last executing test programs: 6m34.187448469s ago: executing program 1 (id=3125): getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e24, @empty}}, [0x3, 0x2, 0x4, 0x6, 0x7fffffff, 0x6, 0x3ff, 0x4, 0x0, 0x6, 0x7, 0x6, 0x4, 0x1, 0x100000001]}, &(0x7f00000001c0)=0xfc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000004c0)={r0, 0x5ec, 0x0, 0x3, 0x1e1}, &(0x7f0000000500)=0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty20(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x8000, 0x0) acct(&(0x7f0000000180)='./file0/file0\x00') socket$netlink(0x10, 0x3, 0x15) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x421, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x5}]}}}]}, 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000280)) 6m32.351502593s ago: executing program 1 (id=3128): openat$adsp1(0xffffffffffffff9c, 0x0, 0x202080, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$dri(0x0, 0x1ff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write(0xffffffffffffffff, &(0x7f0000000740)="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", 0x1e3) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) r6 = openat$cgroup_devices(r4, &(0x7f0000000500)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000000)=ANY=[], 0x6b) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x7ff, 0x9}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000080)={0x3, 0x0, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000002000000"], 0x0, 0x1a}, 0x28) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES16=r3, @ANYRESHEX=r6, @ANYRES8], 0x14}}, 0xc004) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x82c02) ioctl$BLKPG(r8, 0x1269, &(0x7f0000000140)={0x2, 0x0, 0x98, &(0x7f0000000080)={0x8000000000000000, 0xfffffffefffffffd, 0x13}}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0604250c"], 0x9) 6m31.384399153s ago: executing program 1 (id=3131): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4004810) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x8000, 0x8}, {0x40000, 0xfffffffe}]}, 0x14, 0x1) socket$inet6(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x108c0, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4000000) read$FUSE(r2, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0xffe, 0x3, 0x1000, 0x3a, 0x0, 0x0, 0x7}, 0x75) r6 = dup2(r5, r5) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xb0a3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0xffff, 0xfffffff3}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001000000000047000280050001000100000006000640000000000600"], 0xe4}}, 0x0) 6m28.594560285s ago: executing program 1 (id=3136): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1c8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') futex(0x0, 0x3, 0x0, 0x0, 0x0, 0x2) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000002c0)={0x28, 0x2, 0x0, {0x2000000002, 0x9, 0x3}}, 0x28) read$FUSE(r1, &(0x7f0000002440)={0x2020}, 0x2020) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000140)={0x1, 0x2, 0x12}) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000150001000000001a000000000b000000080002000ab13d"], 0x1c}}, 0x20000080) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0182101, &(0x7f00000023c0)={0x0, 0x0}) ioprio_get$pid(0x2, r5) openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) connect$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x7b9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x87ff, 0x1}, 0xe) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x7d}, 0x2) 6m25.183860712s ago: executing program 1 (id=3142): socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="041c"], 0x8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @result={0xff, 0x6b79}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result={0xc92c}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x9, 0x0, 0x0, @time, {}, {0x0, 0x3}, @queue={0x81, {0x5}}}], 0x70) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0xf2, 0x4, 0x4, @empty, @empty, 0x8, 0x80, 0x4, 0x6}}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ipvlan0\x00', 0x7101}) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x10) close(r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1200}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000200)='befs\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000000)='./file0\x00', 0x20) 6m24.929252436s ago: executing program 1 (id=3143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, 0x0, 0x4000) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = msgget$private(0x0, 0x12) msgrcv(r6, &(0x7f0000000240)={0x0, ""/43}, 0x2f, 0x3, 0x2000) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40605414, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="98080264bc681dc8000000006e1e4678e90b44bb1a9e6157525f9ac577195f5f8cbb88b3c589c793e0223d6102296983ddf7d9743b3723f6a4b0859321b97fb731e3caba5207c2d1e9f02a17f76b8dfd7e7bd95f108b956258262947c99a222301facd19322af5627675ea0b15769a5fc3393eb51c54c676c64107865811d25ef77fa10a16895bc6072d76acf922d4461c7af855d21fbca598b8297af7c0985fcf9da12183a55ba499422202ae3e3cf3b47abd3429e5a7c9d8b841779a1a5564b16398d94461f9a4712ff8139b2ecc31e3013c5e", @ANYRES32=0x0, @ANYBLOB="04210000610000001c001280090001007866726d000000000c0002800800020001000000"], 0x3c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r8, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x40, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{'ac,'}]}) ptrace(0x10, r9) ptrace$poke(0x4, r9, &(0x7f00000011c0), 0xfffffffffffffffe) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m24.784521001s ago: executing program 32 (id=3143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, 0x0, 0x4000) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = msgget$private(0x0, 0x12) msgrcv(r6, &(0x7f0000000240)={0x0, ""/43}, 0x2f, 0x3, 0x2000) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40605414, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="98080264bc681dc8000000006e1e4678e90b44bb1a9e6157525f9ac577195f5f8cbb88b3c589c793e0223d6102296983ddf7d9743b3723f6a4b0859321b97fb731e3caba5207c2d1e9f02a17f76b8dfd7e7bd95f108b956258262947c99a222301facd19322af5627675ea0b15769a5fc3393eb51c54c676c64107865811d25ef77fa10a16895bc6072d76acf922d4461c7af855d21fbca598b8297af7c0985fcf9da12183a55ba499422202ae3e3cf3b47abd3429e5a7c9d8b841779a1a5564b16398d94461f9a4712ff8139b2ecc31e3013c5e", @ANYRES32=0x0, @ANYBLOB="04210000610000001c001280090001007866726d000000000c0002800800020001000000"], 0x3c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r8, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x40, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{'ac,'}]}) ptrace(0x10, r9) ptrace$poke(0x4, r9, &(0x7f00000011c0), 0xfffffffffffffffe) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m19.176201176s ago: executing program 3 (id=3541): ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x1, @win={{0x2}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40}}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x2) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f00000001c0)={0x980915, 0x8081, @name="6736516728a5678c18a4ec047f3f1fa52fe9a9987d0406b3a0c705c611b66f06"}) openat2$dir(0xffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x80000002, 0x543101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x23, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="050000005e001000430000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r4, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000019580)=@ethtool_regs={0x4, 0x5, 0xcf, "bde01fe834bd8fdd0e1751f6f55e8baa79303ab7a0725990f83199c4ddc7b161c32e5541ec3c16325d3a7cdd495f8ce766b51cb03138157f92f49bd86ab4c37b7fd712b4aac21daeef56a4d47f81b129f124495346dbd24c1e947c98e9da910c2e37aae4ad5fb91784ec7933e835797d4db4ead06a16b273e6a1e04b99c077acf59bae22559d1d932eef6b936495fa880509b3ef8eec801b2f8185ff7115608101b014448a5a5e41e80ac9dbea68b0a861a2571208d837b1b49a3a555b700cc3048a8fae84bf5f85b33fac9837e035"}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0700000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000040000000000000000000000000400000000000000"], 0xc4}}, 0x4c050) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000000014000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa0003000300"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0068050000800000"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000200)) 2m18.894211362s ago: executing program 3 (id=3544): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000180), 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x1}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x800000) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000056f000/0x2000)=nil, 0x2000, &(0x7f0000000300)='@**$.\x00') setpriority(0x1, r2, 0x8) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r6, 0x8000000000000003}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000002e00)={{0x8, 0x7, 0x3, 0x2, 'syz0\x00', 0x7b}, 0x0, [0x1, 0x200000a, 0x1000, 0x0, 0x1d1, 0x7fffffff, 0x5, 0x5, 0xbc0, 0x7, 0x15b, 0x7, 0x5944, 0x5, 0x7, 0x8004a7, 0x9, 0x5, 0xb, 0x3, 0x2c, 0x400, 0x2000040, 0x10000002, 0x7, 0x0, 0x2, 0x800, 0x3, 0x3, 0x4, 0x6, 0x6, 0xfff, 0x3ff, 0x1, 0x5, 0x3, 0x5, 0x6, 0x3, 0x78a, 0xbfff8007, 0x200000e, 0xe, 0x0, 0x2, 0x5, 0xe, 0x4, 0x9, 0x80000001, 0x400, 0x1ff, 0x9, 0xfffff647, 0x408, 0x4, 0x1, 0x9, 0x8, 0x9, 0x5, 0x8, 0x98, 0xbe, 0x1, 0xa, 0x7, 0x80000000, 0x81, 0x10001, 0x2, 0x80000001, 0x69e, 0xb, 0x7000000, 0x1, 0x8, 0x9, 0x7, 0x8, 0x1, 0x8, 0xfffffffd, 0xffff, 0x6, 0x8, 0x0, 0x4, 0xef, 0xff, 0x4, 0xffffffff, 0xf8a, 0x58a0, 0x1, 0x9, 0x895, 0x6, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0xe0b2, 0x9, 0xfffff561, 0x12, 0x3, 0x3, 0xfffffffa, 0x3, 0x2, 0x1, 0x2ba, 0x1, 0xe, 0x5, 0x8, 0x2, 0xee, 0x4, 0x1ff, 0x7, 0x2, 0x7, 0x6, 0xff]}) 2m16.889574661s ago: executing program 3 (id=3548): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}, {{&(0x7f00000084c0)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x2, 0x24040040) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000019200), 0xffffffffffffffff) getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, &(0x7f0000019280)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000019340)={'tunl0\x00', &(0x7f0000019500)={'gre0\x00', 0x0, 0x80, 0x700, 0xb7, 0x5, {{0x13, 0x4, 0x2, 0x20, 0x4c, 0x68, 0x0, 0x8, 0x4, 0x0, @local, @multicast2, {[@noop, @timestamp_prespec={0x44, 0x0, 0x90, 0x3, 0x6}, @lsrr={0x83, 0x27, 0x48, [@broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x42}, @broadcast, @local, @remote, @multicast2, @rand_addr=0x64010101, @loopback]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000019400)={'ip6tnl0\x00', &(0x7f0000019380)={'ip6_vti0\x00', 0x0, 0x4, 0x90, 0xe, 0x0, 0x40, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, 0x8, 0x7800, 0x3, 0xc}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000194c0)={'syztnl2\x00', &(0x7f0000019440)={'ip6tnl0\x00', 0x0, 0x2f, 0x88, 0x4, 0x2, 0x30, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x10, 0x40, 0x10, 0x5}}) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) clock_gettime(0x0, &(0x7f00000196c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x10) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="2002000000000000000000000000000085000000d0000000"], &(0x7f00000001c0)='GPL\x00', 0xc3b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000300)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r8 = open(&(0x7f0000000180)='./file1\x00', 0x48062, 0x110) fcntl$setlease(r8, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file1\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)) 2m13.064918684s ago: executing program 3 (id=3552): r0 = syz_open_dev$mouse(&(0x7f00000001c0), 0x2, 0x400000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x4) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8925, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r5, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r7 = creat(&(0x7f0000000040)='./file0\x00', 0x40) fadvise64(r7, 0xfff, 0x8, 0x2) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 2m11.61441025s ago: executing program 3 (id=3555): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0xf3, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x6c, 0x30, 0x200}, 0x6c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x10000, 0x1, 0x1de}, &(0x7f00000029c0)=0x0, &(0x7f0000000000)=0x0) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x8000001f) syz_io_uring_submit(r7, r8, &(0x7f0000001040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x1733, 0x6323, 0x20, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) 2m10.531156063s ago: executing program 3 (id=3557): socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x38, &(0x7f0000000340)=[@in6={0xa, 0x4e22, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, @in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0xffff}]}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000440)={r1, @in6={{0xa, 0x4e22, 0x4, @mcast1, 0x4}}}, &(0x7f0000000500)=0x84) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0xc25f86718fa98117}, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) msgctl$IPC_SET(0x0, 0x1, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000180)=""/186) bind$alg(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000240)=@sg0, r5, 0x0) 2m10.340281998s ago: executing program 33 (id=3557): socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x38, &(0x7f0000000340)=[@in6={0xa, 0x4e22, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, @in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0xffff}]}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000440)={r1, @in6={{0xa, 0x4e22, 0x4, @mcast1, 0x4}}}, &(0x7f0000000500)=0x84) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0xc25f86718fa98117}, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) msgctl$IPC_SET(0x0, 0x1, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000180)=""/186) bind$alg(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000240)=@sg0, r5, 0x0) 6.376757513s ago: executing program 5 (id=3987): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0xc3a01, 0x0) sendfile(r1, r0, &(0x7f0000002700)=0x1, 0x8) 6.320818074s ago: executing program 5 (id=3988): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0)) 5.411285246s ago: executing program 5 (id=3991): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000019140000001100"], 0xd8}}, 0x80) 5.341249771s ago: executing program 5 (id=3992): r0 = memfd_create(&(0x7f00000003c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc4\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\x0f\xf2 \xc4\x06\x9ew\xa2_\xb5g\xb5}\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0\xb7$\x17=P', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 5.280982611s ago: executing program 5 (id=3994): socket$key(0xf, 0x3, 0x2) r0 = getpid() r1 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r0, 0x0, 0x7fff, 'syz1\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x4014, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r6) 3.248069181s ago: executing program 4 (id=4015): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f84814000000da6a0602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x24044810) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) 3.048078963s ago: executing program 4 (id=4016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x30, 0x0, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}]}, 0x30}, 0x1, 0x0, 0x0, 0x48054}, 0xa000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000280)={0x20, 0x2, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4000084) 3.047432839s ago: executing program 4 (id=4018): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000000c0)=""/80) 3.047185944s ago: executing program 5 (id=4019): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x4) r0 = getpgid(0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) memfd_create(&(0x7f00000003c0)='%\x00\xae\xdb\xb8\x18\xc1\xecWbNO\xde^\xff\x19\x17QE{*X\xe3\xe2\x06\x00\x00\x00\xcc\xf6\xc0H\xa2\x83?\xe7\x89*\xf1\xc5b\v\xec\xe4\xb0\xa2\xc5\xee\x04\x98\xa9\xb9\xe5\x8c\xc3\x97B\xaa+\xf2o\xf6k\xcc\xf7\x057\x8d\xb1\xa0\x86\xe8\xda\x90\xc2\x1e\x15\x11\x92\x9d\xc1M\xe5@\v\x001\xae\x19$\xf8\x96\x81\xcbR\xae`\xd3\xf8_R~7\xf5\x1c\xc8\xf9\xe2z\x00<\xdc\x11\x89\xc9&f\x00\x00\x00\xe2\x83\xf1\x0eg\a\xec\xac\xa5\x94~v\x80P5\xf9/$', 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x3000)=nil) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x9, 0x6d, 0x5c, 0x40, 0x2304, 0x23e, 0xd769, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd9, 0x0, 0x0, 0x37, 0x10, 0xeb}}]}}]}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x0, 0x1, 0x5, 0x4010}, 0x20) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f00000000c0)=0x9b) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)={0x0, 0x0, 0x1, "ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0xfff5}], 0x1, 0x5, 0xb2) 2.960832546s ago: executing program 4 (id=4020): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$uinput_user_dev(r8, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x1, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x1403, 0xc23, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 2.570086406s ago: executing program 0 (id=4022): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x5) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) 2.468419145s ago: executing program 0 (id=4023): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x12cb, 0x8000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$usbfs(r0, &(0x7f00000000c0)=""/10, 0xa) 2.468239291s ago: executing program 0 (id=4024): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) getpeername(r0, 0x0, &(0x7f0000000000)) 1.550942454s ago: executing program 0 (id=4025): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f000000c2c0)=[0x0], 0x1}, 0x58) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$uinput_user_dev(r8, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x1, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x1403, 0xc23, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 1.351041135s ago: executing program 4 (id=4026): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket(0x10, 0x3, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = timerfd_create(0x8, 0x0) read(r2, &(0x7f00000000c0)=""/252, 0xfc) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c0000"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') socket(0x1e, 0x1, 0x0) r4 = syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r4, 0x48e9, 0x225e, 0x2, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r7, &(0x7f0000000200)={0x10, 0x17, 0xfffd, {0x7, './file0'}}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x33f, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000180)={0x1, 0x0, {0x1, 0x0, 0x4, 0xa092a5fe06e0bc84}}) socket$nl_route(0x10, 0x3, 0x0) 1.127412953s ago: executing program 2 (id=4028): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) 1.028561756s ago: executing program 4 (id=4029): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$uinput_user_dev(r8, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x1, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x1403, 0xc23, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 945.953541ms ago: executing program 2 (id=4030): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000480)="bc30a071d8bcb8794f5d8e0180b133b064874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7460bb11f031bf8ed23da02f7a291fcc59c4382ecb979d1e9222ca8d3a7e2648c5e054af06897fe19420e0ee84987b9e20acfc08b8a4618c112aefd613dbd48c61cb507202950f495e950d57865c710c27a83a7e48c7dff5b020fb5512d46e2dcff35ccfea812885e90eb3c6367fc31d216e65fc104041faa0c903976866a56f03fb9e1ddd75a1736f51b8d9be6c498b5473baf6cb7aa54700c91dc97e726b45", 0xcb, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) 880.978552ms ago: executing program 2 (id=4031): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, 0x0) 880.876549ms ago: executing program 2 (id=4032): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002e000000180001801400020067656e65766530"], 0x2c}}, 0x0) 807.283238ms ago: executing program 2 (id=4033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 649.088058ms ago: executing program 2 (id=4034): socket$inet_udplite(0x2, 0x2, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100)='H', 0x0}, 0x20) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000100), 0x6) munlockall() r3 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) syz_open_dev$evdev(&(0x7f0000000100), 0x68a4, 0x2080) r4 = dup(r3) mount(&(0x7f0000000180)=@sr0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x21008, &(0x7f0000000380)='0') write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe73) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2000000000000081, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 235.473µs ago: executing program 0 (id=4035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 0s ago: executing program 0 (id=4036): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000640)={&(0x7f0000000040)=[{0x1, 0xa001, 0x0, 0x0}, {0x4, 0x2801, 0x0, 0x0}], 0x2}) kernel console output (not intermixed with test programs): ¼é‰¯á˜”ᨽⲎí«å¦¬à°šé¤¬î›™ç‚’䖛㬕갴൨椯쥜헟鉺æ‡á⾧ì¡è®ä‰«á´•ê£Žãµ§ï¥ŠÛ¾ï¾¼ê‚ºî±“á‘· [ 2071.971424][T16764] usb 5-1: SerialNumber: Ð¥ [ 2072.119485][T26469] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2072.140926][T26469] 9pnet_virtio: no channels available for device syz [ 2072.470133][T26467] loop4: detected capacity change from 0 to 7 [ 2072.480043][T26467] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2072.483124][T26467] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2072.488505][T26477] netlink: 888 bytes leftover after parsing attributes in process `syz.2.3589'. [ 2072.494679][T26467] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2072.497118][T26467] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2072.546014][T22235] usb 46-1: device descriptor read/8, error -110 [ 2072.581299][T26467] loop4: p4 size 327680 extends beyond EOD, truncated [ 2072.676695][T26467] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2072.684149][T26467] loop4: p6 start 8192 is beyond EOD, truncated [ 2072.945635][T26484] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 2072.948399][T26484] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2072.952543][T26484] vhci_hcd vhci_hcd.0: Device attached [ 2072.958023][T22235] usb usb46-port1: attempt power cycle [ 2073.002815][T26487] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 2073.005196][T26487] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2073.017698][T26487] vhci_hcd vhci_hcd.0: Device attached [ 2073.116048][T22235] usb 46-1: SetAddress Request (24) to port 0 [ 2073.119634][T22235] usb 46-1: new SuperSpeed USB device number 24 using vhci_hcd [ 2073.497694][T26497] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 2073.500395][T26497] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2073.517497][T26497] vhci_hcd vhci_hcd.0: Device attached [ 2073.806104][T16113] usb 48-1: SetAddress Request (2) to port 0 [ 2073.808642][T16113] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2074.044792][T26500] overlay: ./file1 is not a directory [ 2074.160823][T26497] rdma_rxe: rxe_newlink: failed to add wg2 [ 2074.166273][T26500] netlink: 'syz.0.3591': attribute type 10 has an invalid length. [ 2074.170001][T26500] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3591'. [ 2074.219960][T26500] team0: Port device geneve0 added [ 2074.278063][T26485] vhci_hcd: connection closed [ 2074.278451][ T77] vhci_hcd: stop threads [ 2074.281810][ T77] vhci_hcd: release socket [ 2074.283458][ T77] vhci_hcd: disconnect device [ 2074.439955][T26488] vhci_hcd: connection reset by peer [ 2074.443284][T25546] vhci_hcd: stop threads [ 2074.447129][T25546] vhci_hcd: release socket [ 2074.453477][T25546] vhci_hcd: disconnect device [ 2074.723696][T26498] vhci_hcd: connection reset by peer [ 2074.725760][ T94] vhci_hcd: stop threads [ 2074.727226][ T94] vhci_hcd: release socket [ 2074.728643][ T94] vhci_hcd: disconnect device [ 2075.150804][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2075.153011][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2075.157002][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2075.159595][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2075.162218][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2075.165677][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2075.176419][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2075.266007][ T5299] Bluetooth: hci1: command 0x0405 tx timeout [ 2075.336237][T26521] Set syz0 is full, maxelem 0 reached [ 2075.349437][T23098] usb 42-1: device descriptor read/8, error -110 [ 2075.786600][T26524] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2075.991608][T23098] usb usb42-port1: attempt power cycle [ 2076.757725][T23098] usb usb42-port1: unable to enumerate USB device [ 2077.278364][T16764] cdc_ncm 5-1:1.0: bind() failure [ 2077.283111][T16764] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2077.285784][T16764] cdc_ncm 5-1:1.1: bind() failure [ 2078.437705][T22235] usb 46-1: device descriptor read/8, error -110 [ 2078.746798][T26557] netlink: 888 bytes leftover after parsing attributes in process `syz.5.3602'. [ 2078.916471][T22235] usb usb46-port1: unable to enumerate USB device [ 2079.060924][T16113] usb 48-1: device descriptor read/8, error -110 [ 2079.115189][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2079.122862][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2079.128570][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2079.131444][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2079.134937][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2079.140290][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2079.144110][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2079.157776][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 2079.157789][ T40] audit: type=1326 audit(2078.974:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26545 comm="syz.4.3600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2079.168109][ T40] audit: type=1326 audit(2078.974:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26545 comm="syz.4.3600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2079.178505][ T40] audit: type=1326 audit(2078.974:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26545 comm="syz.4.3600" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2079.189061][ T40] audit: type=1326 audit(2078.974:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26545 comm="syz.4.3600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2079.196297][ T40] audit: type=1326 audit(2078.984:5415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26545 comm="syz.4.3600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2079.204283][ T40] audit: type=1326 audit(2078.984:5416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26545 comm="syz.4.3600" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2079.213823][ T40] audit: type=1326 audit(2078.984:5417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26545 comm="syz.4.3600" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2079.221425][ T40] audit: type=1326 audit(2078.984:5418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26545 comm="syz.4.3600" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2079.236130][ T40] audit: type=1326 audit(2078.984:5419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26545 comm="syz.4.3600" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2079.244495][ T40] audit: type=1326 audit(2078.984:5420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26545 comm="syz.4.3600" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2079.462626][T16113] usb usb48-port1: attempt power cycle [ 2079.793089][T26570] overlay: ./file1 is not a directory [ 2079.885903][T26562] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 2079.888041][T26562] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2079.890743][T26562] vhci_hcd vhci_hcd.0: Device attached [ 2080.085982][T16113] usb 48-1: SetAddress Request (5) to port 0 [ 2080.088183][T16113] usb 48-1: new SuperSpeed USB device number 5 using vhci_hcd [ 2080.407597][T26576] vhci_hcd: connection reset by peer [ 2080.415228][T24482] vhci_hcd: stop threads [ 2080.417536][T24482] vhci_hcd: release socket [ 2080.426237][T24482] vhci_hcd: disconnect device [ 2080.478463][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2080.481027][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2080.495742][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2080.500187][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2080.503137][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2080.511872][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2080.519297][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2082.070520][T26604] Cache volume key already in use (9p,syz,) [ 2082.701135][T26612] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 2082.703241][T26612] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2082.706448][T26612] vhci_hcd vhci_hcd.0: Device attached [ 2082.763508][T26611] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3605'. [ 2082.774665][T26611] block nbd0: not configured, cannot reconfigure [ 2082.987853][T14934] usb 38-1: SetAddress Request (48) to port 0 [ 2082.990712][T14934] usb 38-1: new SuperSpeed USB device number 48 using vhci_hcd [ 2083.434926][T26624] binder: 26620:26624 ioctl 0 80000040 returned -22 [ 2083.457274][T26624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3607'. [ 2083.460430][T26624] netlink: 'syz.5.3607': attribute type 6 has an invalid length. [ 2083.463218][T26624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3607'. [ 2083.483783][ T77] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2083.489156][ T77] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2083.494771][ T77] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2083.501517][ T77] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2083.994326][T26629] Set syz0 is full, maxelem 0 reached [ 2084.058325][T26613] vhci_hcd: connection reset by peer [ 2084.061028][T18597] vhci_hcd: stop threads [ 2084.062535][T18597] vhci_hcd: release socket [ 2084.064471][T18597] vhci_hcd: disconnect device [ 2084.166382][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2084.168639][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2084.186614][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2084.192257][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2084.206269][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2084.213355][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2084.223860][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2084.276169][T23811] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 2084.393314][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 2084.393327][ T40] audit: type=1804 audit(2084.274:5434): pid=26637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3611" name="/newroot/10/bus/bus" dev="overlay" ino=85 res=1 errno=0 [ 2084.427914][T23811] usb 7-1: config 0 has an invalid interface number: 217 but max is 0 [ 2084.431508][T23811] usb 7-1: config 0 has no interface number 0 [ 2084.437020][ T40] audit: type=1804 audit(2084.304:5435): pid=26637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3611" name="/newroot/10/bus/bus" dev="overlay" ino=85 res=1 errno=0 [ 2084.437531][T23811] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2084.451117][ T40] audit: type=1800 audit(2084.304:5436): pid=26637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3611" name="bus" dev="overlay" ino=85 res=0 errno=0 [ 2084.451554][T23811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2084.466142][T23811] usb 7-1: Product: syz [ 2084.476582][T26639] Set syz0 is full, maxelem 0 reached [ 2084.477132][T23811] usb 7-1: Manufacturer: syz [ 2084.481921][T23811] usb 7-1: SerialNumber: syz [ 2084.489597][T23811] usb 7-1: config 0 descriptor?? [ 2084.500578][T23811] hub 7-1:0.217: bad descriptor, ignoring hub [ 2084.503307][T23811] hub 7-1:0.217: probe with driver hub failed with error -5 [ 2084.710325][T26643] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.3613'. [ 2084.725100][T26627] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2084.730028][T23811] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2084.736004][T23811] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2084.740701][T23811] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2084.744438][T23811] usb 7-1: media controller created [ 2084.769563][T23811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2084.771724][T26644] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3613'. [ 2084.810677][T23811] DVB: Unable to find symbol dib7000p_attach() [ 2084.813421][T23811] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2084.973820][T26649] syz.0.3613 (26649): drop_caches: 2 [ 2084.982550][T26649] syz.0.3613 (26649): drop_caches: 2 [ 2085.085955][T23811] rc_core: IR keymap rc-dib0700-rc5 not found [ 2085.093113][T23811] Registered IR keymap rc-empty [ 2085.098870][T23811] dvb-usb: could not initialize remote control. [ 2085.105535][T23811] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2085.196068][T16113] usb 48-1: device descriptor read/8, error -110 [ 2085.316289][T16113] usb usb48-port1: unable to enumerate USB device [ 2085.625424][T26655] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3614'. [ 2086.916424][T23811] usb 7-1: USB disconnect, device number 18 [ 2086.965781][T23811] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2087.417119][T26672] 9pnet_virtio: no channels available for device syz [ 2087.966393][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2087.968416][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2087.983034][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2087.993511][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2087.996928][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2088.006128][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2088.017480][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2088.076020][T14934] usb 38-1: device descriptor read/8, error -110 [ 2088.096933][T26674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3619'. [ 2088.111616][T26676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2088.115110][T26676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2088.133320][T26674] autofs: Unknown parameter '/sys/power/disk00000000' [ 2088.477503][T14934] usb usb38-port1: attempt power cycle [ 2088.663057][ T40] audit: type=1326 audit(2088.474:5437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26675 comm="syz.0.3618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 2088.671199][ T40] audit: type=1326 audit(2088.474:5438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26675 comm="syz.0.3618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 2088.679710][ T40] audit: type=1326 audit(2088.484:5439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26675 comm="syz.0.3618" exe="/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 2088.687783][ T40] audit: type=1326 audit(2088.494:5440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26675 comm="syz.0.3618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 2088.696010][ T40] audit: type=1326 audit(2088.494:5441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26675 comm="syz.0.3618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 2088.879943][T26682] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3620'. [ 2088.884761][T26682] block nbd0: not configured, cannot reconfigure [ 2089.086469][T14934] usb usb38-port1: unable to enumerate USB device [ 2089.490494][T26692] tmpfs: Bad value for 'mpol' [ 2089.590154][T26693] ubi: mtd0 is already attached to ubi31 [ 2090.212526][T26695] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2090.214658][T26695] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2090.231793][T26695] vhci_hcd vhci_hcd.0: Device attached [ 2090.515986][T22235] usb 46-1: SetAddress Request (26) to port 0 [ 2090.516031][T22235] usb 46-1: new SuperSpeed USB device number 26 using vhci_hcd [ 2090.560367][T26695] rdma_rxe: rxe_newlink: failed to add wg2 [ 2090.894851][T26697] vhci_hcd: connection reset by peer [ 2090.897988][T24482] vhci_hcd: stop threads [ 2090.899622][T24482] vhci_hcd: release socket [ 2090.901741][T24482] vhci_hcd: disconnect device [ 2091.495004][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2091.497216][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2091.500583][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2091.503215][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2091.513678][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2091.617539][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2091.627780][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2091.727183][T26710] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3625'. [ 2091.730369][T26710] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3625'. [ 2091.733590][T26710] netlink: 'syz.5.3625': attribute type 6 has an invalid length. [ 2091.736274][T26710] netlink: 'syz.5.3625': attribute type 6 has an invalid length. [ 2091.999454][T26712] overlay: ./file1 is not a directory [ 2093.156852][T26726] Set syz0 is full, maxelem 0 reached [ 2093.278216][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2093.280662][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2093.294592][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2093.298313][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2093.301068][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2093.495947][T16764] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 2093.946948][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2093.950200][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2094.543354][T16764] usb 7-1: config 0 has an invalid interface number: 217 but max is 0 [ 2094.551454][T16764] usb 7-1: config 0 has no interface number 0 [ 2094.562448][T16764] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2094.565785][T16764] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2094.569034][T16764] usb 7-1: Product: syz [ 2094.570868][T16764] usb 7-1: Manufacturer: syz [ 2094.572793][T16764] usb 7-1: SerialNumber: syz [ 2094.577483][T16764] usb 7-1: config 0 descriptor?? [ 2094.587088][T16764] hub 7-1:0.217: bad descriptor, ignoring hub [ 2094.590544][T16764] hub 7-1:0.217: probe with driver hub failed with error -5 [ 2094.725439][T26413] libceph: connect (1)[c::]:6789 error -101 [ 2094.732436][T26413] libceph: mon0 (1)[c::]:6789 connect error [ 2094.778630][T26736] ceph: No mds server is up or the cluster is laggy [ 2094.830926][T26724] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2094.834928][T16764] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2094.848784][T16764] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2094.853216][T16764] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2094.865350][T16764] usb 7-1: media controller created [ 2094.878152][T16764] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2094.902527][T16764] DVB: Unable to find symbol dib7000p_attach() [ 2094.904496][T16764] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2094.945926][T16764] rc_core: IR keymap rc-dib0700-rc5 not found [ 2094.947849][T16764] Registered IR keymap rc-empty [ 2094.949623][T16764] dvb-usb: could not initialize remote control. [ 2094.951938][T16764] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2095.496567][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2095.506337][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2095.586984][T26752] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3631'. [ 2095.590910][T26752] block nbd0: not configured, cannot reconfigure [ 2095.617438][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2095.621652][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2095.635983][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2095.646240][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2095.653040][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2095.673388][T22235] usb 46-1: device descriptor read/8, error -110 [ 2095.745257][T26755] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.3634'. [ 2095.912264][T26756] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3634'. [ 2096.225386][T26756] syz.4.3634 (26756): drop_caches: 2 [ 2096.231176][T26756] syz.4.3634 (26756): drop_caches: 2 [ 2096.264291][T16764] usb 7-1: USB disconnect, device number 19 [ 2096.369063][T16764] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2096.650718][T22235] usb usb46-port1: attempt power cycle [ 2097.004160][T26775] pim6reg1: entered promiscuous mode [ 2097.005908][T26775] pim6reg1: entered allmulticast mode [ 2097.256682][T22235] usb usb46-port1: unable to enumerate USB device [ 2097.475478][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2097.478898][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2097.482359][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2097.484533][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2097.488217][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2097.491228][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2097.494559][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2097.893265][T26788] Set syz0 is full, maxelem 0 reached [ 2098.012659][T26788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2098.038131][T26788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2098.061106][T26788] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2098.688091][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2098.690724][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2098.695399][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2098.698753][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2098.701769][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2098.706258][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2098.710531][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2099.015603][T26804] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 2099.017727][T26804] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2099.025550][T26804] vhci_hcd vhci_hcd.0: Device attached [ 2099.095323][T26807] ksmbd: Unknown IPC event: 0, ignore. [ 2099.296117][T21882] usb 46-1: SetAddress Request (30) to port 0 [ 2099.298128][T21882] usb 46-1: new SuperSpeed USB device number 30 using vhci_hcd [ 2099.598726][T26805] vhci_hcd: connection reset by peer [ 2099.601009][T26771] vhci_hcd: stop threads [ 2099.602479][T26771] vhci_hcd: release socket [ 2099.604063][T26771] vhci_hcd: disconnect device [ 2100.713892][T26816] lo speed is unknown, defaulting to 1000 [ 2100.925924][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2100.928362][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2100.932454][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2100.935179][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2100.937755][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2100.941140][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2100.944661][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2101.061137][T26829] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2101.519864][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2101.521880][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2101.530745][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2101.533773][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2101.538603][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2101.547411][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2101.557883][T26838] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 2101.560227][T26838] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2101.598139][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2101.607052][T26838] vhci_hcd vhci_hcd.0: Device attached [ 2102.119049][T14934] usb 42-1: SetAddress Request (71) to port 0 [ 2102.121222][T14934] usb 42-1: new SuperSpeed USB device number 71 using vhci_hcd [ 2102.258158][T26838] rdma_rxe: rxe_newlink: failed to add wg2 [ 2102.394312][T26839] vhci_hcd: connection reset by peer [ 2102.396943][T18597] vhci_hcd: stop threads [ 2102.398850][T18597] vhci_hcd: release socket [ 2102.400824][T18597] vhci_hcd: disconnect device [ 2102.496008][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2102.498008][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2102.501033][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2102.503598][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2102.506475][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2102.509431][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2102.513801][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2103.111281][T26859] Set syz0 is full, maxelem 0 reached [ 2103.118293][T26859] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2103.164759][T26860] ALSA: mixer_oss: invalid OSS volume '' [ 2103.173865][T26860] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 2103.176472][T26860] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2103.179970][T26860] vhci_hcd vhci_hcd.0: Device attached [ 2103.320379][T26864] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3650'. [ 2103.324792][T26864] block nbd0: not configured, cannot reconfigure [ 2103.356103][T23880] vhci_hcd: vhci_device speed not set [ 2103.415982][T23880] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 2103.796319][T26861] vhci_hcd: connection reset by peer [ 2103.798900][ T4740] vhci_hcd: stop threads [ 2103.800942][ T4740] vhci_hcd: release socket [ 2103.803085][ T4740] vhci_hcd: disconnect device [ 2104.193267][T26870] : renamed from bond_slave_0 [ 2104.202145][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2104.203860][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2104.207217][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2104.209348][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2104.211513][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2104.215114][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2104.218201][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2104.435446][T21882] usb 46-1: device descriptor read/8, error -110 [ 2104.586565][T26877] netlink: 'syz.0.3655': attribute type 13 has an invalid length. [ 2104.843092][T21882] usb usb46-port1: attempt power cycle [ 2105.047408][T26880] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2105.396899][T21882] usb usb46-port1: unable to enumerate USB device [ 2105.646013][T26877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2105.898237][T26889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3659'. [ 2105.985678][T26886] binder: 26881:26886 ioctl 0 80000040 returned -22 [ 2106.005259][T26886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3657'. [ 2106.009028][T26886] netlink: 'syz.2.3657': attribute type 6 has an invalid length. [ 2106.012028][T26886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3657'. [ 2106.074778][T26889] autofs: Unknown parameter '/sys/power/disk00000000' [ 2106.596121][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2106.598086][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2106.602572][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2106.604774][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2106.615896][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2106.618828][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2106.626262][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2106.632285][T17401] libceph: connect (1)[c::]:6789 error -101 [ 2106.634770][T17401] libceph: mon0 (1)[c::]:6789 connect error [ 2106.754490][T26898] ceph: No mds server is up or the cluster is laggy [ 2106.775180][T26905] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2107.186708][T14934] usb 42-1: device descriptor read/8, error -110 [ 2107.251048][T26901] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2107.253887][T26901] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2107.257495][T26901] vhci_hcd vhci_hcd.0: Device attached [ 2107.391828][T26907] vhci_hcd: connection closed [ 2107.392403][ T4740] vhci_hcd: stop threads [ 2107.397729][ T4740] vhci_hcd: release socket [ 2107.399620][ T4740] vhci_hcd: disconnect device [ 2107.502567][T26918] Set syz0 is full, maxelem 0 reached [ 2107.507991][T26918] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2107.576522][T14934] usb usb42-port1: attempt power cycle [ 2107.959854][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2107.961860][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2107.964982][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2107.967709][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2107.969950][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2107.973121][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2107.976266][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2108.156418][T14934] usb usb42-port1: unable to enumerate USB device [ 2108.530347][T26928] /dev/nullb0: Can't open blockdev [ 2108.535948][T23880] vhci_hcd: vhci_device speed not set [ 2108.980285][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2108.985168][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2108.993790][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2108.999172][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2109.001773][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2109.009662][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2109.018906][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2109.183581][T26931] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2109.328837][T26938] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2109.331416][T26938] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2109.342602][T26938] vhci_hcd vhci_hcd.0: Device attached [ 2109.688725][T14054] usb 46-1: SetAddress Request (35) to port 0 [ 2109.691406][T14054] usb 46-1: new SuperSpeed USB device number 35 using vhci_hcd [ 2109.791699][T26945] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 2109.793918][T26945] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2109.804453][T26945] vhci_hcd vhci_hcd.0: Device attached [ 2109.899976][T26939] vhci_hcd: connection reset by peer [ 2109.903829][T25546] vhci_hcd: stop threads [ 2109.905383][T25546] vhci_hcd: release socket [ 2109.910330][T25546] vhci_hcd: disconnect device [ 2110.066100][T16764] usb 38-1: SetAddress Request (52) to port 0 [ 2110.068654][T16764] usb 38-1: new SuperSpeed USB device number 52 using vhci_hcd [ 2110.575980][T26946] vhci_hcd: connection reset by peer [ 2110.579367][T25546] vhci_hcd: stop threads [ 2110.580882][T25546] vhci_hcd: release socket [ 2110.582737][T25546] vhci_hcd: disconnect device [ 2110.677819][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2110.679834][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2110.680472][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2110.680484][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2110.680493][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2110.681072][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2110.681624][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2111.064983][T26962] binder: 26955:26962 ioctl 0 80000040 returned -22 [ 2111.072679][T26962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3672'. [ 2111.226159][T26962] netlink: 'syz.4.3672': attribute type 6 has an invalid length. [ 2111.228591][T26962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3672'. [ 2111.318527][T25546] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2111.323556][T25546] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2111.331240][T25546] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2111.337608][T25546] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2112.117065][T26967] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 2112.119266][T26967] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2112.121907][T26967] vhci_hcd vhci_hcd.0: Device attached [ 2112.193606][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2112.198018][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2112.201182][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2112.204017][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2112.206748][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2112.210272][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2112.219743][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2112.396400][T22235] usb 42-1: SetAddress Request (75) to port 0 [ 2112.399602][T22235] usb 42-1: new SuperSpeed USB device number 75 using vhci_hcd [ 2112.797389][T26983] Set syz0 is full, maxelem 0 reached [ 2112.801093][T26983] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2112.955931][T26968] vhci_hcd: connection reset by peer [ 2112.958670][T25546] vhci_hcd: stop threads [ 2112.960192][T25546] vhci_hcd: release socket [ 2112.962888][T25546] vhci_hcd: disconnect device [ 2113.617331][T26987] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 2113.619408][T26987] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2113.632610][T26987] vhci_hcd vhci_hcd.0: Device attached [ 2113.909574][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2113.912687][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2113.928186][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2113.931100][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2113.934212][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2113.942049][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2113.947518][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2114.187788][T26995] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3680'. [ 2114.213560][T26988] vhci_hcd: connection closed [ 2114.219488][T24482] vhci_hcd: stop threads [ 2114.223344][T24482] vhci_hcd: release socket [ 2114.225412][T24482] vhci_hcd: disconnect device [ 2114.366856][T26993] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2114.786859][T14054] usb 46-1: device descriptor read/8, error -110 [ 2115.105964][T16764] usb 38-1: device descriptor read/8, error -110 [ 2115.176376][T14054] usb usb46-port1: attempt power cycle [ 2115.499834][T27005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3682'. [ 2115.676995][T16764] usb usb38-port1: attempt power cycle [ 2115.736378][T14054] usb usb46-port1: unable to enumerate USB device [ 2115.747600][T27005] usb usb1: check_ctrlrecip: process 27005 (syz.5.3682) requesting ep 01 but needs 81 [ 2115.750861][T27005] usb usb1: usbfs: process 27005 (syz.5.3682) did not claim interface 0 before use [ 2115.762022][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2115.764639][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2115.772319][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2115.780747][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2115.786894][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2115.791595][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2115.802467][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2115.983092][T27014] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 2115.985805][T27014] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2115.989711][T27014] vhci_hcd vhci_hcd.0: Device attached [ 2116.096049][T16764] usb 38-1: SetAddress Request (55) to port 0 [ 2116.098169][T16764] usb 38-1: new SuperSpeed USB device number 55 using vhci_hcd [ 2116.109782][T27019] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2116.112065][T27019] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2116.130392][T27019] vhci_hcd vhci_hcd.0: Device attached [ 2116.175997][T27018] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3683'. [ 2116.189935][T27018] block nbd0: not configured, cannot reconfigure [ 2116.556142][T27016] vhci_hcd: connection reset by peer [ 2116.558974][ T7545] vhci_hcd: stop threads [ 2116.560803][ T7545] vhci_hcd: release socket [ 2116.562797][ T7545] vhci_hcd: disconnect device [ 2117.298403][T27020] vhci_hcd: connection closed [ 2117.298629][ T225] vhci_hcd: stop threads [ 2117.301928][ T225] vhci_hcd: release socket [ 2117.303615][ T225] vhci_hcd: disconnect device [ 2117.407526][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2117.410706][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2117.414571][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2117.417417][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2117.419855][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2117.422954][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2117.429511][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2117.506237][T22235] usb 42-1: device descriptor read/8, error -110 [ 2117.904649][T22235] usb usb42-port1: attempt power cycle [ 2118.165511][T27039] Set syz0 is full, maxelem 0 reached [ 2118.170028][T27039] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2118.550472][T27044] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2118.599902][T22235] usb usb42-port1: unable to enumerate USB device [ 2118.660565][T27045] : renamed from bond_slave_0 [ 2118.735510][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2118.739538][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2118.749503][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2118.755814][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2118.764176][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2118.772351][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2118.781647][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2119.078648][T27048] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2119.320015][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2119.322561][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2119.328942][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2119.331871][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2119.334765][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2119.351600][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2119.366131][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2119.565570][ T40] audit: type=1804 audit(2119.454:5442): pid=27056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3693" name="/newroot/130/bus/bus" dev="overlay" ino=737 res=1 errno=0 [ 2119.579724][ T40] audit: type=1804 audit(2119.474:5443): pid=27056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3693" name="/newroot/130/bus/bus" dev="overlay" ino=737 res=1 errno=0 [ 2119.588380][ T40] audit: type=1800 audit(2119.484:5444): pid=27056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3693" name="bus" dev="overlay" ino=737 res=0 errno=0 [ 2119.604044][T27058] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3694'. [ 2119.645822][T27058] bond0 (unregistering): (slave 30): Releasing backup interface [ 2119.651704][T27058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2119.670658][T27058] bond0 (unregistering): Released all slaves [ 2120.499772][ T5299] Bluetooth: hci1: unexpected event for opcode 0x202f [ 2120.591667][T27063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3695'. [ 2120.594877][T27063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3695'. [ 2120.668409][T27068] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2120.847286][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2120.849596][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2120.853419][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2120.855621][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2120.861240][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2120.865081][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2120.877176][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2120.885722][T27080] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.3699'. [ 2120.951271][T27082] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3699'. [ 2121.090808][T27082] syz.2.3699 (27082): drop_caches: 2 [ 2121.094630][T27082] syz.2.3699 (27082): drop_caches: 2 [ 2121.186791][T16764] usb 38-1: device descriptor read/8, error -110 [ 2121.297185][T27086] binder: 27072:27086 ioctl 0 80000040 returned -22 [ 2121.300413][T16764] usb usb38-port1: unable to enumerate USB device [ 2121.306923][T27081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3698'. [ 2121.309762][T27081] netlink: 'syz.0.3698': attribute type 6 has an invalid length. [ 2121.312333][T27081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3698'. [ 2121.327990][T25546] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2121.333363][T25546] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2121.339617][T25546] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2121.343912][T25546] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2121.886464][T27092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3702'. [ 2122.175350][T27100] Set syz0 is full, maxelem 0 reached [ 2122.178257][T27100] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2122.190584][T27101] ubi: mtd0 is already attached to ubi31 [ 2122.291758][ T40] audit: type=1326 audit(2122.184:5445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27091 comm="syz.5.3702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 2122.329748][ T40] audit: type=1326 audit(2122.194:5446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27091 comm="syz.5.3702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 2122.349258][T27103] pim6reg: entered allmulticast mode [ 2122.351176][ T40] audit: type=1326 audit(2122.194:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27091 comm="syz.5.3702" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 2122.378003][ T40] audit: type=1326 audit(2122.194:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27091 comm="syz.5.3702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 2122.385250][T27103] pim6reg: left allmulticast mode [ 2122.395187][ T40] audit: type=1326 audit(2122.194:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27091 comm="syz.5.3702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 2122.419440][ T40] audit: type=1326 audit(2122.204:5450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27091 comm="syz.5.3702" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 2122.430451][ T40] audit: type=1326 audit(2122.204:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27091 comm="syz.5.3702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 2123.118513][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2123.120490][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2123.125810][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2123.135558][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2123.138053][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2123.141211][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2123.144089][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2123.276465][T27112] /dev/sr0: Can't open blockdev [ 2123.806752][T27119] Set syz0 is full, maxelem 0 reached [ 2123.957294][T27114] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2124.075978][T14934] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 2124.298498][T14934] usb 7-1: config 0 has an invalid interface number: 217 but max is 0 [ 2124.302268][T14934] usb 7-1: config 0 has no interface number 0 [ 2124.315641][T14934] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2124.320172][T14934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2124.323633][T14934] usb 7-1: Product: syz [ 2124.325501][T14934] usb 7-1: Manufacturer: syz [ 2124.327728][T14934] usb 7-1: SerialNumber: syz [ 2124.339333][T14934] usb 7-1: config 0 descriptor?? [ 2124.352339][T14934] hub 7-1:0.217: bad descriptor, ignoring hub [ 2124.355134][T14934] hub 7-1:0.217: probe with driver hub failed with error -5 [ 2124.436609][T27129] ubi: mtd0 is already attached to ubi31 [ 2124.439839][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2124.442224][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2124.447348][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2124.450219][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2124.456343][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2124.460450][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2124.464744][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2124.480696][T27126] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3708'. [ 2124.558804][ T5299] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 2124.563752][ T5299] Bluetooth: hci1: Injecting HCI hardware error event [ 2124.564075][T27118] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2124.572536][ T5299] Bluetooth: hci1: hardware error 0x00 [ 2124.576595][T14934] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2124.582008][T14934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2124.586896][T14934] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2124.590936][T14934] usb 7-1: media controller created [ 2124.607542][T14934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2124.648239][T14934] DVB: Unable to find symbol dib7000p_attach() [ 2124.650315][T14934] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2124.705945][T14934] rc_core: IR keymap rc-dib0700-rc5 not found [ 2124.707985][T14934] Registered IR keymap rc-empty [ 2124.709715][T14934] dvb-usb: could not initialize remote control. [ 2124.711833][T14934] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2125.330623][T27142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3712'. [ 2125.386354][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2125.388213][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2125.399165][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2125.402320][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2125.404702][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2125.408256][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2125.411127][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2125.624211][T27152] netlink: 'syz.0.3711': attribute type 10 has an invalid length. [ 2126.611358][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2126.613960][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2126.618311][T27165] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 2126.620610][T27165] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2126.623431][T27165] vhci_hcd vhci_hcd.0: Device attached [ 2126.630192][ T5299] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2126.641607][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2126.641632][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2126.641645][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2126.642852][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2126.652056][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2126.801671][T27172] Set syz0 is full, maxelem 0 reached [ 2126.804156][T27172] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2126.812117][T14934] usb 7-1: USB disconnect, device number 20 [ 2126.831214][T27174] rdma_rxe: rxe_newlink: failed to add wg2 [ 2126.835243][T14934] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2126.897307][T16764] usb 38-1: SetAddress Request (56) to port 0 [ 2126.897343][T16764] usb 38-1: new SuperSpeed USB device number 56 using vhci_hcd [ 2127.295598][T27184] overlay: ./file1 is not a directory [ 2127.298776][T27166] vhci_hcd: connection reset by peer [ 2127.300883][T26771] vhci_hcd: stop threads [ 2127.308121][T26771] vhci_hcd: release socket [ 2127.311809][T26771] vhci_hcd: disconnect device [ 2127.785040][T27186] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2127.788822][T27186] 9pnet_virtio: no channels available for device syz [ 2128.023052][T27193] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3719'. [ 2128.026075][T27193] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3719'. [ 2128.029135][T27193] netlink: 'syz.2.3719': attribute type 6 has an invalid length. [ 2128.031702][T27193] netlink: 'syz.2.3719': attribute type 6 has an invalid length. [ 2128.244095][T27197] /dev/nullb0: Can't open blockdev [ 2129.333217][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2129.355643][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2129.407010][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2129.426671][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2129.446929][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2129.454690][T27204] netlink: 'syz.0.3722': attribute type 1 has an invalid length. [ 2129.471954][T27204] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3722'. [ 2129.498915][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2129.557773][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2130.199906][T27217] Set syz0 is full, maxelem 0 reached [ 2130.554958][T27219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3725'. [ 2130.638378][T27223] netlink: 6068 bytes leftover after parsing attributes in process `syz.5.3726'. [ 2130.708021][T27229] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3726'. [ 2130.841659][T27235] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3734'. [ 2130.844770][T27235] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3734'. [ 2130.847852][T27235] netlink: 'syz.2.3734': attribute type 6 has an invalid length. [ 2130.850479][T27235] netlink: 'syz.2.3734': attribute type 6 has an invalid length. [ 2130.867793][T27233] syz.5.3726 (27233): drop_caches: 2 [ 2130.883384][T27233] syz.5.3726 (27233): drop_caches: 2 [ 2131.986154][T16764] usb 38-1: device descriptor read/8, error -110 [ 2132.402571][T16764] usb usb38-port1: attempt power cycle [ 2132.981816][T16764] usb usb38-port1: unable to enumerate USB device [ 2133.045208][T27237] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2133.124620][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2133.127849][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2133.131834][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2133.134837][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2133.138764][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2133.142822][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2133.146983][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2133.148546][T27242] binder: 27238:27242 ioctl 0 80000040 returned -22 [ 2133.196049][T27242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3728'. [ 2133.199721][T27242] netlink: 'syz.0.3728': attribute type 6 has an invalid length. [ 2133.202895][T27242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3728'. [ 2133.903135][T27253] Set syz0 is full, maxelem 0 reached [ 2133.946088][T27253] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2134.203995][T27264] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 2134.327314][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2134.331556][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2134.337446][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2134.342888][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2134.347257][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2134.353460][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2134.357627][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2134.495966][T23098] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 2134.676744][T27270] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2134.700212][T23098] usb 10-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 2134.703888][T23098] usb 10-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2134.719026][T23098] usb 10-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 2134.733283][T23098] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2134.737106][T23098] usb 10-1: Product: syz [ 2134.739038][T23098] usb 10-1: Manufacturer: syz [ 2134.741713][T23098] usb 10-1: SerialNumber: syz [ 2134.753289][T27263] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2134.761883][T23098] usblp0: Disabling reads from problematic bidirectional printer [ 2134.822803][T27275] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3741'. [ 2134.826681][T27275] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3741'. [ 2134.830288][T27275] netlink: 'syz.0.3741': attribute type 6 has an invalid length. [ 2134.834093][T27275] netlink: 'syz.0.3741': attribute type 6 has an invalid length. [ 2134.976415][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2134.979575][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2134.985369][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2134.987639][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2134.990103][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2135.010648][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2135.014719][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2135.208658][T23098] usblp 10-1:4.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 2135.376904][ C3] usblp0: nonzero write bulk status received: -71 [ 2135.399395][T14934] usb 10-1: USB disconnect, device number 2 [ 2135.430291][T14934] usblp0: removed [ 2135.762123][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2135.770334][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2135.789159][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2135.796585][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2135.803655][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2135.818081][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2135.838291][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2136.226972][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2136.240613][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2136.422927][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2136.442879][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2136.450280][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2136.458743][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2136.477306][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2137.029682][T27294] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2137.250278][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2137.252543][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2137.349853][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2137.356618][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2137.359113][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2137.370480][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2137.386315][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2137.548129][T27310] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2137.550694][T27310] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2137.563981][T27310] vhci_hcd vhci_hcd.0: Device attached [ 2138.266047][T17401] usb 46-1: SetAddress Request (39) to port 0 [ 2138.322381][T27320] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2138.732806][T17401] usb 46-1: new SuperSpeed USB device number 39 using vhci_hcd [ 2139.210931][T27299] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2140.686054][T27330] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 2140.688750][T27330] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2140.692332][T27330] vhci_hcd vhci_hcd.0: Device attached [ 2140.761572][T27313] vhci_hcd: connection reset by peer [ 2140.764606][T17572] vhci_hcd: stop threads [ 2140.767280][T17572] vhci_hcd: release socket [ 2140.776082][T17572] vhci_hcd: disconnect device [ 2140.884947][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2140.897316][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2140.901939][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2140.925882][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2140.928160][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2140.956057][T16764] usb 48-1: SetAddress Request (6) to port 0 [ 2140.958109][T16764] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 2141.036044][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2141.136423][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2141.196991][T27331] vhci_hcd: connection reset by peer [ 2141.199799][T26385] vhci_hcd: stop threads [ 2141.201655][T26385] vhci_hcd: release socket [ 2141.203780][T26385] vhci_hcd: disconnect device [ 2141.289723][T27347] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3763'. [ 2141.292790][T27347] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3763'. [ 2141.295812][T27347] netlink: 'syz.0.3763': attribute type 6 has an invalid length. [ 2141.298474][T27347] netlink: 'syz.0.3763': attribute type 6 has an invalid length. [ 2142.033332][T27351] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2142.259619][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2142.262160][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2142.265743][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2142.269750][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2142.272318][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2142.276231][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2142.290548][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2143.499885][T27371] lo speed is unknown, defaulting to 1000 [ 2143.826200][T17401] usb 46-1: device descriptor read/8, error -110 [ 2144.147308][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2144.149239][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2144.166313][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2144.168450][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2144.170658][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2144.176452][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2144.192189][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2144.218283][T17401] usb usb46-port1: attempt power cycle [ 2144.276200][T27386] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2144.338669][T27373] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2144.344616][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2144.355637][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2144.384912][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2144.391673][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2144.393935][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2144.417717][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2144.421243][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2144.776815][T17401] usb usb46-port1: unable to enumerate USB device [ 2144.804184][T27400] binder: 27396:27400 ioctl 0 80000040 returned -22 [ 2144.827828][T27400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3780'. [ 2144.831820][T27400] netlink: 'syz.4.3780': attribute type 6 has an invalid length. [ 2144.835374][T27400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3780'. [ 2145.513206][T27409] netlink: 6068 bytes leftover after parsing attributes in process `syz.5.3783'. [ 2145.590143][T27410] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3783'. [ 2145.847553][T27413] ceph: No mds server is up or the cluster is laggy [ 2145.869749][T27422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3786'. [ 2146.066148][T16764] usb 48-1: device descriptor read/8, error -110 [ 2146.172522][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 2146.172533][ T40] audit: type=1326 audit(2146.064:5482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27421 comm="syz.4.3786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2146.196413][ T40] audit: type=1326 audit(2146.074:5483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27421 comm="syz.4.3786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2146.209915][T27426] pim6reg: entered allmulticast mode [ 2146.217703][ T40] audit: type=1326 audit(2146.074:5484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27421 comm="syz.4.3786" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2146.228000][T27426] pim6reg: left allmulticast mode [ 2146.232259][ T40] audit: type=1326 audit(2146.084:5485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27421 comm="syz.4.3786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2146.245382][ T40] audit: type=1326 audit(2146.084:5486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27421 comm="syz.4.3786" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2146.246525][T17401] libceph: connect (1)[c::]:6789 error -101 [ 2146.254474][ T40] audit: type=1326 audit(2146.084:5487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27421 comm="syz.4.3786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2146.273170][ T40] audit: type=1326 audit(2146.084:5488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27421 comm="syz.4.3786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2146.274091][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2146.291653][ T40] audit: type=1326 audit(2146.084:5489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27421 comm="syz.4.3786" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2146.309759][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2146.312931][ T40] audit: type=1326 audit(2146.084:5490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27421 comm="syz.4.3786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2146.313857][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2146.328201][ T40] audit: type=1326 audit(2146.084:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27421 comm="syz.4.3786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2146.336129][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2146.351536][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2146.362269][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2146.366162][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2146.452993][T27410] syz.5.3783 (27410): drop_caches: 2 [ 2146.476979][T16764] usb usb48-port1: attempt power cycle [ 2146.555595][T27410] syz.5.3783 (27410): drop_caches: 2 [ 2146.570722][T17401] libceph: mon0 (1)[c::]:6789 connect error [ 2147.066668][T16764] usb usb48-port1: unable to enumerate USB device [ 2147.077428][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2147.079550][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2147.082741][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2147.085101][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2147.087783][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2147.090667][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2147.093429][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2147.138469][T27442] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2147.445972][T27449] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2147.448127][T27449] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2147.450841][T27446] /dev/sr0: Can't open blockdev [ 2147.456422][T27449] vhci_hcd vhci_hcd.0: Device attached [ 2147.726534][T16764] usb 46-1: SetAddress Request (43) to port 0 [ 2147.729104][T16764] usb 46-1: new SuperSpeed USB device number 43 using vhci_hcd [ 2148.103785][T27450] vhci_hcd: connection reset by peer [ 2148.111170][T27462] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 2148.113360][T27462] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2148.116668][ T4740] vhci_hcd: stop threads [ 2148.118070][ T4740] vhci_hcd: release socket [ 2148.126149][ T4740] vhci_hcd: disconnect device [ 2148.189019][T27462] vhci_hcd vhci_hcd.0: Device attached [ 2148.449890][T27466] ubi: mtd0 is already attached to ubi31 [ 2148.466045][T21882] usb 48-1: SetAddress Request (10) to port 0 [ 2148.468306][T21882] usb 48-1: new SuperSpeed USB device number 10 using vhci_hcd [ 2148.821465][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2148.826184][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2148.829203][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2148.831363][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2148.833610][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2148.840568][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2148.844152][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2148.858516][T27463] vhci_hcd: connection reset by peer [ 2148.866137][T24482] vhci_hcd: stop threads [ 2148.867694][T24482] vhci_hcd: release socket [ 2148.869854][T24482] vhci_hcd: disconnect device [ 2149.273399][ T6021] libceph: connect (1)[c::]:6789 error -101 [ 2149.275639][ T6021] libceph: mon0 (1)[c::]:6789 connect error [ 2149.324320][T27475] ceph: No mds server is up or the cluster is laggy [ 2149.862406][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2149.864568][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2149.869039][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2149.875452][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2149.884710][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2149.888573][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2149.892230][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2149.943992][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2149.962978][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2149.973318][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2149.979229][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2149.982024][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2149.995188][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2150.003185][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2150.177484][T27496] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2150.659554][T27505] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 2150.662391][T27505] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2150.666768][T27505] vhci_hcd vhci_hcd.0: Device attached [ 2150.836618][T27505] rdma_rxe: rxe_newlink: failed to add wg2 [ 2151.179854][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2151.182529][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2151.186693][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2151.189415][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2151.192138][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2151.196137][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2151.200961][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2151.203951][T27506] vhci_hcd: connection closed [ 2151.204864][ T4740] vhci_hcd: stop threads [ 2151.209590][ T4740] vhci_hcd: release socket [ 2151.211518][ T4740] vhci_hcd: disconnect device [ 2151.975615][T27522] netlink: 2056 bytes leftover after parsing attributes in process `syz.0.3812'. [ 2152.451402][T27531] ceph: No mds server is up or the cluster is laggy [ 2152.455554][T23098] libceph: connect (1)[c::]:6789 error -101 [ 2152.478385][T23098] libceph: mon0 (1)[c::]:6789 connect error [ 2152.656429][T27524] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2152.661403][T27524] 9pnet_virtio: no channels available for device syz [ 2152.673472][T27530] overlay: ./file1 is not a directory [ 2152.786024][T16764] usb 46-1: device descriptor read/8, error -110 [ 2152.935739][T27540] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 2152.937890][T27540] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2152.942433][T27540] vhci_hcd vhci_hcd.0: Device attached [ 2153.149743][T27539] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 2153.149785][T27539] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2153.150845][T27539] vhci_hcd vhci_hcd.0: Device attached [ 2153.187167][T27549] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 2153.187195][T27549] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2153.187451][T27549] vhci_hcd vhci_hcd.0: Device attached [ 2153.187576][T16764] usb usb46-port1: attempt power cycle [ 2153.316028][T14054] usb 42-1: SetAddress Request (79) to port 0 [ 2153.316083][T14054] usb 42-1: new SuperSpeed USB device number 79 using vhci_hcd [ 2153.394977][T27547] vhci_hcd: connection closed [ 2153.395292][ T4740] vhci_hcd: stop threads [ 2153.395312][ T4740] vhci_hcd: release socket [ 2153.395539][ T4740] vhci_hcd: disconnect device [ 2153.436075][T14934] usb 38-1: enqueue for inactive port 0 [ 2153.449616][T27546] rdma_rxe: rxe_newlink: failed to add wg2 [ 2153.493405][T27553] rdma_rxe: rxe_newlink: failed to add wg2 [ 2153.746470][T16764] usb usb46-port1: unable to enumerate USB device [ 2153.769056][T27541] vhci_hcd: connection reset by peer [ 2153.771233][ T4740] vhci_hcd: stop threads [ 2153.772650][ T4740] vhci_hcd: release socket [ 2153.774202][ T4740] vhci_hcd: disconnect device [ 2154.016838][T14934] usb usb38-port1: attempt power cycle [ 2154.038147][T27550] vhci_hcd: connection reset by peer [ 2154.040965][ T6246] vhci_hcd: stop threads [ 2154.042856][ T6246] vhci_hcd: release socket [ 2154.045008][T21882] usb 48-1: device descriptor read/8, error -110 [ 2154.045050][ T6246] vhci_hcd: disconnect device [ 2154.242370][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2154.244453][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2154.250654][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2154.252807][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2154.254978][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2154.281602][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2154.288644][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2154.290699][T27562] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2154.293950][T27562] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2154.467529][T21882] usb usb48-port1: attempt power cycle [ 2154.599799][T14934] usb usb38-port1: unable to enumerate USB device [ 2154.799236][T27573] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2154.990474][T27568] netlink: 'syz.4.3821': attribute type 1 has an invalid length. [ 2154.992987][T27568] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3821'. [ 2155.154929][T27584] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 2155.157572][T27584] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2155.173382][T27584] vhci_hcd vhci_hcd.0: Device attached [ 2155.200182][T21882] usb usb48-port1: unable to enumerate USB device [ 2155.229332][T27587] ubi: mtd0 is already attached to ubi31 [ 2155.411685][T27591] bridge2: entered promiscuous mode [ 2155.446020][T21882] usb 38-1: SetAddress Request (64) to port 0 [ 2155.448733][T21882] usb 38-1: new SuperSpeed USB device number 64 using vhci_hcd [ 2155.711173][T27585] vhci_hcd: connection reset by peer [ 2155.714041][T24482] vhci_hcd: stop threads [ 2155.716614][T24482] vhci_hcd: release socket [ 2155.718590][T24482] vhci_hcd: disconnect device [ 2156.187578][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2156.190179][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2156.194867][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2156.198121][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2156.200772][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2156.203837][T27598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3833'. [ 2156.210874][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2156.217099][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2156.583232][T27616] Set syz0 is full, maxelem 0 reached [ 2156.836487][T26413] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 2156.997775][T27620] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2157.027904][T27613] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2157.040202][T26413] usb 7-1: config 0 has an invalid interface number: 217 but max is 0 [ 2157.050601][T26413] usb 7-1: config 0 has no interface number 0 [ 2157.119371][T26413] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2157.126471][T26413] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2157.137307][T26413] usb 7-1: Product: syz [ 2157.140200][T26413] usb 7-1: Manufacturer: syz [ 2157.142225][T26413] usb 7-1: SerialNumber: syz [ 2157.165993][T26413] usb 7-1: config 0 descriptor?? [ 2157.173695][T26413] hub 7-1:0.217: bad descriptor, ignoring hub [ 2157.178046][T26413] hub 7-1:0.217: probe with driver hub failed with error -5 [ 2157.380074][T27612] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2157.384757][T26413] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2157.390297][T26413] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2157.394039][T26413] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2157.397262][T26413] usb 7-1: media controller created [ 2157.406608][T26413] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2157.483844][T26413] DVB: Unable to find symbol dib7000p_attach() [ 2157.487724][T26413] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2157.585026][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2157.586216][T26413] rc_core: IR keymap rc-dib0700-rc5 not found [ 2157.587592][ T5348] loop4: p1 size 2037579776 extends beyond EOD, [ 2157.589212][T26413] Registered IR keymap rc-empty [ 2157.589213][ T5348] truncated [ 2157.590090][ T5348] loop4: p2 start 4294901760 is beyond EOD, [ 2157.591408][T26413] dvb-usb: could not initialize remote control. [ 2157.592900][ T5348] truncated [ 2157.593950][T26413] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2157.595904][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2157.595919][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2157.596637][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2157.597200][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2157.684323][T27630] netlink: 'syz.4.3844': attribute type 10 has an invalid length. [ 2157.738726][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2157.772863][T27636] Set syz0 is full, maxelem 0 reached [ 2157.775346][T27636] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2157.806697][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2157.826367][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2157.828650][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2157.830855][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2157.834152][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2157.837637][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2158.033505][T27639] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2158.036236][T27639] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2158.040150][T27639] vhci_hcd vhci_hcd.0: Device attached [ 2158.316048][T22026] usb 46-1: SetAddress Request (47) to port 0 [ 2158.318359][T22026] usb 46-1: new SuperSpeed USB device number 47 using vhci_hcd [ 2158.386049][T14054] usb 42-1: device descriptor read/8, error -110 [ 2158.639294][T27640] vhci_hcd: connection reset by peer [ 2158.643333][ T7545] vhci_hcd: stop threads [ 2158.644861][ T7545] vhci_hcd: release socket [ 2158.646496][ T7545] vhci_hcd: disconnect device [ 2158.776412][T14054] usb usb42-port1: attempt power cycle [ 2159.247746][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2159.249861][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2159.253250][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2159.273907][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2159.276543][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2159.279528][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2159.286055][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2159.407789][T14054] usb usb42-port1: unable to enumerate USB device [ 2159.490854][T26413] usb 7-1: USB disconnect, device number 21 [ 2159.508713][T26413] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2159.617843][T27660] ubi: mtd0 is already attached to ubi31 [ 2160.542018][T27680] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 2160.544194][T27680] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2160.566295][T27680] vhci_hcd vhci_hcd.0: Device attached [ 2160.853822][T27697] Set syz0 is full, maxelem 0 reached [ 2161.091035][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2161.094775][T27681] vhci_hcd: connection reset by peer [ 2161.096064][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2161.106284][T14054] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 2161.115075][T26385] vhci_hcd: stop threads [ 2161.124257][T26385] vhci_hcd: release socket [ 2161.127136][T21882] usb 38-1: device descriptor read/8, error -110 [ 2161.129594][T26385] vhci_hcd: disconnect device [ 2161.131329][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2161.133696][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2161.141985][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2161.154629][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2161.157923][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2161.312139][T14054] usb 7-1: config 0 has an invalid interface number: 217 but max is 0 [ 2161.314731][T14054] usb 7-1: config 0 has no interface number 0 [ 2161.328029][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2161.332085][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2161.337116][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2161.340042][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2161.343172][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2161.350204][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2161.355697][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2161.390476][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2161.392664][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2161.396653][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2161.399098][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2161.401849][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2161.405157][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2161.408949][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2161.503016][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2161.505609][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2161.520021][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2161.522896][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2161.528109][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2161.534142][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2161.543231][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2161.626385][T21882] usb usb38-port1: attempt power cycle [ 2161.675955][T14054] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2161.679119][T14054] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2161.682423][T14054] usb 7-1: Product: syz [ 2161.684192][T14054] usb 7-1: Manufacturer: syz [ 2161.900440][T14054] usb 7-1: SerialNumber: syz [ 2161.904076][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2161.911992][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2161.927929][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2161.930836][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2161.933862][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2161.936457][T14054] usb 7-1: config 0 descriptor?? [ 2161.942015][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2161.946637][T14054] hub 7-1:0.217: bad descriptor, ignoring hub [ 2161.947404][ T5348] loop4: p6 start 8192 is beyond EOD, [ 2161.948679][T14054] hub 7-1:0.217: probe with driver hub failed with error -5 [ 2161.953932][ T5348] truncated [ 2162.036402][T27723] warn_alloc: 1 callbacks suppressed [ 2162.036421][T27723] syz.4.3877: vmalloc error: size 1879048192, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 2162.043979][T27723] CPU: 0 UID: 0 PID: 27723 Comm: syz.4.3877 Tainted: G L syzkaller #0 PREEMPT(full) [ 2162.044028][T27723] Tainted: [L]=SOFTLOCKUP [ 2162.044035][T27723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2162.044047][T27723] Call Trace: [ 2162.044054][T27723] [ 2162.044061][T27723] dump_stack_lvl+0x16c/0x1f0 [ 2162.044109][T27723] warn_alloc+0x248/0x3a0 [ 2162.044132][T27723] ? __pfx_warn_alloc+0x10/0x10 [ 2162.044155][T27723] ? arch_stack_walk+0xa6/0x100 [ 2162.044188][T27723] ? __pfx_stack_trace_save+0x10/0x10 [ 2162.044212][T27723] ? vmalloc_array_noprof+0x43/0x70 [ 2162.044231][T27723] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 2162.044253][T27723] ? kasan_save_stack+0x42/0x60 [ 2162.044268][T27723] ? kasan_save_stack+0x33/0x60 [ 2162.044283][T27723] ? kasan_save_track+0x14/0x30 [ 2162.044299][T27723] ? __kasan_slab_free+0x5f/0x80 [ 2162.044315][T27723] ? kfree+0x2f8/0x6e0 [ 2162.044332][T27723] ? xt_compat_flush_offsets+0x94/0x170 [ 2162.044350][T27723] ? compat_do_replace+0x4fc/0x7c0 [ 2162.044369][T27723] ? do_ebt_set_ctl+0x362/0x460 [ 2162.044388][T27723] ? vmalloc_array_noprof+0x43/0x70 [ 2162.044411][T27723] ? do_sock_setsockopt+0xf3/0x1d0 [ 2162.044433][T27723] ? __sys_setsockopt+0x120/0x1a0 [ 2162.044446][T27723] ? __ia32_sys_setsockopt+0xbc/0x160 [ 2162.044465][T27723] ? __do_fast_syscall_32+0xe8/0x680 [ 2162.044489][T27723] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2162.044514][T27723] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2162.044543][T27723] ? vmalloc_array_noprof+0x43/0x70 [ 2162.044564][T27723] __vmalloc_node_noprof+0xad/0xf0 [ 2162.044586][T27723] ? vmalloc_array_noprof+0x43/0x70 [ 2162.044613][T27723] vmalloc_array_noprof+0x43/0x70 [ 2162.044639][T27723] do_replace_finish+0xe7/0x22c0 [ 2162.044655][T27723] ? kasan_quarantine_put+0x10a/0x240 [ 2162.044670][T27723] ? lockdep_hardirqs_on+0x7c/0x110 [ 2162.044687][T27723] ? find_held_lock+0x2b/0x80 [ 2162.044713][T27723] ? compat_do_replace+0x506/0x7c0 [ 2162.044732][T27723] ? kfree+0x2f8/0x6e0 [ 2162.044756][T27723] ? __pfx_do_replace_finish+0x10/0x10 [ 2162.044775][T27723] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2162.044793][T27723] ? vfree+0x184/0xb50 [ 2162.044814][T27723] ? __vmalloc_node_noprof+0xad/0xf0 [ 2162.044838][T27723] compat_do_replace+0x51b/0x7c0 [ 2162.044861][T27723] ? __pfx_compat_do_replace+0x10/0x10 [ 2162.044884][T27723] ? __pfx___might_resched+0x10/0x10 [ 2162.044905][T27723] ? bpf_lsm_capable+0x9/0x10 [ 2162.044920][T27723] ? security_capable+0x7e/0x260 [ 2162.044957][T27723] do_ebt_set_ctl+0x362/0x460 [ 2162.044978][T27723] ? sockopt_release_sock+0x52/0x60 [ 2162.045002][T27723] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 2162.045022][T27723] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 2162.045053][T27723] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 2162.045074][T27723] nf_setsockopt+0x8d/0xf0 [ 2162.045093][T27723] ip_setsockopt+0xcb/0xf0 [ 2162.045116][T27723] raw_setsockopt+0xb7/0x2a0 [ 2162.045133][T27723] ? __pfx_raw_setsockopt+0x10/0x10 [ 2162.045155][T27723] ? sock_common_setsockopt+0x2e/0xf0 [ 2162.045180][T27723] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2162.045206][T27723] do_sock_setsockopt+0xf3/0x1d0 [ 2162.045234][T27723] __sys_setsockopt+0x120/0x1a0 [ 2162.045252][T27723] __ia32_sys_setsockopt+0xbc/0x160 [ 2162.045271][T27723] ? __do_fast_syscall_32+0x9a/0x680 [ 2162.045290][T27723] ? lockdep_hardirqs_on+0x7c/0x110 [ 2162.045307][T27723] __do_fast_syscall_32+0xe8/0x680 [ 2162.045328][T27723] do_fast_syscall_32+0x32/0x80 [ 2162.045348][T27723] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2162.045366][T27723] RIP: 0023:0xf708d579 [ 2162.045378][T27723] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2162.045395][T27723] RSP: 002b:00000000f547d55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 2162.045441][T27723] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 2162.045453][T27723] RDX: 0000000000000080 RSI: 00000000800001c0 RDI: 00000000000000e0 [ 2162.045465][T27723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2162.045482][T27723] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2162.045491][T27723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2162.045512][T27723] [ 2162.045649][T27723] Mem-Info: [ 2162.059494][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2162.060179][T27723] active_anon:1454 inactive_anon:1132 isolated_anon:0 [ 2162.060179][T27723] active_file:857 inactive_file:10916 isolated_file:0 [ 2162.060179][T27723] unevictable:1768 dirty:58 writeback:0 [ 2162.060179][T27723] slab_reclaimable:7091 slab_unreclaimable:73772 [ 2162.060179][T27723] mapped:25437 shmem:1802 pagetables:1823 [ 2162.060179][T27723] sec_pagetables:345 bounce:0 [ 2162.060179][T27723] kernel_misc_reclaimable:0 [ 2162.060179][T27723] free:46887 free_pcp:224 free_cma:0 [ 2162.064210][ T5348] loop4: p1 size 2037579776 extends beyond EOD, [ 2162.162086][T27723] Node 0 active_anon:1704kB inactive_anon:176kB active_file:0kB inactive_file:148kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:1380kB dirty:4kB writeback:0kB shmem:8212kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8048kB pagetables:1408kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB [ 2162.178803][ T5348] truncated [ 2162.179252][T27723] Node 1 active_anon:16604kB inactive_anon:3052kB active_file:3428kB inactive_file:43516kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:111560kB dirty:228kB writeback:0kB shmem:10388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10164kB pagetables:5884kB sec_pagetables:224kB all_unreclaimable? no Balloon:0kB [ 2162.201707][ T5348] loop4: p2 start 4294901760 is beyond EOD, [ 2162.202327][T27694] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2162.204363][T14054] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2162.207060][ T5348] truncated [ 2162.207069][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2162.207088][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2162.207921][ T5348] loop4: p5 size 8323072 extends beyond EOD, [ 2162.210336][T27723] Node 0 DMA free:1996kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:112kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:44kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:136kB local_pcp:0kB free_cma:0kB [ 2162.211738][ T5348] truncated [ 2162.212970][T27723] lowmem_reserve[]: 0 290 290 290 290 [ 2162.213002][T27723] Node 0 DMA32 free:15932kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:2048KB free_highatomic:144KB active_anon:1516kB inactive_anon:172kB active_file:0kB inactive_file:148kB unevictable:3536kB writepending:4kB zspages:516kB present:1032196kB managed:297736kB mlocked:0kB bounce:0kB free_pcp:2600kB local_pcp:0kB free_cma:0kB [ 2162.216758][ T5348] loop4: p6 start 8192 is beyond EOD, [ 2162.235002][T27723] lowmem_reserve[]: [ 2162.236113][ T5348] truncated [ 2162.249082][T14054] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2162.306537][T27723] 0 0 0 0 0 [ 2162.307643][T27723] Node 1 DMA32 free:151260kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB free_highatomic:1544KB active_anon:16788kB inactive_anon:2444kB active_file:3464kB inactive_file:43488kB unevictable:3536kB writepending:308kB zspages:6652kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:5800kB local_pcp:0kB free_cma:0kB [ 2162.312054][T27731] Set syz0 is full, maxelem 0 reached [ 2162.318559][T27723] lowmem_reserve[]: 0 0 0 0 0 [ 2162.318585][T27723] Node 0 DMA: 35*4kB (U) 19*8kB (UM) 6*16kB (U) 4*32kB (UM) 3*64kB (UM) 2*128kB (M) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 1988kB [ 2162.327192][T27723] Node 0 DMA32: 100*4kB (UMEH) 203*8kB (UMEH) 80*16kB (UEH) 54*32kB (UE) 36*64kB (UME) 24*128kB (UME) 7*256kB (M) 5*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 15784kB [ 2162.332497][T27723] Node 1 DMA32: 891*4kB (UMEH) 1297*8kB (UMEH) 1110*16kB (UMEH) 490*32kB (UMEH) 223*64kB (UMH) 105*128kB (UMEH) 78*256kB (UME) 46*512kB (UME) 30*1024kB (UME) 1*2048kB (U) 0*4096kB = 151380kB [ 2162.340909][T14054] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2162.344596][T14054] usb 7-1: media controller created [ 2162.348626][T27730] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2162.357309][T21882] usb usb38-port1: unable to enumerate USB device [ 2162.364016][T27723] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2162.369732][T27732] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 2162.371879][T27732] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2162.374868][T27732] vhci_hcd vhci_hcd.0: Device attached [ 2162.386380][T27723] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2162.390256][T27723] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2162.394283][T27723] Node 1 hugepages_total=4 hugepages_free=2 hugepages_surp=2 hugepages_size=2048kB [ 2162.404435][T14054] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2162.412721][T27723] 17415 total pagecache pages [ 2162.412851][T27723] 997 pages in swap cache [ 2162.412860][T27723] Free swap = 62112kB [ 2162.412868][T27723] Total swap = 124996kB [ 2162.412877][T27723] 524155 pages RAM [ 2162.412884][T27723] 0 pages HighMem/MovableOnly [ 2162.412891][T27723] 208828 pages reserved [ 2162.412898][T27723] 0 pages cma reserved [ 2162.497579][T14054] DVB: Unable to find symbol dib7000p_attach() [ 2162.497595][T14054] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2162.567679][T14054] rc_core: IR keymap rc-dib0700-rc5 not found [ 2162.570239][T14054] Registered IR keymap rc-empty [ 2162.571808][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2162.572526][T14054] dvb-usb: could not initialize remote control. [ 2162.575030][ T5348] loop4: p1 size 2037579776 extends beyond EOD, [ 2162.584227][T14054] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2162.595135][ T5348] truncated [ 2162.598088][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2162.598159][T27732] rdma_rxe: rxe_newlink: failed to add wg2 [ 2162.601071][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2162.606806][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2162.611223][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2162.616807][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2162.651968][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2162.654634][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2162.659718][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2162.662731][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2162.665768][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2162.666164][ T6021] usb 38-1: SetAddress Request (68) to port 0 [ 2162.671578][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2162.671636][ T6021] usb 38-1: new SuperSpeed USB device number 68 using vhci_hcd [ 2162.676382][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2162.763794][T27743] Set syz0 is full, maxelem 0 reached [ 2162.932226][T27733] vhci_hcd: connection reset by peer [ 2162.935064][T26771] vhci_hcd: stop threads [ 2162.941948][T26771] vhci_hcd: release socket [ 2162.946669][T26771] vhci_hcd: disconnect device [ 2163.356079][T22026] usb 46-1: device descriptor read/8, error -110 [ 2163.616376][T27756] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 2163.619006][T27756] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2163.622507][T27756] vhci_hcd vhci_hcd.0: Device attached [ 2163.687124][T14054] usb 7-1: USB disconnect, device number 22 [ 2163.718639][T14054] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2163.777146][T22026] usb usb46-port1: attempt power cycle [ 2163.887572][T14934] usb 48-1: SetAddress Request (14) to port 0 [ 2163.889622][T14934] usb 48-1: new SuperSpeed USB device number 14 using vhci_hcd [ 2163.911519][T27769] Set syz0 is full, maxelem 0 reached [ 2163.914824][T27769] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2164.187334][T27758] vhci_hcd: connection reset by peer [ 2164.189683][ T7545] vhci_hcd: stop threads [ 2164.191219][ T7545] vhci_hcd: release socket [ 2164.192814][ T7545] vhci_hcd: disconnect device [ 2164.347339][T22026] usb usb46-port1: unable to enumerate USB device [ 2165.224559][T27781] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 2165.226712][T27781] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2165.229840][T27781] vhci_hcd vhci_hcd.0: Device attached [ 2165.296072][T27788] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2165.382647][T27781] rdma_rxe: rxe_newlink: failed to add wg2 [ 2165.511626][T27790] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 2165.513842][T27790] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2165.516884][T27790] vhci_hcd vhci_hcd.0: Device attached [ 2165.611011][T27790] rdma_rxe: rxe_newlink: failed to add wg2 [ 2165.733134][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2165.735682][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2165.742854][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2165.746751][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2165.749841][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2165.765779][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2165.771146][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2166.006881][T27782] vhci_hcd: connection closed [ 2166.009096][ T7545] vhci_hcd: stop threads [ 2166.012090][ T7545] vhci_hcd: release socket [ 2166.030357][ T7545] vhci_hcd: disconnect device [ 2166.204939][T27791] vhci_hcd: connection closed [ 2166.207704][T24482] vhci_hcd: stop threads [ 2166.210659][T24482] vhci_hcd: release socket [ 2166.212550][T24482] vhci_hcd: disconnect device [ 2166.242673][T27799] Set syz0 is full, maxelem 0 reached [ 2166.708437][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 2166.708451][ T40] audit: type=1326 audit(2166.604:5518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27818 comm="syz.5.3909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 2166.732299][ T40] audit: type=1326 audit(2166.604:5519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27818 comm="syz.5.3909" exe="/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 2166.744647][ T40] audit: type=1326 audit(2166.604:5520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27818 comm="syz.5.3909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 2166.751617][ T40] audit: type=1326 audit(2166.604:5521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27818 comm="syz.5.3909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 2166.884368][T27829] Set syz0 is full, maxelem 0 reached [ 2167.126772][T23811] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 2167.325726][T27846] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 2167.328219][T27846] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2167.333653][T23811] usb 7-1: config 0 has an invalid interface number: 217 but max is 0 [ 2167.335392][T27846] vhci_hcd vhci_hcd.0: Device attached [ 2167.341615][T23811] usb 7-1: config 0 has no interface number 0 [ 2167.350918][T23811] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2167.354630][T23811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2167.354644][T23811] usb 7-1: Product: syz [ 2167.354652][T23811] usb 7-1: Manufacturer: syz [ 2167.354660][T23811] usb 7-1: SerialNumber: syz [ 2167.357125][T23811] usb 7-1: config 0 descriptor?? [ 2167.366803][T23811] hub 7-1:0.217: bad descriptor, ignoring hub [ 2167.366818][T23811] hub 7-1:0.217: probe with driver hub failed with error -5 [ 2167.438502][T27846] rdma_rxe: rxe_newlink: failed to add wg2 [ 2167.557226][T27853] Set syz0 is full, maxelem 0 reached [ 2167.636777][T27820] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2167.645035][T23811] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2167.667715][T23811] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2167.686887][T23811] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2167.691995][T23811] usb 7-1: media controller created [ 2167.710626][T23811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2167.767051][T23811] DVB: Unable to find symbol dib7000p_attach() [ 2167.769098][T23811] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2167.805954][T23098] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 2167.825995][T23811] rc_core: IR keymap rc-dib0700-rc5 not found [ 2167.828590][T23811] Registered IR keymap rc-empty [ 2167.830859][T23811] dvb-usb: could not initialize remote control. [ 2167.833518][T23811] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2167.921683][T27847] vhci_hcd: connection reset by peer [ 2167.924261][T26385] vhci_hcd: stop threads [ 2167.926213][T26385] vhci_hcd: release socket [ 2167.928124][T26385] vhci_hcd: disconnect device [ 2167.928141][ T6021] usb 38-1: device descriptor read/8, error -110 [ 2167.957632][T23098] usb 10-1: config 0 has an invalid interface number: 217 but max is 0 [ 2167.961131][T23098] usb 10-1: config 0 has no interface number 0 [ 2167.966387][T23098] usb 10-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2167.970222][T23098] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2167.973715][T23098] usb 10-1: Product: syz [ 2167.975546][T23098] usb 10-1: Manufacturer: syz [ 2167.978380][T23098] usb 10-1: SerialNumber: syz [ 2167.982855][T23098] usb 10-1: config 0 descriptor?? [ 2167.988761][T23098] hub 10-1:0.217: bad descriptor, ignoring hub [ 2167.991449][T23098] hub 10-1:0.217: probe with driver hub failed with error -5 [ 2168.202632][T27851] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2168.207261][T23098] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2168.214486][T23098] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2168.218993][T23098] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2168.222173][T23098] usb 10-1: media controller created [ 2168.238279][T23098] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2168.279645][T23098] DVB: Unable to find symbol dib7000p_attach() [ 2168.282241][T23098] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2168.320365][ T6021] usb usb38-port1: attempt power cycle [ 2168.325972][T23098] rc_core: IR keymap rc-dib0700-rc5 not found [ 2168.328721][T23098] Registered IR keymap rc-empty [ 2168.331084][T23098] dvb-usb: could not initialize remote control. [ 2168.333891][T23098] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2168.917319][ T6021] usb usb38-port1: unable to enumerate USB device [ 2168.946041][T14934] usb 48-1: device descriptor read/8, error -110 [ 2169.030323][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2169.032964][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2169.039855][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2169.042795][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2169.045691][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2169.050765][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2169.055388][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2169.083552][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2169.086259][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2169.090641][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2169.093583][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2169.097072][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2169.102684][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2169.107638][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2169.172301][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2169.174863][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2169.178819][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2169.181049][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2169.183551][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2169.187582][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2169.191378][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2169.337472][T14934] usb usb48-port1: attempt power cycle [ 2169.595801][T27891] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2169.598430][T27891] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2169.608809][T27891] vhci_hcd vhci_hcd.0: Device attached [ 2169.702606][T27891] rdma_rxe: rxe_newlink: failed to add wg2 [ 2169.807014][T23811] usb 7-1: USB disconnect, device number 23 [ 2169.838473][T23811] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2169.886036][T16113] usb 46-1: SetAddress Request (51) to port 0 [ 2169.888533][T16113] usb 46-1: new SuperSpeed USB device number 51 using vhci_hcd [ 2169.907376][T14934] usb usb48-port1: unable to enumerate USB device [ 2170.140850][T27892] vhci_hcd: connection reset by peer [ 2170.145195][T17572] vhci_hcd: stop threads [ 2170.148584][T17572] vhci_hcd: release socket [ 2170.150995][T17572] vhci_hcd: disconnect device [ 2170.404638][T23098] usb 10-1: USB disconnect, device number 3 [ 2170.461137][T23098] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2170.794264][T27916] Set syz0 is full, maxelem 0 reached [ 2170.800196][T27916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2170.808197][T27916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2170.817223][T27916] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2170.972732][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2170.980125][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2170.990760][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2170.997414][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2171.003426][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2171.011887][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2171.019784][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2171.080127][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2171.084663][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2171.085798][T27921] comedi comedi0: Minor -1 is invalid! [ 2171.093234][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2171.096997][T27922] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 2171.099016][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2171.099117][T27922] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2171.103913][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2171.117206][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2171.118151][T27922] vhci_hcd vhci_hcd.0: Device attached [ 2171.122496][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2171.158571][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2171.162661][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2171.172705][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2171.174943][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2171.187258][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2171.193810][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2171.206908][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2171.234226][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2171.236544][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2171.241006][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2171.244001][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2171.247397][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2171.252007][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2171.256890][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2171.417711][T23811] usb 48-1: SetAddress Request (18) to port 0 [ 2171.422520][T23811] usb 48-1: new SuperSpeed USB device number 18 using vhci_hcd [ 2171.471643][T27941] comedi comedi0: s526: I/O port conflict (0x3,64) [ 2171.582484][T27923] vhci_hcd: connection reset by peer [ 2171.588391][T24482] vhci_hcd: stop threads [ 2171.590254][T24482] vhci_hcd: release socket [ 2171.592237][T24482] vhci_hcd: disconnect device [ 2171.962743][T27950] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2171.964934][T27950] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2171.968009][T27950] vhci_hcd vhci_hcd.0: Device attached [ 2172.026349][T27950] rdma_rxe: rxe_newlink: failed to add wg2 [ 2172.390592][T27954] comedi comedi2: pcmda12: a I/O base address must be specified [ 2172.725930][T27951] vhci_hcd: connection closed [ 2172.726425][ T1203] vhci_hcd: stop threads [ 2172.735935][ T1203] vhci_hcd: release socket [ 2172.739693][ T1203] vhci_hcd: disconnect device [ 2172.888380][T27972] comedi comedi0: Minor -1 is invalid! [ 2173.103953][T27979] Set syz0 is full, maxelem 0 reached [ 2173.107059][T27979] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2173.327917][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2173.330294][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2173.334011][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2173.337875][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2173.340123][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2173.343391][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2173.346620][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2173.424808][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2173.427504][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2173.431144][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2173.433559][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2173.438142][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2173.442496][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2173.449176][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2173.449344][T27992] Set syz0 is full, maxelem 0 reached [ 2173.640093][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2173.642635][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2173.647144][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2173.650127][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2173.650762][T27998] comedi comedi3: bad chanlist[0]=0x00000008 chan=8 range length=0 [ 2173.653023][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2173.669965][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2173.678228][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2173.716286][T14934] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 2173.731887][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2173.734832][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2173.739794][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2173.742970][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2173.747515][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2173.751758][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2173.756752][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2173.772903][T28006] comedi comedi0: mpc624: I/O port conflict (0x6,16) [ 2173.946103][T14934] usb 7-1: config 0 has an invalid interface number: 217 but max is 0 [ 2173.953913][T14934] usb 7-1: config 0 has no interface number 0 [ 2173.960113][T14934] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2173.964303][T14934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.967636][T14934] usb 7-1: Product: syz [ 2173.969483][T14934] usb 7-1: Manufacturer: syz [ 2173.971444][T14934] usb 7-1: SerialNumber: syz [ 2173.975631][T14934] usb 7-1: config 0 descriptor?? [ 2173.979551][T14934] hub 7-1:0.217: bad descriptor, ignoring hub [ 2173.982066][T14934] hub 7-1:0.217: probe with driver hub failed with error -5 [ 2174.092323][T28011] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2174.095233][T28011] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2174.099248][T28011] vhci_hcd vhci_hcd.0: Device attached [ 2174.158498][T28014] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 2174.161053][T28014] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2174.164612][T28014] vhci_hcd vhci_hcd.0: Device attached [ 2174.200593][T27988] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2174.207421][T14934] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2174.211492][T14934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2174.215547][T14934] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2174.215580][T14934] usb 7-1: media controller created [ 2174.224897][T14934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2174.250726][T14934] DVB: Unable to find symbol dib7000p_attach() [ 2174.253503][T14934] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2174.270570][T28014] rdma_rxe: rxe_newlink: failed to add wg2 [ 2174.276566][T28019] rdma_rxe: rxe_newlink: failed to add wg2 [ 2174.326517][T14934] rc_core: IR keymap rc-dib0700-rc5 not found [ 2174.332291][T14934] Registered IR keymap rc-empty [ 2174.334951][T14934] dvb-usb: could not initialize remote control. [ 2174.338039][T14934] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2174.436104][T26630] usb 38-1: SetAddress Request (72) to port 0 [ 2174.444135][T26630] usb 38-1: new SuperSpeed USB device number 72 using vhci_hcd [ 2174.452242][T28021] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3983'. [ 2174.457952][T28021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2174.461606][T28021] IPv6: NLM_F_CREATE should be set when creating new route [ 2174.775961][T28012] vhci_hcd: connection closed [ 2174.784588][T24482] vhci_hcd: stop threads [ 2174.787716][T24482] vhci_hcd: release socket [ 2174.789268][T24482] vhci_hcd: disconnect device [ 2174.798076][T28015] vhci_hcd: connection reset by peer [ 2174.800267][T24482] vhci_hcd: stop threads [ 2174.804569][T24482] vhci_hcd: release socket [ 2174.809154][T24482] vhci_hcd: disconnect device [ 2174.946075][T16113] usb 46-1: device descriptor read/8, error -110 [ 2175.357434][T16113] usb usb46-port1: attempt power cycle [ 2175.408565][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2175.411552][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2175.416612][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2175.419658][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2175.422626][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2175.428547][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2175.433612][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2175.778885][T28042] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2175.781369][T28042] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2175.790425][T28042] vhci_hcd vhci_hcd.0: Device attached [ 2175.996180][T16113] usb 46-1: SetAddress Request (54) to port 0 [ 2176.006195][T16113] usb 46-1: new SuperSpeed USB device number 54 using vhci_hcd [ 2176.132594][T28055] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 2176.134785][T28055] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2176.137553][T28055] vhci_hcd vhci_hcd.0: Device attached [ 2176.394921][T28043] vhci_hcd: connection reset by peer [ 2176.397625][T26385] vhci_hcd: stop threads [ 2176.404037][T26385] vhci_hcd: release socket [ 2176.408759][T26385] vhci_hcd: disconnect device [ 2176.516870][T14934] usb 7-1: USB disconnect, device number 24 [ 2176.552591][T14934] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2176.814412][T28068] usb usb8: usbfs: process 28068 (syz.2.3999) did not claim interface 0 before use [ 2177.488043][T28056] vhci_hcd: connection reset by peer [ 2177.490533][ T225] vhci_hcd: stop threads [ 2177.491922][ T225] vhci_hcd: release socket [ 2177.493511][T23811] usb 48-1: device descriptor read/8, error -110 [ 2177.493622][ T225] vhci_hcd: disconnect device [ 2177.665781][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2177.668920][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2177.677651][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2177.680366][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2177.685497][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2177.690631][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2177.694795][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2177.800859][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2177.803227][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2177.806665][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2177.808821][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2177.811090][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2177.814043][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2177.817724][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2177.886547][T23811] usb usb48-port1: attempt power cycle [ 2177.901289][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2177.903993][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2177.910417][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2177.912831][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2177.915037][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2177.918915][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2177.923090][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2177.964188][T28106] netlink: 'syz.4.4015': attribute type 10 has an invalid length. [ 2177.966983][T28106] batadv0: entered allmulticast mode [ 2177.979117][T28106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2177.983014][T28106] .`: (slave batadv0): Enslaving as an active interface with an up link [ 2177.991244][T28106] netlink: 'syz.4.4015': attribute type 10 has an invalid length. [ 2177.994349][T28106] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4015'. [ 2178.001307][T28106] batadv0: entered promiscuous mode [ 2178.003768][T28106] .`: (slave batadv0): Releasing backup interface [ 2178.008578][T28106] bridge0: port 3(batadv0) entered blocking state [ 2178.014735][T28106] bridge0: port 3(batadv0) entered disabled state [ 2178.060864][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2178.062804][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2178.069627][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2178.072584][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2178.075619][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2178.080617][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2178.084827][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2178.109379][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2178.112249][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2178.116592][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2178.119521][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2178.122290][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2178.128635][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2178.132797][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2178.162165][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2178.164137][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2178.167626][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2178.169815][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2178.171987][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2178.174963][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2178.179074][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2178.321606][T28117] Set syz0 is full, maxelem 0 reached [ 2178.466937][T23811] usb usb48-port1: unable to enumerate USB device [ 2178.486183][ T225] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2178.490156][ T225] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2178.512431][T28121] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2178.515204][T28121] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2178.526492][T28121] vhci_hcd vhci_hcd.0: Device attached [ 2178.565992][T26413] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2178.615182][T28127] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 2178.617231][T28127] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2178.621081][T28127] vhci_hcd vhci_hcd.0: Device attached [ 2178.625988][T28121] rdma_rxe: rxe_newlink: failed to add wg2 [ 2178.717784][T26413] usb 10-1: config 0 has an invalid interface number: 217 but max is 0 [ 2178.720514][T26413] usb 10-1: config 0 has no interface number 0 [ 2178.728025][T26413] usb 10-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2178.730960][T26413] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2178.733756][T26413] usb 10-1: Product: syz [ 2178.735205][T26413] usb 10-1: Manufacturer: syz [ 2178.738261][T26413] usb 10-1: SerialNumber: syz [ 2178.741052][T26413] usb 10-1: config 0 descriptor?? [ 2178.746393][T26413] hub 10-1:0.217: bad descriptor, ignoring hub [ 2178.748606][T26413] hub 10-1:0.217: probe with driver hub failed with error -5 [ 2178.886454][T23811] usb 42-1: SetAddress Request (83) to port 0 [ 2178.889151][T23811] usb 42-1: new SuperSpeed USB device number 83 using vhci_hcd [ 2178.954417][T28116] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2178.963204][T26413] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2178.969791][T26413] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2178.974856][T26413] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2178.978556][T26413] usb 10-1: media controller created [ 2178.989712][T26413] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2179.032678][T26413] DVB: Unable to find symbol dib7000p_attach() [ 2179.034761][T26413] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2179.055468][T28122] vhci_hcd: connection closed [ 2179.055730][T17572] vhci_hcd: stop threads [ 2179.059152][T17572] vhci_hcd: release socket [ 2179.060910][T17572] vhci_hcd: disconnect device [ 2179.097052][T26413] rc_core: IR keymap rc-dib0700-rc5 not found [ 2179.099154][T26413] Registered IR keymap rc-empty [ 2179.100928][T26413] dvb-usb: could not initialize remote control. [ 2179.103093][T26413] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2179.215184][T28129] vhci_hcd: connection reset by peer [ 2179.217494][T17572] vhci_hcd: stop threads [ 2179.219186][T17572] vhci_hcd: release socket [ 2179.220950][T17572] vhci_hcd: disconnect device [ 2179.506074][T26630] usb 38-1: device descriptor read/8, error -110 [ 2179.786989][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2179.791823][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2179.800315][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2179.802631][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2179.804866][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2179.808659][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2179.814417][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2179.897315][T26630] usb usb38-port1: attempt power cycle [ 2179.897444][T28144] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 2179.902277][T28144] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2179.919098][T28144] vhci_hcd vhci_hcd.0: Device attached [ 2179.922154][T28147] netlink: 7076 bytes leftover after parsing attributes in process `syz.4.4026'. [ 2179.925951][T28147] openvswitch: netlink: Flow key attr not present in new flow. [ 2180.036014][T26630] usb 38-1: SetAddress Request (74) to port 0 [ 2180.038159][T26630] usb 38-1: new SuperSpeed USB device number 74 using vhci_hcd [ 2180.150551][T28148] rdma_rxe: rxe_newlink: failed to add wg2 [ 2180.208328][ T5348] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 2180.214994][ T5348] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 2180.236266][ T5348] loop4: p2 start 4294901760 is beyond EOD, truncated [ 2180.241030][ T5348] loop4: p3 start 4294836224 is beyond EOD, truncated [ 2180.245022][ T5348] loop4: p4 size 327680 extends beyond EOD, truncated [ 2180.253977][ T5348] loop4: p5 size 8323072 extends beyond EOD, truncated [ 2180.258513][ T5348] loop4: p6 start 8192 is beyond EOD, truncated [ 2180.513491][T28145] vhci_hcd: connection reset by peer [ 2180.516223][ T1203] vhci_hcd: stop threads [ 2180.527138][ T1203] vhci_hcd: release socket [ 2180.531242][ T1203] vhci_hcd: disconnect device [ 2180.567968][T28166] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2180.570749][T28166] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2180.574315][T28166] vhci_hcd vhci_hcd.0: Device attached [ 2180.658372][T28166] rdma_rxe: rxe_newlink: failed to add wg2 [ 2181.074289][T28167] vhci_hcd: connection closed [ 2181.075510][ T6246] vhci_hcd: stop threads [ 2181.078512][ T6246] vhci_hcd: release socket [ 2181.089979][ T6246] vhci_hcd: disconnect device [ 2181.106017][T16113] usb 46-1: device descriptor read/8, error -110 [ 2181.164293][T28173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2181.170712][T28173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2181.207450][T28173] ------------[ cut here ]------------ [ 2181.209432][T26413] usb 10-1: USB disconnect, device number 4 [ 2181.209964][T28173] usb 10-1: BOGUS control dir, pipe 80000480 doesn't match bRequestType c0 [ 2181.216662][T28173] WARNING: drivers/usb/core/urb.c:412 at 0x0, CPU#0: syz.0.4036/28173 [ 2181.219465][T28173] Modules linked in: [ 2181.220972][T28173] CPU: 0 UID: 0 PID: 28173 Comm: syz.0.4036 Tainted: G L syzkaller #0 PREEMPT(full) [ 2181.224769][T28173] Tainted: [L]=SOFTLOCKUP [ 2181.226763][T28173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2181.231365][T28173] RIP: 0010:usb_submit_urb+0x1549/0x1920 [ 2181.233719][T28173] Code: 30 48 89 7c 24 38 e8 d6 51 b3 fa 48 8b 7c 24 38 e8 ac 2d d3 fe 48 89 c6 48 8d 3d 02 c0 88 09 48 8b 54 24 30 45 89 e8 44 89 f9 <67> 48 0f b9 3a e9 fd ed ff ff 48 89 7c 24 30 e8 a3 51 b3 fa 48 8b [ 2181.241994][T28173] RSP: 0018:ffffc900231a7920 EFLAGS: 00010287 [ 2181.244550][T28173] RAX: ffffffff8c53ac20 RBX: ffff88804f5cec00 RCX: 0000000080000480 [ 2181.248244][T28173] RDX: ffff888023698b20 RSI: ffffffff8c53ac20 RDI: ffffffff909306b0 [ 2181.251435][T28173] RBP: ffff888025073058 R08: 00000000000000c0 R09: 0000000000000000 [ 2181.253902][T28173] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888028b44700 [ 2181.256560][T28173] R13: 00000000000000c0 R14: 0000000000000001 R15: 0000000080000480 [ 2181.258970][T28173] FS: 0000000000000000(0000) GS:ffff888097765000(0063) knlGS:00000000f5456b40 [ 2181.261719][T28173] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2181.263827][T28173] CR2: 00000000f5455510 CR3: 0000000024c9b000 CR4: 0000000000352ef0 [ 2181.266460][T28173] Call Trace: [ 2181.267553][T28173] [ 2181.268612][T28173] ? __init_swait_queue_head+0xca/0x150 [ 2181.270384][T28173] usb_start_wait_urb+0x104/0x4b0 [ 2181.271974][T28173] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2181.273790][T28173] ? __asan_memset+0x23/0x50 [ 2181.275265][T28173] usb_control_msg+0x326/0x4a0 [ 2181.276850][T28173] ? __pfx_usb_control_msg+0x10/0x10 [ 2181.278848][T28173] dib0700_ctrl_rd+0x1b2/0x350 [ 2181.280825][T28173] dib0700_i2c_xfer+0xa9a/0xe40 [ 2181.282942][T28173] __i2c_transfer+0x6b6/0x20d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2181.284952][T28173] ? lockdep_hardirqs_on+0x7c/0x110 [ 2181.287404][T28173] ? __pfx___i2c_transfer+0x10/0x10 [ 2181.289437][T28173] ? rt_mutex_slowtrylock+0xc9/0x100 [ 2181.291152][T28173] i2c_transfer+0x1da/0x380 [ 2181.292621][T28173] i2cdev_ioctl_rdwr+0x373/0x710 [ 2181.294277][T28173] compat_i2cdev_ioctl+0x464/0x530 [ 2181.296006][T28173] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 2181.297842][T28173] ? __fget_files+0x20e/0x3c0 [ 2181.299467][T28173] ? __ia32_compat_sys_openat+0x150/0x210 [ 2181.301517][T28173] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 2181.303334][T28173] __ia32_compat_sys_ioctl+0x242/0x370 [ 2181.305125][T28173] __do_fast_syscall_32+0xe8/0x680 [ 2181.306985][T28173] do_fast_syscall_32+0x32/0x80 [ 2181.308584][T28173] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2181.310709][T28173] RIP: 0023:0xf7f64579 [ 2181.312040][T28173] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2181.318576][T28173] RSP: 002b:00000000f545655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2181.321533][T28173] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 2181.324074][T28173] RDX: 0000000080000640 RSI: 0000000000000000 RDI: 0000000000000000 [ 2181.326795][T28173] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2181.328222][T16113] usb usb46-port1: unable to enumerate USB device [ 2181.329316][T28173] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2181.329327][T28173] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2181.329344][T28173] [ 2181.329352][T28173] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2181.329364][T28173] CPU: 0 UID: 0 PID: 28173 Comm: syz.0.4036 Tainted: G L syzkaller #0 PREEMPT(full) [ 2181.329380][T28173] Tainted: [L]=SOFTLOCKUP [ 2181.329384][T28173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2181.329391][T28173] Call Trace: [ 2181.329396][T28173] [ 2181.329402][T28173] dump_stack_lvl+0x3d/0x1f0 [ 2181.329418][T28173] vpanic+0x640/0x6f0 [ 2181.329434][T28173] panic+0xca/0xd0 [ 2181.329447][T28173] ? __pfx_panic+0x10/0x10 [ 2181.329466][T28173] check_panic_on_warn+0xab/0xb0 [ 2181.329481][T28173] __warn+0x108/0x3c0 [ 2181.329498][T28173] __report_bug+0x2a0/0x520 [ 2181.329517][T28173] ? __pfx___report_bug+0x10/0x10 [ 2181.329535][T28173] ? lockdep_hardirqs_on+0x7c/0x110 [ 2181.329553][T28173] ? kasan_save_stack+0x42/0x60 [ 2181.329564][T28173] ? kasan_save_stack+0x33/0x60 [ 2181.329577][T28173] report_bug_entry+0xb2/0x220 [ 2181.329594][T28173] ? usb_submit_urb+0x1549/0x1920 [ 2181.329607][T28173] handle_bug+0x18a/0x260 [ 2181.329621][T28173] exc_invalid_op+0x17/0x50 [ 2181.329635][T28173] asm_exc_invalid_op+0x1a/0x20 [ 2181.329646][T28173] RIP: 0010:usb_submit_urb+0x1549/0x1920 [ 2181.329658][T28173] Code: 30 48 89 7c 24 38 e8 d6 51 b3 fa 48 8b 7c 24 38 e8 ac 2d d3 fe 48 89 c6 48 8d 3d 02 c0 88 09 48 8b 54 24 30 45 89 e8 44 89 f9 <67> 48 0f b9 3a e9 fd ed ff ff 48 89 7c 24 30 e8 a3 51 b3 fa 48 8b [ 2181.329669][T28173] RSP: 0018:ffffc900231a7920 EFLAGS: 00010287 [ 2181.329678][T28173] RAX: ffffffff8c53ac20 RBX: ffff88804f5cec00 RCX: 0000000080000480 [ 2181.329686][T28173] RDX: ffff888023698b20 RSI: ffffffff8c53ac20 RDI: ffffffff909306b0 [ 2181.329693][T28173] RBP: ffff888025073058 R08: 00000000000000c0 R09: 0000000000000000 [ 2181.329700][T28173] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888028b44700 [ 2181.329707][T28173] R13: 00000000000000c0 R14: 0000000000000001 R15: 0000000080000480 [ 2181.329724][T28173] ? __init_swait_queue_head+0xca/0x150 [ 2181.329742][T28173] usb_start_wait_urb+0x104/0x4b0 [ 2181.329754][T28173] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2181.329770][T28173] ? __asan_memset+0x23/0x50 [ 2181.329789][T28173] usb_control_msg+0x326/0x4a0 [ 2181.329801][T28173] ? __pfx_usb_control_msg+0x10/0x10 [ 2181.329817][T28173] dib0700_ctrl_rd+0x1b2/0x350 [ 2181.329837][T28173] dib0700_i2c_xfer+0xa9a/0xe40 [ 2181.329859][T28173] __i2c_transfer+0x6b6/0x20d0 [ 2181.329879][T28173] ? lockdep_hardirqs_on+0x7c/0x110 [ 2181.329891][T28173] ? __pfx___i2c_transfer+0x10/0x10 [ 2181.329908][T28173] ? rt_mutex_slowtrylock+0xc9/0x100 [ 2181.329924][T28173] i2c_transfer+0x1da/0x380 [ 2181.329941][T28173] i2cdev_ioctl_rdwr+0x373/0x710 [ 2181.329961][T28173] compat_i2cdev_ioctl+0x464/0x530 [ 2181.329979][T28173] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 2181.329996][T28173] ? __fget_files+0x20e/0x3c0 [ 2181.330008][T28173] ? __ia32_compat_sys_openat+0x150/0x210 [ 2181.330027][T28173] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 2181.330044][T28173] __ia32_compat_sys_ioctl+0x242/0x370 [ 2181.330064][T28173] __do_fast_syscall_32+0xe8/0x680 [ 2181.330077][T28173] do_fast_syscall_32+0x32/0x80 [ 2181.330090][T28173] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2181.330104][T28173] RIP: 0023:0xf7f64579 [ 2181.330113][T28173] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2181.330123][T28173] RSP: 002b:00000000f545655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2181.330134][T28173] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 2181.330140][T28173] RDX: 0000000080000640 RSI: 0000000000000000 RDI: 0000000000000000 [ 2181.330147][T28173] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2181.330153][T28173] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2181.330160][T28173] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2181.330173][T28173] [ 2181.332579][T28173] Kernel Offset: disabled