last executing test programs: 2m49.892304469s ago: executing program 0 (id=109): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x20002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, "d697da", 0x10, 0x2c, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, {[@dstopts={0x88, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xebf}]}]}}}}}, 0x0) socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r7, 0x301, 0x0, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) map_shadow_stack(&(0x7f00002f6000/0x3000)=nil, 0x3000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$uid(0x2, 0x0) 2m48.401765019s ago: executing program 0 (id=112): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000005bc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000005c00)={0x68, r3, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x2, @media='ib\x00'}}}}, 0x7f}, 0x1, 0x0, 0x0, 0x4849}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711821000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="949c05160db2cc0ceed4a30db72a45bd5d337459aa4611b0efee4e169669779c4de501f0f3abe08dec8b45e7bdff5a62765385aab41e390de1eeb59097c59b06fab4529ec17f81d0fce8c2dc8c8bf131650d10ca074287400ebeb2d0b2d06dc1", @ANYRESHEX=r4, @ANYRES32=r4, @ANYRES16=r4], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r6, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbff, {0x1, 0x2, 0x9, 0x10, {0x4e24, 0x4e22, [0x3, 0x7f, 0x1c000000, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x80) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r10 = syz_clone(0xb00, &(0x7f0000000380)="ce5c89556a22fd9642f1ffe8a5246be5a317520b1fcc75c03da41ad571dbebb323b9273f404b7c64c08a289ecea85cdcb468f9f38376dd108a115d0c19d9a5e7eb76a76ac0888c70d267b1dc0c27e05bed49339efe5e3659e77c01d1a93344c2a30a1db028d7e2ab1715eefe", 0x6c, &(0x7f00000000c0), &(0x7f0000000440), &(0x7f0000000480)="81811734482e95777acf3bc9a9defb38cc2d3961b55c02e5a942758b06a25430e7f2aa1f913ffcb7315959118b38d415a118d3dfc9a0a574054d1257ca") r11 = getpid() r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) kcmp(r10, r11, 0x0, r12, r7) write$cgroup_pid(r9, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r9, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast}) 2m44.755794833s ago: executing program 0 (id=119): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'macvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./bus\x00') mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000) r2 = semget$private(0x0, 0x4, 0x50) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000100)=""/97) semctl$SEM_INFO(r2, 0x0, 0x13, &(0x7f0000000540)=""/4096) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], 0x20}}, 0x84) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, &(0x7f00000000c0)={0x3}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) syz_clone(0x11080000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000001d0010002abd7000ffdbdf251c000000cd08b75079bb2f903191c185a9cd8f3c6cf14362aad7acc9679696578a04913bba59f9527621ab64abbbded319d7fbc473c47d3f8e70a38f21b85dc1879e3ca768e10ee2a4cb5fef459a8d3b", @ANYRES32=r1, @ANYBLOB="00000a0308000100ac1e000108000800", @ANYRES32=r1, @ANYBLOB="0a0001000180c20000030000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004) 2m43.818278291s ago: executing program 0 (id=124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/188, 0xbc}], 0x1}, 0x7}], 0x1, 0x10000, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001e40)=@newtfilter={0xe88, 0x2c, 0x20, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xf}, {0xfff1, 0x2}, {0x7, 0xffe0}}, [@f_tcindex={{0xc}, {0xe58, 0x2, [@TCA_TCINDEX_ACT={0xe54, 0x7, [@m_pedit={0xe50, 0x1a, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x9, 0x0, 0x6, 0x0, 0x9}, 0x0, 0x7}, [{0xff, 0x5, 0xe9, 0x9, 0x1, 0x8bf}, {0xb992, 0x4, 0x14, 0x7, 0x80f, 0x7}, {0x90, 0x7fffffff, 0x4, 0xfd, 0x3, 0x3ff}, {0x28, 0x1, 0x40, 0x9, 0x1, 0xc85e}, {0x9, 0x4, 0xfff, 0x66, 0x2, 0x800}, {0x4, 0x4, 0xfff, 0x7, 0x9, 0x80000001}, {0x72, 0xd192, 0x7034, 0xfd8, 0x2, 0x101}, {0x7735, 0x72838b6a, 0x6, 0xb04, 0x10001, 0x2}, {0x4, 0x7f, 0xc9f, 0x42b, 0x0, 0x3}, {0x16f6bb9, 0xde, 0x200000, 0x2, 0x101, 0x1}, {0x4, 0x10008000, 0x4, 0x2, 0x5aa, 0xdf}, {0x48, 0xa, 0x0, 0x874, 0xff, 0x2}, {0x8a25, 0x2, 0x6, 0x0, 0x9, 0x2}, {0x1, 0x7fffffff, 0x1, 0x9, 0x7fffffff, 0x7}, {0xfffffffd, 0xcfd, 0xfc4e, 0x0, 0xfffffffe, 0x4}, {0x6, 0x1, 0xc, 0x10, 0x4, 0x8}, {0x9, 0x800, 0x7a01b583, 0x3, 0xffffffff, 0xe3b}, {0x5, 0x8, 0x5, 0x9f, 0x651, 0x5}, {0x4, 0x5, 0x1000, 0x3, 0x259db723, 0x9}, {0x10, 0x0, 0x3, 0x8, 0x13000000, 0x7fffffff}, {0xf0, 0x2, 0x0, 0x101, 0x101, 0x5}, {0x1, 0x127, 0x6, 0xffff, 0x8001, 0x4}, {0x0, 0x8, 0xffff6f39, 0xca51, 0x9, 0x8}, {0x8001, 0x81, 0x3, 0x4, 0xfffffff9}, {0x5, 0xa3, 0x0, 0x0, 0x1e400000, 0x100}, {0x8, 0x6, 0x0, 0x5, 0x4, 0xfffffffe}, {0x8, 0x1ff, 0x4, 0x6d13addf, 0x140, 0x6}, {0x0, 0x6, 0x2, 0x5, 0x5, 0x1b}, {0x80, 0x0, 0x401, 0x9, 0xfd, 0x1}, {0x9, 0x2, 0x5, 0x896, 0xffff7fff, 0xeb6}, {0x0, 0x28, 0x5}, {0x400, 0xfff, 0x7f6, 0x100, 0x3, 0x7}, {0x2, 0xad25, 0x77, 0x80000000, 0x1, 0xd}, {0x1, 0x3, 0x8, 0x7, 0x9, 0x9}, {0x7, 0x1, 0xb68e, 0x4, 0x5, 0x800}, {0x0, 0x1000, 0x9, 0x5, 0x7}, {0x2, 0x5a7, 0x5, 0x9, 0x24, 0xfffffffe}, {0x200, 0x2, 0x5, 0x1, 0x4, 0x6}, {0x3, 0x0, 0x1, 0x5, 0x40, 0x4}, {0x8, 0x10, 0x4, 0x5, 0x4, 0x1}, {0x8000, 0xec, 0x8, 0x3, 0x4, 0x81}, {0x0, 0x6, 0x9, 0x3, 0xfffffff8, 0x4}, {0x3, 0x1, 0x0, 0xc4b, 0x0, 0x5}, {0x8, 0x0, 0xffffffff, 0x5, 0x3, 0x40}, {0x3, 0x6, 0x0, 0x2, 0x8, 0xe}, {0x2, 0x401, 0x5759cd20, 0x4, 0x933, 0x2}, {0x8000, 0xc89, 0x8, 0x5, 0x2, 0x218}, {0x80000000, 0x0, 0x3, 0x6, 0xe3, 0x1}, {0x6, 0x1ff, 0x4, 0x1e9, 0x5, 0x1}, {0x10, 0x6b, 0x23, 0x5, 0xfffffffc}, {0x4, 0x828f, 0x0, 0x0, 0x6, 0x4}, {0x93c7, 0x4, 0xe, 0x3259, 0x1, 0x2000}, {0x9, 0xff66, 0xd089, 0x4, 0x35, 0xc20}, {0x1, 0x281, 0x7, 0x4, 0x4, 0x2}, {0xd, 0x6, 0xa0, 0x1, 0x9, 0x8}, {0x22, 0x0, 0x5, 0x8, 0x2, 0x5}, {0xe8, 0xdc00, 0x8, 0x80000001, 0x4, 0x1}, {0xf, 0x4, 0x9, 0x2, 0x8000, 0x480}, {0x1, 0xf4000000, 0x8, 0x8, 0x200}, {0x401, 0x0, 0x0, 0x43, 0x7, 0x3}, {0x9, 0x1ff, 0x7fff, 0x3, 0x9, 0x5}, {0x7, 0x38000, 0x3, 0x5, 0xa58d, 0xba43}, {0x400000, 0xff, 0xfffffff0, 0x9, 0x0, 0x6}, {0x1, 0x7, 0x3, 0xa, 0xcd0, 0x7110}, {0x8, 0x0, 0xf, 0x4, 0x1b, 0x4}, {0xc, 0x14, 0x1ff, 0x9, 0x8, 0x3}, {0x5, 0x3da, 0xff, 0x5, 0x5, 0x3}, {0x7f67, 0xffff, 0x9, 0x33a925b9, 0x80000001, 0x8000}, {0x201023e3, 0x8, 0x7, 0x3, 0x6, 0x4}, {0x1ff, 0x57, 0x0, 0xe7c, 0x4, 0x800}, {0x5, 0xfffffffe, 0xb, 0x80, 0xfffffffc, 0x7}, {0x8, 0x1e, 0x21d, 0x1, 0x74426d9d, 0x8d}, {0xfffffff8, 0xffffffff, 0xc8, 0x7fff, 0x2, 0x7fffffff}, {0x5c, 0x8, 0x40, 0xbf4, 0xff, 0x6}, {0x2, 0xb6, 0x5, 0x70000, 0xed2b, 0x8}, {0x2, 0x7, 0x3, 0x8001, 0x2, 0x7}, {0x79a2, 0x2, 0x4000, 0x3, 0x80, 0x5}, {0x4, 0x2, 0x5, 0x4, 0xfffff001, 0xf}, {0x1e7, 0x80000001, 0x4, 0x7, 0x2, 0xfff}, {0x6, 0x3ff, 0x7, 0x3, 0x9, 0xfff}, {0x4, 0x9, 0x3, 0x6, 0xb, 0x6}, {0x1, 0x2, 0x0, 0x1, 0x2, 0x6}, {0xffffffd4, 0x3, 0x80, 0xffff9f41, 0xc, 0x8}, {0x6, 0x4, 0xd, 0xfffff271, 0x2, 0x10001}, {0x5, 0x2, 0x2, 0x1, 0x7, 0xc7e1}, {0x7, 0x2, 0x100, 0x1000, 0x3, 0x10}, {0x8, 0x80, 0x192f, 0xa1, 0x2, 0x9}, {0x2, 0x2, 0x9, 0x800, 0xbb, 0x3}, {0xf, 0x1, 0x3, 0xb, 0x7, 0x14e0}, {0x9, 0x2, 0xca, 0xc2a5, 0xf9f5, 0x4}, {0x40, 0x7, 0x3, 0x4, 0x4, 0x2}, {0xf, 0x13, 0x7, 0xfffffffd, 0x3, 0x401}, {0x2, 0x3, 0xffffffff, 0xd9e, 0xc2, 0x20}, {0x54, 0xec, 0x6, 0x6b2, 0xad, 0x6}, {0x5, 0x6, 0x6, 0x401, 0x6, 0x2}, {0xf, 0x3c7, 0xffff, 0x7ff, 0x2, 0x8001}, {0x7, 0x9, 0x2, 0x8001, 0x401, 0x5}, {0xffff, 0x4, 0x81, 0x4, 0x9e, 0x7}, {0x10000, 0x1, 0xf, 0x7fffffff, 0x2, 0x9}, {0x4e1b, 0x8000, 0xa, 0x4, 0x1, 0xffff59e7}, {0x3f4, 0x3, 0x400, 0x1, 0xf2d, 0x745d7b2a}, {0x4, 0x8000000, 0x20d, 0x9, 0x7, 0x101}, {0xc, 0x356, 0x87, 0x5, 0x45, 0x7ff}, {0xffff, 0x10000, 0x7, 0x40, 0x800, 0x2}, {0x7, 0x2, 0x200, 0x4, 0x2, 0x2}, {0x5, 0xfd5, 0x8, 0x4, 0xfffffffc, 0xb85d}, {0x88d, 0x6, 0xffffffff, 0x7, 0x8, 0xcf}, {0x9, 0x0, 0x7, 0xfffffff8, 0xfffffefd, 0x3}, {0x2, 0x4, 0x43d7, 0xff, 0xc7e, 0x5}, {0x6, 0x8, 0x6, 0xd21, 0xc7, 0x8}, {0x2, 0xad, 0x5, 0x1, 0xfffffffc, 0x1c}, {0x7fffffff, 0x44, 0x8e, 0x0, 0x1ff, 0x1}, {0x7fff, 0x7fffffff, 0xfffffff8, 0x5, 0x2, 0x7}, {0x9, 0x4, 0x0, 0x6, 0xa, 0x6}, {0x6, 0x28, 0x100, 0x5, 0x8}, {0x1, 0xf6, 0x9ea, 0x7fff, 0xfffffffb, 0x7}, {0x101, 0x7ff, 0x4, 0x7, 0x0, 0x400}, {0x1000, 0x8, 0x4, 0x5, 0xfffffff2, 0x101}, {0x8515, 0x0, 0x80000001, 0xfffffff7, 0x80f5, 0x3}, {0x0, 0x9, 0xce, 0x401, 0x6, 0x8}, {0x200, 0x9, 0xb, 0x5, 0x3, 0x2}, {0x3000, 0x3, 0xf4bb, 0x3ff, 0x2, 0x2}, {0xd2e1, 0x1, 0x4, 0xfffffffb, 0x9, 0x1ff}, {0x2, 0x2, 0x8, 0x3, 0x3, 0x8}, {0x10, 0x0, 0x38a, 0x2, 0xfffffffe, 0x4}, {0x85, 0x9, 0x1ff, 0x7, 0x7f, 0x401}, {0x6, 0x6, 0x1, 0x3, 0x6, 0x7}, {0x2, 0x6, 0x1, 0xff, 0x1000, 0x6f4}], [{0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x5, 0xfb51726ae9cc3196}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x4}, {}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x2}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {}, {0x4, 0x1}, {0x69029817d8283d0}, {0x2}, {0x1}, {0x1}, {0x3}, {0x3}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x5}, {}, {0x6}, {0x1}, {0x2, 0x1}, {}, {0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x7}, {0x5, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2}, {}, {}, {0x2}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x3}, {}, {0x5}, {0x5}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0xf8e8073cdc0d3e77}, {0x3}, {0x0, 0x1}, {0x3}, {0x7289fafe301ce6fe, 0x1}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0xe88}, 0x1, 0x0, 0x0, 0x84}, 0x800) syz_io_uring_submit(0x0, 0x0, 0x0) 2m41.323737889s ago: executing program 0 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x351001, 0x0) linkat(r0, 0x0, r0, 0x0, 0x1400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000001740)={'syz0\x00', {}, 0x0, [0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x40000], [0x0, 0x4, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x5, 0x2, 0x4, 0x0, 0x0, 0xcf79, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x2, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xe, 0xfffffffc, 0x0, 0x3, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7af7, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) select(0x40, &(0x7f0000000400)={0x7, 0x3, 0x80000000, 0xffffffffffffffff, 0x7, 0x201}, 0x0, 0x0, 0x0) close(0x3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) setpgid(0x0, r4) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) creat(&(0x7f00000001c0)='./file0\x00', 0x8) 2m36.32293027s ago: executing program 0 (id=143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2400}, @CTA_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048001}, 0x80c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 2m20.627778924s ago: executing program 32 (id=143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2400}, @CTA_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048001}, 0x80c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 13.012444743s ago: executing program 1 (id=542): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x5, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0xe8, 0x4, 0x0, {[{{@arp={@broadcast, @local, 0x0, 0xff000001, 0xa, 0xe, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x8002, 0x3, 0x401, 0x79f, 0x0, 0x1000, 'syz_tun\x00', 'nr0\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @private}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr=0x64010100, @empty, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x3, 0x402) ioctl$I2C_FUNCS(r1, 0x705, &(0x7f0000000100)=0x9) 12.953300498s ago: executing program 2 (id=544): rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) (async) r0 = gettid() tkill(r0, 0x12) (async, rerun: 64) pselect6(0xffffffffffffff51, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000007c0)={&(0x7f0000000240), 0x8}) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) write$P9_RGETLOCK(r1, &(0x7f0000000000)={0x2f, 0x37, 0x2, {0x0, 0x3c8, 0x3, r0, 0x11, '#p!]*.$%],,!*&#&,'}}, 0x2f) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x109200, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x4, r3, 0x0}]) (async, rerun: 64) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1], 0x0) (async, rerun: 64) socket$inet_udplite(0x2, 0x2, 0x88) 10.907788971s ago: executing program 1 (id=551): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x6}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xa, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0x2}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_RUN(r2, 0xae80, 0x0) chdir(&(0x7f0000000240)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, 0x0, &(0x7f0000000140)=""/18}, 0x20) read$FUSE(r5, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0xc, &(0x7f0000000040), 0x4) write$FUSE_ENTRY(r5, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, r7, {0x2, 0x0, 0x8001, 0x7, 0xfce, 0x1000, {0x2, 0x7, 0x101, 0x7, 0xa, 0x11, 0x80000001, 0x7, 0x9ec5, 0xc000, 0x28ed, 0xffffffffffffffff, 0xee00, 0x9, 0x9}}}, 0x90) write$binfmt_script(r5, &(0x7f0000000000)={'#! ', '', [], 0xa, "4b892cb0"}, 0x8) lseek(r5, 0x7, 0x3) 10.907008828s ago: executing program 2 (id=552): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7cb, &(0x7f0000000980)={&(0x7f0000000100)={{@hyper}, {@local}, 0x400, "1710194bd1372be65d5d1be456d243acca17147843aa07e4676b6e5e13d51fe3b442ddd575b7ea5ad5807b65f6ffac80b65547d4a62858f758a3c310e491a45dff1707cfb8288781aa397d3e28b552db90c3fd57f459b4e3da5126b8963a25e860e40c989341b47e8b95063656f91660d61ae86764cd5302c60b77fff946ee5d5b95a65deb8a11af66212c0a3802da8734cf65656145658ef881a33b771b9134fe2e1407a2ffeb9ae90b1cd06a1e2438c7cd1667c0d3dc53f15fd720ed9adc68ca0bf8cb3a5f3e8f2b48ec05a30d52182f3be35dc35ddad91cd4123051996b766cf7f2791773011420d79b507bba3f90ba48eb066b68d56570e96cdac68675271dc756c582705ced77c094ae8f12a4f268fd1c5ed18f1264e27fcc5d2cced8dc50569b03dffbb749caffa1748c5f7c5fc60a7264e04c53bef6c2cba5ed946d420a97a2fa74cb564f80206f75b408bb69c27ab96ae43936e5c497bc56409f13221e4736c3229193f32dfeae901c32027c5941b73beee853b0fcccfb97d02b8675ca92bfe97adcf83d49f8a405dc9be0cfbaa239a73b40b37ee1c03ae15bf08b05d594d3ae80c131b6a0f958a0b5e09653d5d541c29fa4203671c3e8d3898a5618d7d05e7742dad4a6696ae13deef6c402e2afea4acf40d2c14ed5092a438170f1681d4b97eab16fcbfa86d7a361c02f89069d58c2b32c58d5ef7babf62b97c7ac97e413f53bea59cdbf72fc1c14718b1fa6306da64c9700df190c356a9e972d9e63cc9b0383cc8cab28a02a4b3d4f8b96d485dedb3e6a3f4e40d110676dc8de884d3f915b04f220072d4d68697b106faa3577b5011f3144f235439f1aac9f59d37adcc58ba20f209442df7c1328834bdd3933c0796e2975fa5e9b5cc2653b15b7be37172df2d84329307831f2977cac3cca11676512d2d351e00d09889681f9e0e6c172f2d0c3c15eb75ffe6297aecc1cc9d3ebc80735a50b07c7b1eedadbc9f637e26dd4035322abcb77f93fcd9feb2c33bf37c34595dc9bb2e16ada83dc541f98880dd6d4e0ef38e27adf412d1e08a5c1ce83acdc4f40674d9dc14fbff2f42eb71ba5fac19fc742e00c4c15154fcf8f79ad4cd4c8183d4b2d9693eab7f0da562a9ffba7058b272b280611d877f0b05dda462a5e605ea5a8803ad17ce5a9c5f88ec6fef54f407f5f26dc218b21ac5899d03946fdc4d95791f09a272ef0f1388d718c3d38727b1fbbb2c9f22f2d5091c2d0963b971ab47402130e3ca8e201609c34d4379f75257240f9ff0fe921e29bdcc1319bf77a469739ebfc1d1f8605bfb6d46c0cdc31692254715082be9152eabb5a9f2c562c06a985f573b63f02aad0eb63ff970e5a9a28d209b657cd20dc572238ef1d5bbc57041f77c70fca6b5314b6bff2a9b1a03ed2269456e6467664ac0ec2d2304916885fd1f91d5c3b32b924de"}, 0x418}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r3 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/219, 0xdb}], 0x1) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffefffffffffffff, 0x6], 0x0, 0x41901}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r3, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 9.556047676s ago: executing program 4 (id=555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRES8=r1, @ANYBLOB="b27ab50191922aa77c25d124c0c29c6c738fd863471cc46af2a940f0556ea6b1080f6996adbd9e9a833abf81c1e51a1357130499a675892e47a0433862be6130efcdcdb29ff2eb8125f13ad86d7a636f6848fdabad8ff48cb473b91d14f4cf1ea1aec03ca1d4b03f4391f9a691bca20a2ae6b4e92692acc736d103913798f04db81b3f3c3354b812aec16b08335e978cb020bca290982cbd22cd21826d3f8c449ddfb67a4fb24a0f3693c8ef71e1828401aaa15d910d59c37266acc3b9fee7dd0df0d5e2add4e95528fc5dac03964ef8c64dbebddf48b5a0145caa883dfd6c98892a38b183917cf745908f717922fa0d7ddb44c35ba26365", @ANYRESHEX=r1, @ANYRES16, @ANYRES32, @ANYBLOB="84d95ab657e1222d4e01cde68120942b5743d89b46d9f15f009ec0b15fa9b7199050bf8432a8d4c0a585db4a11b855058ae3786b4c2c36c22707f07eb1fbb45845acec2b080aa9bea1857ec52e1b7ad973f21253dc8e1ec23494362fc4add2ee", @ANYRES32=r0], 0x78}}, 0x0) close(r1) (async) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) (async) close(r5) r6 = socket$inet(0xa, 0x801, 0x84) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0xfffffffd) (async) listen(r7, 0xfffffffd) listen(r6, 0x8) r8 = socket$inet(0xa, 0x801, 0x84) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6}) listen(r8, 0x8) (async) listen(r8, 0x8) socket$inet(0xa, 0x801, 0x84) (async) r9 = socket$inet(0xa, 0x801, 0x84) listen(r9, 0x8) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) r10 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r10, 0x7) socket$netlink(0x10, 0x3, 0x4) (async) r11 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r11) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r11) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 9.348166411s ago: executing program 1 (id=557): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC=r0], 0x34}}, 0x24004004) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1\x00'}, @IFLA_XDP={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000804}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000031000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f90000714138977f0933f45d88ed634c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9957c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be2027fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc9062ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e788320949b76f7d32aca1bfea2aa62621b78dded30fc07171866bf1565f03aed8457f0c5387cac1b7de8bb28dc5c3508b1df61fcc1dfcba19240c4f23206eb91374bd1bbd022a764b043808d13f5fd7ca488cba788a4726e4627da4d42a6b6ccb1b0295a7488ef94c32dd2ec7c9194b7d0df29c6777fe5405f94348d60021ec6beb370c5f77e5f9a478a9329cff80de0305dbe3ab2bd601eb49b9e35050e4179f54211d5a3870d83ec6ce20de458b6558d4dd7d1f23391cfc7a3948cef78b229562140046a26e88bbbbe1ccdbb6bda419fadae724de84776ce7dac2581a6ebd0a050f1dc066d99adbcea7000ef2306f496561ec2ccf8b6426d6327194d46153624023bf2a16a62c733"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r2], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) read$FUSE(r3, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2180, 0x118) 8.688132342s ago: executing program 4 (id=558): setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000005000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000000340), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x59455247}}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff8b) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='.dead\x00', &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2003041, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180), 0x4008084) 8.654658684s ago: executing program 5 (id=559): r0 = memfd_create(&(0x7f0000000080)='9p\x00', 0x5) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000000c0)) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x0, 0x23, 0x2, {0x2, 0x24}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff"], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 8.296116448s ago: executing program 1 (id=561): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x11) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf253700000008000300", @ANYRES32=r6, @ANYBLOB="08005700db0000000800810002000000080027000000000008002600a41aef55bf2149000e8fb3d20217"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffc, 0x9, 0x32315241, 0x7, 0x5, [{0x6, 0xd381}, {0xdc5, 0x7}, {0x0, 0x5}, {0x6, 0x10000}, {0x1000, 0xd3}, {0x3, 0x5}, {0x3, 0x5}, {0x6, 0x8000}], 0x7, 0x7, 0x3, 0x0, 0x5}}) 7.333371581s ago: executing program 5 (id=562): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x42031, 0xffffffffffffffff, 0x80000000) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000000)={'binder0\x00'}) 7.163124981s ago: executing program 5 (id=563): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x0, 0x9, 0x1, 0x8}}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000280)={0x60, 0x1, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7fff, &(0x7f0000000200)=[{0x3, 0x10001, 0x6}, {0xfffffffffffffff7, 0xc, 0x20080}, {0xd4b7, 0xffffffff, 0xfffffffffffffffd}, {0x0, 0x3, 0x8}, {0x401, 0x0, 0x9f}], 0x5, 0x101, 0x15, 0x28, 0x2, 0xe}) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000080)={0x0, 0x16, 0x6, "0dcd87000000"}, 0x0, 0x0, 0x0, 0x0}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="c16a22213bc73b5c37696b90ad5bca70304193fc04574d3ca94f8bd1cfecb4c0bbc0c62d3e3b7d4578bd360ea718afacbfd6c7559a0363ec0d12576131d3c2de8be8d600ab0c76798f2675cf5d68d137fe86e1d0", 0x54}, {&(0x7f0000000100)="9f1ac09f155c1291fc8baa01adb9b575263c1a877ef8644bccc1143c6da61222f05eacf50665f3905cc2fd3e4e81e2a13e7fcca4b10085ea82589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae3dade5d7a11f014f2bbdec62e2df3daf9875c79c6763fdcb8830f378346bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9dd46c823bc89a7cc268e91fff716052173384c4e76c9921c2accb039cbf2cfb99a47371db803c3dce71aa0555a2c0fdb6c8e812ac", 0xc7}, {&(0x7f00000012c0)="8e39308f7428bb361aa0e207e2191e9248da9eac174411869ef60059a981c6a11223cca963f4b365a2419adcb920c2a14965defd6186c5bfc157b6c1c219985ea4badc7bf93f3c939e452c503f86abee100fd05e2367155747876bd524b58bf60f115d5ac1d8bcd3dc85840f8ee47f46c74a4d11f53e68baa8de704b0d9b419407f8ddf3ec6b5dffa0d41dea9381328cacda24d9a3abd058062ad7ad510b02816e20128a7dedd60e86cb5e679599faad3d09e770721f2d5db2e56b1e0972c331f365076d7bdeff03a3ca3f9926227c5a8cd0a4353819b0d37240503464cea7ad56fcdd32a12249d89d50685ff6742a95f669b780b80cfb70e90dee859d9ba7cf3481464ec7c3caefd5c605e66a3d78b6009a7ff6a92ae0fb552ea843ab8f734ffa9d9c09cf3880d8c2fb2d69c43a2f226b82540e3d5ff90ab3dfebea678aefae560a219fc38ec4003d06d073f7d0c0b00e507ab3434fd940f78b533fa8a1b87eb1ef9ab834231322cec017924af412f4c84610e43c92776ab67ca044aea44091d7c4d5f713a3f71e30cf1a8bd38c94a6e0d3baf22f5a", 0x196}], 0x3, 0x0, 0x0, 0x80}], 0x1, 0x50) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) 6.084165872s ago: executing program 2 (id=564): socket(0x10, 0x80003, 0x400) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@gettaction={0x80, 0x32, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xefe}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40810}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) clock_nanosleep(0x8, 0x0, &(0x7f0000000280), 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000053000/0x4000)=nil, 0x4000, 0xb635773f06ebbeed, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000940)=[{{&(0x7f00000002c0)=@can, 0x80, &(0x7f0000000340)=[{&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000000580)=""/180, 0xb4}, {&(0x7f0000000640)=""/241, 0xf1}], 0x4, &(0x7f0000000740)=""/91, 0x5b}, 0x3}, {{&(0x7f00000007c0)=@in, 0x80, &(0x7f0000000400)=[{&(0x7f0000000840)=""/106, 0x6a}], 0x1, &(0x7f00000008c0)=""/107, 0x6b}, 0x9}], 0x2, 0x2, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000000)={r4, 0x1000, &(0x7f0000002a80)=""/4096}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01010000000000000000050000000900010073797a300000000038000000030a01030000000000000000050000000900010073907a30000000000900030073797a300000000008000a400000000304000480140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x2400c041}, 0x20000005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x6) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) 6.003485247s ago: executing program 4 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x1e0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44040}, 0x4) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) read$FUSE(r3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000300)={0x0, 0x90, "c10045ccf29121622590da629c1877e179f6dd7679272e1f7dcac07c44d74c60ec03e791a45bc7779863aa86c9a577dee3ac0c850b7408361836e7e992f1aeb51594a48199bf4db3c4f6f6faf04c82f1b78345d365f3d417fc3c051bcd776dbcec85a14184e3967e36cee93b5f26de8c6e709ebb229fa3b460f23b1be8acaa0ff3e9432bfc195ccf924c05b355e7b422"}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x6, 0x20, 0x9978, 0x3}, &(0x7f0000000280)=0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffc, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xfffffffe, 0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.16243618s ago: executing program 2 (id=566): syz_open_dev$loop(0x0, 0x75f, 0xa382) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0xfffffffd) gettid() r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/207, 0xcf}], 0x1}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001000), 0x581, 0x40000000, 0x0) 5.160871931s ago: executing program 4 (id=567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000225e1affd5020000000900010073797a30e800000008000240000000032c000000250a01030000e6ff0000000002000000701e27b3a2c586d571169f520900010073797a30000000000900030073797a3200000000140000001100013bba346b03eba6bc01849a46ad85a195c42145a1df1f124e210f130c6dcc43b0a8f930d8e4f6b9e80ccb1d9c9baafdb29450a0ad71a43dbeaa4319c19c69e0c1790e303ad0ee64885464fdc19bf519b6484c53c5a07d7b9c411e1a442a33064a5dd11100cf70b68e"], 0x7c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r2) write$cgroup_subtree(r3, &(0x7f0000003100)=ANY=[], 0x10448) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x33, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000780)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='sched_switch\x00', r6}, 0x18) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000400)={0x8, 0x100208b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x1096c}, 0x4ca3b6ba) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x3, 0x6f9e06d72b34406b) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000540)={0x4, &(0x7f00000004c0)=[{}, {}, {}, {}]}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b04, &(0x7f0000000280)={'wlan1\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[r9, r9], 0x2, 0x80000}) 4.627699138s ago: executing program 3 (id=568): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=@base={0xa, 0x17, 0x1ff, 0x1, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000840)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0={0x18, 0x0, 0x0, 0x0, 0x11000000}, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @exit, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x28) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) 4.627240964s ago: executing program 4 (id=569): socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc090) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="0103fcffffff000000002b0000000c0006"], 0x20}}, 0x20000020) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x80) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vbi(0x0, 0x2, 0x2) preadv(0xffffffffffffffff, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x6, 0x29, 0x0, &(0x7f0000695ffc)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x246080, 0x0) r5 = syz_open_procfs(0x0, 0x0) getdents64(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) 4.181555737s ago: executing program 3 (id=570): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000140)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) (async) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="2c50452a4e54e7a70746a5e81fda86366f1cde7a3d5ed15da8efdb223f566cafcf10123e6114956a8a0be58bc5e6c04b3f5f71990bb1fd7bdc10be03ea50e839fb6605225368e8e8d1e90ed04c0db86a26ae0bed479444ebc392e98fb43670c0b9f06f0f22c948eb4e4800000000000000000000000000000000dfa60a1ac5f69e2143f45886deef20dc1a8c99bb94b0595b999f785cbc8779da75ae75b6199abf97a79404000000000000000e1d3ce48f195be7029f439ad87c08d9884b19c5c7b1891d73cd64b88a", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) read$FUSE(r3, &(0x7f000000a280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) (async) mount(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x1000, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x40080, 0x24) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, 0x0, &(0x7f0000000180)=0x11b) (async) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000001c0)={0x1, 0xa, 0x7, 0x6, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) (async) write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r8, @ANYRESHEX=r8, @ANYBLOB="2c7766646e6fbd", @ANYRESHEX=r7]) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) utimensat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 4.012700883s ago: executing program 2 (id=571): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x1, 0x24, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x82}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 4.011374893s ago: executing program 5 (id=572): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 3.927544712s ago: executing program 4 (id=573): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0xfffffffffffffead, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x3}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0xc000) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r3, 0x1, 0x70bd2b, 0xd34, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1502}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008095}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x34, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 3.814351501s ago: executing program 3 (id=574): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x20200) clock_gettime(0x0, &(0x7f000001d200)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f000001d080)=[{{&(0x7f0000000ac0), 0x6e, &(0x7f0000000b40)=[{&(0x7f000001aa40)=""/4086, 0xff6}, {&(0x7f000001ba40)=""/4096, 0x1000}], 0x2, &(0x7f0000000b80)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000c40), 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000cc0)=""/101, 0x65}, {&(0x7f0000000d40)=""/185, 0xb9}, {&(0x7f0000000e00)=""/163, 0xa3}, {&(0x7f0000000ec0)=""/112, 0x70}, {&(0x7f0000000440)=""/16, 0x10}, {&(0x7f0000001880)=""/130, 0x82}, {&(0x7f0000001940)=""/170, 0xaa}], 0x7, &(0x7f000001ca40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x78}}, {{&(0x7f000001cb00)=@abs, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000000940)=""/137, 0x89}], 0x1, &(0x7f000001cc00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{0x0, 0x0, &(0x7f000001d2c0)=[{&(0x7f00000007c0)=""/92, 0x5c}, {&(0x7f0000000300)=""/10, 0xa}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000680)=""/156, 0x9c}, {&(0x7f0000000740)=""/76, 0x4c}], 0x5, &(0x7f0000000840)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{&(0x7f00000008c0), 0x6e, &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f000001cd00)=@abs, 0x6e, &(0x7f000001cf80), 0x0, &(0x7f000001d000)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}}], 0x6, 0x40000000, &(0x7f000001d240)={r1, r2+10000000}) r6 = socket$inet6(0xa, 0x5, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000200025a729bd7000fddbdf250a0000cdff000001020001000800060000000000080018004e234e230500150002000000e483c809ab732df199d5980a2870ce0b0d203bc339f5fcc3f6"], 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x16, &(0x7f000001d340)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRES16=r4], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r11 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r11, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r12 = syz_io_uring_setup(0x40000497, &(0x7f0000000200)={0x0, 0xda06, 0x10000, 0x1, 0x288}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000004c0)=@IORING_OP_TEE={0x21, 0x47, 0x0, @fd_index=0x4, 0x0, 0x0, 0x4, 0x0, 0xb903e5901715e1a8}) io_uring_enter(r12, 0x40f5, 0x217, 0xa5, 0x0, 0x0) close_range(r8, r5, 0xbef79432a27cac98) socket$inet6(0xa, 0x3, 0xff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) 3.810834752s ago: executing program 2 (id=575): setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000005000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000000340), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x59455247}}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff8b) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='.dead\x00', &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2003041, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180), 0x4008084) 3.57214475s ago: executing program 5 (id=576): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r1, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20048024) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x5, [0x1, 0x570, 0x3f, 0x9, 0x6]}, &(0x7f0000000080)=0xe) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000df713820f0031d58381f010203010902240001000010000904e50002ff0107fe0905852eff03000100090582"], 0x0) 3.521072721s ago: executing program 1 (id=577): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000022000000656500008b00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x6, &(0x7f0000000040)=""/6, 0x41000, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x62001, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0xc, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x9, 0x1) openat$pidfd(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, {{0x3, 0x9, 0x0, r3}}}, 0x28) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, 0x0, &(0x7f0000000180)) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xf7fffffb}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000a000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ptrace(0x10, r3) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003640)=@newsa={0x140, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@private0, 0x3, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0xfffffffd, 0x33}, @in=@local, {}, {}, {0x10, 0xd29}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x16, 0x10}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x140}}, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) ptrace$cont(0x9, r3, 0x10000, 0x0) 2.821787713s ago: executing program 3 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x1e0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44040}, 0x4) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) read$FUSE(r3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000300)={0x0, 0x90, "c10045ccf29121622590da629c1877e179f6dd7679272e1f7dcac07c44d74c60ec03e791a45bc7779863aa86c9a577dee3ac0c850b7408361836e7e992f1aeb51594a48199bf4db3c4f6f6faf04c82f1b78345d365f3d417fc3c051bcd776dbcec85a14184e3967e36cee93b5f26de8c6e709ebb229fa3b460f23b1be8acaa0ff3e9432bfc195ccf924c05b355e7b422"}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x6, 0x20, 0x9978, 0x3}, &(0x7f0000000280)=0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffc, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xfffffffe, 0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.787830042s ago: executing program 1 (id=579): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, '`B~'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x7f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x2, 0x1, 0x14, 0x98, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "11e0fb"}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8, 0x4, 0x8}, {0x6, 0x24, 0x1a, 0x5, 0x7}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x9}, @dmm={0x7, 0x24, 0x14, 0x7, 0x400}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x60, 0x9b, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x4, 0xfb}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x1, 0xf9}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x1, 0x4, 0x6, 0x40}, 0x35, &(0x7f0000000140)={0x5, 0xf, 0x35, 0x3, [@generic={0x12, 0x10, 0xb, "a3988fce2efe456b1a00e75c4921b9"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "bb58bd01eaad0b911d0cfadda77d151d"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x5, 0x42, 0x3ff}]}, 0x4, [{0x67, &(0x7f0000000200)=@string={0x67, 0x3, "7084e4d98af2453db4df6942e9886b35c5354d90c161f436e913cd026bc4c832bc9dedcc43d35ddfe6b33bf67c3dc617329177bcd12126af9f813db46b2f78b00e895359ba2bb87d6ea9b8b4f47f78281ab6ec3bf4037053f734ee28877819630b95e587c6"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3401}}, {0x30, &(0x7f00000002c0)=@string={0x30, 0x3, "92945172fa29e05928076a5fbcdac03e4f1e69dbbfc36019c498b167668e1f0509f8e000f7a1db26760d4c602d17"}}]}) 935.600723ms ago: executing program 3 (id=580): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000b00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x81, 0x4f, 0x9, 0x8, @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x700, 0x8000, 0x3, 0x1}}) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe49}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r2, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000b00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x81, 0x4f, 0x9, 0x8, @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x700, 0x8000, 0x3, 0x1}}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe49}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r2, 0x0, 0x5}, 0x18) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) 501.598199ms ago: executing program 3 (id=581): syz_open_procfs(0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="9d8c525f8e6ce0f1b741", 0x1}, {0x0, 0x5f}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x8010000000000084) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e26}, 0xfffffc9e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x48040000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x1000000, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x5a, &(0x7f0000000200)={&(0x7f00000022c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x180c0}, 0xea184cf6bef76a62) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) 0s ago: executing program 5 (id=582): syz_open_dev$loop(0x0, 0x75f, 0xa382) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0xfffffffd) gettid() r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/207, 0xcf}], 0x1}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001000), 0x581, 0x40000000, 0x0) kernel console output (not intermixed with test programs): cmd 1074025677 [ 114.220200][ T6068] dvmrp1: linktype set to 6 [ 114.286147][ T5935] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.457386][ T5935] usb 5-1: Using ep0 maxpacket: 16 [ 114.510769][ T5935] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 114.531200][ T24] usb 1-1: USB disconnect, device number 3 [ 114.547456][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.577130][ T5935] usb 5-1: Product: syz [ 114.581391][ T5935] usb 5-1: Manufacturer: syz [ 115.080340][ T5935] usb 5-1: SerialNumber: syz [ 115.493972][ T5935] usb 5-1: config 0 descriptor?? [ 115.538876][ T6076] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 115.562831][ T5935] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 116.019141][ T5953] usb 4-1: USB disconnect, device number 2 [ 116.056581][ T5935] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 117.082093][ T5910] usb 5-1: USB disconnect, device number 3 [ 117.190872][ T24] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 117.525503][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35'. [ 118.847000][ T24] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 119.371575][ T5910] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 119.497016][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.550847][ T6113] Zero length message leads to an empty skb [ 119.570091][ T24] usb 1-1: string descriptor 0 read error: -22 [ 119.604668][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.634690][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.685797][ T24] usb 1-1: can't set config #1, error -71 [ 119.693162][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.729918][ T24] usb 1-1: USB disconnect, device number 4 [ 119.742100][ T5910] usb 2-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=13.03 [ 119.769395][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.800484][ T5910] usb 2-1: Product: syz [ 119.804795][ T5910] usb 2-1: Manufacturer: syz [ 119.835572][ T5910] usb 2-1: SerialNumber: syz [ 119.867571][ T5910] usb 2-1: config 0 descriptor?? [ 120.338327][ T5910] s2255 2-1:0.0: Could not find bulk-in endpoint [ 120.344988][ T5910] Sensoray 2255 driver load failed: 0xfffffff4 [ 120.528693][ T6118] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 120.636083][ T5910] s2255 2-1:0.0: probe with driver s2255 failed with error -12 [ 120.741692][ T5910] usb 2-1: USB disconnect, device number 2 [ 121.914836][ T6150] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.368057][ T5935] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 124.031859][ T5935] usb 5-1: Using ep0 maxpacket: 8 [ 124.675523][ T5935] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 124.725955][ T5935] usb 5-1: config 150 has no interface number 0 [ 124.734279][ T5935] usb 5-1: config 150 interface 204 has no altsetting 0 [ 124.754874][ T5935] usb 5-1: config 150 interface 1 has no altsetting 0 [ 124.859499][ T5935] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 125.156730][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.522011][ T5935] usb 5-1: Product: syz [ 125.527355][ T5935] usb 5-1: Manufacturer: syz [ 125.532028][ T5935] usb 5-1: SerialNumber: syz [ 125.630718][ T5935] usb 5-1: can't set config #150, error -71 [ 125.656894][ T5935] usb 5-1: USB disconnect, device number 4 [ 125.745240][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.50'. [ 127.317088][ T6194] netlink: 32 bytes leftover after parsing attributes in process `syz.3.52'. [ 128.459034][ T6202] loop8: detected capacity change from 0 to 79 [ 129.103667][ T6200] loop8: detected capacity change from 79 to 78 [ 129.863842][ T5909] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 130.916368][ T5909] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 130.945520][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.294552][ T5909] usb 5-1: config 0 descriptor?? [ 133.852036][ T5909] ath6kl: Failed to submit usb control message: -110 [ 134.023474][ T5909] ath6kl: unable to send the bmi data to the device: -110 [ 134.136906][ T5909] ath6kl: Unable to send get target info: -110 [ 134.158021][ T5909] ath6kl: Failed to init ath6kl core: -110 [ 134.166091][ T5909] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 134.180941][ T5909] usb 5-1: USB disconnect, device number 5 [ 136.166417][ T5844] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 136.356039][ T5909] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 136.367815][ T5844] usb 4-1: unable to get BOS descriptor or descriptor too short [ 136.485716][ T6252] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 136.503070][ T5844] usb 4-1: config 0 has no interfaces? [ 136.511460][ T5844] usb 4-1: language id specifier not provided by device, defaulting to English [ 136.692731][ T5844] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.784335][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.795958][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 137.601639][ T5909] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 137.614872][ T5844] usb 4-1: config 0 descriptor?? [ 137.634139][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.690804][ T5909] usb 3-1: config 0 descriptor?? [ 137.830957][ T6260] capability: warning: `syz.1.71' uses deprecated v2 capabilities in a way that may be insecure [ 138.861313][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.877773][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.917610][ T6260] fuse: Unknown parameter 'group_id00000000000000000000' [ 138.939870][ T5909] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 138.955646][ T24] usb 4-1: USB disconnect, device number 3 [ 139.221632][ T6247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.269707][ T6247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.362041][ T5909] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 139.399422][ T5909] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 139.413710][ T5909] asix 3-1:0.0: probe with driver asix failed with error -71 [ 139.503215][ T5909] usb 3-1: USB disconnect, device number 3 [ 140.361655][ T64] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.553650][ T64] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.661399][ T64] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.830045][ T64] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.152237][ T64] bridge_slave_1: left allmulticast mode [ 141.182479][ T64] bridge_slave_1: left promiscuous mode [ 141.209739][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.277897][ T64] bridge_slave_0: left allmulticast mode [ 141.283934][ T64] bridge_slave_0: left promiscuous mode [ 141.296243][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.845349][ T6283] ptrace attach of "./syz-executor exec"[5840] was attempted by " [ 143.469556][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.82'. [ 144.247132][ T6313] fuse: Unknown parameter 'group_id00000000000000000000' [ 145.656067][ T5935] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.768078][ T5935] usb 1-1: config 0 has an invalid interface number: 197 but max is 0 [ 146.804652][ T5935] usb 1-1: config 0 has no interface number 0 [ 146.832188][ T5935] usb 1-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 147.111701][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.121168][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.134028][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.142563][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.165921][ T5935] usb 1-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 147.229388][ T5935] usb 1-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 147.229516][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.293537][ T5935] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 147.335141][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.373074][ T5935] usb 1-1: Product: syz [ 147.385011][ T5935] usb 1-1: Manufacturer: syz [ 147.394121][ T5935] usb 1-1: SerialNumber: syz [ 147.404336][ T5935] usb 1-1: config 0 descriptor?? [ 147.435002][ T6319] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.443089][ T6319] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.601250][ T5935] qmi_wwan 1-1:0.197: probe with driver qmi_wwan failed with error -71 [ 147.628970][ T5844] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 147.673822][ T5935] usb 1-1: USB disconnect, device number 5 [ 147.829471][ T5844] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 147.850285][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.953652][ T5844] usb 4-1: config 0 descriptor?? [ 148.146215][ T5844] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 148.761791][ T5844] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 150.012972][ T5844] gspca_cpia1: usb_control_msg 01, error -110 [ 150.235450][ T5844] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 150.296866][ T5851] Bluetooth: hci1: command tx timeout [ 151.494641][ T5844] usb 4-1: USB disconnect, device number 4 [ 151.816664][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.904780][ T6347] ptrace attach of "./syz-executor exec"[5842] was attempted by " [ 152.116456][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.270477][ T64] bond0 (unregistering): Released all slaves [ 152.396344][ T5846] Bluetooth: hci1: command tx timeout [ 153.407366][ T6354] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 153.706076][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 154.186526][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 154.200876][ T24] usb 4-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 154.245567][ T24] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 154.255017][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.255243][ T6360] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 154.275895][ T24] usb 4-1: Product: syz [ 154.280208][ T24] usb 4-1: Manufacturer: syz [ 154.299851][ T6360] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 154.306047][ T24] usb 4-1: SerialNumber: syz [ 154.309805][ T6360] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 154.338871][ T24] usb 4-1: config 0 descriptor?? [ 154.369076][ T24] cdc_ether 4-1:0.0: probe with driver cdc_ether failed with error -22 [ 154.384411][ T6361] netlink: 'syz.0.95': attribute type 39 has an invalid length. [ 154.426556][ T24] usb 4-1: unsupported MDLM descriptors [ 154.453436][ T6360] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 154.475984][ T5846] Bluetooth: hci1: command tx timeout [ 154.495340][ T6360] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 154.531566][ T6360] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 154.602239][ T6360] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 155.822822][ T64] hsr_slave_0: left promiscuous mode [ 155.888514][ T64] hsr_slave_1: left promiscuous mode [ 155.915585][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.957480][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.001719][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.014301][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.089601][ T24] usb 4-1: USB disconnect, device number 5 [ 156.275937][ T5844] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 156.320781][ T64] veth1_macvtap: left promiscuous mode [ 156.346666][ T64] veth0_macvtap: left promiscuous mode [ 156.359022][ T64] veth1_vlan: left promiscuous mode [ 156.364943][ T64] veth0_vlan: left promiscuous mode [ 156.467436][ T5844] usb 1-1: Using ep0 maxpacket: 16 [ 156.493270][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.538237][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.577417][ T5846] Bluetooth: hci1: command tx timeout [ 156.597584][ T5844] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 156.616091][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.640128][ T5844] usb 1-1: config 0 descriptor?? [ 156.975972][ T5935] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 157.101476][ T5844] waltop 0003:172F:0034.0001: item fetching failed at offset 0/2 [ 157.119675][ T5844] waltop 0003:172F:0034.0001: probe with driver waltop failed with error -22 [ 157.129518][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 157.144260][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 157.168475][ T5935] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.181265][ T5935] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.210659][ T5935] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.221152][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.230012][ T5935] usb 2-1: Product: syz [ 157.234245][ T5935] usb 2-1: Manufacturer: syz [ 157.241615][ T5935] usb 2-1: SerialNumber: syz [ 157.303980][ T6386] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 157.335458][ T24] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 157.349832][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.377984][ T24] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 157.391551][ T24] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 157.401158][ T24] usb 4-1: Manufacturer: syz [ 157.410708][ T24] usb 4-1: config 0 descriptor?? [ 157.424931][ T64] team0 (unregistering): Port device team_slave_1 removed [ 157.495422][ T64] team0 (unregistering): Port device team_slave_0 removed [ 157.546618][ T24] rc_core: IR keymap rc-hauppauge not found [ 157.561565][ T5935] usb 2-1: 0:2 : does not exist [ 157.561647][ T24] Registered IR keymap rc-empty [ 157.570285][ T5935] usb 2-1: unit 9 not found! [ 157.605210][ T5935] usb 2-1: 4:0: cannot get min/max values for control 1 (id 4) [ 157.605729][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 157.622694][ T5935] usb 2-1: 4:0: cannot get min/max values for control 2 (id 4) [ 157.646209][ T5935] usb 2-1: 4:0: cannot get min/max values for control 3 (id 4) [ 157.667105][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 157.673812][ T5935] usb 2-1: 4:0: cannot get min/max values for control 4 (id 4) [ 157.705671][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 157.746723][ T5935] usb 2-1: 4:0: cannot get min/max values for control 5 (id 4) [ 157.798757][ T5935] usb 2-1: 4:0: cannot get min/max values for control 6 (id 4) [ 157.920080][ T5935] usb 2-1: USB disconnect, device number 3 [ 158.265159][ T24] usb 4-1: USB disconnect, device number 6 [ 158.618576][ T24] usb 1-1: USB disconnect, device number 6 [ 160.399204][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 160.410751][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 160.545241][ T6324] chnl_net:caif_netlink_parms(): no params data found [ 161.837514][ T6448] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 162.364913][ T6324] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.395397][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.423619][ T6324] bridge_slave_0: entered allmulticast mode [ 162.471561][ T6324] bridge_slave_0: entered promiscuous mode [ 162.513741][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.540342][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.572827][ T6324] bridge_slave_1: entered allmulticast mode [ 162.607563][ T6324] bridge_slave_1: entered promiscuous mode [ 162.626269][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 162.776735][ T9] usb 1-1: device descriptor read/64, error -71 [ 162.824966][ T6324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.878804][ T6324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.078022][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 163.104274][ T6324] team0: Port device team_slave_0 added [ 163.192978][ T6324] team0: Port device team_slave_1 added [ 163.256493][ T9] usb 1-1: device descriptor read/64, error -71 [ 163.376350][ T6324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.395062][ T9] usb usb1-port1: attempt power cycle [ 163.412591][ T6324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.506004][ T6324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.548218][ T6324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.569302][ T6324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.737416][ T6324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.805935][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 163.835298][ T5909] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 163.836977][ T9] usb 1-1: device descriptor read/8, error -71 [ 163.871371][ T5909] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 163.905367][ T5909] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 163.938373][ T5909] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 163.959208][ T5909] hid-generic 0003:0004:0000.0002: item fetching failed at offset 9/24 [ 163.977288][ T5909] hid-generic 0003:0004:0000.0002: probe with driver hid-generic failed with error -22 [ 164.005033][ T6324] hsr_slave_0: entered promiscuous mode [ 164.021263][ T6324] hsr_slave_1: entered promiscuous mode [ 164.031033][ T6324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.044069][ T6324] Cannot create hsr debugfs directory [ 164.106892][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 164.136893][ T9] usb 1-1: device descriptor read/8, error -71 [ 164.260586][ T9] usb usb1-port1: unable to enumerate USB device [ 164.782079][ T30] audit: type=1326 audit(1753955338.096:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6482 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff4e3f8e9a9 code=0x7fc00000 [ 166.030097][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'. [ 166.447152][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 166.494932][ T6324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.514747][ T6324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.537484][ T6324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.549856][ T6324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.616310][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 166.625298][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 166.659617][ T9] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 166.687018][ T9] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 166.729038][ T9] usb 3-1: Product: syz [ 166.733481][ T9] usb 3-1: Manufacturer: syz [ 166.793718][ T9] usb 3-1: SerialNumber: syz [ 167.147981][ T9] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 167.206541][ T9] visor 3-1:1.0: probe with driver visor failed with error -110 [ 167.261467][ T6324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.420734][ T6324] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.457873][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.465151][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.506998][ T6512] bad cache= option: no%e [ 167.506998][ T6512] [ 167.514479][ T6512] CIFS: VFS: bad cache= option: no%e [ 167.530520][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.537887][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.684716][ T9] usb 3-1: USB disconnect, device number 4 [ 168.282092][ T6324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.576628][ T6558] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 168.616541][ T6558] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 168.630519][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 168.643185][ T6558] overlayfs: missing 'lowerdir' [ 168.666884][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 170.543705][ T6324] veth0_vlan: entered promiscuous mode [ 170.665852][ T6324] veth1_vlan: entered promiscuous mode [ 170.738399][ T6324] veth0_macvtap: entered promiscuous mode [ 170.750064][ T6324] veth1_macvtap: entered promiscuous mode [ 170.814464][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'. [ 171.075080][ T5909] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 171.129614][ T6324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.938735][ T6601] batadv_slave_1: entered promiscuous mode [ 171.942422][ T6604] xt_CT: No such helper "netbios-ns" [ 171.952321][ T6603] batadv_slave_1: left promiscuous mode [ 172.178288][ T6324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.230312][ T5909] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 172.242694][ T5909] usb 2-1: config 8 has no interface number 0 [ 172.283681][ T5909] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 172.286000][ T6324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.345900][ T5909] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0 [ 172.389888][ T5909] usb 2-1: config 8 interface 177 has no altsetting 0 [ 172.398995][ T6324] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.399037][ T6324] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.399069][ T6324] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.530495][ T5909] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 172.596160][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.680608][ T6592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 172.710627][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.776999][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.947255][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.951361][ T5909] usb 2-1: string descriptor 0 read error: -71 [ 173.006018][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.019694][ T5909] ir_toy 2-1:8.177: required endpoints not found [ 173.085757][ T5909] usb 2-1: USB disconnect, device number 4 [ 173.130532][ T6617] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 173.138963][ T6617] PKCS7: Only support pkcs7_signedData type [ 173.525353][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 173.566246][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 174.426211][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 174.656452][ T24] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 174.716149][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.735763][ T5910] hid-generic 0020:537100:0000.0003: hidraw0: SENSOR HUB HID v240000.00 Device [syz1] on syz0 [ 174.765632][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.887288][ T6651] openvswitch: netlink: IP tunnel dst address not specified [ 174.936159][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 175.109254][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.345577][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.390549][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.415205][ T24] usb 4-1: config 0 descriptor?? [ 175.436733][ T6637] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 175.658972][ T6649] fido_id[6649]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 175.818577][ T6660] netlink: 32 bytes leftover after parsing attributes in process `syz.2.149'. [ 175.960696][ T24] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 175.986102][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 176.005983][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 176.163975][ T6664] can0: slcan on ttyS3. [ 176.817665][ T24] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 177.868414][ T6664] can0 (unregistered): slcan off ttyS3. [ 178.290401][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 178.303246][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 179.149783][ T5935] usb 4-1: USB disconnect, device number 7 [ 179.300983][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.154'. [ 181.925522][ T6710] syz.4.158 uses obsolete (PF_INET,SOCK_PACKET) [ 182.251870][ T6708] hub 2-0:1.0: USB hub found [ 182.419212][ T6708] hub 2-0:1.0: 1 port detected [ 182.956522][ T5935] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 182.995995][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 183.117664][ T5935] usb 4-1: Using ep0 maxpacket: 8 [ 183.130680][ T5935] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 183.146303][ T5935] usb 4-1: config 0 has no interface number 0 [ 183.163070][ T5935] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 183.173426][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 183.196933][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 183.216249][ T5935] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 183.227200][ T10] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 183.244247][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.265882][ T10] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 183.306004][ T10] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 183.317150][ T5935] usb 4-1: config 0 descriptor?? [ 183.332748][ T5935] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 183.343694][ T10] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 183.382077][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 183.421520][ T10] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 183.492605][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.577834][ T10] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 184.019645][ T10] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 184.097228][ T6756] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not 'ethtool' [ 184.107476][ T10] usb 5-1: USB disconnect, device number 6 [ 186.359516][ T5910] usb 4-1: USB disconnect, device number 8 [ 186.537441][ T6777] netlink: 32 bytes leftover after parsing attributes in process `syz.2.171'. [ 186.656705][ T30] audit: type=1326 audit(1753955359.966:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6778 comm="syz.1.172" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4e3f8e9a9 code=0x0 [ 186.950677][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 188.020647][ T6796] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 188.867505][ T6813] fuse: Unknown parameter './file0' [ 189.426114][ T6821] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 192.096581][ T6849] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 192.262104][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 194.224857][ T6869] bad cache= option: no%e [ 194.224857][ T6869] [ 194.256463][ T6869] CIFS: VFS: bad cache= option: no%e [ 194.516773][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.530060][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.543097][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.554799][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.564997][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.750510][ T5833] syz-executor (5833) used greatest stack depth: 19192 bytes left [ 195.171743][ T2943] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.387373][ T6901] fuse: Bad value for 'fd' [ 195.423780][ T2943] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.766525][ T2943] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.926742][ T6893] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 195.950885][ T2943] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.952300][ T6893] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 196.014194][ T6893] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 196.051439][ T6893] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 196.070888][ T6893] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 196.092387][ T6893] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 196.112821][ T6893] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 196.137326][ T6893] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 196.202495][ T6893] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 196.226188][ T6893] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 196.296444][ T6893] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 196.346081][ T6893] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 196.391885][ T6893] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 196.406626][ T6893] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 196.434866][ T6893] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 196.442794][ T2943] bridge_slave_1: left allmulticast mode [ 196.457852][ T2943] bridge_slave_1: left promiscuous mode [ 196.478439][ T2943] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.546887][ T2943] bridge_slave_0: left allmulticast mode [ 196.553343][ T2943] bridge_slave_0: left promiscuous mode [ 196.620145][ T2943] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.735910][ T9] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 196.749905][ T5909] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 196.899909][ T9] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 196.921721][ T9] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 196.930121][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 196.936501][ T5909] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 196.936535][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 197.040545][ T5909] usb 4-1: Product: syz [ 197.055126][ T9] usb 2-1: config 0 has no interface number 0 [ 197.078918][ T5909] usb 4-1: Manufacturer: syz [ 197.096789][ T9] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 197.101186][ T5909] usb 4-1: SerialNumber: syz [ 197.121438][ T6922] fuse: Bad value for 'fd' [ 197.138638][ T9] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 197.175290][ T5909] r8152-cfgselector 4-1: Unknown version 0x0000 [ 197.182087][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 197.199831][ T5909] r8152-cfgselector 4-1: config 0 descriptor?? [ 197.241741][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.274592][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'. [ 197.347268][ T9] usb 2-1: config 0 descriptor?? [ 197.453566][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 198.126047][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.176140][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 198.236811][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 198.482144][ T5851] Bluetooth: hci0: command 0x041b tx timeout [ 199.162189][ T6938] overlayfs: missing 'lowerdir' [ 199.227462][ T6938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.290520][ T6938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.675398][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.683158][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.690143][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 200.157479][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.259876][ T5851] Bluetooth: hci4: command 0x0c1a tx timeout [ 200.301853][ T9] usb 2-1: USB disconnect, device number 5 [ 200.326100][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 200.614563][ T5851] Bluetooth: hci0: command 0x041b tx timeout [ 200.760725][ T6949] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.768994][ T6949] IPv6: NLM_F_CREATE should be set when creating new route [ 200.845564][ T2943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.899255][ T2943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.927003][ T2943] bond0 (unregistering): Released all slaves [ 201.156792][ T6952] netlink: 32 bytes leftover after parsing attributes in process `syz.1.209'. [ 201.246112][ T6955] capability: warning: `syz.4.210' uses 32-bit capabilities (legacy support in use) [ 201.317354][ T5909] r8152-cfgselector 4-1: USB disconnect, device number 9 [ 201.756407][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 202.238088][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 202.316030][ T5851] Bluetooth: hci4: command 0x0c1a tx timeout [ 202.406417][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 202.636093][ T5851] Bluetooth: hci0: command 0x041b tx timeout [ 202.775481][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 202.973971][ T6883] chnl_net:caif_netlink_parms(): no params data found [ 203.710888][ T6985] Bluetooth: MGMT ver 1.23 [ 203.752466][ T6985] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 203.801191][ T2943] hsr_slave_0: left promiscuous mode [ 203.830357][ T2943] hsr_slave_1: left promiscuous mode [ 203.854873][ T2943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.885990][ T2943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.931366][ T2943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.963285][ T2943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.054146][ T7000] netlink: 32 bytes leftover after parsing attributes in process `syz.3.221'. [ 204.065565][ T2943] veth1_macvtap: left promiscuous mode [ 204.073962][ T2943] veth0_macvtap: left promiscuous mode [ 204.084500][ T2943] veth1_vlan: left promiscuous mode [ 204.107268][ T2943] veth0_vlan: left promiscuous mode [ 204.796110][ T5851] Bluetooth: hci0: command 0x041b tx timeout [ 206.906907][ T5851] Bluetooth: hci0: command 0x041b tx timeout [ 208.956186][ T5851] Bluetooth: hci0: command 0x041b tx timeout [ 209.385173][ T2943] team0 (unregistering): Port device team_slave_1 removed [ 209.454485][ T2943] team0 (unregistering): Port device team_slave_0 removed [ 209.708052][ T7034] loop2: detected capacity change from 0 to 7 [ 209.722531][ T7034] Dev loop2: unable to read RDB block 7 [ 209.729879][ T7034] loop2: unable to read partition table [ 209.737705][ T7034] loop2: partition table beyond EOD, truncated [ 209.746744][ T7034] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 210.581862][ T7043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.230'. [ 210.929790][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.952882][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.966127][ T6883] bridge_slave_0: entered allmulticast mode [ 210.983438][ T6883] bridge_slave_0: entered promiscuous mode [ 211.003103][ T6883] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.012005][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.019623][ T6883] bridge_slave_1: entered allmulticast mode [ 211.028378][ T6883] bridge_slave_1: entered promiscuous mode [ 211.036935][ T5851] Bluetooth: hci0: command 0x041b tx timeout [ 211.179346][ T6883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.209368][ T6883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.474463][ T6883] team0: Port device team_slave_0 added [ 211.500061][ T6883] team0: Port device team_slave_1 added [ 211.717548][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.752236][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.810221][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.232'. [ 211.869462][ T6883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.944281][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.984171][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.011121][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.018164][ T6883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.106472][ T7057] ptrace attach of "./syz-executor exec"[5840] was attempted by ""[7057] [ 212.758711][ T7059] netlink: 'syz.4.234': attribute type 1 has an invalid length. [ 212.918623][ T7059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.112685][ T6883] hsr_slave_0: entered promiscuous mode [ 213.144295][ T6883] hsr_slave_1: entered promiscuous mode [ 213.286348][ T7061] bond1: (slave veth3): Enslaving as an active interface with a down link [ 213.416866][ T7065] vlan2: entered allmulticast mode [ 213.431347][ T7065] veth1: entered allmulticast mode [ 213.438298][ T7065] veth1: entered promiscuous mode [ 213.444815][ T7065] veth1: left promiscuous mode [ 213.453458][ T7065] bond1: (slave vlan2): making interface the new active one [ 213.467037][ T7065] veth1: entered promiscuous mode [ 213.473668][ T7065] vlan2: entered promiscuous mode [ 213.480630][ T7065] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 213.491447][ T7079] loop2: detected capacity change from 0 to 7 [ 213.531945][ T7079] Dev loop2: unable to read RDB block 7 [ 213.546181][ T7079] loop2: unable to read partition table [ 213.565135][ T7079] loop2: partition table beyond EOD, truncated [ 213.600876][ T7079] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 213.679842][ T7089] loop2: detected capacity change from 0 to 7 [ 213.805711][ T7089] Dev loop2: unable to read RDB block 7 [ 213.847306][ T7089] loop2: unable to read partition table [ 213.941629][ T7089] loop2: partition table beyond EOD, truncated [ 214.217471][ T7089] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 215.084870][ T6883] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 215.282607][ T6883] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 215.365174][ T7101] ptrace attach of "./syz-executor exec"[6324] was attempted by ""[7101] [ 215.867160][ T6883] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 215.889930][ T6883] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 215.956762][ T7103] bad cache= option: no%e [ 215.956762][ T7103] [ 215.974299][ T7103] CIFS: VFS: bad cache= option: no%e [ 216.276906][ T7122] mmap: syz.4.248 (7122) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 216.599749][ T6883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.654812][ T6883] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.719805][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.727061][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.761320][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.768802][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.932667][ T7138] loop2: detected capacity change from 0 to 7 [ 216.956917][ T7138] Dev loop2: unable to read RDB block 7 [ 216.969189][ T7138] loop2: unable to read partition table [ 216.976467][ T7138] loop2: partition table beyond EOD, truncated [ 216.996252][ T5841] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 217.004213][ T7138] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 217.169928][ T5841] usb 5-1: Using ep0 maxpacket: 32 [ 217.205703][ T5841] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 217.300345][ T5841] usb 5-1: config 0 has no interface number 0 [ 217.429213][ T5841] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 217.513120][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.523910][ T5841] usb 5-1: Product: syz [ 217.529298][ T5841] usb 5-1: Manufacturer: syz [ 217.534224][ T5841] usb 5-1: SerialNumber: syz [ 217.592668][ T5841] usb 5-1: config 0 descriptor?? [ 217.601556][ T5841] smsc95xx v2.0.0 [ 218.829225][ T5841] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 218.889954][ T6883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.921969][ T5841] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 219.634088][ T30] audit: type=1326 audit(1753955392.946:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7167 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5deab8e9a9 code=0x7ffc0000 [ 219.692473][ T30] audit: type=1326 audit(1753955392.946:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7167 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5deab8e9a9 code=0x7ffc0000 [ 219.728165][ T30] audit: type=1326 audit(1753955392.946:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7167 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5deab8e9a9 code=0x7ffc0000 [ 219.749637][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.776384][ T30] audit: type=1326 audit(1753955392.946:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7167 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5deab8e9a9 code=0x7ffc0000 [ 219.799647][ T30] audit: type=1326 audit(1753955392.946:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7167 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5deab8e9a9 code=0x7ffc0000 [ 219.822528][ T30] audit: type=1326 audit(1753955392.946:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7167 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5deab8e9a9 code=0x7ffc0000 [ 219.890391][ T30] audit: type=1326 audit(1753955392.946:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7167 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f5deab8e9a9 code=0x7ffc0000 [ 220.046091][ T30] audit: type=1326 audit(1753955392.946:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7167 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5deab8e9a9 code=0x7ffc0000 [ 220.094358][ T30] audit: type=1326 audit(1753955392.946:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7167 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5deab8e9a9 code=0x7ffc0000 [ 220.118461][ T30] audit: type=1326 audit(1753955392.946:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7167 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5deab8e9a9 code=0x7ffc0000 [ 220.259184][ T5841] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 220.822852][ T5841] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 220.837107][ T7175] netlink: 'syz.1.259': attribute type 4 has an invalid length. [ 220.844978][ T7175] netlink: 152 bytes leftover after parsing attributes in process `syz.1.259'. [ 220.861608][ T7175] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 221.903991][ T24] usb 5-1: USB disconnect, device number 7 [ 221.960433][ T6883] veth0_vlan: entered promiscuous mode [ 221.973685][ T6883] veth1_vlan: entered promiscuous mode [ 222.014166][ T6883] veth0_macvtap: entered promiscuous mode [ 222.152906][ T6883] veth1_macvtap: entered promiscuous mode [ 222.368619][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.403374][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.246045][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 223.277911][ T6883] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.290970][ T5937] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 223.292892][ T6883] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.333554][ T6883] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.353121][ T6883] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.433565][ T7202] loop2: detected capacity change from 0 to 7 [ 223.439971][ T24] usb 5-1: device descriptor read/64, error -71 [ 223.478587][ T7202] Dev loop2: unable to read RDB block 7 [ 223.503077][ T7202] loop2: unable to read partition table [ 223.516833][ T7202] loop2: partition table beyond EOD, truncated [ 223.537521][ T7202] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 223.566460][ T5937] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 223.575640][ T5937] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.603553][ T6014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.605902][ T5937] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 223.631121][ T6014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.655909][ T5937] usb 4-1: config 1 has no interface number 1 [ 223.676371][ T5937] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 223.696501][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 223.718057][ T6014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.721298][ T5937] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.734917][ T6014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.778588][ T5937] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.795863][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.815104][ T5937] usb 4-1: Product: syz [ 223.825244][ T5937] usb 4-1: Manufacturer: syz [ 223.835418][ T5937] usb 4-1: SerialNumber: syz [ 223.846173][ T24] usb 5-1: device descriptor read/64, error -71 [ 223.938211][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.184'. [ 223.980051][ T24] usb usb5-port1: attempt power cycle [ 224.006116][ T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 224.446792][ T10] usb 3-1: too many configurations: 81, using maximum allowed: 8 [ 224.468494][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 224.495130][ T10] usb 3-1: can't read configurations, error -61 [ 224.567564][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 224.611199][ T24] usb 5-1: device descriptor read/8, error -71 [ 224.876031][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 224.925175][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 225.066645][ T24] usb 5-1: device descriptor read/8, error -71 [ 225.183507][ T24] usb usb5-port1: unable to enumerate USB device [ 225.246867][ T10] usb 3-1: too many configurations: 81, using maximum allowed: 8 [ 225.259810][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 225.283303][ T10] usb 3-1: can't read configurations, error -61 [ 225.318895][ T10] usb usb3-port1: attempt power cycle [ 225.378045][ T5937] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 225.403420][ T5937] usb 4-1: MIDIStreaming interface descriptor not found [ 225.650295][ T5937] usb 4-1: USB disconnect, device number 10 [ 225.716455][ T10] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 225.791210][ T10] usb 3-1: too many configurations: 81, using maximum allowed: 8 [ 226.086945][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 226.297177][ T10] usb 3-1: can't read configurations, error -61 [ 226.456144][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 226.516483][ T10] usb 3-1: too many configurations: 81, using maximum allowed: 8 [ 226.526749][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 226.534413][ T10] usb 3-1: can't read configurations, error -61 [ 226.555994][ T10] usb usb3-port1: unable to enumerate USB device [ 227.075315][ T5937] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 227.277991][ T5937] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 227.323071][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 62274, setting to 64 [ 227.355896][ T5937] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.386853][ T7234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.424812][ T5937] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.438599][ T7234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.463151][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.496388][ T5937] usb 4-1: config 0 descriptor?? [ 227.512814][ T7226] process 'syz.5.270' launched './file1' with NULL argv: empty string added [ 227.534769][ T5937] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 227.610827][ T7244] loop2: detected capacity change from 0 to 7 [ 227.621581][ T7244] Dev loop2: unable to read RDB block 7 [ 227.631667][ T7244] loop2: unable to read partition table [ 227.637955][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 227.640369][ T7244] loop2: partition table beyond EOD, truncated [ 227.700609][ T7244] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 227.806626][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 227.824606][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 227.844179][ T10] usb 2-1: config 0 has no interface number 0 [ 227.856427][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 227.880458][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 227.900176][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.909060][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.279'. [ 227.916181][ T10] usb 2-1: Product: syz [ 227.923250][ T10] usb 2-1: Manufacturer: syz [ 227.923274][ T10] usb 2-1: SerialNumber: syz [ 228.054691][ T10] usb 2-1: config 0 descriptor?? [ 228.291825][ T10] smsc75xx v1.0.0 [ 228.672818][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 228.672838][ T30] audit: type=1326 audit(1753955401.986:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7266 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6b78e9a9 code=0x7ffc0000 [ 228.741512][ T30] audit: type=1326 audit(1753955402.016:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7266 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6b78e9a9 code=0x7ffc0000 [ 228.786051][ T30] audit: type=1326 audit(1753955402.036:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7266 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d6b78e9a9 code=0x7ffc0000 [ 228.874749][ T30] audit: type=1326 audit(1753955402.036:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7266 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6b78e9a9 code=0x7ffc0000 [ 228.986698][ T30] audit: type=1326 audit(1753955402.036:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7266 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6b78e9a9 code=0x7ffc0000 [ 229.030643][ T30] audit: type=1326 audit(1753955402.036:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7266 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d6b78e9a9 code=0x7ffc0000 [ 229.052654][ T30] audit: type=1326 audit(1753955402.036:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7266 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6b78e9a9 code=0x7ffc0000 [ 229.148856][ T7275] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 229.219173][ T7275] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 229.609460][ T7274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.285'. [ 229.666173][ T30] audit: type=1326 audit(1753955402.046:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7266 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9d6b78e9a9 code=0x7ffc0000 [ 229.714274][ T6377] vlan2: left promiscuous mode [ 229.720903][ T24] IPVS: starting estimator thread 0... [ 229.775855][ T30] audit: type=1326 audit(1753955402.046:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7266 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6b78e9a9 code=0x7ffc0000 [ 229.817008][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 229.827934][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 229.842550][ T30] audit: type=1326 audit(1753955402.046:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7266 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9d6b78e9a9 code=0x7ffc0000 [ 229.864802][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 229.869998][ T7278] IPVS: using max 26 ests per chain, 62400 per kthread [ 229.890484][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 229.926137][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 229.954996][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 229.977021][ T5844] usb 4-1: USB disconnect, device number 11 [ 229.992237][ T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 230.242912][ T5937] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 230.365984][ T7295] x_tables: duplicate underflow at hook 1 [ 230.430337][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.442179][ T5937] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 230.459318][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.508519][ T5937] usb 6-1: config 0 descriptor?? [ 230.918775][ T24] usb 2-1: USB disconnect, device number 6 [ 230.932909][ T5937] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 231.075299][ T5937] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0005/input/input9 [ 231.358439][ T5937] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 231.385994][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 231.482158][ T5937] usb 6-1: USB disconnect, device number 2 [ 231.526107][ T24] usb 2-1: device descriptor read/64, error -71 [ 231.876201][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 232.038328][ T24] usb 2-1: device descriptor read/64, error -71 [ 232.226805][ T24] usb usb2-port1: attempt power cycle [ 232.233332][ T7315] 9pnet_fd: Insufficient options for proto=fd [ 232.564288][ T7319] openvswitch: netlink: Tunnel attr 6 has unexpected len 1 expected 0 [ 232.587001][ T7319] all: renamed from bridge_slave_0 (while UP) [ 232.608271][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 232.669949][ T24] usb 2-1: device descriptor read/8, error -71 [ 232.753125][ T7328] netlink: 'syz.4.299': attribute type 1 has an invalid length. [ 232.767963][ T7328] netlink: 'syz.4.299': attribute type 4 has an invalid length. [ 232.778285][ T7328] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.299'. [ 232.936035][ T5937] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 232.948026][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 232.986913][ T24] usb 2-1: device descriptor read/8, error -71 [ 233.087900][ T5937] usb 3-1: unable to get BOS descriptor or descriptor too short [ 233.096628][ T24] usb usb2-port1: unable to enumerate USB device [ 233.119853][ T5937] usb 3-1: not running at top speed; connect to a high speed hub [ 233.149367][ T5937] usb 3-1: config 1 interface 0 has no altsetting 0 [ 233.173797][ T5937] usb 3-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 233.184174][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.192836][ T5937] usb 3-1: Product: syz [ 233.197461][ T5937] usb 3-1: Manufacturer: syz [ 233.202813][ T5937] usb 3-1: SerialNumber: syz [ 233.208813][ T5924] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 233.366178][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 233.384658][ T5924] usb 4-1: config 1 has an invalid interface number: 233 but max is 0 [ 233.406746][ T5924] usb 4-1: config 1 has no interface number 0 [ 233.429921][ T5924] usb 4-1: config 1 interface 233 altsetting 250 bulk endpoint 0x9 has invalid maxpacket 8 [ 233.461975][ T5924] usb 4-1: config 1 interface 233 has no altsetting 0 [ 233.480396][ T5924] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac [ 233.499741][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.516006][ T7326] tipc: Started in network mode [ 233.521057][ T7326] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 233.530575][ T7326] tipc: Enabled bearer , priority 10 [ 233.537722][ T7337] tipc: Enabling of bearer rejected, already enabled [ 233.569843][ T5924] usb 4-1: Product: syz [ 233.588207][ T5924] usb 4-1: Manufacturer: syz [ 233.604334][ T5924] usb 4-1: SerialNumber: syz [ 233.636829][ T7331] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 233.953165][ T5924] imon_raw 4-1:1.233: IR endpoint missing [ 234.024182][ T5924] usb 4-1: USB disconnect, device number 12 [ 234.526098][ T10] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 234.651433][ T5841] tipc: Node number set to 11578026 [ 234.745551][ T7345] loop2: detected capacity change from 0 to 7 [ 234.752533][ T10] usb 2-1: device descriptor read/64, error -71 [ 234.765625][ T7345] Dev loop2: unable to read RDB block 7 [ 234.774562][ T7345] loop2: unable to read partition table [ 234.781428][ T7345] loop2: partition table beyond EOD, truncated [ 234.788479][ T7345] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 235.005986][ T10] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 235.155962][ T10] usb 2-1: device descriptor read/64, error -71 [ 235.279575][ T10] usb usb2-port1: attempt power cycle [ 235.786032][ T10] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 235.808251][ T10] usb 2-1: device descriptor read/8, error -71 [ 235.860623][ T5937] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input10 [ 235.873772][ T5937] usb 3-1: USB disconnect, device number 9 [ 235.877303][ T5192] bcm5974 3-1:1.0: could not read from device [ 236.048953][ T10] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 236.238258][ T10] usb 2-1: device descriptor read/8, error -71 [ 236.338794][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 236.741639][ T10] usb usb2-port1: unable to enumerate USB device [ 237.105902][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 237.149323][ T7388] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 237.173714][ T7388] kvm: Disabled LAPIC found during irq injection [ 237.246060][ T10] usb 6-1: device descriptor read/64, error -71 [ 237.560050][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 238.146128][ T10] usb 6-1: device descriptor read/64, error -71 [ 238.399651][ T10] usb usb6-port1: attempt power cycle [ 239.868087][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 239.945921][ T10] usb 6-1: device descriptor read/8, error -71 [ 240.745513][ T7428] overlayfs: overlapping lowerdir path [ 241.086096][ T7432] geneve2: entered allmulticast mode [ 242.175915][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 242.217004][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 244.302029][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 244.328252][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 244.365895][ T10] usb 6-1: can't read configurations, error -71 [ 244.406686][ T10] usb usb6-port1: unable to enumerate USB device [ 244.460234][ T7441] netlink: 48 bytes leftover after parsing attributes in process `syz.1.331'. [ 244.646142][ T7441] netlink: 44 bytes leftover after parsing attributes in process `syz.1.331'. [ 244.850826][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 246.155070][ T10] usb 6-1: device descriptor read/64, error -71 [ 248.175986][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 250.823740][ T7481] FAULT_INJECTION: forcing a failure. [ 250.823740][ T7481] name failslab, interval 1, probability 0, space 0, times 1 [ 250.843410][ T7481] CPU: 0 UID: 0 PID: 7481 Comm: syz.5.339 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 250.843440][ T7481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 250.843461][ T7481] Call Trace: [ 250.843473][ T7481] [ 250.843483][ T7481] dump_stack_lvl+0x189/0x250 [ 250.843524][ T7481] ? irqentry_exit+0x74/0x90 [ 250.843551][ T7481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.843596][ T7481] should_fail_ex+0x414/0x560 [ 250.843625][ T7481] should_failslab+0xa8/0x100 [ 250.843653][ T7481] __kmalloc_cache_noprof+0x70/0x3d0 [ 250.843674][ T7481] ? __rdma_create_id+0x66/0x640 [ 250.843694][ T7481] ? __pfx_rds_rdma_cm_event_handler+0x10/0x10 [ 250.843717][ T7481] ? __pfx_rds_rdma_cm_event_handler+0x10/0x10 [ 250.843742][ T7481] __rdma_create_id+0x66/0x640 [ 250.843766][ T7481] ? __pfx_rds_rdma_cm_event_handler+0x10/0x10 [ 250.843791][ T7481] __rdma_create_kernel_id+0x3c/0x80 [ 250.843817][ T7481] rds_ib_laddr_check+0xe5/0x470 [ 250.843845][ T7481] ? __pfx_rds_ib_laddr_check+0x10/0x10 [ 250.843874][ T7481] ? __pfx_rds_ib_laddr_check+0x10/0x10 [ 250.843909][ T7481] rds_trans_get_preferred+0x179/0x3c0 [ 250.843946][ T7481] rds_bind+0x6b3/0x17c0 [ 250.843976][ T7481] ? rcu_is_watching+0x15/0xb0 [ 250.844002][ T7481] ? preempt_schedule_irq+0xde/0x150 [ 250.844023][ T7481] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 250.844050][ T7481] ? __pfx_rds_bind+0x10/0x10 [ 250.844081][ T7481] ? irqentry_exit+0x74/0x90 [ 250.844103][ T7481] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.844148][ T7481] __sys_bind+0x2c6/0x3e0 [ 250.844179][ T7481] ? __pfx___sys_bind+0x10/0x10 [ 250.844221][ T7481] ? rcu_is_watching+0x15/0xb0 [ 250.844261][ T7481] __x64_sys_bind+0x7a/0x90 [ 250.844290][ T7481] do_syscall_64+0xfa/0x3b0 [ 250.844317][ T7481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.844338][ T7481] ? asm_sysvec_call_function_single+0x1a/0x20 [ 250.844360][ T7481] ? clear_bhb_loop+0x60/0xb0 [ 250.844386][ T7481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.844408][ T7481] RIP: 0033:0x7f9d6b78e9a9 [ 250.844433][ T7481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.844451][ T7481] RSP: 002b:00007f9d6c5e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 250.844473][ T7481] RAX: ffffffffffffffda RBX: 00007f9d6b9b6080 RCX: 00007f9d6b78e9a9 [ 250.844487][ T7481] RDX: 000000000000001c RSI: 0000200000000280 RDI: 0000000000000005 [ 250.844501][ T7481] RBP: 00007f9d6c5e6090 R08: 0000000000000000 R09: 0000000000000000 [ 250.844512][ T7481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.844525][ T7481] R13: 0000000000000000 R14: 00007f9d6b9b6080 R15: 00007ffe38cc9138 [ 250.844558][ T7481] [ 251.117151][ T7481] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 251.669161][ T7479] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.680993][ T7479] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 252.023505][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 252.023525][ T30] audit: type=1326 audit(1753955425.336:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7495 comm="syz.2.345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5deab8e9a9 code=0x0 [ 254.006536][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 254.265968][ T10] usb 6-1: device descriptor read/64, error -71 [ 254.529166][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 254.608919][ T7516] 9pnet_fd: Insufficient options for proto=fd [ 254.686047][ T10] usb 6-1: device descriptor read/64, error -71 [ 254.809218][ T10] usb usb6-port1: attempt power cycle [ 255.822319][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 255.876992][ T10] usb 6-1: device descriptor read/8, error -71 [ 255.940488][ T7529] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 255.952046][ T7529] FAULT_INJECTION: forcing a failure. [ 255.952046][ T7529] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 255.966306][ T7529] CPU: 0 UID: 0 PID: 7529 Comm: syz.2.354 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 255.966336][ T7529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 255.966348][ T7529] Call Trace: [ 255.966357][ T7529] [ 255.966366][ T7529] dump_stack_lvl+0x189/0x250 [ 255.966394][ T7529] ? __pfx____ratelimit+0x10/0x10 [ 255.966418][ T7529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.966440][ T7529] ? __pfx__printk+0x10/0x10 [ 255.966482][ T7529] should_fail_ex+0x414/0x560 [ 255.966510][ T7529] _copy_to_user+0x31/0xb0 [ 255.966544][ T7529] simple_read_from_buffer+0xe1/0x170 [ 255.966572][ T7529] proc_fail_nth_read+0x1df/0x250 [ 255.966603][ T7529] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.966633][ T7529] ? rw_verify_area+0x258/0x650 [ 255.966667][ T7529] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.966695][ T7529] vfs_read+0x200/0x980 [ 255.966735][ T7529] ? __pfx___mutex_lock+0x10/0x10 [ 255.966761][ T7529] ? __pfx_vfs_read+0x10/0x10 [ 255.966796][ T7529] ? __fget_files+0x2a/0x420 [ 255.966827][ T7529] ? __fget_files+0x3a0/0x420 [ 255.966864][ T7529] ? __fget_files+0x2a/0x420 [ 255.966898][ T7529] ksys_read+0x145/0x250 [ 255.966921][ T7529] ? __pfx_ksys_read+0x10/0x10 [ 255.966938][ T7529] ? rcu_is_watching+0x15/0xb0 [ 255.966969][ T7529] ? do_syscall_64+0xbe/0x3b0 [ 255.967005][ T7529] do_syscall_64+0xfa/0x3b0 [ 255.967031][ T7529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.967058][ T7529] ? asm_sysvec_call_function_single+0x1a/0x20 [ 255.967080][ T7529] ? clear_bhb_loop+0x60/0xb0 [ 255.967106][ T7529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.967127][ T7529] RIP: 0033:0x7f5deab8d3bc [ 255.967147][ T7529] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 255.967165][ T7529] RSP: 002b:00007f5debaa7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.967188][ T7529] RAX: ffffffffffffffda RBX: 00007f5deadb6080 RCX: 00007f5deab8d3bc [ 255.967204][ T7529] RDX: 000000000000000f RSI: 00007f5debaa70a0 RDI: 0000000000000006 [ 255.967217][ T7529] RBP: 00007f5debaa7090 R08: 0000000000000000 R09: 0000000000000000 [ 255.967230][ T7529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.967243][ T7529] R13: 0000000000000000 R14: 00007f5deadb6080 R15: 00007ffc9a483fe8 [ 255.967277][ T7529] [ 256.559976][ T7531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.574689][ T7531] bond0: (slave rose0): Enslaving as an active interface with an up link [ 256.768201][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 257.747894][ T10] usb 6-1: device descriptor read/8, error -71 [ 257.797676][ T7531] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 257.834526][ T7531] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 257.855286][ T7531] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 257.870257][ T10] usb usb6-port1: unable to enumerate USB device [ 257.879383][ T7531] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 257.912459][ T7531] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 257.918896][ T7531] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 258.171820][ T7531] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 258.247540][ T7554] netlink: 'syz.4.363': attribute type 10 has an invalid length. [ 258.347708][ T7531] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 258.937771][ T7551] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 259.205384][ T7554] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.215255][ T7554] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.230639][ T7554] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.237958][ T7554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.246636][ T7554] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.253873][ T7554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.471586][ T7554] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 259.569889][ T7566] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 259.578445][ T7566] overlayfs: missing 'lowerdir' [ 260.494572][ T5851] Bluetooth: hci0: command 0x041b tx timeout [ 260.962793][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.969378][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.181181][ T7531] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 261.221607][ T7531] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 261.805926][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 261.966334][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 261.975396][ T24] usb 6-1: no configurations [ 261.985870][ T24] usb 6-1: can't read configurations, error -22 [ 262.135958][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 262.404433][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 262.772987][ T24] usb 6-1: no configurations [ 262.779558][ T24] usb 6-1: can't read configurations, error -22 [ 262.798351][ T24] usb usb6-port1: attempt power cycle [ 263.135961][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 263.180797][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 263.200597][ T24] usb 6-1: no configurations [ 263.205261][ T24] usb 6-1: can't read configurations, error -22 [ 263.399012][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 263.476727][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 263.487001][ T24] usb 6-1: no configurations [ 263.491774][ T24] usb 6-1: can't read configurations, error -22 [ 264.446894][ T24] usb usb6-port1: unable to enumerate USB device [ 265.259462][ T7629] ptrace attach of "./syz-executor exec"[6324] was attempted by " [ 265.536004][ T7631] FAULT_INJECTION: forcing a failure. [ 265.536004][ T7631] name failslab, interval 1, probability 0, space 0, times 0 [ 265.627981][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.647525][ T7631] CPU: 0 UID: 0 PID: 7631 Comm: syz.2.382 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 265.647554][ T7631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 265.647567][ T7631] Call Trace: [ 265.647576][ T7631] [ 265.647585][ T7631] dump_stack_lvl+0x189/0x250 [ 265.647616][ T7631] ? __pfx____ratelimit+0x10/0x10 [ 265.647641][ T7631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.647666][ T7631] ? __pfx__printk+0x10/0x10 [ 265.647712][ T7631] should_fail_ex+0x414/0x560 [ 265.647741][ T7631] should_failslab+0xa8/0x100 [ 265.647767][ T7631] __kmalloc_cache_noprof+0x70/0x3d0 [ 265.647789][ T7631] ? report_access+0xd4/0x540 [ 265.647816][ T7631] report_access+0xd4/0x540 [ 265.647839][ T7631] ? yama_ptrace_access_check+0x7a/0xb20 [ 265.647876][ T7631] yama_ptrace_access_check+0x8b4/0xb20 [ 265.647904][ T7631] ? yama_ptrace_access_check+0x7a/0xb20 [ 265.647929][ T7631] security_ptrace_access_check+0xe5/0x290 [ 265.647961][ T7631] ptrace_attach+0x1eb/0x850 [ 265.647986][ T7631] ? find_get_task_by_vpid+0x1d/0x290 [ 265.648022][ T7631] __se_sys_ptrace+0x1bc/0x400 [ 265.648048][ T7631] ? __pfx_mem_cgroup_handle_over_high+0x10/0x10 [ 265.648083][ T7631] ? __pfx___se_sys_ptrace+0x10/0x10 [ 265.648116][ T7631] ? do_syscall_64+0xbe/0x3b0 [ 265.648144][ T7631] do_syscall_64+0xfa/0x3b0 [ 265.648167][ T7631] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.648191][ T7631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.648212][ T7631] ? clear_bhb_loop+0x60/0xb0 [ 265.648239][ T7631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.648261][ T7631] RIP: 0033:0x7f5deab8e9a9 [ 265.648280][ T7631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.648298][ T7631] RSP: 002b:00007f5deba86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 265.648321][ T7631] RAX: ffffffffffffffda RBX: 00007f5deadb6160 RCX: 00007f5deab8e9a9 [ 265.648337][ T7631] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000010 [ 265.648350][ T7631] RBP: 00007f5deba86090 R08: 0000000000000000 R09: 0000000000000000 [ 265.648363][ T7631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.648376][ T7631] R13: 0000000000000000 R14: 00007f5deadb6160 R15: 00007ffc9a483fe8 [ 265.648410][ T7631] [ 265.884793][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.576004][ T7641] ptrace attach of "./syz-executor exec"[6883] was attempted by " [ 266.716092][ T5844] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 266.956821][ T5844] usb 3-1: device descriptor read/64, error -71 [ 267.008946][ T7646] ptrace attach of "./syz-executor exec"[5840] was attempted by " [ 267.235838][ T5844] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 267.917751][ T5844] usb 3-1: device descriptor read/64, error -71 [ 268.036429][ T5844] usb usb3-port1: attempt power cycle [ 268.406327][ T5844] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 268.447437][ T5844] usb 3-1: device descriptor read/8, error -71 [ 268.496070][ T5937] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 268.711776][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 268.727417][ T5844] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 268.798182][ T5937] usb 5-1: no configurations [ 268.806795][ T5937] usb 5-1: can't read configurations, error -22 [ 268.832099][ T5844] usb 3-1: device descriptor read/8, error -71 [ 268.983332][ T5844] usb usb3-port1: unable to enumerate USB device [ 269.176039][ T5937] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 269.219130][ T7666] wireguard0: entered promiscuous mode [ 269.224683][ T7666] wireguard0: entered allmulticast mode [ 269.386783][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 269.401582][ T5937] usb 5-1: no configurations [ 269.411388][ T5937] usb 5-1: can't read configurations, error -22 [ 269.423409][ T5937] usb usb5-port1: attempt power cycle [ 269.838104][ T7689] FAULT_INJECTION: forcing a failure. [ 269.838104][ T7689] name failslab, interval 1, probability 0, space 0, times 0 [ 269.851010][ T7689] CPU: 1 UID: 0 PID: 7689 Comm: syz.3.397 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 269.851038][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.851051][ T7689] Call Trace: [ 269.851063][ T7689] [ 269.851072][ T7689] dump_stack_lvl+0x189/0x250 [ 269.851102][ T7689] ? __pfx____ratelimit+0x10/0x10 [ 269.851126][ T7689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.851150][ T7689] ? __pfx__printk+0x10/0x10 [ 269.851185][ T7689] ? __pfx___might_resched+0x10/0x10 [ 269.851207][ T7689] ? fs_reclaim_acquire+0x7d/0x100 [ 269.851239][ T7689] should_fail_ex+0x414/0x560 [ 269.851267][ T7689] should_failslab+0xa8/0x100 [ 269.851292][ T7689] __kmalloc_cache_noprof+0x70/0x3d0 [ 269.851314][ T7689] ? kstrdup_quotable_cmdline+0x59/0x390 [ 269.851341][ T7689] kstrdup_quotable_cmdline+0x59/0x390 [ 269.851369][ T7689] __report_access+0x4c/0x390 [ 269.851390][ T7689] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.851410][ T7689] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.851437][ T7689] task_work_run+0x1d1/0x260 [ 269.851472][ T7689] ? __pfx_task_work_run+0x10/0x10 [ 269.851517][ T7689] ? exit_to_user_mode_loop+0x40/0x110 [ 269.851543][ T7689] exit_to_user_mode_loop+0xec/0x110 [ 269.851565][ T7689] do_syscall_64+0x2bd/0x3b0 [ 269.851592][ T7689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.851613][ T7689] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 269.851634][ T7689] ? clear_bhb_loop+0x60/0xb0 [ 269.851660][ T7689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.851751][ T7689] RIP: 0033:0x7fc69e78e9a9 [ 269.851781][ T7689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.851800][ T7689] RSP: 002b:00007fc69f582038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 269.851823][ T7689] RAX: ffffffffffffffff RBX: 00007fc69e9b6160 RCX: 00007fc69e78e9a9 [ 269.851840][ T7689] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000010 [ 269.851853][ T7689] RBP: 00007fc69f582090 R08: 0000000000000000 R09: 0000000000000000 [ 269.851866][ T7689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.851879][ T7689] R13: 0000000000000000 R14: 00007fc69e9b6160 R15: 00007ffc23eaeb68 [ 269.851913][ T7689] [ 269.854827][ T7689] ptrace attach of "(null)"[5842] was attempted by " [ 270.212295][ T5937] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 270.305011][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.307505][ T5844] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 270.308886][ T5910] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 270.365732][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 270.367442][ T5937] usb 5-1: no configurations [ 270.367465][ T5937] usb 5-1: can't read configurations, error -22 [ 270.525937][ T5937] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 270.559505][ T5910] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 270.587955][ T5844] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.603988][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.615978][ T5844] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 270.649450][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.649798][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 270.718780][ T5910] usb 6-1: config 0 descriptor?? [ 270.751533][ T5844] usb 2-1: config 0 descriptor?? [ 270.751869][ T5937] usb 5-1: no configurations [ 270.812643][ T5937] usb 5-1: can't read configurations, error -22 [ 270.865954][ T5844] pwc: Askey VC010 type 2 USB webcam detected. [ 270.866532][ T5937] usb usb5-port1: unable to enumerate USB device [ 271.163200][ T7692] can0: slcan on ttyS3. [ 271.235952][ T5844] pwc: recv_control_msg error -32 req 02 val 2b00 [ 271.276448][ T7692] can0 (unregistered): slcan off ttyS3. [ 271.411711][ T5910] pegasus 6-1:0.0: probe with driver pegasus failed with error -32 [ 271.624599][ T7680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.649894][ T10] usb 6-1: USB disconnect, device number 17 [ 271.658794][ T7680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.675919][ T5844] pwc: recv_control_msg error -71 req 02 val 2c00 [ 272.686499][ T5844] pwc: recv_control_msg error -71 req 04 val 1000 [ 272.706621][ T5844] pwc: recv_control_msg error -71 req 04 val 1300 [ 272.728420][ T5844] pwc: recv_control_msg error -71 req 04 val 1400 [ 272.755307][ T5844] pwc: recv_control_msg error -71 req 02 val 2000 [ 272.939771][ T5844] pwc: recv_control_msg error -71 req 02 val 2100 [ 273.306174][ T5844] pwc: recv_control_msg error -71 req 04 val 1500 [ 273.356725][ T5844] pwc: recv_control_msg error -71 req 02 val 2500 [ 273.376134][ T5844] pwc: recv_control_msg error -71 req 02 val 2400 [ 273.399534][ T5844] pwc: recv_control_msg error -71 req 02 val 2600 [ 273.418668][ T5844] pwc: recv_control_msg error -71 req 02 val 2900 [ 273.455684][ T5844] pwc: recv_control_msg error -71 req 02 val 2800 [ 273.527385][ T5844] pwc: recv_control_msg error -71 req 04 val 1100 [ 273.549445][ T5844] pwc: recv_control_msg error -71 req 04 val 1200 [ 273.629438][ T5844] pwc: Registered as video103. [ 273.638382][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 273.644331][ T5844] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 273.721213][ T5844] usb 2-1: USB disconnect, device number 15 [ 273.845861][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 273.984871][ T9] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid wMaxPacketSize 0 [ 273.996031][ T9] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 0 [ 274.271483][ T9] usb 5-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 274.713103][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 275.011754][ T10] IPVS: starting estimator thread 0... [ 275.011926][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.217105][ T7739] IPVS: using max 22 ests per chain, 52800 per kthread [ 275.305549][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.345996][ T9] usb 5-1: Product: syz [ 275.350258][ T9] usb 5-1: Manufacturer: syz [ 275.385396][ T9] usb 5-1: SerialNumber: syz [ 275.397734][ T30] audit: type=1326 audit(1753955448.706:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7743 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69e78e9a9 code=0x7fc00000 [ 275.430064][ T7723] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 275.465345][ T30] audit: type=1326 audit(1753955448.716:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7743 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc69e78e9a9 code=0x7fc00000 [ 275.586003][ T5924] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 275.735897][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 275.751625][ T5924] usb 3-1: no configurations [ 275.773063][ T5924] usb 3-1: can't read configurations, error -22 [ 275.853024][ T7723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.876379][ T7723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.912550][ T7723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.941602][ T5924] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 275.960632][ T7723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.972528][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 276.089089][ T7765] ptrace attach of "./syz-executor exec"[5842] was attempted by " [ 276.780149][ T7723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.956465][ T7723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.966607][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 277.330834][ T5924] usb 3-1: no configurations [ 277.336277][ T5924] usb 3-1: can't read configurations, error -22 [ 277.343119][ T5924] usb usb3-port1: attempt power cycle [ 277.419346][ T7723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.431557][ T7723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.447371][ T5935] usb 5-1: USB disconnect, device number 16 [ 277.532965][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.420'. [ 277.759175][ T5924] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 277.957165][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 278.086317][ T5924] usb 3-1: no configurations [ 278.091007][ T5924] usb 3-1: can't read configurations, error -22 [ 278.235991][ T5924] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 278.286546][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 278.366671][ T5924] usb 3-1: device descriptor read/all, error -71 [ 278.395520][ T5924] usb usb3-port1: unable to enumerate USB device [ 278.885918][ T5924] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 281.515187][ T7803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.429'. [ 281.975867][ T5924] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 282.071848][ T7810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.235885][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 282.266165][ T7810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.275919][ T5924] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 282.365918][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.405951][ T5935] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 282.454597][ T5924] pvrusb2: Hardware description: Terratec Grabster AV400 [ 282.492775][ T5924] pvrusb2: ********** [ 282.513089][ T5924] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 282.553984][ T5924] pvrusb2: Important functionality might not be entirely working. [ 282.563871][ T5935] usb 5-1: device descriptor read/64, error -71 [ 282.584043][ T5924] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 282.617253][ T5924] pvrusb2: ********** [ 282.667862][ T2342] pvrusb2: Invalid write control endpoint [ 282.805978][ T5935] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 282.871956][ T7801] pvrusb2: Invalid write control endpoint [ 282.891719][ T5924] usb 3-1: USB disconnect, device number 19 [ 283.291297][ T2342] pvrusb2: Invalid write control endpoint [ 283.388637][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 283.459655][ T7827] comedi comedi0: mpc624: I/O port conflict (0xee,16) [ 283.606017][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 283.645563][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 283.692933][ T2342] pvrusb2: Device being rendered inoperable [ 283.737814][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 283.760320][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 283.820553][ T2342] pvrusb2: Attached sub-driver cx25840 [ 283.870076][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 283.881585][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 284.244822][ T7841] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 284.251807][ T7841] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 284.327080][ T7841] vhci_hcd vhci_hcd.0: Device attached [ 284.686115][ T5170] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 284.735920][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 285.040949][ T7841] team0 (unregistering): Port device team_slave_0 removed [ 285.053825][ T7841] team0 (unregistering): Port device team_slave_1 removed [ 285.616020][ T7844] vhci_hcd: connection reset by peer [ 285.624244][ T64] vhci_hcd: stop threads [ 285.635316][ T64] vhci_hcd: release socket [ 285.641562][ T64] vhci_hcd: disconnect device [ 285.741074][ T7854] delete_channel: no stack [ 286.465848][ T5924] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 287.115853][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 287.131344][ T5924] usb 2-1: config 32 has an invalid interface number: 212 but max is 0 [ 287.159028][ T5924] usb 2-1: config 32 has no interface number 0 [ 287.179349][ T5924] usb 2-1: config 32 interface 212 altsetting 0 endpoint 0xC has an invalid bInterval 129, changing to 11 [ 287.224520][ T5924] usb 2-1: New USB device found, idVendor=19d2, idProduct=ff7e, bcdDevice=cb.8b [ 287.246062][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.278010][ T5924] option 2-1:32.212: GSM modem (1-port) converter detected [ 287.305673][ T7877] netlink: 32 bytes leftover after parsing attributes in process `syz.4.447'. [ 287.481284][ T24] usb 2-1: USB disconnect, device number 16 [ 287.499860][ T24] option 2-1:32.212: device disconnected [ 287.895919][ T5924] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 288.078185][ T5924] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 288.103728][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.160904][ T5924] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 288.188561][ T5924] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 288.212296][ T5924] usb 5-1: Manufacturer: syz [ 288.233155][ T5924] usb 5-1: config 0 descriptor?? [ 288.416007][ T5924] rc_core: IR keymap rc-hauppauge not found [ 288.435331][ T5924] Registered IR keymap rc-empty [ 288.451033][ T5924] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 288.508358][ T5924] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 289.368665][ C0] igorplugusb 5-1:0.0: receive overflow invalid: 54 [ 289.824410][ T7904] netlink: 172 bytes leftover after parsing attributes in process `syz.4.450'. [ 289.845271][ T7904] netlink: 172 bytes leftover after parsing attributes in process `syz.4.450'. [ 289.905995][ T5170] vhci_hcd: vhci_device speed not set [ 290.616221][ T5924] usb 5-1: USB disconnect, device number 19 [ 291.039258][ T7926] netlink: 32 bytes leftover after parsing attributes in process `syz.1.460'. [ 291.439986][ T7939] netlink: 'syz.2.463': attribute type 20 has an invalid length. [ 293.295100][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.466'. [ 293.768948][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'. [ 293.794233][ T7956] netlink: 100 bytes leftover after parsing attributes in process `syz.2.468'. [ 294.591797][ T7966] netlink: 32 bytes leftover after parsing attributes in process `syz.5.471'. [ 295.045039][ T7980] loop2: detected capacity change from 0 to 7 [ 295.065875][ T5924] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 295.092801][ T7980] Dev loop2: unable to read RDB block 7 [ 295.105967][ T7980] loop2: unable to read partition table [ 295.126643][ T7980] loop2: partition table beyond EOD, truncated [ 295.147414][ T7980] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 295.242272][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.265916][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.292780][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 295.333717][ T5924] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 295.353165][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 295.383600][ T5924] usb 2-1: Product: syz [ 295.399706][ T5924] usb 2-1: config 0 descriptor?? [ 295.717334][ T7989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.800374][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.478'. [ 295.819206][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.478'. [ 295.863047][ T5924] waltop 0003:172F:0037.0006: unknown main item tag 0x0 [ 295.875547][ T5924] waltop 0003:172F:0037.0006: unknown main item tag 0x0 [ 295.896397][ T5924] waltop 0003:172F:0037.0006: unknown main item tag 0x0 [ 295.925386][ T5924] waltop 0003:172F:0037.0006: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 296.195053][ T5924] usb 2-1: USB disconnect, device number 17 [ 299.160371][ T8007] block nbd0: shutting down sockets [ 299.490763][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'. [ 299.950515][ T8019] netlink: 32 bytes leftover after parsing attributes in process `syz.5.485'. [ 300.054626][ T8021] netlink: 'syz.1.486': attribute type 1 has an invalid length. [ 300.062639][ T8021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.486'. [ 300.070896][ T8023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.487'. [ 300.175911][ T30] audit: type=1326 audit(1753955473.486:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8020 comm="syz.1.486" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4e3f8e9a9 code=0x0 [ 300.247544][ T8034] netlink: 'syz.3.490': attribute type 21 has an invalid length. [ 300.275108][ T8034] netlink: 152 bytes leftover after parsing attributes in process `syz.3.490'. [ 300.330134][ T8034] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 300.414898][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.5.491'. [ 300.450215][ T8041] xt_CONNSECMARK: invalid mode: 0 [ 300.756382][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 301.086114][ T24] usb 5-1: device descriptor read/64, error -71 [ 301.198633][ T8047] tipc: Enabled bearer , priority 0 [ 301.326552][ T8049] syzkaller0: entered promiscuous mode [ 301.380611][ T8049] syzkaller0: entered allmulticast mode [ 301.406435][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 301.626211][ T24] usb 5-1: device descriptor read/64, error -71 [ 301.777884][ T24] usb usb5-port1: attempt power cycle [ 301.827568][ T8050] tipc: Resetting bearer [ 301.864825][ T8045] tipc: Resetting bearer [ 301.948534][ T8045] tipc: Disabling bearer [ 302.956045][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 302.967126][ T5953] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 303.034715][ T24] usb 5-1: device descriptor read/8, error -71 [ 303.198265][ T8066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.499'. [ 303.376139][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 303.384428][ T5953] usb 3-1: config 2 has an invalid interface number: 233 but max is 0 [ 303.402949][ T5953] usb 3-1: config 2 has no interface number 0 [ 303.409368][ T5953] usb 3-1: config 2 interface 233 has no altsetting 0 [ 303.429808][ T24] usb 5-1: device descriptor read/8, error -71 [ 303.449843][ T5953] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0109, bcdDevice=33.00 [ 303.459299][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.467391][ T5953] usb 3-1: Product: syz [ 303.471725][ T5953] usb 3-1: Manufacturer: syz [ 303.481854][ T5953] usb 3-1: SerialNumber: syz [ 303.737114][ T24] usb usb5-port1: unable to enumerate USB device [ 303.805192][ T8060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.498'. [ 304.449641][ T8075] tmpfs: Unknown parameter '0xffffffffffffffff1844674407370955161500000000000000000005' [ 304.608768][ T5953] ftdi_sio 3-1:2.233: FTDI USB Serial Device converter detected [ 304.637311][ T5953] usb 3-1: Detected FT232HP [ 304.643769][ T5953] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 304.652680][ T5953] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 304.662252][ T5953] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 304.678640][ T8078] program syz.5.502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.688605][ T5953] usb 3-1: USB disconnect, device number 20 [ 304.710501][ T5953] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 304.753171][ T5953] ftdi_sio 3-1:2.233: device disconnected [ 304.965169][ T8084] loop6: detected capacity change from 0 to 63 [ 304.985710][ T8084] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.006227][ T8084] Buffer I/O error on dev loop6, logical block 1, async page read [ 305.014271][ T8084] Buffer I/O error on dev loop6, logical block 2, async page read [ 305.043148][ T8084] Buffer I/O error on dev loop6, logical block 3, async page read [ 305.143902][ T8088] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.237170][ T8088] Buffer I/O error on dev loop6, logical block 1, async page read [ 305.316634][ T30] audit: type=1800 audit(1753955478.606:76): pid=8091 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.505" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 305.370023][ T8088] Buffer I/O error on dev loop6, logical block 2, async page read [ 305.400088][ T8088] Buffer I/O error on dev loop6, logical block 3, async page read [ 305.453115][ T8090] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.578363][ T8090] Buffer I/O error on dev loop6, logical block 1, async page read [ 307.370524][ T5953] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 308.316470][ T5953] usb 3-1: unable to get BOS descriptor or descriptor too short [ 308.350179][ T5953] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.380795][ T5953] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 308.423632][ T5953] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 308.446674][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.476102][ T5953] usb 3-1: Product: syz [ 308.480400][ T5953] usb 3-1: Manufacturer: syz [ 308.485161][ T5953] usb 3-1: SerialNumber: syz [ 308.656888][ T8112] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 308.666796][ T8112] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 308.683811][ T8112] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 308.695878][ T8112] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 308.704232][ T8112] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 308.711475][ T8112] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 308.720033][ T8112] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 308.727893][ T8112] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 308.739418][ T8112] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 308.753770][ T8112] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 308.765935][ T8112] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 308.773284][ T8112] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 308.788144][ T8112] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 308.802736][ T8112] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 308.938461][ T5953] usb 3-1: config 0 descriptor?? [ 309.182785][ T5953] usb 3-1: USB disconnect, device number 21 [ 309.269457][ T8115] netlink: 'syz.2.514': attribute type 1 has an invalid length. [ 309.291108][ T8115] netlink: 68 bytes leftover after parsing attributes in process `syz.2.514'. [ 309.505320][ T8118] xt_hashlimit: size too large, truncated to 1048576 [ 309.969322][ T8128] netlink: 56 bytes leftover after parsing attributes in process `syz.2.517'. [ 310.030086][ T8128] syz.2.517: attempt to access beyond end of device [ 310.030086][ T8128] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 310.065608][ T8128] (syz.2.517,8128,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 310.094475][ T8128] (syz.2.517,8128,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 310.184296][ T8128] (syz.2.517,8128,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 310.193286][ T8128] (syz.2.517,8128,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 310.416175][ T8137] netlink: 32 bytes leftover after parsing attributes in process `syz.4.510'. [ 311.642295][ T8150] vivid-003: disconnect [ 311.665530][ T8150] Bluetooth: MGMT ver 1.23 [ 311.997653][ T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 312.683662][ T8158] loop2: detected capacity change from 0 to 7 [ 312.786414][ T8145] vivid-003: reconnect [ 312.816704][ T8158] Dev loop2: unable to read RDB block 7 [ 312.822480][ T8158] loop2: unable to read partition table [ 312.879430][ T8158] loop2: partition table beyond EOD, truncated [ 312.910351][ T8158] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 312.929423][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.527'. [ 312.960886][ T8162] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.970285][ T8162] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.979160][ T43] usb 4-1: device descriptor read/64, error -71 [ 312.985475][ T8162] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.994293][ T8162] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.026237][ T8162] vxlan0: entered promiscuous mode [ 313.461140][ T8172] Invalid source name [ 313.465352][ T8172] UBIFS error (pid: 8172): cannot open "ubifs", error -22 [ 314.120234][ T43] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 314.340651][ T43] usb 4-1: device descriptor read/64, error -71 [ 314.596661][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 314.819626][ T43] usb usb4-port1: attempt power cycle [ 314.865487][ T9] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.883663][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 314.891238][ T9] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 314.913239][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.929969][ T9] usb 2-1: config 0 descriptor?? [ 315.005896][ T5170] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 316.059051][ T9] cherry 0003:046A:0023.0007: item fetching failed at offset 1/3 [ 316.109558][ T9] cherry 0003:046A:0023.0007: probe with driver cherry failed with error -22 [ 316.244887][ T5170] usb 3-1: device descriptor read/64, error -71 [ 316.276716][ T8195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.286434][ T8195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.419848][ T43] usb 2-1: USB disconnect, device number 18 [ 316.527583][ T5170] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 316.726395][ T9] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 316.849162][ T5170] usb 3-1: device descriptor read/64, error -71 [ 316.978578][ T5170] usb usb3-port1: attempt power cycle [ 317.221820][ T9] usb 4-1: config 8 has an invalid interface number: 250 but max is 0 [ 317.230364][ T9] usb 4-1: config 8 has no interface number 0 [ 317.241975][ T9] usb 4-1: config 8 interface 250 has no altsetting 0 [ 317.282958][ T9] usb 4-1: New USB device found, idVendor=0545, idProduct=8333, bcdDevice=8f.86 [ 317.292609][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.335478][ T9] usb 4-1: Product: syz [ 317.349591][ T9] usb 4-1: Manufacturer: syz [ 317.355742][ T9] usb 4-1: SerialNumber: syz [ 317.359821][ T30] audit: type=1326 audit(1753955490.676:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8214 comm="syz.1.541" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4e3f8e9a9 code=0x0 [ 317.461419][ T30] audit: type=1326 audit(1753955490.676:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8214 comm="syz.1.541" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4e3f8e9a9 code=0x0 [ 317.587625][ T8223] sp0: Synchronizing with TNC [ 317.649557][ T9] gspca_main: tv8532-2.14.0 probing 0545:8333 [ 317.666648][ T5170] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 317.703239][ T9] usb 4-1: USB disconnect, device number 16 [ 317.806087][ T43] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 317.813923][ T5170] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 317.845886][ T5924] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 317.853735][ T5170] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.868851][ T5170] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.880042][ T5170] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 317.892221][ T5170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 317.901450][ T5170] usb 3-1: SerialNumber: syz [ 318.006154][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 318.023797][ T5924] usb 5-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 318.038539][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.049433][ T5924] usb 5-1: Product: syz [ 318.054097][ T5924] usb 5-1: Manufacturer: syz [ 318.064627][ T5924] usb 5-1: SerialNumber: syz [ 318.075576][ T5924] usb 5-1: config 0 descriptor?? [ 318.092200][ T5924] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 318.103967][ T5924] dvb-usb: bulk message failed: -22 (3/0) [ 318.127467][ T8224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.143640][ T8224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.152094][ T5924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 318.172280][ T8224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.184586][ T5924] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle) [ 318.200455][ T8224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.209317][ T5924] usb 5-1: media controller created [ 318.225397][ T8224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.261260][ T8224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.300744][ T8224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.339795][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 318.364623][ T8224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.376140][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 318.383759][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 318.393886][ T43] usb 2-1: config 4 interface 0 has no altsetting 0 [ 318.400346][ T8224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.407569][ T43] usb 2-1: string descriptor 0 read error: -22 [ 318.415656][ T43] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 318.425458][ T43] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 318.448771][ T43] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 318.460297][ T5924] dvb-usb: bulk message failed: -22 (6/0) [ 318.469916][ T43] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 318.484370][ T5924] dvb-usb: bulk message failed: -22 (6/0) [ 318.490710][ T8224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.497633][ T43] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 318.519701][ T5924] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle' [ 318.523182][ T43] usb 2-1: media controller created [ 318.542213][ T5924] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 318.581419][ T5924] dvb-usb: schedule remote query interval to 150 msecs. [ 318.594839][ T5924] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 318.604088][ T5170] usb 3-1: 0:2 : does not exist [ 318.614524][ T5924] usb 5-1: USB disconnect, device number 24 [ 318.650192][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 318.670000][ T5170] usb 3-1: USB disconnect, device number 25 [ 318.732181][ T43] zl10353_read_register: readreg error (reg=127, ret==0) [ 318.741551][ T5924] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 318.794359][ T8237] warning: `syz.3.547' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 318.818379][ T43] usb 2-1: USB disconnect, device number 19 [ 319.135425][ T5953] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 319.155448][ T8246] netlink: 224 bytes leftover after parsing attributes in process `syz.5.549'. [ 319.475881][ T5953] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 319.487166][ T5953] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 319.529452][ T5953] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 319.540834][ T5953] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 319.569486][ T5953] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 319.627558][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.877118][ T5953] ath6kl: Failed to submit usb control message: -110 [ 320.902201][ T5953] ath6kl: unable to send the bmi data to the device: -110 [ 320.930721][ T5953] ath6kl: Unable to send get target info: -110 [ 320.934003][ T8266] tipc: Started in network mode [ 320.942237][ T8266] tipc: Node identity ca70d32bb7d2, cluster identity 4711 [ 320.966187][ T5953] ath6kl: Failed to init ath6kl core: -110 [ 320.974521][ T8266] tipc: Enabled bearer , priority 0 [ 320.984223][ T5953] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 320.991714][ T8267] syzkaller0: entered promiscuous mode [ 321.017417][ T8267] syzkaller0: entered allmulticast mode [ 321.070968][ T8262] tipc: Resetting bearer [ 321.109407][ T8262] tipc: Disabling bearer [ 321.711865][ T8275] veth1: entered promiscuous mode [ 321.828047][ T43] usb 4-1: USB disconnect, device number 17 [ 321.926838][ T8282] netlink: 24 bytes leftover after parsing attributes in process `syz.3.560'. [ 322.434361][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.450614][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.182741][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'. [ 323.655897][ T5924] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 323.970122][ T5924] usb 6-1: Using ep0 maxpacket: 16 [ 324.015917][ T5170] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 324.021487][ T5924] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 324.070805][ T5924] usb 6-1: config 1 has no interface number 0 [ 324.088428][ T5924] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 324.136222][ T5924] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 324.165330][ T5924] usb 6-1: config 1 interface 105 has no altsetting 0 [ 324.178209][ T5170] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 324.179148][ T5924] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 324.211133][ T5170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.224783][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.237252][ T5924] usb 6-1: Product: syz [ 324.255936][ T5924] usb 6-1: Manufacturer: syz [ 324.273421][ T5924] usb 6-1: SerialNumber: syz [ 324.281625][ T5170] usb 2-1: config 0 descriptor?? [ 324.309679][ T8298] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 324.329943][ T5170] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 324.349660][ T8298] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 324.556609][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'. [ 324.646761][ T8303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'. [ 324.877526][ T5170] gspca_sunplus: reg_w_riv err -110 [ 324.887684][ T8298] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 324.933559][ T5170] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 324.954673][ T8298] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 325.417214][ T5924] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 325.434983][ T5924] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 325.446451][ T5924] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 325.636602][ T5924] aqc111 6-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 26:6a:d4:21:2a:22 [ 325.653606][ T5924] usb 6-1: USB disconnect, device number 18 [ 325.673189][ T5924] aqc111 6-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 325.781427][ T5924] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 325.799824][ T5924] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 325.834704][ T5924] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 326.545178][ T8325] loop2: detected capacity change from 0 to 7 [ 326.555113][ T8325] Dev loop2: unable to read RDB block 7 [ 326.560944][ T8325] loop2: unable to read partition table [ 326.567476][ T8325] loop2: partition table beyond EOD, truncated [ 326.573912][ T8325] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 326.590961][ T8327] fuse: Unknown parameter 'PE*NTç§F¥èÚ†6oÞz' [ 326.892288][ T43] usb 2-1: USB disconnect, device number 20 [ 326.923222][ T24] kernel write not supported for file /input/mice (pid: 24 comm: kworker/1:0) [ 327.686030][ T5924] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 328.630091][ T5924] usb 6-1: config 0 has an invalid interface number: 229 but max is 0 [ 328.641609][ T5924] usb 6-1: config 0 has no interface number 0 [ 328.651627][ T5924] usb 6-1: config 0 interface 229 altsetting 0 endpoint 0x85 has invalid maxpacket 1023, setting to 64 [ 328.685849][ T5924] usb 6-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 328.787772][ T5924] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 328.804551][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.827302][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 329.311155][ T5924] usb 6-1: Product: syz [ 329.315639][ T5924] usb 6-1: Manufacturer: syz [ 329.335933][ T5924] usb 6-1: SerialNumber: syz [ 329.376070][ T43] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 329.376621][ T5924] usb 6-1: config 0 descriptor?? [ 329.443194][ T8341] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 329.549433][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 329.573870][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.615948][ T43] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 329.640850][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.816610][ T5924] usb 6-1: USB disconnect, device number 19 [ 329.942796][ T43] usb 2-1: config 0 descriptor?? [ 330.457529][ T8364] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 330.469588][ T8364] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 330.479153][ T8364] CPU: 1 UID: 0 PID: 8364 Comm: modprobe Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 330.489006][ T8364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 330.499264][ T8364] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 330.505132][ T8364] Code: 01 48 c7 c7 00 2b 98 8b be 4b 03 00 00 48 c7 c2 40 2b 98 8b e8 54 b8 75 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 b4 60 f7 ff 49 8b 07 a8 03 75 62 [ 330.524761][ T8364] RSP: 0018:ffffc9000c11f6f8 EFLAGS: 00010206 [ 330.530852][ T8364] RAX: 000000001fffe000 RBX: ffffffff8228abc9 RCX: dfb87216e4bf5000 [ 330.538843][ T8364] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffffffff8be1b9e0 [ 330.546850][ T8364] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff8228abc9 [ 330.554850][ T8364] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: dffffc0000000000 [ 330.562844][ T8364] R13: ffff8880b873b3c0 R14: 0000000000000001 R15: 00000000ffff0000 [ 330.570834][ T8364] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 330.579780][ T8364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.586394][ T8364] CR2: 00007fae4314a6b0 CR3: 00000000315f6000 CR4: 00000000003526f0 [ 330.594401][ T8364] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 330.602409][ T8364] DR3: 00000000000032e7 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 330.610401][ T8364] Call Trace: [ 330.613696][ T8364] [ 330.616643][ T8364] refill_obj_stock+0x254/0x850 [ 330.621530][ T8364] ? refill_obj_stock+0x116/0x850 [ 330.626591][ T8364] __memcg_slab_free_hook+0x127/0x3d0 [ 330.631996][ T8364] ? unlink_anon_vmas+0x614/0x670 [ 330.637044][ T8364] kmem_cache_free+0x223/0x400 [ 330.642000][ T8364] unlink_anon_vmas+0x614/0x670 [ 330.646889][ T8364] free_pgtables+0x7bf/0xaf0 [ 330.651505][ T8364] ? __pfx_free_pgtables+0x10/0x10 [ 330.656646][ T8364] ? __pfx_down_write+0x10/0x10 [ 330.661522][ T8364] ? __mas_set_range+0x12f/0x3c0 [ 330.666486][ T8364] exit_mmap+0x444/0xb50 [ 330.670746][ T8364] ? uprobe_clear_state+0x20f/0x290 [ 330.675973][ T8364] ? __pfx_exit_mmap+0x10/0x10 [ 330.680756][ T8364] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 330.686413][ T8364] ? __pfx_exit_aio+0x10/0x10 [ 330.691111][ T8364] ? uprobe_clear_state+0x274/0x290 [ 330.696326][ T8364] ? mm_update_next_owner+0xa7/0x870 [ 330.701634][ T8364] __mmput+0x118/0x410 [ 330.705726][ T8364] exit_mm+0x1da/0x2c0 [ 330.709827][ T8364] ? __pfx_exit_mm+0x10/0x10 [ 330.714435][ T8364] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 330.720040][ T8364] ? rcu_is_watching+0x15/0xb0 [ 330.725002][ T8364] do_exit+0x648/0x22e0 [ 330.729276][ T8364] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 330.734677][ T8364] ? __pfx_do_exit+0x10/0x10 [ 330.739385][ T8364] ? _raw_spin_unlock_irq+0x23/0x50 [ 330.744631][ T8364] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.749851][ T8364] do_group_exit+0x21c/0x2d0 [ 330.754471][ T8364] __x64_sys_exit_group+0x3f/0x40 [ 330.759521][ T8364] x64_sys_call+0x21ba/0x21c0 [ 330.764226][ T8364] do_syscall_64+0xfa/0x3b0 [ 330.768761][ T8364] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.773995][ T8364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.780098][ T8364] ? clear_bhb_loop+0x60/0xb0 [ 330.784808][ T8364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.790721][ T8364] RIP: 0033:0x7fae4314a6c5 [ 330.795159][ T8364] Code: Unable to access opcode bytes at 0x7fae4314a69b. [ 330.802211][ T8364] RSP: 002b:00007ffcb84bc6f8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 330.810657][ T8364] RAX: ffffffffffffffda RBX: 00007fae4324bfe8 RCX: 00007fae4314a6c5 [ 330.818670][ T8364] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 330.826744][ T8364] RBP: 0000000000000001 R08: 00007ffcb84bc688 R09: 0000000000000000 [ 330.834735][ T8364] R10: 00007ffcb84bc520 R11: 0000000000000202 R12: 0000000000000000 [ 330.842750][ T8364] R13: 0000000000000001 R14: 00007fae4324a680 R15: 00007fae4324c000 [ 330.850764][ T8364] [ 330.853799][ T8364] Modules linked in: [ 330.858532][ T8364] ---[ end trace 0000000000000000 ]--- [ 330.864300][ T8364] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 330.870230][ T8364] Code: 01 48 c7 c7 00 2b 98 8b be 4b 03 00 00 48 c7 c2 40 2b 98 8b e8 54 b8 75 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 b4 60 f7 ff 49 8b 07 a8 03 75 62 [ 330.890274][ T8364] RSP: 0018:ffffc9000c11f6f8 EFLAGS: 00010206 [ 330.896495][ T8364] RAX: 000000001fffe000 RBX: ffffffff8228abc9 RCX: dfb87216e4bf5000 [ 330.904520][ T8364] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffffffff8be1b9e0 [ 330.912585][ T8364] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff8228abc9 [ 330.920726][ T8364] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: dffffc0000000000 [ 330.928776][ T8364] R13: ffff8880b873b3c0 R14: 0000000000000001 R15: 00000000ffff0000 [ 330.936815][ T8364] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 330.945953][ T8364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.952580][ T8364] CR2: 00007fae4314a6b0 CR3: 00000000315f6000 CR4: 00000000003526f0 [ 330.960655][ T8364] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 330.968699][ T8364] DR3: 00000000000032e7 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 330.976770][ T8364] Kernel panic - not syncing: Fatal exception [ 330.983205][ T8364] Kernel Offset: disabled [ 330.987547][ T8364] Rebooting in 86400 seconds..