519][ T7437] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.821681][ T7437] usb 6-1: Product: syz [ 566.827776][ T7437] usb 6-1: Manufacturer: syz [ 566.832506][ T7437] usb 6-1: SerialNumber: syz [ 566.846446][ T7437] usb 6-1: config 0 descriptor?? [ 566.887310][ T7437] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input26 [ 566.913805][ T7437] usbtouchscreen 6-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 567.251107][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1436'. [ 567.991671][ T7437] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 568.110146][ T7437] usb 6-1: USB disconnect, device number 57 [ 569.843218][T11760] netlink: 'syz.2.1442': attribute type 39 has an invalid length. [ 569.925425][ T7424] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 569.992654][ T7438] usbhid 5-1:0.0: can't add hid device: -71 [ 570.004705][ T7438] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 570.047601][ T7438] usb 5-1: USB disconnect, device number 98 [ 570.509385][ T7424] usb 6-1: Using ep0 maxpacket: 16 [ 570.566466][ T7424] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 570.574522][ T7424] usb 6-1: config 0 has no interface number 0 [ 570.602192][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 570.602205][ T30] audit: type=1326 audit(2000000068.699:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11765 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc654f8ebe9 code=0x7ffc0000 [ 570.624780][T11766] ip6gre1: entered promiscuous mode [ 570.639250][ T30] audit: type=1326 audit(2000000068.699:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11765 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc654f8ebe9 code=0x7ffc0000 [ 570.655185][T11766] ip6gre1: entered allmulticast mode [ 570.661470][ T7424] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 570.695326][ T7424] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.703750][ T7424] usb 6-1: Product: syz [ 570.711946][ T7424] usb 6-1: Manufacturer: syz [ 570.725389][ T30] audit: type=1326 audit(2000000068.699:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11765 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fc654f8ebe9 code=0x7ffc0000 [ 570.752679][ T7424] usb 6-1: SerialNumber: syz [ 570.760533][ T7424] usb 6-1: config 0 descriptor?? [ 570.766201][ T30] audit: type=1326 audit(2000000068.699:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11765 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc654f8ebe9 code=0x7ffc0000 [ 570.792226][ T30] audit: type=1326 audit(2000000068.699:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11765 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc654f8ebe9 code=0x7ffc0000 [ 570.814434][ T30] audit: type=1326 audit(2000000068.709:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11765 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc654f8ebe9 code=0x7ffc0000 [ 570.836925][ T30] audit: type=1326 audit(2000000068.709:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11765 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc654f8ebe9 code=0x7ffc0000 [ 570.923323][ T30] audit: type=1326 audit(2000000068.709:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11765 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc654f8ebe9 code=0x7ffc0000 [ 570.976342][ T30] audit: type=1326 audit(2000000068.709:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11765 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc654f8ebe9 code=0x7ffc0000 [ 571.014190][ T7424] usb 6-1: selecting invalid altsetting 1 [ 571.034370][ T7424] speedtch 6-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 571.223219][ T7424] speedtch 6-1:0.1: usbatm_usb_probe: bind failed: -22! [ 571.341677][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'. [ 571.955042][ T30] audit: type=1326 audit(2000000068.709:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11765 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc654f8ebe9 code=0x7ffc0000 [ 571.993694][ T7424] speedtch 6-1:0.1: probe with driver speedtch failed with error -22 [ 572.012359][ T7424] usb 6-1: USB disconnect, device number 58 [ 572.587185][ T9871] Bluetooth: hci5: Frame reassembly failed (-84) [ 572.815121][T11795] Bluetooth: hci1: command 0x0405 tx timeout [ 574.555125][ T7424] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 574.575050][T11187] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 574.798403][ T7424] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.809813][ T7424] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.821096][ T7424] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 574.831661][ T7424] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.859406][ T7424] usb 3-1: config 0 descriptor?? [ 575.979196][T11818] xt_CT: No such helper "snmp" [ 576.510151][T11831] FAULT_INJECTION: forcing a failure. [ 576.510151][T11831] name failslab, interval 1, probability 0, space 0, times 0 [ 576.534597][T11831] CPU: 0 UID: 0 PID: 11831 Comm: syz.3.1459 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 576.534622][T11831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 576.534635][T11831] Call Trace: [ 576.534643][T11831] [ 576.534651][T11831] dump_stack_lvl+0x189/0x250 [ 576.534679][T11831] ? __pfx____ratelimit+0x10/0x10 [ 576.534700][T11831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.534722][T11831] ? __pfx__printk+0x10/0x10 [ 576.534752][T11831] ? __pfx___might_resched+0x10/0x10 [ 576.534778][T11831] should_fail_ex+0x414/0x560 [ 576.534804][T11831] should_failslab+0xa8/0x100 [ 576.534831][T11831] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 576.534851][T11831] ? __alloc_skb+0x112/0x2d0 [ 576.534881][T11831] __alloc_skb+0x112/0x2d0 [ 576.534911][T11831] netlink_sendmsg+0x5c6/0xb30 [ 576.534948][T11831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.534982][T11831] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 576.535001][T11831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.535029][T11831] __sock_sendmsg+0x21c/0x270 [ 576.535054][T11831] ____sys_sendmsg+0x505/0x830 [ 576.535088][T11831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 576.535126][T11831] ? import_iovec+0x74/0xa0 [ 576.535162][T11831] ___sys_sendmsg+0x21f/0x2a0 [ 576.535193][T11831] ? __pfx____sys_sendmsg+0x10/0x10 [ 576.535258][T11831] ? __fget_files+0x2a/0x420 [ 576.535296][T11831] ? __fget_files+0x3a0/0x420 [ 576.535329][T11831] __x64_sys_sendmsg+0x19b/0x260 [ 576.535363][T11831] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 576.535404][T11831] ? __pfx_ksys_write+0x10/0x10 [ 576.535420][T11831] ? rcu_is_watching+0x15/0xb0 [ 576.535448][T11831] ? do_syscall_64+0xbe/0x3b0 [ 576.535475][T11831] do_syscall_64+0xfa/0x3b0 [ 576.535495][T11831] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.535516][T11831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.535535][T11831] ? clear_bhb_loop+0x60/0xb0 [ 576.535570][T11831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.535587][T11831] RIP: 0033:0x7fc654f8ebe9 [ 576.535604][T11831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.535620][T11831] RSP: 002b:00007fc655e14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.535639][T11831] RAX: ffffffffffffffda RBX: 00007fc6551b5fa0 RCX: 00007fc654f8ebe9 [ 576.535653][T11831] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 576.535665][T11831] RBP: 00007fc655e14090 R08: 0000000000000000 R09: 0000000000000000 [ 576.535677][T11831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.535687][T11831] R13: 00007fc6551b6038 R14: 00007fc6551b5fa0 R15: 00007ffc168bba38 [ 576.535717][T11831] [ 577.068567][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'. [ 577.780647][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 577.780663][ T30] audit: type=1326 audit(2000000075.879:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11841 comm="syz.4.1463" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c6f38ebe9 code=0x0 [ 577.920872][T11844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1464'. [ 578.833346][T11839] fuse: Unknown parameter 'fä' [ 578.852732][ T30] audit: type=1800 audit(2000000076.949:139): pid=11839 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1462" name="file1" dev="tmpfs" ino=1630 res=0 errno=0 [ 579.867370][ T7424] usbhid 3-1:0.0: can't add hid device: -71 [ 579.873543][ T7424] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 579.899288][T11863] loop2: detected capacity change from 0 to 7 [ 579.919592][ T7424] usb 3-1: USB disconnect, device number 77 [ 579.921615][T11863] Dev loop2: unable to read RDB block 7 [ 579.958703][T11863] loop2: unable to read partition table [ 579.979861][T11863] loop2: partition table beyond EOD, truncated [ 579.994958][T11863] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 580.484937][ T7437] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 580.741887][ T7437] usb 3-1: Using ep0 maxpacket: 32 [ 580.753384][ T7437] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 580.761863][ T7437] usb 3-1: config 0 has no interface number 0 [ 580.768341][ T7437] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=b0.c6 [ 580.777665][ T7437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.792375][ T7437] usb 3-1: config 0 descriptor?? [ 581.497678][ T7437] speedtch 3-1:0.168: speedtch_bind: wrong device class 176 [ 581.537309][ T7437] speedtch 3-1:0.168: usbatm_usb_probe: bind failed: -19! [ 581.816565][T11886] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 582.287597][ T7437] usb 3-1: USB disconnect, device number 78 [ 582.484951][ T7438] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 583.467844][ T7438] usb 4-1: config 2 has an invalid interface number: 232 but max is 0 [ 583.484957][ T7438] usb 4-1: config 2 has no interface number 0 [ 583.495882][ T7438] usb 4-1: New USB device found, idVendor=0df6, idProduct=0067, bcdDevice= 1.79 [ 583.514444][ T7438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.252257][ T7438] usb 4-1: USB disconnect, device number 57 [ 586.147693][T11916] loop2: detected capacity change from 0 to 7 [ 586.175945][T11916] Dev loop2: unable to read RDB block 7 [ 586.197464][T11916] loop2: unable to read partition table [ 586.202865][T11918] FAULT_INJECTION: forcing a failure. [ 586.202865][T11918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.229203][ T7424] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 586.240400][T11916] loop2: partition table beyond EOD, truncated [ 586.240803][T11918] CPU: 0 UID: 0 PID: 11918 Comm: syz.3.1484 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 586.240829][T11918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 586.240842][T11918] Call Trace: [ 586.240851][T11918] [ 586.240859][T11918] dump_stack_lvl+0x189/0x250 [ 586.240889][T11918] ? __pfx____ratelimit+0x10/0x10 [ 586.240912][T11918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.240935][T11918] ? __pfx__printk+0x10/0x10 [ 586.240963][T11918] ? __might_fault+0xb0/0x130 [ 586.240995][T11918] should_fail_ex+0x414/0x560 [ 586.241021][T11918] _copy_from_iter+0x1db/0x16f0 [ 586.241052][T11918] ? rcu_is_watching+0x15/0xb0 [ 586.241078][T11918] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 586.241099][T11918] ? __pfx__copy_from_iter+0x10/0x10 [ 586.241127][T11918] ? __build_skb_around+0x257/0x3e0 [ 586.241161][T11918] ? netlink_sendmsg+0x642/0xb30 [ 586.241189][T11918] ? skb_put+0x11b/0x210 [ 586.241222][T11918] netlink_sendmsg+0x6b2/0xb30 [ 586.241268][T11918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 586.241306][T11918] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 586.241327][T11918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 586.241358][T11918] __sock_sendmsg+0x21c/0x270 [ 586.241387][T11918] ____sys_sendmsg+0x505/0x830 [ 586.241424][T11918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 586.241465][T11918] ? import_iovec+0x74/0xa0 [ 586.241497][T11918] ___sys_sendmsg+0x21f/0x2a0 [ 586.241531][T11918] ? __pfx____sys_sendmsg+0x10/0x10 [ 586.241601][T11918] ? __fget_files+0x2a/0x420 [ 586.241623][T11918] ? __fget_files+0x3a0/0x420 [ 586.241657][T11918] __x64_sys_sendmsg+0x19b/0x260 [ 586.241692][T11918] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 586.241734][T11918] ? __pfx_ksys_write+0x10/0x10 [ 586.241755][T11918] ? rcu_is_watching+0x15/0xb0 [ 586.241781][T11918] ? do_syscall_64+0xbe/0x3b0 [ 586.241809][T11918] do_syscall_64+0xfa/0x3b0 [ 586.241831][T11918] ? lockdep_hardirqs_on+0x9c/0x150 [ 586.241853][T11918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.241872][T11918] ? clear_bhb_loop+0x60/0xb0 [ 586.241898][T11918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.241919][T11918] RIP: 0033:0x7fc654f8ebe9 [ 586.241938][T11918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.241957][T11918] RSP: 002b:00007fc655e14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 586.241979][T11918] RAX: ffffffffffffffda RBX: 00007fc6551b5fa0 RCX: 00007fc654f8ebe9 [ 586.241995][T11918] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 586.242008][T11918] RBP: 00007fc655e14090 R08: 0000000000000000 R09: 0000000000000000 [ 586.242022][T11918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.242033][T11918] R13: 00007fc6551b6038 R14: 00007fc6551b5fa0 R15: 00007ffc168bba38 [ 586.242066][T11918] [ 586.554910][T11916] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 586.704875][ T7424] usb 6-1: Using ep0 maxpacket: 16 [ 586.712169][ T7424] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.723782][ T7424] usb 6-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 586.732963][ T7424] usb 6-1: New USB device strings: Mfr=0, Product=251, SerialNumber=3 [ 586.750115][ T7424] usb 6-1: Product: syz [ 586.758905][ T7424] usb 6-1: SerialNumber: syz [ 586.776430][ T7424] usb 6-1: config 0 descriptor?? [ 587.314409][T11909] overlay: Unknown parameter 'appraise' [ 587.373692][ T7438] usb 6-1: USB disconnect, device number 59 [ 587.614685][T11936] siw: device registration error -23 [ 587.637852][T11936] tmpfs: Bad value for 'mpol' [ 589.582799][T11956] netlink: 'syz.3.1493': attribute type 4 has an invalid length. [ 589.605353][T11960] 9pnet_fd: Insufficient options for proto=fd [ 589.619744][T11956] netlink: 'syz.3.1493': attribute type 4 has an invalid length. [ 589.762363][T11962] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1494'. [ 589.834169][T11960] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1495'. [ 590.146193][ T7438] lo speed is unknown, defaulting to 1000 [ 590.152244][ T7438] syz0: Port: 1 Link ACTIVE [ 590.515104][ T7437] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 590.534425][T11968] FAULT_INJECTION: forcing a failure. [ 590.534425][T11968] name failslab, interval 1, probability 0, space 0, times 0 [ 590.552147][T11968] CPU: 1 UID: 0 PID: 11968 Comm: syz.3.1497 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 590.552171][T11968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 590.552183][T11968] Call Trace: [ 590.552191][T11968] [ 590.552199][T11968] dump_stack_lvl+0x189/0x250 [ 590.552225][T11968] ? __pfx____ratelimit+0x10/0x10 [ 590.552245][T11968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 590.552266][T11968] ? __pfx__printk+0x10/0x10 [ 590.552296][T11968] ? __pfx___might_resched+0x10/0x10 [ 590.552321][T11968] should_fail_ex+0x414/0x560 [ 590.552344][T11968] should_failslab+0xa8/0x100 [ 590.552367][T11968] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 590.552386][T11968] ? __alloc_skb+0x112/0x2d0 [ 590.552410][T11968] ? kernel_text_address+0xa5/0xe0 [ 590.552441][T11968] __alloc_skb+0x112/0x2d0 [ 590.552471][T11968] inet_netconf_get_devconf+0x40b/0xad0 [ 590.552499][T11968] ? __pfx_inet_netconf_get_devconf+0x10/0x10 [ 590.552536][T11968] ? __pfx_inet_netconf_get_devconf+0x10/0x10 [ 590.552556][T11968] rtnetlink_rcv_msg+0x7cc/0xb70 [ 590.552586][T11968] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 590.552610][T11968] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 590.552651][T11968] netlink_rcv_skb+0x205/0x470 [ 590.552678][T11968] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 590.552703][T11968] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 590.552742][T11968] ? netlink_deliver_tap+0x2e/0x1b0 [ 590.552767][T11968] ? netlink_deliver_tap+0x2e/0x1b0 [ 590.552798][T11968] netlink_unicast+0x75c/0x8e0 [ 590.552832][T11968] netlink_sendmsg+0x805/0xb30 [ 590.552874][T11968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.552908][T11968] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 590.552926][T11968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.552954][T11968] __sock_sendmsg+0x21c/0x270 [ 590.552979][T11968] ____sys_sendmsg+0x505/0x830 [ 590.553013][T11968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 590.553050][T11968] ? import_iovec+0x74/0xa0 [ 590.553080][T11968] ___sys_sendmsg+0x21f/0x2a0 [ 590.553111][T11968] ? __pfx____sys_sendmsg+0x10/0x10 [ 590.553175][T11968] ? __fget_files+0x2a/0x420 [ 590.553195][T11968] ? __fget_files+0x3a0/0x420 [ 590.553226][T11968] __x64_sys_sendmsg+0x19b/0x260 [ 590.553258][T11968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 590.553296][T11968] ? __pfx_ksys_write+0x10/0x10 [ 590.553312][T11968] ? rcu_is_watching+0x15/0xb0 [ 590.553338][T11968] ? do_syscall_64+0xbe/0x3b0 [ 590.553363][T11968] do_syscall_64+0xfa/0x3b0 [ 590.553382][T11968] ? lockdep_hardirqs_on+0x9c/0x150 [ 590.553402][T11968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.553422][T11968] ? clear_bhb_loop+0x60/0xb0 [ 590.553444][T11968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.553462][T11968] RIP: 0033:0x7fc654f8ebe9 [ 590.553478][T11968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.553494][T11968] RSP: 002b:00007fc655e14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 590.553514][T11968] RAX: ffffffffffffffda RBX: 00007fc6551b5fa0 RCX: 00007fc654f8ebe9 [ 590.553527][T11968] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 590.553540][T11968] RBP: 00007fc655e14090 R08: 0000000000000000 R09: 0000000000000000 [ 590.553551][T11968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.553562][T11968] R13: 00007fc6551b6038 R14: 00007fc6551b5fa0 R15: 00007ffc168bba38 [ 590.553591][T11968] [ 590.674804][ T7437] usb 6-1: Using ep0 maxpacket: 16 [ 590.897291][ T7437] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 590.918211][ T7437] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 590.932622][ T7437] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 590.947102][ T7437] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.970087][ T7437] usb 6-1: Product: syz [ 590.974304][ T7437] usb 6-1: Manufacturer: syz [ 591.015052][ T7437] usb 6-1: SerialNumber: syz [ 591.033798][ T7437] usb 6-1: config 0 descriptor?? [ 591.052048][ T7437] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 591.062472][ T7437] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 591.661638][ T7437] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 591.671050][ T7437] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 592.109287][T11976] random: crng reseeded on system resumption [ 592.207878][ T7437] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 592.223324][ T7437] em28xx 6-1:0.0: No AC97 audio processor [ 592.324756][ T7437] usb 6-1: USB disconnect, device number 60 [ 592.357609][ T7437] em28xx 6-1:0.0: Disconnecting em28xx [ 592.572666][ T7437] em28xx 6-1:0.0: Freeing device [ 592.676275][T11991] loop2: detected capacity change from 0 to 7 [ 592.691398][T11991] loop2: [ 592.694368][T11991] loop2: partition table partially beyond EOD, truncated [ 594.774389][ T7437] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 594.982429][ T7437] usb 3-1: Using ep0 maxpacket: 8 [ 595.046141][ T7437] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 595.046177][ T7437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.048646][ T7437] usb 3-1: config 0 descriptor?? [ 596.224368][T12034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1514'. [ 598.013887][ T7424] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 598.673260][ T7437] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 598.708586][ T7437] asix 3-1:0.0: probe with driver asix failed with error -71 [ 598.731370][ T7437] usb 3-1: USB disconnect, device number 79 [ 598.854351][ T7424] usb 5-1: Using ep0 maxpacket: 32 [ 598.866728][ T7424] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 598.884036][ T7424] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 598.893361][ T7424] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.619803][ T7424] usb 5-1: Product: syz [ 599.624616][ T7424] usb 5-1: Manufacturer: syz [ 599.629323][ T7424] usb 5-1: SerialNumber: syz [ 599.651809][ T7424] usb 5-1: config 0 descriptor?? [ 599.799581][ T7424] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input27 [ 600.300895][ T7424] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 600.549284][ T7424] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 600.591953][ T7424] usb 5-1: USB disconnect, device number 99 [ 601.429304][T12084] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1528'. [ 601.525370][T12088] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1528'. [ 601.912257][T12082] No such timeout policy "syz0" [ 604.218746][T12121] mkiss: ax0: crc mode is auto. [ 608.068738][T12123] FAULT_INJECTION: forcing a failure. [ 608.068738][T12123] name failslab, interval 1, probability 0, space 0, times 0 [ 608.121191][T12123] CPU: 0 UID: 0 PID: 12123 Comm: syz.5.1537 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 608.121216][T12123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 608.121227][T12123] Call Trace: [ 608.121235][T12123] [ 608.121243][T12123] dump_stack_lvl+0x189/0x250 [ 608.121270][T12123] ? __pfx____ratelimit+0x10/0x10 [ 608.121299][T12123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 608.121320][T12123] ? __pfx__printk+0x10/0x10 [ 608.121359][T12123] should_fail_ex+0x414/0x560 [ 608.121383][T12123] should_failslab+0xa8/0x100 [ 608.121405][T12123] kmem_cache_alloc_noprof+0x73/0x3c0 [ 608.121423][T12123] ? skb_clone+0x212/0x3a0 [ 608.121446][T12123] skb_clone+0x212/0x3a0 [ 608.121467][T12123] __netlink_deliver_tap+0x404/0x850 [ 608.121506][T12123] ? netlink_deliver_tap+0x2e/0x1b0 [ 608.121533][T12123] netlink_deliver_tap+0x19c/0x1b0 [ 608.121561][T12123] netlink_sendskb+0x68/0x140 [ 608.121587][T12123] rtnl_unicast+0x4e/0x60 [ 608.121606][T12123] inet_netconf_get_devconf+0x4d1/0xad0 [ 608.121637][T12123] ? __pfx_inet_netconf_get_devconf+0x10/0x10 [ 608.121676][T12123] ? __pfx_inet_netconf_get_devconf+0x10/0x10 [ 608.121695][T12123] rtnetlink_rcv_msg+0x7cc/0xb70 [ 608.121723][T12123] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 608.121747][T12123] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 608.121769][T12123] ? ref_tracker_free+0x63a/0x7d0 [ 608.121788][T12123] ? __copy_skb_header+0xa7/0x550 [ 608.121807][T12123] ? __pfx_ref_tracker_free+0x10/0x10 [ 608.121827][T12123] ? __skb_clone+0x63/0x7a0 [ 608.121852][T12123] netlink_rcv_skb+0x205/0x470 [ 608.121878][T12123] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 608.121904][T12123] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 608.121943][T12123] ? netlink_deliver_tap+0x2e/0x1b0 [ 608.121968][T12123] ? netlink_deliver_tap+0x2e/0x1b0 [ 608.122000][T12123] netlink_unicast+0x75c/0x8e0 [ 608.122034][T12123] netlink_sendmsg+0x805/0xb30 [ 608.122070][T12123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 608.122104][T12123] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 608.122123][T12123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 608.122150][T12123] __sock_sendmsg+0x21c/0x270 [ 608.122175][T12123] ____sys_sendmsg+0x505/0x830 [ 608.122209][T12123] ? __pfx_____sys_sendmsg+0x10/0x10 [ 608.122246][T12123] ? import_iovec+0x74/0xa0 [ 608.122276][T12123] ___sys_sendmsg+0x21f/0x2a0 [ 608.122312][T12123] ? __pfx____sys_sendmsg+0x10/0x10 [ 608.122375][T12123] ? __fget_files+0x2a/0x420 [ 608.122395][T12123] ? __fget_files+0x3a0/0x420 [ 608.122428][T12123] __x64_sys_sendmsg+0x19b/0x260 [ 608.122460][T12123] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 608.122498][T12123] ? __pfx_ksys_write+0x10/0x10 [ 608.122514][T12123] ? rcu_is_watching+0x15/0xb0 [ 608.122540][T12123] ? do_syscall_64+0xbe/0x3b0 [ 608.122566][T12123] do_syscall_64+0xfa/0x3b0 [ 608.122586][T12123] ? lockdep_hardirqs_on+0x9c/0x150 [ 608.122606][T12123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.122624][T12123] ? clear_bhb_loop+0x60/0xb0 [ 608.122647][T12123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.122666][T12123] RIP: 0033:0x7f477878ebe9 [ 608.122683][T12123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.122700][T12123] RSP: 002b:00007f47795a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 608.122720][T12123] RAX: ffffffffffffffda RBX: 00007f47789b5fa0 RCX: 00007f477878ebe9 [ 608.122734][T12123] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 608.122745][T12123] RBP: 00007f47795a4090 R08: 0000000000000000 R09: 0000000000000000 [ 608.122757][T12123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.122768][T12123] R13: 00007f47789b6038 R14: 00007f47789b5fa0 R15: 00007ffd5a870f08 [ 608.122797][T12123] [ 608.563952][T12130] xt_CT: No such helper "snmp_trap" [ 609.349349][T12138] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 609.390715][T12146] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1543'. [ 609.553320][T12144] warning: `syz.0.1542' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 609.671017][T12144] qnx6: unable to read the first superblock [ 610.361575][T12157] xt_l2tp: v2 sid > 0xffff: 262144 [ 610.388818][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1544'. [ 611.288320][T12168] qnx4: no qnx4 filesystem (no root dir). [ 611.844595][T12171] loop2: detected capacity change from 0 to 7 [ 611.866200][ T5843] Dev loop2: unable to read RDB block 7 [ 611.878688][ T5843] loop2: unable to read partition table [ 611.887654][T12173] FAULT_INJECTION: forcing a failure. [ 611.887654][T12173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.892309][ T5843] loop2: partition table beyond EOD, truncated [ 611.919396][T12171] Dev loop2: unable to read RDB block 7 [ 611.925481][T12171] loop2: unable to read partition table [ 611.932920][ T7424] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 611.945709][T12171] loop2: partition table beyond EOD, truncated [ 611.955622][T12173] CPU: 0 UID: 0 PID: 12173 Comm: syz.0.1551 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 611.955646][T12173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 611.955657][T12173] Call Trace: [ 611.955665][T12173] [ 611.955672][T12173] dump_stack_lvl+0x189/0x250 [ 611.955699][T12173] ? __pfx____ratelimit+0x10/0x10 [ 611.955719][T12173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.955740][T12173] ? __pfx__printk+0x10/0x10 [ 611.955776][T12173] should_fail_ex+0x414/0x560 [ 611.955802][T12173] _copy_to_user+0x31/0xb0 [ 611.955830][T12173] simple_read_from_buffer+0xe1/0x170 [ 611.955868][T12173] proc_fail_nth_read+0x1df/0x250 [ 611.955895][T12173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 611.955942][T12173] ? rw_verify_area+0x258/0x650 [ 611.955975][T12173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 611.956004][T12173] vfs_read+0x200/0x980 [ 611.956044][T12173] ? __pfx___mutex_lock+0x10/0x10 [ 611.956070][T12173] ? __pfx_vfs_read+0x10/0x10 [ 611.956106][T12173] ? __fget_files+0x2a/0x420 [ 611.956137][T12173] ? __fget_files+0x3a0/0x420 [ 611.956160][T12173] ? __fget_files+0x2a/0x420 [ 611.956196][T12173] ksys_read+0x145/0x250 [ 611.956220][T12173] ? __pfx_ksys_read+0x10/0x10 [ 611.956238][T12173] ? rcu_is_watching+0x15/0xb0 [ 611.956268][T12173] ? do_syscall_64+0xbe/0x3b0 [ 611.956297][T12173] do_syscall_64+0xfa/0x3b0 [ 611.956321][T12173] ? lockdep_hardirqs_on+0x9c/0x150 [ 611.956343][T12173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.956366][T12173] ? clear_bhb_loop+0x60/0xb0 [ 611.956393][T12173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.956414][T12173] RIP: 0033:0x7f18a158d5fc [ 611.956433][T12173] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 611.956453][T12173] RSP: 002b:00007f18a242d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 611.956475][T12173] RAX: ffffffffffffffda RBX: 00007f18a17b5fa0 RCX: 00007f18a158d5fc [ 611.956491][T12173] RDX: 000000000000000f RSI: 00007f18a242d0a0 RDI: 0000000000000004 [ 611.956505][T12173] RBP: 00007f18a242d090 R08: 0000000000000000 R09: 0000000000000000 [ 611.956518][T12173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.956531][T12173] R13: 00007f18a17b6038 R14: 00007f18a17b5fa0 R15: 00007ffefd453578 [ 611.956567][T12173] [ 611.957077][T12171] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 612.113938][ T7424] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.607346][ T7424] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 612.617994][ T7424] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 612.818970][ T7424] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 612.827288][ T7424] usb 3-1: SerialNumber: syz [ 614.615330][ T7424] usb 3-1: 0:2 : does not exist [ 614.672610][ T7424] usb 3-1: unit 5 not found! [ 614.855701][ T7424] usb 3-1: USB disconnect, device number 80 [ 615.003024][T12191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1556'. [ 615.608778][ T6078] udevd[6078]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 615.669206][T12197] xt_CT: No such helper "snmp" [ 615.891314][ T7426] usb 6-1: new low-speed USB device number 61 using dummy_hcd [ 616.079589][ T7426] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 616.101266][ T7426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.117866][ T7426] usb 6-1: config 0 descriptor?? [ 619.272126][T12236] random: crng reseeded on system resumption [ 619.325511][T12257] netlink: 'syz.4.1573': attribute type 5 has an invalid length. [ 619.720865][ T7437] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 619.904873][ T7437] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.928091][ T7437] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 619.954175][ T7437] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 619.973338][ T7437] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 620.012898][ T7437] usb 5-1: SerialNumber: syz [ 620.474624][T12279] IPVS: Error connecting to the multicast addr [ 620.489412][T12278] macsec1: entered allmulticast mode [ 620.562898][ T7437] usb 5-1: 0:2 : does not exist [ 620.574265][ T7426] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 620.615962][ T7426] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 620.675629][ T7437] usb 5-1: USB disconnect, device number 100 [ 620.680984][T12282] x_tables: duplicate entry at hook 1 [ 620.695638][ T7426] asix 6-1:0.0: probe with driver asix failed with error -71 [ 620.767587][ T7426] usb 6-1: USB disconnect, device number 61 [ 620.776481][ T6078] udevd[6078]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 622.629113][T12319] gtp0: entered promiscuous mode [ 624.728996][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.735848][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.806129][T12339] loop6: detected capacity change from 0 to 524287999 [ 625.523726][T12339] Dev loop6: unable to read RDB block 8 [ 625.529448][T12339] loop6: unable to read partition table [ 625.535334][T12339] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 626.150595][T12345] xt_CT: No such helper "snmp" [ 626.350697][T12344] [ 626.353074][T12344] ====================================================== [ 626.360109][T12344] WARNING: possible circular locking dependency detected [ 626.367183][T12344] 6.16.0-syzkaller #0 Not tainted [ 626.372222][T12344] ------------------------------------------------------ [ 626.379274][T12344] syz.5.1597/12344 is trying to acquire lock: [ 626.385359][T12344] ffff888025362988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 626.396379][T12344] [ 626.396379][T12344] but task is already holding lock: [ 626.403763][T12344] ffff888025362a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 626.412655][T12344] [ 626.412655][T12344] which lock already depends on the new lock. [ 626.412655][T12344] [ 626.423051][T12344] [ 626.423051][T12344] the existing dependency chain (in reverse order) is: [ 626.432059][T12344] [ 626.432059][T12344] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 626.439887][T12344] lock_acquire+0x120/0x360 [ 626.444923][T12344] __mutex_lock+0x182/0xe80 [ 626.449951][T12344] refcount_dec_and_mutex_lock+0x30/0xa0 [ 626.456116][T12344] nbd_config_put+0x2c/0x790 [ 626.461250][T12344] nbd_release+0xfe/0x140 [ 626.466109][T12344] bdev_release+0x533/0x650 [ 626.471147][T12344] blkdev_release+0x15/0x20 [ 626.476180][T12344] __fput+0x449/0xa70 [ 626.480691][T12344] fput_close_sync+0x119/0x200 [ 626.485988][T12344] __x64_sys_close+0x7f/0x110 [ 626.491197][T12344] do_syscall_64+0xfa/0x3b0 [ 626.496328][T12344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.502751][T12344] [ 626.502751][T12344] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 626.510574][T12344] lock_acquire+0x120/0x360 [ 626.515599][T12344] __mutex_lock+0x182/0xe80 [ 626.520633][T12344] __del_gendisk+0x129/0x9e0 [ 626.525748][T12344] del_gendisk+0xe8/0x160 [ 626.530602][T12344] loop_remove+0x42/0xc0 [ 626.535368][T12344] loop_control_ioctl+0x4ac/0x5a0 [ 626.540911][T12344] __se_sys_ioctl+0xfc/0x170 [ 626.546054][T12344] do_syscall_64+0xfa/0x3b0 [ 626.551107][T12344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.557519][T12344] [ 626.557519][T12344] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 626.565961][T12344] validate_chain+0xb9b/0x2140 [ 626.571264][T12344] __lock_acquire+0xab9/0xd20 [ 626.576460][T12344] lock_acquire+0x120/0x360 [ 626.581490][T12344] down_write+0x96/0x1f0 [ 626.586261][T12344] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 626.592511][T12344] nbd_start_device+0x16c/0xac0 [ 626.597886][T12344] nbd_ioctl+0x636/0xeb0 [ 626.602686][T12344] blkdev_ioctl+0x5a8/0x6d0 [ 626.607712][T12344] __se_sys_ioctl+0xfc/0x170 [ 626.612825][T12344] do_syscall_64+0xfa/0x3b0 [ 626.617856][T12344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.624266][T12344] [ 626.624266][T12344] other info that might help us debug this: [ 626.624266][T12344] [ 626.634491][T12344] Chain exists of: [ 626.634491][T12344] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 626.634491][T12344] [ 626.648676][T12344] Possible unsafe locking scenario: [ 626.648676][T12344] [ 626.656124][T12344] CPU0 CPU1 [ 626.661509][T12344] ---- ---- [ 626.666881][T12344] lock(&nbd->config_lock); [ 626.671480][T12344] lock(&disk->open_mutex); [ 626.678593][T12344] lock(&nbd->config_lock); [ 626.685706][T12344] lock(&set->update_nr_hwq_lock); [ 626.690913][T12344] [ 626.690913][T12344] *** DEADLOCK *** [ 626.690913][T12344] [ 626.699049][T12344] 1 lock held by syz.5.1597/12344: [ 626.704156][T12344] #0: ffff888025362a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 626.713485][T12344] [ 626.713485][T12344] stack backtrace: [ 626.719370][T12344] CPU: 0 UID: 0 PID: 12344 Comm: syz.5.1597 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 626.719387][T12344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 626.719397][T12344] Call Trace: [ 626.719404][T12344] [ 626.719411][T12344] dump_stack_lvl+0x189/0x250 [ 626.719431][T12344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 626.719446][T12344] ? __pfx__printk+0x10/0x10 [ 626.719466][T12344] ? print_lock_name+0xde/0x100 [ 626.719486][T12344] print_circular_bug+0x2ee/0x310 [ 626.719506][T12344] check_noncircular+0x134/0x160 [ 626.719526][T12344] validate_chain+0xb9b/0x2140 [ 626.719543][T12344] ? stack_depot_save_flags+0x40/0x900 [ 626.719566][T12344] __lock_acquire+0xab9/0xd20 [ 626.719583][T12344] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 626.719603][T12344] lock_acquire+0x120/0x360 [ 626.719615][T12344] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 626.719639][T12344] ? __mutex_trylock_common+0x153/0x260 [ 626.719659][T12344] down_write+0x96/0x1f0 [ 626.719677][T12344] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 626.719696][T12344] ? __pfx_down_write+0x10/0x10 [ 626.719713][T12344] ? rcu_is_watching+0x15/0xb0 [ 626.719728][T12344] ? trace_contention_end+0x39/0x120 [ 626.719745][T12344] ? __mutex_lock+0x330/0xe80 [ 626.719766][T12344] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 626.719789][T12344] ? blkdev_common_ioctl+0xfc3/0x2450 [ 626.719806][T12344] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 626.719826][T12344] ? nbd_ioctl+0x131/0xeb0 [ 626.719846][T12344] ? __pfx___mutex_lock+0x10/0x10 [ 626.719863][T12344] nbd_start_device+0x16c/0xac0 [ 626.719882][T12344] ? security_capable+0x7e/0x2e0 [ 626.719905][T12344] nbd_ioctl+0x636/0xeb0 [ 626.719925][T12344] ? __pfx_nbd_ioctl+0x10/0x10 [ 626.719944][T12344] ? __asan_memset+0x22/0x50 [ 626.719965][T12344] ? smack_file_ioctl+0x24a/0x340 [ 626.719979][T12344] ? __pfx_smack_file_ioctl+0x10/0x10 [ 626.719994][T12344] ? __pfx_nbd_ioctl+0x10/0x10 [ 626.720014][T12344] blkdev_ioctl+0x5a8/0x6d0 [ 626.720031][T12344] ? __pfx_blkdev_ioctl+0x10/0x10 [ 626.720047][T12344] ? __fget_files+0x2a/0x420 [ 626.720065][T12344] ? bpf_lsm_file_ioctl+0x9/0x20 [ 626.720082][T12344] ? __pfx_blkdev_ioctl+0x10/0x10 [ 626.720098][T12344] __se_sys_ioctl+0xfc/0x170 [ 626.720120][T12344] do_syscall_64+0xfa/0x3b0 [ 626.720136][T12344] ? lockdep_hardirqs_on+0x9c/0x150 [ 626.720150][T12344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.720164][T12344] ? clear_bhb_loop+0x60/0xb0 [ 626.720180][T12344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.720194][T12344] RIP: 0033:0x7f477878ebe9 [ 626.720208][T12344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.720221][T12344] RSP: 002b:00007f47795a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 626.720237][T12344] RAX: ffffffffffffffda RBX: 00007f47789b5fa0 RCX: 00007f477878ebe9 [ 626.720248][T12344] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 626.720257][T12344] RBP: 00007f4778811e19 R08: 0000000000000000 R09: 0000000000000000 [ 626.720267][T12344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.720276][T12344] R13: 00007f47789b6038 R14: 00007f47789b5fa0 R15: 00007ffd5a870f08 [ 626.720294][T12344] [ 626.720312][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.042937][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.214004][T12363] block nbd5: NBD_DISCONNECT [ 627.219105][T12363] block nbd5: Disconnected due to user request. [ 627.229099][T12363] block nbd5: shutting down sockets [ 627.729692][ T7437] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 627.920864][ T7437] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.931124][ T7437] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 627.943909][ T7437] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 628.008017][ T7437] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 628.017893][ T7437] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 628.032385][ T7437] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 628.042943][ T7437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 628.051067][ T7437] usb 3-1: Product: syz [ 628.055232][ T7437] usb 3-1: Manufacturer: syz [ 628.059867][ T7437] usb 3-1: SerialNumber: syz [ 628.065832][ T7437] usb 3-1: config 0 descriptor?? [ 628.272275][ T7437] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 628.279140][ T7437] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 628.294459][ T7437] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 628.303064][ T7437] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 628.312999][ T7437] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 628.336468][ T7437] usb 3-1: USB disconnect, device number 81